last executing test programs: 29m52.521331863s ago: executing program 4 (id=551): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x24c401, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 29m52.020826723s ago: executing program 4 (id=555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x198, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x70, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0x1, 0xff, 0x0, 0x2, 0x6, 0x1, 0x2}}}]}]}, @TCA_CGROUP_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xcfea, 0xffffffffffffffff, 0x0, 0x1, 0x2, {0x4, 0x1, 0x8, 0x5, 0x4, 0x8b9f}, {0x5e, 0x2, 0x2, 0x7, 0xa0}, 0x80000000, 0x3, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 29m51.688540074s ago: executing program 4 (id=557): openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac1414", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 29m51.389368888s ago: executing program 4 (id=562): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000003680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29m48.873778947s ago: executing program 4 (id=587): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x20, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 29m48.734869318s ago: executing program 4 (id=588): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd8, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 29m33.508515849s ago: executing program 32 (id=588): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd8, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 22m15.251166152s ago: executing program 5 (id=1835): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)={@local, @random="b557a0758659", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 22m13.200649046s ago: executing program 5 (id=1838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 22m8.251033559s ago: executing program 5 (id=1847): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000140)) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 22m5.023557007s ago: executing program 5 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigsuspend(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@generic={0x3, 0x401, 0x7}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x3, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 22m3.844867476s ago: executing program 5 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x35, 0x1, 0x0, 0xffffffff}]}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21m51.764028793s ago: executing program 5 (id=1859): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000040), 0x2, r3}, 0x38) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 21m36.276393304s ago: executing program 33 (id=1859): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000040), 0x2, r3}, 0x38) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 20m30.302865636s ago: executing program 1 (id=1946): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = userfaultfd(0x801) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$kcm(0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e23, 0x1, 'nq\x00', 0x24, 0x7ff, 0x68}, 0x2c) 20m28.020885691s ago: executing program 1 (id=1947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, 0x0, 0x0, 0x4001c00) 20m24.812798417s ago: executing program 1 (id=1952): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x17}}}}}, 0x20}, 0x1, 0x3d04}, 0x4000054) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) 20m23.689212721s ago: executing program 1 (id=1954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 20m21.685450737s ago: executing program 1 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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"/874, @ANYRES32], 0x378}}, 0x0) 20m21.437783213s ago: executing program 1 (id=1956): syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 20m5.473639909s ago: executing program 34 (id=1956): syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 15m44.338952547s ago: executing program 2 (id=2203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) gettid() r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x21c) 15m41.058373686s ago: executing program 2 (id=2207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000001700)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount(&(0x7f00000001c0)=@filename='./file0\x00', 0x0, &(0x7f0000001200)='vfat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x527}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x19f}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 15m39.128617916s ago: executing program 2 (id=2213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(0xffffffffffffffff, 0x0, 0x0, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", "000000ff0000000000000020", "0000000000000000001000"]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15m32.254650926s ago: executing program 2 (id=2217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) gettid() r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x21c) 15m25.909085145s ago: executing program 2 (id=2226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 15m19.607588985s ago: executing program 2 (id=2234): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x17}}}}}, 0x20}, 0x1, 0x3d04}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) 15m4.40002136s ago: executing program 35 (id=2234): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x17}}}}}, 0x20}, 0x1, 0x3d04}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) 12m54.284013562s ago: executing program 7 (id=2378): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023c90) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) umount2(&(0x7f0000000100)='./file0\x00', 0xb) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000000)) openat(r6, 0x0, 0x119c00, 0xe5) 12m51.741794982s ago: executing program 7 (id=2379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000200), &(0x7f0000000300)=[r5], &(0x7f0000000580)}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, 0x0, 0x0) renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r6, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 12m42.337758441s ago: executing program 7 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) r5 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = dup2(r5, r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x2, 0x0) 12m38.987194523s ago: executing program 7 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) rt_sigsuspend(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@generic={0x3, 0x401, 0x7}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x3, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 12m36.53621669s ago: executing program 7 (id=2393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 12m33.073800567s ago: executing program 7 (id=2397): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x45c0db36944583ee, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x9, r6, 0x200029}, 0x10) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4e) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) sync() socket$nl_netfilter(0x10, 0x3, 0xc) 12m17.279894936s ago: executing program 36 (id=2397): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x45c0db36944583ee, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000280)={0x2c, 0x9, r6, 0x200029}, 0x10) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd4e) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) sync() socket$nl_netfilter(0x10, 0x3, 0xc) 7m14.946369388s ago: executing program 3 (id=2710): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) 7m14.718136676s ago: executing program 3 (id=2711): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m12.053203504s ago: executing program 3 (id=2712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x38, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 7m1.761127558s ago: executing program 3 (id=2730): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 6m58.398728414s ago: executing program 3 (id=2724): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060200000000", 0x20}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 6m57.209531932s ago: executing program 3 (id=2725): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) 6m40.331239098s ago: executing program 37 (id=2725): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) 21.295320474s ago: executing program 6 (id=2961): socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) socket$key(0xf, 0x3, 0x2) 17.958661586s ago: executing program 6 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) rt_tgsigqueueinfo(r0, r5, 0x21, &(0x7f00000003c0)={0x34, 0x6, 0x400}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000440), 0x4) 13.433873758s ago: executing program 6 (id=2965): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 10.250445143s ago: executing program 6 (id=2966): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fec73d6bd2a640c880b1d1d2a5ff6819dddb0b72b4d6320221a4359b30ff2ca6d3844dc45affb4e65a21671583e81762a447cd8ffd93568bb259331dcbbe9f4efcff73e40b39f9730e8921bb5702d796b8737bdd0496d9e5581a01a8fe6a00c2aa89797514"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 8.662162925s ago: executing program 0 (id=2967): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x6c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x174, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xe4, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x64, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x34, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa41"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x0, 0x1, 0x6, 0xbe}, {0x3, 0xa9, 0x2}, {0x1421, 0x3, 0x6, 0x96cf}]}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.211181257s ago: executing program 0 (id=2968): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = dup2(0xffffffffffffffff, r4) close_range(r5, 0xffffffffffffffff, 0x0) 8.15902964s ago: executing program 6 (id=2969): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x0, 0x18103) io_setup(0x3, &(0x7f0000000140)) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) stat(&(0x7f0000000900)='\x00', 0x0) mount$9p_unix(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340), 0x40000, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 6.706474877s ago: executing program 0 (id=2970): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000009e000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.130903575s ago: executing program 0 (id=2971): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x9, &(0x7f00000006c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xc}, @tail_call], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000e0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 1.788970149s ago: executing program 0 (id=2972): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) ptrace$getregset(0x4204, r5, 0x4, &(0x7f00000004c0)={&(0x7f0000000480)=""/21, 0x15}) chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fec73d6bd2a640c880b1d1d2a5ff6819dddb0b72b4d6320221a4359b30ff2ca6d3844dc45affb4e65a21671583e81762a447cd8ffd93568bb259331dcbbe9f4efcff73e40b39f9730e8921bb5702d796b8737bdd0496d9e5581a01a8fe6a00c2aa89797514"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) 731.451µs ago: executing program 6 (id=2973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000680)={0x9000000, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f00000002c0), {0x2e}, &(0x7f0000000400)=""/234, 0xea, &(0x7f00000005c0)=""/104, &(0x7f0000000300)=[0x0, 0x0], 0x2, {r0}}, 0x58) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mknod$loop(0x0, 0x2, 0x1) gettid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000780)={"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"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 0s ago: executing program 0 (id=2974): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): it usb control message: -110 [ 1391.654345][ T1210] ath6kl: unable to send the bmi data to the device: -110 [ 1391.654364][ T1210] ath6kl: Unable to send get target info: -110 [ 1391.659692][ T1210] ath6kl: Failed to init ath6kl core: -110 [ 1391.661597][ T1210] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1392.533411][T14953] chnl_net:caif_netlink_parms(): no params data found [ 1393.086666][ T5963] usb 7-1: USB disconnect, device number 5 [ 1395.216556][ T5963] usb 1-1: USB disconnect, device number 112 [ 1397.769576][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.769806][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.770064][T14953] bridge_slave_0: entered allmulticast mode [ 1397.802011][T14953] bridge_slave_0: entered promiscuous mode [ 1397.923360][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.923474][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.923670][T14953] bridge_slave_1: entered allmulticast mode [ 1397.951030][T14953] bridge_slave_1: entered promiscuous mode [ 1399.775359][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.822188][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.173873][ T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1400.252675][ T13] bridge_slave_1: left allmulticast mode [ 1400.252712][ T13] bridge_slave_1: left promiscuous mode [ 1400.252995][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.356785][ T13] bridge_slave_0: left allmulticast mode [ 1400.356815][ T13] bridge_slave_0: left promiscuous mode [ 1400.357032][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.380635][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1400.425225][ T44] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1400.425260][ T44] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1400.425279][ T44] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1400.425297][ T44] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1400.425327][ T44] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1400.425344][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.488502][T15055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1400.986012][T15056] delete_channel: no stack [ 1401.576113][ T44] ath6kl: Failed to submit usb control message: -110 [ 1401.576169][ T44] ath6kl: unable to send the bmi data to the device: -110 [ 1401.576186][ T44] ath6kl: Unable to send get target info: -110 [ 1401.577056][ T44] ath6kl: Failed to init ath6kl core: -110 [ 1401.580610][ T44] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1403.195115][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.277777][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.298952][ T13] bond0 (unregistering): Released all slaves [ 1403.338723][T14953] team0: Port device team_slave_0 added [ 1403.536501][T14953] team0: Port device team_slave_1 added [ 1403.617742][ T44] usb 7-1: USB disconnect, device number 6 [ 1406.522175][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.522196][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.522229][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.784775][ T13] hsr_slave_0: left promiscuous mode [ 1406.810315][ T13] hsr_slave_1: left promiscuous mode [ 1406.812102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.858919][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.937635][ T13] veth0_vlan: left promiscuous mode [ 1411.834009][T11741] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1411.984305][T11741] usb 7-1: Using ep0 maxpacket: 16 [ 1411.986335][T11741] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1411.986359][T11741] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1411.992866][T11741] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1411.992897][T11741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.992919][T11741] usb 7-1: Product: syz [ 1411.992935][T11741] usb 7-1: Manufacturer: syz [ 1411.992951][T11741] usb 7-1: SerialNumber: syz [ 1412.068200][T11741] usb 7-1: config 0 descriptor?? [ 1412.085147][T11741] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1412.085184][T11741] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1412.525864][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1412.695510][T11741] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1412.696628][T11741] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1412.855147][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1413.305297][T11741] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1413.306108][T11741] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1413.911201][T11741] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1413.911537][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1413.911698][T11741] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1413.912009][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1413.912177][T11741] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1413.914841][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1413.963138][T11741] usb 7-1: USB disconnect, device number 7 [ 1417.618417][T15120] overlay: ./file0 is not a directory [ 1417.834577][T15121] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1417.834693][T15121] FAT-fs (loop7): unable to read boot sector [ 1418.332977][ T5964] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1418.506763][ T5964] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1418.506814][ T5964] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1418.506855][ T5964] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1418.506880][ T5964] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1418.506923][ T5964] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1418.506947][ T5964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.513699][T15118] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1419.724959][ T5964] ath6kl: Failed to submit usb control message: -110 [ 1419.725016][ T5964] ath6kl: unable to send the bmi data to the device: -110 [ 1419.725032][ T5964] ath6kl: Unable to send get target info: -110 [ 1419.726065][ T5964] ath6kl: Failed to init ath6kl core: -110 [ 1419.727453][ T5964] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1420.349505][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.349525][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.349558][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.457745][ T5964] usb 7-1: USB disconnect, device number 8 [ 1421.196642][T14871] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1421.274319][T14953] hsr_slave_0: entered promiscuous mode [ 1421.275462][T14953] hsr_slave_1: entered promiscuous mode [ 1421.277276][T14953] debugfs: 'hsr0' already exists in 'hsr' [ 1421.277303][T14953] Cannot create hsr debugfs directory [ 1421.279091][T14871] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1421.339256][T14871] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1421.635637][T14871] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1423.214358][T14954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.264437][T14954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.268777][T14954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1423.322808][T14954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1423.332053][T14954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1424.074090][ T5963] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1424.244208][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1424.246740][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1424.246776][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1424.250411][ T5963] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1424.250442][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.250464][ T5963] usb 1-1: Product: syz [ 1424.250479][ T5963] usb 1-1: Manufacturer: syz [ 1424.250495][ T5963] usb 1-1: SerialNumber: syz [ 1424.326902][ T5963] usb 1-1: config 0 descriptor?? [ 1424.356554][ T5963] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1424.356591][ T5963] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1424.944871][ T5963] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1424.947254][ T5963] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1425.494143][T14954] Bluetooth: hci0: command tx timeout [ 1425.727754][ T5963] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1425.729419][ T5963] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1426.932987][ T5963] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1426.944187][ T5963] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1426.953405][ T5963] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1426.974021][ T5963] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1427.074069][T15102] usb 1-1: USB disconnect, device number 113 [ 1428.417300][T14954] Bluetooth: hci0: command tx timeout [ 1428.579807][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.579890][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.284724][T15102] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1430.997740][T14954] Bluetooth: hci0: command tx timeout [ 1432.621713][T15102] usb 1-1: device descriptor read/all, error -71 [ 1433.021007][T14954] Bluetooth: hci0: command tx timeout [ 1433.524302][T14953] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1433.637421][T14953] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1433.692535][T14953] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1433.969546][T14953] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1434.048742][T15144] chnl_net:caif_netlink_parms(): no params data found [ 1434.877303][ T13] bridge_slave_1: left allmulticast mode [ 1434.877328][ T13] bridge_slave_1: left promiscuous mode [ 1434.877631][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.052801][ T13] bridge_slave_0: left allmulticast mode [ 1435.052828][ T13] bridge_slave_0: left promiscuous mode [ 1435.053065][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.104304][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.255021][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.414162][ T13] bond0 (unregistering): Released all slaves [ 1437.226761][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.227028][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.227318][T15144] bridge_slave_0: entered allmulticast mode [ 1437.230455][T15144] bridge_slave_0: entered promiscuous mode [ 1437.471716][ T13] hsr_slave_0: left promiscuous mode [ 1437.525131][ T13] hsr_slave_1: left promiscuous mode [ 1437.526125][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.576720][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.449852][T15101] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1438.593879][T15101] usb 4-1: Using ep0 maxpacket: 16 [ 1438.596517][T15101] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1438.596553][T15101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1438.602677][T15101] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1438.602707][T15101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.602729][T15101] usb 4-1: Product: syz [ 1438.602745][T15101] usb 4-1: Manufacturer: syz [ 1438.602761][T15101] usb 4-1: SerialNumber: syz [ 1438.709792][T15101] usb 4-1: config 0 descriptor?? [ 1438.744115][T15101] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1438.744148][T15101] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1438.956285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1439.114289][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1439.149508][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1439.167877][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1439.170295][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1439.171663][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.371739][T15101] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1439.372748][T15101] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1439.436793][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1439.982334][T15101] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1439.983474][T15101] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1440.515122][T15144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.515400][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.515755][T15144] bridge_slave_1: entered allmulticast mode [ 1440.553248][T15144] bridge_slave_1: entered promiscuous mode [ 1440.603445][T15101] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1440.604734][T15101] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1440.605181][T15101] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1440.628042][T15101] usb 4-1: USB disconnect, device number 82 [ 1443.293993][T15230] binder: 15227:15230 ioctl c0306201 200000000100 returned -22 [ 1443.817826][ T5157] Bluetooth: hci5: command tx timeout [ 1444.917673][T15144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.925820][T15144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.259402][T15101] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1446.367528][ T5157] Bluetooth: hci5: command tx timeout [ 1446.589496][T11741] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1446.678227][T15101] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1446.678279][T15101] usb 4-1: can't read configurations, error -71 [ 1446.827479][T11741] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.827541][T11741] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1446.827571][T11741] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1446.827617][T11741] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.827642][T11741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.941759][T11741] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.942492][T11741] usb 7-1: invalid MIDI out EP 0 [ 1448.377056][ T5157] Bluetooth: hci5: command tx timeout [ 1448.386945][T11741] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1448.769980][T15144] team0: Port device team_slave_0 added [ 1448.801795][T15255] netdevsim netdevsim3: Direct firmware load for . [ 1448.801795][T15255] failed with error -2 [ 1448.801816][T15255] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1448.801816][T15255] [ 1448.843898][T15144] team0: Port device team_slave_1 added [ 1449.321038][T15144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.321053][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.321073][T15144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.410210][T15144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.410225][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.410245][T15144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.290388][T15144] hsr_slave_0: entered promiscuous mode [ 1450.318774][T15144] hsr_slave_1: entered promiscuous mode [ 1450.323373][T15144] debugfs: 'hsr0' already exists in 'hsr' [ 1450.323400][T15144] Cannot create hsr debugfs directory [ 1450.395941][T15101] usb 7-1: USB disconnect, device number 9 [ 1450.454230][ T5157] Bluetooth: hci5: command tx timeout [ 1451.323769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.637875][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.920112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1454.443997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1459.379487][T15223] chnl_net:caif_netlink_parms(): no params data found [ 1461.577770][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 1462.141789][T15300] delete_channel: no stack [ 1464.466534][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.466735][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.466958][T15223] bridge_slave_0: entered allmulticast mode [ 1464.472430][T15223] bridge_slave_0: entered promiscuous mode [ 1464.774532][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.774713][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.775010][T15223] bridge_slave_1: entered allmulticast mode [ 1464.778552][T15223] bridge_slave_1: entered promiscuous mode [ 1464.985565][ T13] bridge_slave_1: left allmulticast mode [ 1464.985600][ T13] bridge_slave_1: left promiscuous mode [ 1464.985872][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.325674][ T13] bridge_slave_0: left allmulticast mode [ 1465.325712][ T13] bridge_slave_0: left promiscuous mode [ 1465.326028][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.614707][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.416820][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.457932][ T13] bond0 (unregistering): Released all slaves [ 1473.114805][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.248118][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.484195][ T13] hsr_slave_0: left promiscuous mode [ 1473.523933][ T13] hsr_slave_1: left promiscuous mode [ 1473.525530][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.554802][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.055834][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1474.164673][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1475.419514][T15223] team0: Port device team_slave_0 added [ 1476.587341][T15223] team0: Port device team_slave_1 added [ 1477.292103][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.292117][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.292139][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.342103][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.342117][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.342139][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.427382][T15223] hsr_slave_0: entered promiscuous mode [ 1478.428637][T15223] hsr_slave_1: entered promiscuous mode [ 1478.429481][T15223] debugfs: 'hsr0' already exists in 'hsr' [ 1478.429506][T15223] Cannot create hsr debugfs directory [ 1481.945871][T15144] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1485.223941][T11741] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1485.260227][T14954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1486.310882][T14954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1486.414011][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1486.459886][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1486.461413][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1486.519759][T11741] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1486.519815][T11741] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1486.519845][T11741] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1486.519877][T11741] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1486.519925][T11741] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1486.519950][T11741] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.544287][T15410] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1486.991622][T11741] ath6kl: Failed to submit usb control message: -71 [ 1486.991685][T11741] ath6kl: unable to send the bmi data to the device: -71 [ 1486.991702][T11741] ath6kl: Unable to send get target info: -71 [ 1487.025257][T11741] ath6kl: Failed to init ath6kl core: -71 [ 1487.058692][T11741] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1487.095500][T11741] usb 7-1: USB disconnect, device number 10 [ 1490.443883][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.443941][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.654618][ T5157] Bluetooth: hci0: command tx timeout [ 1492.696894][ T5844] Bluetooth: hci0: command tx timeout [ 1494.773917][ T5844] Bluetooth: hci0: command tx timeout [ 1495.064759][ T5964] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1495.227035][ T5964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.232919][ T5964] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1495.232953][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.232977][ T5964] usb 7-1: Product: syz [ 1495.232993][ T5964] usb 7-1: Manufacturer: syz [ 1495.233009][ T5964] usb 7-1: SerialNumber: syz [ 1495.287980][ T5964] usb 7-1: config 0 descriptor?? [ 1495.505447][ T1210] usb 7-1: USB disconnect, device number 11 [ 1496.575644][T15415] chnl_net:caif_netlink_parms(): no params data found [ 1496.754104][ T1210] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1496.860136][ T5844] Bluetooth: hci0: command tx timeout [ 1496.861677][T15223] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1496.911119][ T1210] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1496.911171][ T1210] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1496.911199][ T1210] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1496.911225][ T1210] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1496.911271][ T1210] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1496.911295][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.946192][T15465] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1497.381512][T15223] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1499.400268][ T1210] ath6kl: Failed to submit usb control message: -110 [ 1499.400325][ T1210] ath6kl: unable to send the bmi data to the device: -110 [ 1499.400343][ T1210] ath6kl: Unable to send get target info: -110 [ 1499.401382][ T1210] ath6kl: Failed to init ath6kl core: -110 [ 1499.402909][ T1210] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1500.926985][ T1210] usb 7-1: USB disconnect, device number 12 [ 1505.656305][T11741] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1505.754221][T15415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.754373][T15415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.754650][T15415] bridge_slave_0: entered allmulticast mode [ 1505.757543][T15415] bridge_slave_0: entered promiscuous mode [ 1505.865177][T15415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.865326][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.865582][T15415] bridge_slave_1: entered allmulticast mode [ 1505.871798][T15415] bridge_slave_1: entered promiscuous mode [ 1505.928215][T11741] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.943272][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1505.948353][T11741] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1505.948386][T11741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.948409][T11741] usb 4-1: Product: syz [ 1505.948423][T11741] usb 4-1: Manufacturer: syz [ 1505.948439][T11741] usb 4-1: SerialNumber: syz [ 1505.960885][T11741] usb 4-1: config 0 descriptor?? [ 1506.048387][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1506.053242][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1506.067947][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1506.097309][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1506.357120][T11741] usb 4-1: USB disconnect, device number 85 [ 1506.878210][T15415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.073257][T15415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.611985][ T5844] Bluetooth: hci4: command tx timeout [ 1509.082626][T15415] team0: Port device team_slave_0 added [ 1509.105530][T15415] team0: Port device team_slave_1 added [ 1509.135286][ T5963] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1509.306655][ T5963] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1509.306709][ T5963] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1509.306739][ T5963] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1509.306764][ T5963] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1509.306810][ T5963] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1509.306835][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.380988][T15520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1509.417397][ T4818] bridge_slave_1: left allmulticast mode [ 1509.417435][ T4818] bridge_slave_1: left promiscuous mode [ 1509.417712][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.491482][ T4818] bridge_slave_0: left allmulticast mode [ 1509.491518][ T4818] bridge_slave_0: left promiscuous mode [ 1509.493170][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.793896][ T1210] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1509.993170][ T1210] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.993334][ T1210] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1509.993413][ T1210] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.993460][ T1210] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1509.993486][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.016171][ T1210] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.018317][ T1210] usb 1-1: invalid MIDI out EP 0 [ 1510.464054][ T5963] ath6kl: Failed to submit usb control message: -110 [ 1510.464107][ T5963] ath6kl: unable to send the bmi data to the device: -110 [ 1510.464124][ T5963] ath6kl: Unable to send get target info: -110 [ 1510.490550][ T5963] ath6kl: Failed to init ath6kl core: -110 [ 1510.491948][ T5963] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1510.494205][ T1210] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1510.613871][ T5844] Bluetooth: hci4: command tx timeout [ 1510.817191][ T4818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.947294][ T4818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.010335][ T4818] bond0 (unregistering): Released all slaves [ 1511.078134][T15415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.078148][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.078170][T15415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.160974][T15415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.160991][T15415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.161029][T15415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.795860][ T4818] hsr_slave_0: left promiscuous mode [ 1511.814216][ T4818] hsr_slave_1: left promiscuous mode [ 1511.815384][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.867145][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.212666][ T5911] usb 4-1: USB disconnect, device number 86 [ 1512.674153][ T1210] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1512.693918][ T5844] Bluetooth: hci4: command tx timeout [ 1512.774868][ T5963] usb 1-1: USB disconnect, device number 116 [ 1512.862689][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.877429][ T1210] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1512.877460][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.877483][ T1210] usb 4-1: Product: syz [ 1512.877499][ T1210] usb 4-1: Manufacturer: syz [ 1512.877513][ T1210] usb 4-1: SerialNumber: syz [ 1512.887673][ T1210] usb 4-1: config 0 descriptor?? [ 1513.141591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.161237][ T5963] usb 4-1: USB disconnect, device number 87 [ 1513.306367][ T4818] team0 (unregistering): Port device team_slave_1 removed [ 1513.477802][ T4818] team0 (unregistering): Port device team_slave_0 removed [ 1514.256879][T15415] hsr_slave_0: entered promiscuous mode [ 1514.258336][T15415] hsr_slave_1: entered promiscuous mode [ 1514.259411][T15415] debugfs: 'hsr0' already exists in 'hsr' [ 1514.259437][T15415] Cannot create hsr debugfs directory [ 1514.410025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.681043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1514.774156][ T5844] Bluetooth: hci4: command tx timeout [ 1514.927917][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.338273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.430313][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.054703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.206034][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.258106][T15506] chnl_net:caif_netlink_parms(): no params data found [ 1516.495910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.674185][T11741] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1516.828437][T11741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.852618][T11741] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1516.852642][T11741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.852659][T11741] usb 1-1: Product: syz [ 1516.852669][T11741] usb 1-1: Manufacturer: syz [ 1516.852681][T11741] usb 1-1: SerialNumber: syz [ 1516.908733][T11741] usb 1-1: config 0 descriptor?? [ 1517.345292][ T1210] usb 1-1: USB disconnect, device number 117 [ 1517.624316][T15506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.624676][T15506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.624942][T15506] bridge_slave_0: entered allmulticast mode [ 1517.628125][T15506] bridge_slave_0: entered promiscuous mode [ 1517.704292][T15506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.704457][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.704713][T15506] bridge_slave_1: entered allmulticast mode [ 1517.707900][T15506] bridge_slave_1: entered promiscuous mode [ 1518.403568][T15506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.698261][T15506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.817670][T15101] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1519.919117][T15101] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1519.919152][T15101] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1519.919173][T15101] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1519.919192][T15101] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1519.919224][T15101] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1519.919241][T15101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.011030][T15573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1520.743185][T15101] ath6kl: Failed to submit usb control message: -71 [ 1520.743247][T15101] ath6kl: unable to send the bmi data to the device: -71 [ 1520.743265][T15101] ath6kl: Unable to send get target info: -71 [ 1520.749693][T15101] ath6kl: Failed to init ath6kl core: -71 [ 1520.756634][T15101] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1520.835922][T15101] usb 4-1: USB disconnect, device number 88 [ 1521.094925][T15506] team0: Port device team_slave_0 added [ 1521.257987][T15506] team0: Port device team_slave_1 added [ 1521.436393][T15415] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1521.704263][T15415] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1521.873670][T15506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.873685][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.875791][T15506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.878447][T15415] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1521.991051][T15506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.991071][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.991103][T15506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.992229][T15415] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1523.155836][T15506] hsr_slave_0: entered promiscuous mode [ 1523.157354][T15506] hsr_slave_1: entered promiscuous mode [ 1523.158275][T15506] debugfs: 'hsr0' already exists in 'hsr' [ 1523.158300][T15506] Cannot create hsr debugfs directory [ 1523.786882][ T4818] bridge_slave_1: left allmulticast mode [ 1523.786918][ T4818] bridge_slave_1: left promiscuous mode [ 1523.787203][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.885688][ T4818] bridge_slave_0: left allmulticast mode [ 1523.885724][ T4818] bridge_slave_0: left promiscuous mode [ 1523.886024][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.623412][ T1210] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1524.883949][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.900171][ T1210] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1524.900204][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.900226][ T1210] usb 7-1: Product: syz [ 1524.900242][ T1210] usb 7-1: Manufacturer: syz [ 1524.900256][ T1210] usb 7-1: SerialNumber: syz [ 1524.909464][ T1210] usb 7-1: config 0 descriptor?? [ 1525.245779][ T4818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.326077][ T4818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.405372][ T4818] bond0 (unregistering): Released all slaves [ 1527.245698][ T4818] hsr_slave_0: left promiscuous mode [ 1527.285255][ T4818] hsr_slave_1: left promiscuous mode [ 1527.289256][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.335041][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.374266][T11741] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1527.536738][T11741] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1527.536790][T11741] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1527.536819][T11741] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1527.536845][T11741] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1527.536891][T11741] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1527.536915][T11741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.543582][T15629] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1527.652112][ T990] usb 7-1: USB disconnect, device number 13 [ 1529.134884][T11741] ath6kl: Failed to submit usb control message: -110 [ 1529.134939][T11741] ath6kl: unable to send the bmi data to the device: -110 [ 1529.134955][T11741] ath6kl: Unable to send get target info: -110 [ 1529.184250][T11741] ath6kl: Failed to init ath6kl core: -110 [ 1529.186097][T11741] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1532.298356][ T4818] team0 (unregistering): Port device team_slave_1 removed [ 1532.484799][ T4818] team0 (unregistering): Port device team_slave_0 removed [ 1533.504448][ T5963] usb 1-1: USB disconnect, device number 118 [ 1536.376899][T15415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.609506][T15415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.028462][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.028579][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.030453][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.030552][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.405074][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 1541.611491][T13447] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1541.792727][T13447] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1541.792775][T13447] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1541.792795][T13447] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1541.792813][T13447] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1541.792853][T13447] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1541.792870][T13447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.937215][T15688] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1541.943584][T15506] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1541.980359][T15684] delete_channel: no stack [ 1542.038325][T15506] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1542.096834][T15506] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1542.178377][T15415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.212422][T15506] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1543.014213][T13447] ath6kl: Failed to submit usb control message: -110 [ 1543.014268][T13447] ath6kl: unable to send the bmi data to the device: -110 [ 1543.014286][T13447] ath6kl: Unable to send get target info: -110 [ 1543.038572][T13447] ath6kl: Failed to init ath6kl core: -110 [ 1543.075857][T13447] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1543.692127][T15506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.798420][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.856075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.856237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.992283][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.992472][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.214829][ T5924] usb 7-1: USB disconnect, device number 14 [ 1549.597795][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1549.602928][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1549.606729][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1549.624858][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1549.626457][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1549.984588][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.261798][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.261879][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.744063][ T5844] Bluetooth: hci0: command tx timeout [ 1551.803961][ T990] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1551.962096][ T990] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1551.962153][ T990] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1551.962182][ T990] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 1551.962207][ T990] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1551.962251][ T990] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1551.962275][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.076139][T15762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1552.724959][T15506] veth0_vlan: entered promiscuous mode [ 1553.123342][T15745] chnl_net:caif_netlink_parms(): no params data found [ 1553.175335][ T990] ath6kl: Failed to submit usb control message: -110 [ 1553.175373][ T990] ath6kl: unable to send the bmi data to the device: -110 [ 1553.175384][ T990] ath6kl: Unable to send get target info: -110 [ 1553.176115][ T990] ath6kl: Failed to init ath6kl core: -110 [ 1553.202661][ T990] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1553.548973][T15506] veth1_vlan: entered promiscuous mode [ 1553.700640][ T70] bridge_slave_1: left allmulticast mode [ 1553.700678][ T70] bridge_slave_1: left promiscuous mode [ 1553.700958][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.789294][ T70] bridge_slave_0: left allmulticast mode [ 1553.789335][ T70] bridge_slave_0: left promiscuous mode [ 1553.789724][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.813860][ T5844] Bluetooth: hci0: command tx timeout [ 1554.599978][T11741] usb 7-1: USB disconnect, device number 15 [ 1555.918094][ T5844] Bluetooth: hci0: command tx timeout [ 1557.974383][ T5844] Bluetooth: hci0: command tx timeout [ 1563.690746][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1563.732293][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1563.745533][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1563.749348][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1563.750415][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1565.327791][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.434837][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.482564][ T70] bond0 (unregistering): Released all slaves [ 1565.817537][ T5157] Bluetooth: hci5: command tx timeout [ 1566.765482][ T70] hsr_slave_0: left promiscuous mode [ 1566.801442][ T70] hsr_slave_1: left promiscuous mode [ 1566.802640][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.820073][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.894181][ T5157] Bluetooth: hci5: command tx timeout [ 1570.877598][ T5157] Bluetooth: hci5: command tx timeout [ 1571.416014][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1573.424503][ T5157] Bluetooth: hci5: command tx timeout [ 1577.007026][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1577.031174][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1577.044235][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1577.045577][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1577.046418][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1580.637289][ T5157] Bluetooth: hci4: command tx timeout [ 1584.024778][ T5157] Bluetooth: hci4: command tx timeout [ 1584.047513][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1584.676478][T15857] i2c i2c-0: Invalid block read size 255 [ 1586.065607][ T5157] Bluetooth: hci4: command tx timeout [ 1588.499793][ T5157] Bluetooth: hci4: command tx timeout [ 1589.690863][T15745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.691106][T15745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.691351][T15745] bridge_slave_0: entered allmulticast mode [ 1589.724850][T15745] bridge_slave_0: entered promiscuous mode [ 1590.112646][T15745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.113578][T15745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.123086][T15745] bridge_slave_1: entered allmulticast mode [ 1590.127539][T15745] bridge_slave_1: entered promiscuous mode [ 1591.481573][ T38] audit: type=1326 audit(1756639988.463:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15874 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ae10ebe9 code=0x7ffc0000 [ 1591.482067][ T38] audit: type=1326 audit(1756639988.463:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15874 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ae10ebe9 code=0x7ffc0000 [ 1591.546386][ T38] audit: type=1326 audit(1756639988.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15874 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe8ae10ebe9 code=0x7ffc0000 [ 1591.547151][ T38] audit: type=1326 audit(1756639988.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15874 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ae10ebe9 code=0x7ffc0000 [ 1591.547474][ T38] audit: type=1326 audit(1756639988.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15874 comm="syz.6.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ae10ebe9 code=0x7ffc0000 [ 1591.977800][T15745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.047562][T15745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.918276][T15745] team0: Port device team_slave_0 added [ 1592.957832][T15745] team0: Port device team_slave_1 added [ 1594.110536][T15745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.110556][T15745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.110588][T15745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.238926][T15745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.238942][T15745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1594.238964][T15745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.558651][T15745] hsr_slave_0: entered promiscuous mode [ 1595.560112][T15745] hsr_slave_1: entered promiscuous mode [ 1595.561133][T15745] debugfs: 'hsr0' already exists in 'hsr' [ 1595.561163][T15745] Cannot create hsr debugfs directory [ 1598.767514][ T70] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.409664][ T70] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.748457][ T70] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.571734][ T70] team0: Port device netdevsim0 removed [ 1600.627127][ T70] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.696707][T15805] chnl_net:caif_netlink_parms(): no params data found [ 1601.135639][T15838] chnl_net:caif_netlink_parms(): no params data found [ 1606.832765][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1606.852757][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1606.934444][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1606.949809][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1606.950932][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1609.014388][ T5844] Bluetooth: hci1: command tx timeout [ 1612.302414][ T5844] Bluetooth: hci1: command tx timeout [ 1612.704747][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.704825][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.773488][T15805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.773602][T15805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.774407][T15805] bridge_slave_0: entered allmulticast mode [ 1612.778850][T15805] bridge_slave_0: entered promiscuous mode [ 1613.277866][T15805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.277966][T15805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.278177][T15805] bridge_slave_1: entered allmulticast mode [ 1613.294267][T15805] bridge_slave_1: entered promiscuous mode [ 1614.051848][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.051954][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.052103][T15838] bridge_slave_0: entered allmulticast mode [ 1614.082393][T15838] bridge_slave_0: entered promiscuous mode [ 1614.116868][T15805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.334553][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.334792][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.336273][T15838] bridge_slave_1: entered allmulticast mode [ 1614.341800][T15838] bridge_slave_1: entered promiscuous mode [ 1614.374897][ T5844] Bluetooth: hci1: command tx timeout [ 1614.478484][T15805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.454182][ T5844] Bluetooth: hci1: command tx timeout [ 1621.858663][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.187652][T15805] team0: Port device team_slave_0 added [ 1625.391015][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.416373][T15805] team0: Port device team_slave_1 added [ 1628.486776][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1628.493417][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1628.500335][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1628.503315][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1628.520047][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1629.241290][T15838] team0: Port device team_slave_0 added [ 1629.394557][T15838] team0: Port device team_slave_1 added [ 1630.434824][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.434843][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.434875][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.492748][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.492771][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.492808][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.613876][ T5844] Bluetooth: hci0: command tx timeout [ 1633.186792][ T5844] Bluetooth: hci0: command tx timeout [ 1633.231632][T15838] hsr_slave_0: entered promiscuous mode [ 1633.233155][T15838] hsr_slave_1: entered promiscuous mode [ 1633.241262][T15838] debugfs: 'hsr0' already exists in 'hsr' [ 1633.241298][T15838] Cannot create hsr debugfs directory [ 1633.255810][T15926] chnl_net:caif_netlink_parms(): no params data found [ 1635.448430][ T5844] Bluetooth: hci0: command tx timeout [ 1635.900614][ T70] bridge_slave_1: left allmulticast mode [ 1635.900640][ T70] bridge_slave_1: left promiscuous mode [ 1635.900836][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.037332][ T70] bridge_slave_0: left allmulticast mode [ 1636.037368][ T70] bridge_slave_0: left promiscuous mode [ 1636.037701][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.961749][ T70] bridge_slave_1: left allmulticast mode [ 1636.961787][ T70] bridge_slave_1: left promiscuous mode [ 1636.962064][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.085665][ T70] bridge_slave_0: left allmulticast mode [ 1637.085691][ T70] bridge_slave_0: left promiscuous mode [ 1637.085883][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.498184][ T5844] Bluetooth: hci0: command tx timeout [ 1637.871040][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1637.903646][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1637.908221][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1637.913242][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1637.918779][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1640.084189][ T5157] Bluetooth: hci5: command tx timeout [ 1642.133991][ T5157] Bluetooth: hci5: command tx timeout [ 1642.164703][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.224590][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.249843][ T70] bond0 (unregistering): Released all slaves [ 1643.714904][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.784638][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.820168][ T70] bond0 (unregistering): Released all slaves [ 1644.214272][ T5157] Bluetooth: hci5: command tx timeout [ 1646.305727][ T5157] Bluetooth: hci5: command tx timeout [ 1646.386495][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2785'. [ 1646.715354][T15926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.715454][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.715790][T15926] bridge_slave_0: entered allmulticast mode [ 1646.717747][T15926] bridge_slave_0: entered promiscuous mode [ 1646.862677][T16073] delete_channel: no stack [ 1647.136662][T15926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.136838][T15926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.137122][T15926] bridge_slave_1: entered allmulticast mode [ 1647.139198][T15926] bridge_slave_1: entered promiscuous mode [ 1650.799548][T15926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.926921][T15926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.804844][ T70] hsr_slave_0: left promiscuous mode [ 1654.844097][ T70] hsr_slave_1: left promiscuous mode [ 1654.845115][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.845147][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.935245][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.935280][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.233866][ T70] hsr_slave_0: left promiscuous mode [ 1656.303880][ T70] hsr_slave_1: left promiscuous mode [ 1656.304903][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.405945][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.813584][ T70] veth1_macvtap: left promiscuous mode [ 1656.819586][ T70] veth0_macvtap: left promiscuous mode [ 1656.819913][ T70] veth1_vlan: left promiscuous mode [ 1656.820136][ T70] veth0_vlan: left promiscuous mode [ 1656.970247][ T70] veth1_vlan: left promiscuous mode [ 1656.970485][ T70] veth0_vlan: left promiscuous mode [ 1661.425826][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1661.674978][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1665.504913][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1665.737466][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1668.049885][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1668.099904][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1668.109136][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1668.112581][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1668.117369][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1668.269707][T15926] team0: Port device team_slave_0 added [ 1668.688099][T16007] chnl_net:caif_netlink_parms(): no params data found [ 1670.225062][ T5844] Bluetooth: hci4: command tx timeout [ 1672.345383][ T5844] Bluetooth: hci4: command tx timeout [ 1674.194744][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.194826][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.383816][ T5844] Bluetooth: hci4: command tx timeout [ 1675.727473][T16046] chnl_net:caif_netlink_parms(): no params data found [ 1675.834254][T16007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.834414][T16007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.834682][T16007] bridge_slave_0: entered allmulticast mode [ 1675.845424][T16007] bridge_slave_0: entered promiscuous mode [ 1675.914152][T16007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.914304][T16007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.914571][T16007] bridge_slave_1: entered allmulticast mode [ 1675.917627][T16007] bridge_slave_1: entered promiscuous mode [ 1676.476359][T16159] binder: 16156:16159 ioctl c0306201 200000000100 returned -22 [ 1676.485327][ T5844] Bluetooth: hci4: command tx timeout [ 1679.263351][T16007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.318185][T16007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.146935][T16007] team0: Port device team_slave_0 added [ 1680.488011][T16007] team0: Port device team_slave_1 added [ 1680.596190][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.596391][T16046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.596647][T16046] bridge_slave_0: entered allmulticast mode [ 1680.599454][T16046] bridge_slave_0: entered promiscuous mode [ 1680.805545][T16046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.806702][T16046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.807421][T16046] bridge_slave_1: entered allmulticast mode [ 1680.810479][T16046] bridge_slave_1: entered promiscuous mode [ 1680.811900][T16119] chnl_net:caif_netlink_parms(): no params data found [ 1680.840642][T16007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.840663][T16007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.840696][T16007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.129149][T16007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.129163][T16007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.129184][T16007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.486170][T16046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.673257][T16046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.262031][T16007] hsr_slave_0: entered promiscuous mode [ 1682.313951][T16007] hsr_slave_1: entered promiscuous mode [ 1682.315163][T16007] debugfs: 'hsr0' already exists in 'hsr' [ 1682.315191][T16007] Cannot create hsr debugfs directory [ 1682.327121][T16046] team0: Port device team_slave_0 added [ 1682.558566][T16046] team0: Port device team_slave_1 added [ 1682.915116][T16119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.915299][T16119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.915524][T16119] bridge_slave_0: entered allmulticast mode [ 1682.918781][T16119] bridge_slave_0: entered promiscuous mode [ 1683.247683][T16119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.247848][T16119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.248036][T16119] bridge_slave_1: entered allmulticast mode [ 1683.250164][T16119] bridge_slave_1: entered promiscuous mode [ 1683.432015][T16046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.432029][T16046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.432050][T16046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.827212][T16046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.827232][T16046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.827263][T16046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.587723][T16119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.843370][T16119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.178025][ T70] bridge_slave_1: left allmulticast mode [ 1686.178067][ T70] bridge_slave_1: left promiscuous mode [ 1686.178285][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.263815][ T990] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1686.265772][ T70] bridge_slave_0: left allmulticast mode [ 1686.265803][ T70] bridge_slave_0: left promiscuous mode [ 1686.266094][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.365098][ T70] bridge_slave_1: left allmulticast mode [ 1686.365124][ T70] bridge_slave_1: left promiscuous mode [ 1686.365317][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.435433][ T70] bridge_slave_0: left allmulticast mode [ 1686.435459][ T70] bridge_slave_0: left promiscuous mode [ 1686.435660][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.478337][ T990] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.478383][ T990] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1686.478404][ T990] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.478437][ T990] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1686.478455][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.589357][ T990] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1686.590526][ T990] usb 7-1: invalid MIDI out EP 0 [ 1686.683077][ T70] bridge_slave_1: left allmulticast mode [ 1686.683103][ T70] bridge_slave_1: left promiscuous mode [ 1686.683307][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.909480][ T70] bridge_slave_0: left allmulticast mode [ 1686.909519][ T70] bridge_slave_0: left promiscuous mode [ 1686.909797][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.000748][ T990] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1687.080388][ T70] bridge_slave_1: left allmulticast mode [ 1687.080415][ T70] bridge_slave_1: left promiscuous mode [ 1687.081194][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.149923][ T70] bridge_slave_0: left allmulticast mode [ 1687.149959][ T70] bridge_slave_0: left promiscuous mode [ 1687.150237][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.052511][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.177374][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.304689][ T70] bond0 (unregistering): Released all slaves [ 1689.054648][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.092228][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1689.109856][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1689.112844][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1689.116243][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1689.117558][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1689.244642][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.379652][ T70] bond0 (unregistering): Released all slaves [ 1689.430933][ T990] usb 7-1: USB disconnect, device number 16 [ 1690.999297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1691.067700][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.214967][ T5844] Bluetooth: hci1: command tx timeout [ 1691.306238][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.556993][ T70] bond0 (unregistering): Released all slaves [ 1692.772189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.085407][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.154640][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.226821][ T70] bond0 (unregistering): Released all slaves [ 1693.263825][ T5844] Bluetooth: hci1: command tx timeout [ 1693.654821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1694.328804][T16119] team0: Port device team_slave_0 added [ 1694.388750][T16046] hsr_slave_0: entered promiscuous mode [ 1694.447284][T16046] hsr_slave_1: entered promiscuous mode [ 1694.447956][T16046] debugfs: 'hsr0' already exists in 'hsr' [ 1694.447974][T16046] Cannot create hsr debugfs directory [ 1694.473296][T16119] team0: Port device team_slave_1 added [ 1695.007371][T16119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.007387][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.007412][T16119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.344212][ T5844] Bluetooth: hci1: command tx timeout [ 1695.550091][T16119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.550105][T16119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.550127][T16119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.374033][ T70] hsr_slave_0: left promiscuous mode [ 1696.413996][ T70] hsr_slave_1: left promiscuous mode [ 1696.415299][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.437301][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.106401][ T70] hsr_slave_0: left promiscuous mode [ 1697.519671][ T70] hsr_slave_1: left promiscuous mode [ 1697.552893][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.353438][ T5844] Bluetooth: hci1: command tx timeout [ 1698.364159][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.440081][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1698.460527][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1698.462409][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1698.486306][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1698.507284][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1700.504916][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1701.487592][ T5844] Bluetooth: hci0: command tx timeout [ 1703.500019][ T5844] Bluetooth: hci0: command tx timeout [ 1704.066195][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1706.489788][ T5157] Bluetooth: hci0: command tx timeout [ 1706.536228][T16248] delete_channel: no stack [ 1707.405867][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2819'. [ 1707.855754][T16263] delete_channel: no stack [ 1707.879097][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1708.174696][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1708.537852][ T5157] Bluetooth: hci0: command tx timeout [ 1709.204698][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1709.375474][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1710.615948][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1710.786530][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1711.633291][T16119] hsr_slave_0: entered promiscuous mode [ 1711.652952][T16119] hsr_slave_1: entered promiscuous mode [ 1711.655208][T16119] debugfs: 'hsr0' already exists in 'hsr' [ 1711.655241][T16119] Cannot create hsr debugfs directory [ 1715.647590][T16281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1715.655842][T16281] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1716.033338][T16281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1716.033956][T16281] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1716.146658][T16281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1716.146749][T16281] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1716.237138][T16281] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1716.313314][T16281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1716.313538][T16281] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1716.365631][T16281] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1716.455476][T16281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1716.455578][T16281] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1716.525116][T16281] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1716.996385][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 1717.979327][T16204] chnl_net:caif_netlink_parms(): no params data found [ 1718.097816][T16119] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1718.190558][ T5157] Bluetooth: hci3: command 0x0406 tx timeout [ 1718.213966][ T5157] Bluetooth: hci4: command 0x0c1a tx timeout [ 1718.637346][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 1718.637816][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 1719.901294][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 1720.283072][ T5157] Bluetooth: hci3: command 0x0406 tx timeout [ 1720.297159][ T5157] Bluetooth: hci4: command 0x0c1a tx timeout [ 1720.465303][T16119] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1720.877190][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 1720.877230][ T5157] Bluetooth: hci0: command 0x0c1a tx timeout [ 1720.925777][T16119] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1721.082677][T16319] binder: 16309:16319 ioctl c0306201 200000000100 returned -22 [ 1722.084820][T16236] chnl_net:caif_netlink_parms(): no params data found [ 1722.108780][T16119] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1722.325782][T16315] netdevsim netdevsim0: Direct firmware load for . [ 1722.325782][T16315] failed with error -2 [ 1722.325814][T16315] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1722.325814][T16315] [ 1722.375974][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 1722.933946][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 1722.933985][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 1723.436099][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.436256][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.438114][T16204] bridge_slave_0: entered allmulticast mode [ 1723.471646][T16204] bridge_slave_0: entered promiscuous mode [ 1723.565958][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.566109][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.566386][T16204] bridge_slave_1: entered allmulticast mode [ 1723.603188][T16204] bridge_slave_1: entered promiscuous mode [ 1724.956918][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.267328][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.310642][T16236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.310873][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.312037][T16236] bridge_slave_0: entered allmulticast mode [ 1725.326355][T16236] bridge_slave_0: entered promiscuous mode [ 1725.626908][T16236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.627051][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.627305][T16236] bridge_slave_1: entered allmulticast mode [ 1725.636620][T16236] bridge_slave_1: entered promiscuous mode [ 1727.532647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.463676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.585624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.626341][T16204] team0: Port device team_slave_0 added [ 1728.834706][T16204] team0: Port device team_slave_1 added [ 1728.887699][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.037946][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.146511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.445407][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.445426][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.445457][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.599936][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.599955][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.599985][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.603487][T16236] team0: Port device team_slave_0 added [ 1729.818276][T16236] team0: Port device team_slave_1 added [ 1729.937634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.296977][T16358] binder: 16351:16358 ioctl c0306201 200000000100 returned -22 [ 1730.300248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.593563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1731.254956][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 1731.348745][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1731.376507][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1731.392094][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1731.396364][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1731.397358][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1731.483278][T16352] delete_channel: no stack [ 1732.304016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.503754][ T5157] Bluetooth: hci4: command tx timeout [ 1733.560239][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.560254][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.560274][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.605613][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.605635][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.605671][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.560368][T16204] hsr_slave_0: entered promiscuous mode [ 1734.575363][T16204] hsr_slave_1: entered promiscuous mode [ 1734.580163][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 1734.580193][T16204] Cannot create hsr debugfs directory [ 1735.578070][ T5157] Bluetooth: hci4: command tx timeout [ 1735.578714][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.578767][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.653944][T16236] hsr_slave_0: entered promiscuous mode [ 1735.655389][T16236] hsr_slave_1: entered promiscuous mode [ 1735.656291][T16236] debugfs: 'hsr0' already exists in 'hsr' [ 1735.656317][T16236] Cannot create hsr debugfs directory [ 1737.886264][ T5157] Bluetooth: hci4: command tx timeout [ 1739.038199][T16398] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1739.343986][T16398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1740.031672][ T5157] Bluetooth: hci4: command tx timeout [ 1743.014800][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1744.824467][T16418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1744.824658][T16418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1744.824820][T16418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1744.824952][T16418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1744.825076][T16418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1744.825131][T16418] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1744.918704][T16418] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1746.527002][T16426] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1746.534834][T16426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1747.411890][T14954] Bluetooth: hci4: command 0x0c1a tx timeout [ 1747.412177][T14954] Bluetooth: hci1: command 0x0c1a tx timeout [ 1747.412212][T14954] Bluetooth: hci2: command 0x0406 tx timeout [ 1748.495747][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 1748.495796][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 1749.413763][T14954] Bluetooth: hci4: command 0x0c1a tx timeout [ 1749.525244][T16404] delete_channel: no stack [ 1750.279849][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 1750.894475][T16435] delete_channel: no stack [ 1751.085013][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1751.106775][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1751.108011][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1751.112917][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1751.117465][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1751.494070][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 1752.700847][ T70] bridge_slave_1: left allmulticast mode [ 1752.700942][ T70] bridge_slave_1: left promiscuous mode [ 1752.701180][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.503375][ T5844] Bluetooth: hci1: command tx timeout [ 1753.945463][ T70] bridge_slave_0: left allmulticast mode [ 1753.945501][ T70] bridge_slave_0: left promiscuous mode [ 1753.945820][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.990582][ T70] bridge_slave_1: left allmulticast mode [ 1753.990618][ T70] bridge_slave_1: left promiscuous mode [ 1753.990902][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.085661][ T70] bridge_slave_0: left allmulticast mode [ 1754.085696][ T70] bridge_slave_0: left promiscuous mode [ 1754.085990][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.217549][ T70] bridge_slave_1: left allmulticast mode [ 1754.217585][ T70] bridge_slave_1: left promiscuous mode [ 1754.217887][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.315616][ T70] bridge_slave_0: left allmulticast mode [ 1754.315652][ T70] bridge_slave_0: left promiscuous mode [ 1754.315932][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.877822][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.954728][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.028169][ T70] bond0 (unregistering): Released all slaves [ 1755.283393][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.364666][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.409482][ T70] bond0 (unregistering): Released all slaves [ 1755.573751][T14954] Bluetooth: hci1: command tx timeout [ 1755.684779][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1755.746379][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.812273][ T70] bond0 (unregistering): Released all slaves [ 1756.948096][T16363] chnl_net:caif_netlink_parms(): no params data found [ 1757.664365][T14954] Bluetooth: hci1: command tx timeout [ 1758.387728][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1758.402651][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1758.411882][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1758.421178][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1758.480204][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1758.993784][ T70] hsr_slave_0: left promiscuous mode [ 1759.033813][ T70] hsr_slave_1: left promiscuous mode [ 1759.034819][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.085582][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.213882][ T70] hsr_slave_0: left promiscuous mode [ 1759.253935][ T70] hsr_slave_1: left promiscuous mode [ 1759.255008][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.297301][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.413876][ T70] hsr_slave_0: left promiscuous mode [ 1759.455037][ T70] hsr_slave_1: left promiscuous mode [ 1759.455982][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.496652][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.734166][ T5844] Bluetooth: hci1: command tx timeout [ 1760.694681][ T5844] Bluetooth: hci5: command tx timeout [ 1760.975146][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1761.177638][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1766.269621][ T5844] Bluetooth: hci5: command tx timeout [ 1768.294046][ T5844] Bluetooth: hci5: command tx timeout [ 1769.524666][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1769.664893][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1770.375816][ T5844] Bluetooth: hci5: command tx timeout [ 1770.697818][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1770.844525][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1771.499446][T16531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1771.499661][T16531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1771.499867][T16531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1771.500024][T16531] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1771.500154][T16531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1771.500209][T16531] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1771.606526][T16531] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1771.710445][T16531] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1771.710534][T16531] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1771.785267][T16531] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1771.988793][T16363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.988917][T16363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.989210][T16363] bridge_slave_0: entered allmulticast mode [ 1771.991112][T16363] bridge_slave_0: entered promiscuous mode [ 1772.103174][T16363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.103285][T16363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.103479][T16363] bridge_slave_1: entered allmulticast mode [ 1772.129109][T16363] bridge_slave_1: entered promiscuous mode [ 1773.834546][T16541] Bluetooth: hci5: command 0x0c1a tx timeout [ 1774.933995][T16541] Bluetooth: hci1: command 0x0c1a tx timeout [ 1774.934251][T16541] Bluetooth: hci4: command 0x0c1a tx timeout [ 1774.934287][T16541] Bluetooth: hci3: command 0x0406 tx timeout [ 1774.934319][T16541] Bluetooth: hci2: command 0x0406 tx timeout [ 1775.893813][ T5157] Bluetooth: hci5: command 0x0c1a tx timeout [ 1776.006237][T16363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.054807][T16363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.149334][T16447] chnl_net:caif_netlink_parms(): no params data found [ 1776.742263][T16363] team0: Port device team_slave_0 added [ 1776.783317][T16363] team0: Port device team_slave_1 added [ 1777.013997][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 1777.236962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.380532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.784204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.277638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.283656][ T5157] Bluetooth: hci5: command 0x0c1a tx timeout [ 1778.836140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1780.077624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1780.079120][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 1780.279137][T16363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.279157][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.279188][T16363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.455169][T16586] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1780.553869][T16586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1780.629761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.288167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1782.375560][T16363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.375579][T16363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1782.375611][T16363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.498782][T16447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.498933][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.499193][T16447] bridge_slave_0: entered allmulticast mode [ 1784.503043][T16447] bridge_slave_0: entered promiscuous mode [ 1784.555019][T16447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.555187][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.555437][T16447] bridge_slave_1: entered allmulticast mode [ 1784.559206][T16447] bridge_slave_1: entered promiscuous mode [ 1785.987961][T16363] hsr_slave_0: entered promiscuous mode [ 1785.989432][T16363] hsr_slave_1: entered promiscuous mode [ 1785.990539][T16363] debugfs: 'hsr0' already exists in 'hsr' [ 1785.990570][T16363] Cannot create hsr debugfs directory [ 1786.033356][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.229621][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.445790][T16632] binder: 16627:16632 ioctl c0306201 200000000100 returned -22 [ 1787.492763][T16447] team0: Port device team_slave_0 added [ 1787.564618][T16447] team0: Port device team_slave_1 added [ 1791.272871][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.272890][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.272922][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.281672][T16492] chnl_net:caif_netlink_parms(): no params data found [ 1791.354352][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.354371][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.354412][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.244176][T16447] hsr_slave_0: entered promiscuous mode [ 1793.245710][T16447] hsr_slave_1: entered promiscuous mode [ 1793.246678][T16447] debugfs: 'hsr0' already exists in 'hsr' [ 1793.246703][T16447] Cannot create hsr debugfs directory [ 1793.797791][T16541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1793.802476][T16541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1793.821307][T16541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1793.838947][T16541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1793.839945][T16541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1794.454222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1794.770834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1794.986512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.244781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.524474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.873859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1795.894107][ T5157] Bluetooth: hci0: command tx timeout [ 1796.374808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1796.681571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1797.079306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1797.364696][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.364776][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.561211][T16492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.561388][T16492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.561614][T16492] bridge_slave_0: entered allmulticast mode [ 1797.604948][T16492] bridge_slave_0: entered promiscuous mode [ 1797.875362][T16492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.875512][T16492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.875782][T16492] bridge_slave_1: entered allmulticast mode [ 1797.911687][T16492] bridge_slave_1: entered promiscuous mode [ 1797.915374][ T70] bridge_slave_1: left allmulticast mode [ 1797.915413][ T70] bridge_slave_1: left promiscuous mode [ 1797.915721][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.975654][ T70] bridge_slave_0: left allmulticast mode [ 1797.975692][ T70] bridge_slave_0: left promiscuous mode [ 1797.975976][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.976425][ T5157] Bluetooth: hci0: command tx timeout [ 1798.078765][ T70] bridge_slave_1: left allmulticast mode [ 1798.078800][ T70] bridge_slave_1: left promiscuous mode [ 1798.079075][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.146028][ T70] bridge_slave_0: left allmulticast mode [ 1798.146065][ T70] bridge_slave_0: left promiscuous mode [ 1798.146385][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.222995][ T70] bridge_slave_1: left allmulticast mode [ 1798.223032][ T70] bridge_slave_1: left promiscuous mode [ 1798.223309][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.305481][ T70] bridge_slave_0: left allmulticast mode [ 1798.305517][ T70] bridge_slave_0: left promiscuous mode [ 1798.305794][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.565060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1798.862197][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.963808][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.018559][ T70] bond0 (unregistering): Released all slaves [ 1799.442750][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.524631][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.587773][ T70] bond0 (unregistering): Released all slaves [ 1799.954638][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.042481][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.054000][ T5157] Bluetooth: hci0: command tx timeout [ 1800.109487][ T70] bond0 (unregistering): Released all slaves [ 1802.200341][ T5157] Bluetooth: hci0: command tx timeout [ 1802.224766][T16724] binder: 16721:16724 ioctl c0306201 200000000100 returned -22 [ 1802.437331][T16492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.480223][T16492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.024600][T16492] team0: Port device team_slave_0 added [ 1803.196533][T16492] team0: Port device team_slave_1 added [ 1803.816932][T16492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1803.816950][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1803.816977][T16492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.030652][ T70] hsr_slave_0: left promiscuous mode [ 1804.083870][ T70] hsr_slave_1: left promiscuous mode [ 1804.084860][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.423110][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.840549][ T70] hsr_slave_0: left promiscuous mode [ 1805.876815][ T70] hsr_slave_1: left promiscuous mode [ 1805.877908][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1805.920315][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.084371][ T70] hsr_slave_0: left promiscuous mode [ 1806.133856][ T70] hsr_slave_1: left promiscuous mode [ 1806.134972][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.184522][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.324103][T13447] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1806.453962][T13447] usb 7-1: device descriptor read/64, error -71 [ 1806.693873][T13447] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1806.833900][T13447] usb 7-1: device descriptor read/64, error -71 [ 1806.984001][T13447] usb usb7-port1: attempt power cycle [ 1807.323865][T13447] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1807.345098][T13447] usb 7-1: device descriptor read/8, error -71 [ 1807.505844][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1807.590052][T13447] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1807.604850][T13447] usb 7-1: device descriptor read/8, error -71 [ 1807.723926][T13447] usb usb7-port1: unable to enumerate USB device [ 1807.766382][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1810.924663][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1811.082405][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1813.691121][T16541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1813.715448][T16541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1813.716884][T16541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1813.718837][T16541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1813.719795][T16541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1814.592646][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1814.785044][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1815.787098][T16492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.787117][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.787149][T16492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.813873][T16541] Bluetooth: hci4: command tx timeout [ 1816.473429][T16790] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1816.588678][T16790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1817.016586][T16790] evm: overlay not supported [ 1820.812840][T16541] Bluetooth: hci4: command tx timeout [ 1821.810997][T16796] binder: 16794:16796 ioctl c0306201 200000000100 returned -22 [ 1822.498484][T16541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1822.514625][T16541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1822.533076][T16541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1822.548925][T16541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1822.550519][T16541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1822.573928][T16681] chnl_net:caif_netlink_parms(): no params data found [ 1822.894564][T16541] Bluetooth: hci4: command tx timeout [ 1823.128515][T16808] overlay: ./file0 is not a directory [ 1824.616214][T16541] Bluetooth: hci5: command tx timeout [ 1824.937112][T16541] Bluetooth: hci4: command tx timeout [ 1826.260194][T16825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1826.348028][T16825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1827.561486][T16541] Bluetooth: hci5: command tx timeout [ 1829.397185][T16830] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1829.494413][T16830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1829.722179][T16541] Bluetooth: hci5: command tx timeout [ 1831.733809][T16541] Bluetooth: hci5: command tx timeout [ 1831.821443][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.821589][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.821781][T16681] bridge_slave_0: entered allmulticast mode [ 1831.824766][T16681] bridge_slave_0: entered promiscuous mode [ 1835.219053][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.219311][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.219578][T16681] bridge_slave_1: entered allmulticast mode [ 1835.222464][T16681] bridge_slave_1: entered promiscuous mode [ 1835.702767][T16846] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1835.709362][T16846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1843.387170][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.403383][T16783] chnl_net:caif_netlink_parms(): no params data found [ 1844.468347][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.815033][T16863] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1844.932987][T16863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1847.856707][T16867] overlay: ./file0 is not a directory [ 1847.867996][T16868] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1847.868103][T16868] FAT-fs (loop13): unable to read boot sector [ 1848.888127][T16681] team0: Port device team_slave_0 added [ 1848.950508][T16681] team0: Port device team_slave_1 added [ 1849.223145][T16879] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1849.317324][T16879] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1852.203938][T16783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.204064][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.204262][T16783] bridge_slave_0: entered allmulticast mode [ 1852.224806][T16783] bridge_slave_0: entered promiscuous mode [ 1852.329837][T16783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.329995][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.330236][T16783] bridge_slave_1: entered allmulticast mode [ 1852.333170][T16783] bridge_slave_1: entered promiscuous mode [ 1853.076194][T16887] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1853.162582][T16887] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1856.638998][T16891] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1857.436481][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1857.441223][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1857.442580][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1857.446260][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1857.447629][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1858.464697][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.464778][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.261219][T16783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.322676][T16783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.333327][T16800] chnl_net:caif_netlink_parms(): no params data found [ 1859.574100][T16541] Bluetooth: hci0: command tx timeout [ 1861.876418][T16541] Bluetooth: hci0: command tx timeout [ 1864.653833][T16541] Bluetooth: hci0: command tx timeout [ 1865.506139][T16913] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1865.600976][T16913] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1867.183815][ T5825] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1867.337847][T16541] Bluetooth: hci0: command tx timeout [ 1867.341931][ T5825] usb 7-1: no configurations [ 1867.341954][ T5825] usb 7-1: can't read configurations, error -22 [ 1867.474009][ T5825] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1868.969825][T16783] team0: Port device team_slave_0 added [ 1869.556647][T16919] wireguard0: entered promiscuous mode [ 1869.556685][T16919] wireguard0: entered allmulticast mode [ 1869.578207][T16783] team0: Port device team_slave_1 added [ 1869.886063][ T70] bridge_slave_1: left allmulticast mode [ 1869.886176][ T70] bridge_slave_1: left promiscuous mode [ 1869.888060][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.957965][ T70] bridge_slave_0: left allmulticast mode [ 1869.958001][ T70] bridge_slave_0: left promiscuous mode [ 1869.958293][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.036901][ T70] bridge_slave_1: left allmulticast mode [ 1870.036938][ T70] bridge_slave_1: left promiscuous mode [ 1870.037225][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.087040][ T70] bridge_slave_0: left allmulticast mode [ 1870.087076][ T70] bridge_slave_0: left promiscuous mode [ 1870.087342][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.180695][ T70] bridge_slave_1: left allmulticast mode [ 1870.180878][ T70] bridge_slave_1: left promiscuous mode [ 1870.181163][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.336633][ T70] bridge_slave_0: left allmulticast mode [ 1870.336669][ T70] bridge_slave_0: left promiscuous mode [ 1870.336931][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.827165][ T5825] usb 7-1: device descriptor read/all, error -71 [ 1870.827608][ T5825] usb usb7-port1: attempt power cycle [ 1871.055450][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1871.377552][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1871.512878][ T70] bond0 (unregistering): Released all slaves [ 1872.434567][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1872.554489][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1872.630401][ T70] bond0 (unregistering): Released all slaves [ 1873.004700][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1873.098874][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1873.156790][ T70] bond0 (unregistering): Released all slaves [ 1873.387321][T16925] netdevsim netdevsim0: Direct firmware load for . [ 1873.387321][T16925] failed with error -2 [ 1873.387344][T16925] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1873.387344][T16925] [ 1875.146732][T16944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1875.153336][T16944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1877.943075][T16541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1877.973867][T16541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1877.976398][T16541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1877.977721][T16541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1877.979474][T16541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1880.074968][T16800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.075112][T16800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.075331][T16800] bridge_slave_0: entered allmulticast mode [ 1880.077826][T16800] bridge_slave_0: entered promiscuous mode [ 1880.177157][T16800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.177393][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.177581][T16800] bridge_slave_1: entered allmulticast mode [ 1880.183311][T16800] bridge_slave_1: entered promiscuous mode [ 1880.675523][ T70] hsr_slave_0: left promiscuous mode [ 1880.739322][T16961] binder: 16958:16961 ioctl c0306201 200000000100 returned -22 [ 1881.064476][ T70] hsr_slave_1: left promiscuous mode [ 1881.065523][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1881.124776][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.229798][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1881.281180][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.413832][ T5157] Bluetooth: hci1: command tx timeout [ 1881.899011][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1883.501656][ T5157] Bluetooth: hci1: command tx timeout [ 1884.024589][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1886.003619][T16541] Bluetooth: hci1: command tx timeout [ 1886.064541][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1886.076496][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1886.077956][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1886.079792][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1886.080823][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1888.074103][T16541] Bluetooth: hci1: command tx timeout [ 1888.114519][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1888.156340][T16541] Bluetooth: hci4: command tx timeout [ 1888.247294][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1889.084766][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1889.304521][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1890.223716][T16541] Bluetooth: hci4: command tx timeout [ 1890.407035][T16994] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1890.504847][T16994] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1892.293738][T16541] Bluetooth: hci4: command tx timeout [ 1893.643975][T16996] wireguard0: entered promiscuous mode [ 1893.644013][T16996] wireguard0: entered allmulticast mode [ 1893.977149][T17000] binder: 16999:17000 ioctl c0306201 200000000100 returned -22 [ 1894.376078][T16541] Bluetooth: hci4: command tx timeout [ 1894.422200][T17005] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1894.510421][T17005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1899.484347][T16892] chnl_net:caif_netlink_parms(): no params data found [ 1902.484532][T16950] chnl_net:caif_netlink_parms(): no params data found [ 1902.681429][T17025] netdevsim netdevsim0: Direct firmware load for . [ 1902.681429][T17025] failed with error -2 [ 1902.681451][T17025] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1902.681451][T17025] [ 1906.032952][T17048] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1906.107297][T17048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1908.371356][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.371520][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.371727][T16892] bridge_slave_0: entered allmulticast mode [ 1908.494244][T16892] bridge_slave_0: entered promiscuous mode [ 1908.523378][T16977] chnl_net:caif_netlink_parms(): no params data found [ 1908.566280][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.566431][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.566666][T16892] bridge_slave_1: entered allmulticast mode [ 1908.584175][T16892] bridge_slave_1: entered promiscuous mode [ 1909.436974][T17061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1912.391926][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.398718][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.398912][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.399201][T16950] bridge_slave_0: entered allmulticast mode [ 1912.414380][T16950] bridge_slave_0: entered promiscuous mode [ 1912.466344][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.476235][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.476405][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.476707][T16950] bridge_slave_1: entered allmulticast mode [ 1912.482681][T16950] bridge_slave_1: entered promiscuous mode [ 1917.168821][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1917.188570][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1917.190375][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1917.191631][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1917.192956][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1919.902568][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.902678][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.072551][T17094] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1920.155631][T17094] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1920.513830][ T5157] Bluetooth: hci5: command tx timeout [ 1922.613916][ T5157] Bluetooth: hci5: command tx timeout [ 1924.078957][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1924.693682][ T5157] Bluetooth: hci5: command tx timeout [ 1927.113754][ T5157] Bluetooth: hci5: command tx timeout [ 1929.593201][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.614167][T16977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.614327][T16977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.614586][T16977] bridge_slave_0: entered allmulticast mode [ 1929.617459][T16977] bridge_slave_0: entered promiscuous mode [ 1929.964208][T16977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.964369][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.964637][T16977] bridge_slave_1: entered allmulticast mode [ 1929.967509][T16977] bridge_slave_1: entered promiscuous mode [ 1932.056353][T16950] team0: Port device team_slave_0 added [ 1932.085066][T16977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.089851][T16950] team0: Port device team_slave_1 added [ 1932.115618][T17129] netdevsim netdevsim0: Direct firmware load for . [ 1932.115618][T17129] failed with error -2 [ 1932.115648][T17129] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1932.115648][T17129] [ 1932.199058][T16977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.896218][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.896238][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.896269][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.917988][T16977] team0: Port device team_slave_0 added [ 1932.919744][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.919764][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.919797][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1933.017637][T16977] team0: Port device team_slave_1 added [ 1935.294879][T16977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.294899][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.294931][T16977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.502676][T16977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.502694][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1935.502725][T16977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.570659][ T70] bridge_slave_1: left allmulticast mode [ 1935.570693][ T70] bridge_slave_1: left promiscuous mode [ 1935.570964][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.677020][ T70] bridge_slave_0: left allmulticast mode [ 1935.677062][ T70] bridge_slave_0: left promiscuous mode [ 1935.677359][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.778657][ T70] bridge_slave_1: left allmulticast mode [ 1935.778694][ T70] bridge_slave_1: left promiscuous mode [ 1935.779013][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.910404][ T70] bridge_slave_0: left allmulticast mode [ 1935.910438][ T70] bridge_slave_0: left promiscuous mode [ 1935.910781][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.018470][ T70] bridge_slave_1: left allmulticast mode [ 1936.018508][ T70] bridge_slave_1: left promiscuous mode [ 1936.018790][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.105995][ T70] bridge_slave_0: left allmulticast mode [ 1936.106032][ T70] bridge_slave_0: left promiscuous mode [ 1936.106312][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.197271][T17146] binder: 17144:17146 ioctl c0306201 200000000100 returned -22 [ 1936.587430][T16541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1936.612805][T16541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1936.621424][T16541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1936.644412][T16541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1936.647128][T16541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1937.169000][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1937.265029][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1937.347969][ T70] bond0 (unregistering): Released all slaves [ 1937.679962][ T70] bond0 (unregistering): Released all slaves [ 1937.975503][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.055632][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.129348][ T70] bond0 (unregistering): Released all slaves [ 1938.773951][T16541] Bluetooth: hci0: command tx timeout [ 1939.674222][T16977] hsr_slave_0: entered promiscuous mode [ 1939.686813][T16977] hsr_slave_1: entered promiscuous mode [ 1939.693721][T16977] debugfs: 'hsr0' already exists in 'hsr' [ 1939.693753][T16977] Cannot create hsr debugfs directory [ 1940.450754][T17168] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1940.457173][T17168] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1940.857476][T16541] Bluetooth: hci0: command tx timeout [ 1944.087162][T16541] Bluetooth: hci0: command tx timeout [ 1947.091213][T16541] Bluetooth: hci0: command tx timeout [ 1947.450647][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1947.469999][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1947.471342][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1947.480124][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1947.496969][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1948.652097][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1950.997261][ T5157] Bluetooth: hci1: command tx timeout [ 1952.601251][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1953.093858][ T5157] Bluetooth: hci1: command tx timeout [ 1955.474275][ T5157] Bluetooth: hci1: command tx timeout [ 1956.542751][T17082] chnl_net:caif_netlink_parms(): no params data found [ 1958.072839][ T5157] Bluetooth: hci1: command tx timeout [ 1966.686521][T17244] netdevsim netdevsim6: Direct firmware load for . [ 1966.686521][T17244] failed with error -2 [ 1966.686553][T17244] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1966.686553][T17244] [ 1966.970615][T17082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.970716][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.970921][T17082] bridge_slave_0: entered allmulticast mode [ 1966.973334][T17082] bridge_slave_0: entered promiscuous mode [ 1967.006288][T17082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.006437][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.006641][T17082] bridge_slave_1: entered allmulticast mode [ 1967.044178][T17082] bridge_slave_1: entered promiscuous mode [ 1967.545275][T17082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1967.719893][T17082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.720227][T17147] chnl_net:caif_netlink_parms(): no params data found [ 1968.276440][T17082] team0: Port device team_slave_0 added [ 1969.633390][T17082] team0: Port device team_slave_1 added [ 1971.267746][T17183] chnl_net:caif_netlink_parms(): no params data found [ 1974.026994][T17082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.027014][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.027046][T17082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.794797][T17082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.794816][T17082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1974.794847][T17082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1975.018153][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.018406][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.018627][T17147] bridge_slave_0: entered allmulticast mode [ 1975.051389][T17147] bridge_slave_0: entered promiscuous mode [ 1975.126664][T17275] netdevsim netdevsim0: Direct firmware load for . [ 1975.126664][T17275] failed with error -2 [ 1975.126693][T17275] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1975.126693][T17275] [ 1975.174754][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.175833][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.176035][T17147] bridge_slave_1: entered allmulticast mode [ 1975.179031][T17147] bridge_slave_1: entered promiscuous mode [ 1975.964120][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.964270][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.964541][T17183] bridge_slave_0: entered allmulticast mode [ 1975.971021][T17183] bridge_slave_0: entered promiscuous mode [ 1976.024259][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.034294][T17183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.034420][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.034664][T17183] bridge_slave_1: entered allmulticast mode [ 1976.123806][T17183] bridge_slave_1: entered promiscuous mode [ 1976.143388][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.833825][T17284] [ 1976.833838][T17284] ====================================================== [ 1976.833849][T17284] WARNING: possible circular locking dependency detected [ 1976.833869][T17284] syzkaller #0 Not tainted [ 1976.833881][T17284] ------------------------------------------------------ [ 1976.833890][T17284] syz.6.2973/17284 is trying to acquire lock: [ 1976.833903][T17284] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1976.834097][T17284] [ 1976.834097][T17284] but task is already holding lock: [ 1976.834106][T17284] ffffffff8efa6ae8 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 1976.834253][T17284] [ 1976.834253][T17284] which lock already depends on the new lock. [ 1976.834253][T17284] [ 1976.834262][T17284] [ 1976.834262][T17284] the existing dependency chain (in reverse order) is: [ 1976.834283][T17284] [ 1976.834283][T17284] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 1976.834314][T17284] lock_acquire+0x120/0x360 [ 1976.834352][T17284] rt_write_lock+0x6a/0x110 [ 1976.834412][T17284] smc_hash_sk+0x8f/0x2a0 [ 1976.834475][T17284] smc_sk_init+0x5a4/0x7f0 [ 1976.834498][T17284] __smc_create+0x10d/0x280 [ 1976.834529][T17284] __sock_create+0x4b3/0x9f0 [ 1976.834612][T17284] __sys_socket+0xd7/0x1b0 [ 1976.834652][T17284] __x64_sys_socket+0x7a/0x90 [ 1976.834677][T17284] do_syscall_64+0xfa/0x3b0 [ 1976.834744][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.834790][T17284] [ 1976.834790][T17284] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 1976.834821][T17284] validate_chain+0xb9b/0x2140 [ 1976.834851][T17284] __lock_acquire+0xab9/0xd20 [ 1976.834877][T17284] reacquire_held_locks+0x127/0x1d0 [ 1976.834906][T17284] lock_release+0x1b4/0x3e0 [ 1976.834931][T17284] __local_bh_enable_ip+0x10c/0x270 [ 1976.834956][T17284] sock_i_ino+0xa9/0xc0 [ 1976.835014][T17284] smc_diag_dump_proto+0xa4c/0x1fb0 [ 1976.835039][T17284] smc_diag_dump+0x27/0xa0 [ 1976.835061][T17284] netlink_dump+0x6e4/0xe90 [ 1976.835125][T17284] __netlink_dump_start+0x5cb/0x7e0 [ 1976.835149][T17284] smc_diag_handler_dump+0x178/0x210 [ 1976.835196][T17284] sock_diag_rcv_msg+0x4c9/0x600 [ 1976.835240][T17284] netlink_rcv_skb+0x205/0x470 [ 1976.835270][T17284] netlink_unicast+0x843/0xa10 [ 1976.835293][T17284] netlink_sendmsg+0x805/0xb30 [ 1976.835318][T17284] __sock_sendmsg+0x219/0x270 [ 1976.835338][T17284] ____sys_sendmsg+0x508/0x820 [ 1976.835369][T17284] ___sys_sendmsg+0x21f/0x2a0 [ 1976.835399][T17284] __x64_sys_sendmsg+0x1a1/0x260 [ 1976.835429][T17284] do_syscall_64+0xfa/0x3b0 [ 1976.835459][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.835480][T17284] [ 1976.835480][T17284] other info that might help us debug this: [ 1976.835480][T17284] [ 1976.835488][T17284] Possible unsafe locking scenario: [ 1976.835488][T17284] [ 1976.835497][T17284] CPU0 CPU1 [ 1976.835504][T17284] ---- ---- [ 1976.835512][T17284] rlock(smc_v4_hashinfo.lock); [ 1976.835529][T17284] lock((softirq_ctrl.lock)); [ 1976.835547][T17284] lock(smc_v4_hashinfo.lock); [ 1976.835564][T17284] lock((softirq_ctrl.lock)); [ 1976.835580][T17284] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1976.835580][T17284] *** DEADLOCK *** [ 1976.835580][T17284] [ 1976.835587][T17284] 3 locks held by syz.6.2973/17284: [ 1976.835601][T17284] #0: ffff888049070908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1976.835655][T17284] #1: ffffffff8efa6ae8 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 1976.835707][T17284] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 1976.835757][T17284] [ 1976.835757][T17284] stack backtrace: [ 1976.835788][T17284] CPU: 1 UID: 0 PID: 17284 Comm: syz.6.2973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1976.835814][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1976.835837][T17284] Call Trace: [ 1976.835846][T17284] [ 1976.835856][T17284] dump_stack_lvl+0x189/0x250 [ 1976.835907][T17284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1976.835939][T17284] ? __pfx__printk+0x10/0x10 [ 1976.835970][T17284] ? print_lock_name+0xde/0x100 [ 1976.835995][T17284] print_circular_bug+0x2ee/0x310 [ 1976.836018][T17284] check_noncircular+0x134/0x160 [ 1976.836055][T17284] validate_chain+0xb9b/0x2140 [ 1976.836087][T17284] ? validate_chain+0x897/0x2140 [ 1976.836131][T17284] __lock_acquire+0xab9/0xd20 [ 1976.836162][T17284] reacquire_held_locks+0x127/0x1d0 [ 1976.836194][T17284] ? __local_bh_disable_ip+0x264/0x400 [ 1976.836225][T17284] lock_release+0x1b4/0x3e0 [ 1976.836252][T17284] ? __local_bh_enable_ip+0x100/0x270 [ 1976.836287][T17284] __local_bh_enable_ip+0x10c/0x270 [ 1976.836315][T17284] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1976.836346][T17284] ? rt_read_unlock+0x65/0xa0 [ 1976.836371][T17284] ? sock_i_ino+0x24/0xc0 [ 1976.836403][T17284] sock_i_ino+0xa9/0xc0 [ 1976.836435][T17284] smc_diag_dump_proto+0xa4c/0x1fb0 [ 1976.836476][T17284] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 1976.836504][T17284] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1976.836566][T17284] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1976.836603][T17284] ? __phys_addr+0xd3/0x180 [ 1976.836651][T17284] ? __kasan_kmalloc_large+0x85/0xa0 [ 1976.836686][T17284] ? rcu_is_watching+0x15/0xb0 [ 1976.836735][T17284] ? rcu_is_watching+0x15/0xb0 [ 1976.836768][T17284] ? trace_kmalloc+0x1f/0xd0 [ 1976.836806][T17284] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 1976.836839][T17284] ? __build_skb_around+0x257/0x3e0 [ 1976.836870][T17284] smc_diag_dump+0x27/0xa0 [ 1976.836895][T17284] netlink_dump+0x6e4/0xe90 [ 1976.836927][T17284] ? __pfx_netlink_dump+0x10/0x10 [ 1976.836951][T17284] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1976.836981][T17284] ? lockdep_hardirqs_on+0x9c/0x150 [ 1976.837050][T17284] __netlink_dump_start+0x5cb/0x7e0 [ 1976.837080][T17284] smc_diag_handler_dump+0x178/0x210 [ 1976.837109][T17284] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1976.837136][T17284] ? __pfx_smc_diag_dump+0x10/0x10 [ 1976.837163][T17284] ? sock_diag_lock_handler+0x19/0x290 [ 1976.837188][T17284] ? sock_diag_lock_handler+0x19/0x290 [ 1976.837216][T17284] sock_diag_rcv_msg+0x4c9/0x600 [ 1976.837244][T17284] netlink_rcv_skb+0x205/0x470 [ 1976.837277][T17284] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1976.837305][T17284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1976.837339][T17284] ? netlink_deliver_tap+0x2e/0x1b0 [ 1976.837369][T17284] netlink_unicast+0x843/0xa10 [ 1976.837398][T17284] ? __pfx_netlink_unicast+0x10/0x10 [ 1976.837423][T17284] ? netlink_sendmsg+0x642/0xb30 [ 1976.837450][T17284] ? skb_put+0x11b/0x210 [ 1976.837482][T17284] netlink_sendmsg+0x805/0xb30 [ 1976.837515][T17284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.837548][T17284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1976.837576][T17284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1976.837605][T17284] __sock_sendmsg+0x219/0x270 [ 1976.837629][T17284] ____sys_sendmsg+0x508/0x820 [ 1976.837664][T17284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1976.837701][T17284] ? import_iovec+0x74/0xa0 [ 1976.837791][T17284] ___sys_sendmsg+0x21f/0x2a0 [ 1976.837824][T17284] ? __pfx____sys_sendmsg+0x10/0x10 [ 1976.837875][T17284] ? __fget_files+0x2a/0x420 [ 1976.837911][T17284] ? __fget_files+0x3a6/0x420 [ 1976.837948][T17284] __x64_sys_sendmsg+0x1a1/0x260 [ 1976.837981][T17284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1976.838024][T17284] ? do_syscall_64+0xbe/0x3b0 [ 1976.838055][T17284] do_syscall_64+0xfa/0x3b0 [ 1976.838083][T17284] ? lockdep_hardirqs_on+0x9c/0x150 [ 1976.838112][T17284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.838135][T17284] ? clear_bhb_loop+0x60/0xb0 [ 1976.838160][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1976.838188][T17284] RIP: 0033:0x7fe8ae10ebe9 [ 1976.838212][T17284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1976.838233][T17284] RSP: 002b:00007fe8ac355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.838257][T17284] RAX: ffffffffffffffda RBX: 00007fe8ae346090 RCX: 00007fe8ae10ebe9 [ 1976.838281][T17284] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000007 [ 1976.838296][T17284] RBP: 00007fe8ae191e19 R08: 0000000000000000 R09: 0000000000000000 [ 1976.838310][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1976.838324][T17284] R13: 00007fe8ae346128 R14: 00007fe8ae346090 R15: 00007ffe6360e3e8 [ 1976.838349][T17284] [ 1980.456440][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.685196][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.885812][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.125573][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.337476][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.337533][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.405522][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.405551][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1981.662762][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.662792][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1981.856171][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.856211][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1982.034197][ T70] team0: Port device netdevsim0 removed [ 1982.035637][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.035661][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1982.243871][ T70] bridge_slave_1: left allmulticast mode [ 1982.243891][ T70] bridge_slave_1: left promiscuous mode [ 1982.244038][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.304202][ T70] bridge_slave_0: left allmulticast mode [ 1982.304223][ T70] bridge_slave_0: left promiscuous mode [ 1982.304370][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.375977][ T70] bridge_slave_1: left allmulticast mode [ 1982.376009][ T70] bridge_slave_1: left promiscuous mode [ 1982.376176][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.464624][ T70] bridge_slave_0: left allmulticast mode [ 1982.464654][ T70] bridge_slave_0: left promiscuous mode [ 1982.464827][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.559255][ T70] bridge_slave_1: left allmulticast mode [ 1982.559284][ T70] bridge_slave_1: left promiscuous mode [ 1982.559449][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.614674][ T70] bridge_slave_0: left allmulticast mode [ 1982.614704][ T70] bridge_slave_0: left promiscuous mode [ 1982.614917][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.713821][ T70] bridge_slave_1: left allmulticast mode [ 1982.713851][ T70] bridge_slave_1: left promiscuous mode [ 1982.714016][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.774870][ T70] bridge_slave_0: left allmulticast mode [ 1982.774893][ T70] bridge_slave_0: left promiscuous mode [ 1982.775019][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.845269][ T70] bridge_slave_1: left allmulticast mode [ 1982.845291][ T70] bridge_slave_1: left promiscuous mode [ 1982.845406][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.934610][ T70] bridge_slave_0: left allmulticast mode [ 1982.934639][ T70] bridge_slave_0: left promiscuous mode [ 1982.934872][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.005274][ T70] bridge_slave_1: left allmulticast mode [ 1983.005295][ T70] bridge_slave_1: left promiscuous mode [ 1983.005410][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.074259][ T70] bridge_slave_0: left allmulticast mode [ 1983.074281][ T70] bridge_slave_0: left promiscuous mode [ 1983.074403][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.755187][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1983.834140][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1983.925352][ T70] bond0 (unregistering): Released all slaves [ 1985.054268][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1985.104328][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1985.145822][ T70] bond0 (unregistering): Released all slaves [ 1986.256669][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.318642][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.335207][ T70] bond0 (unregistering): Released all slaves [ 1986.517914][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.604254][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1986.664828][ T70] bond0 (unregistering): Released all slaves [ 1986.824301][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface