last executing test programs: 13m16.117009717s ago: executing program 0 (id=74): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef11896213"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socket(0x28, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2a, 0x80002002, 0x10003, 0x8, 0x1000, 0xcc7, 0x0, 0x569b, 0x8, 0x406, 0x5, 0xfffffffd, 0x45, 0x800004f, 0x206, 0xfe, 0x0, 0x1a449, 0x9, 0x40000003, 0x8b, 0xcae4, 0x0, 0x20001e58, 0x8, 0xc69, 0x40, 0x6, 0x4088, 0x0, 0x9]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000004000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000e6b60300000000004e06000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m14.572644151s ago: executing program 0 (id=77): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r1, &(0x7f0000000000), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="90", 0x1}], 0x1) 13m8.041084816s ago: executing program 0 (id=82): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private1, 0x8, 0x10000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000", 0x17}], 0x1}, 0x0) 13m6.696617657s ago: executing program 0 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r1, 0x7003) 13m4.910772282s ago: executing program 0 (id=88): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000004c0)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 13m1.498295033s ago: executing program 0 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) 12m45.655329193s ago: executing program 32 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) 12m45.597747338s ago: executing program 3 (id=115): openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0xfffffffe, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 12m41.616803426s ago: executing program 3 (id=119): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) syz_emit_ethernet(0xc2, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x88, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc, 0x8, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x2}, @calipso={0x7, 0x38, {0x2, 0xc, 0xff, 0x7fff, [0x0, 0xfffffffffffffffc, 0x91bc, 0xffffffffffffffff, 0x8, 0xe]}}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 12m40.650329712s ago: executing program 3 (id=121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40"], 0x17d4}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000002180), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xa7, @tick=0x9}) 12m40.449662125s ago: executing program 3 (id=122): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) 12m38.801125914s ago: executing program 3 (id=123): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000004c0)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 12m36.933337369s ago: executing program 3 (id=125): r0 = socket(0x2b, 0x1, 0x1) r1 = accept4$packet(r0, 0x0, 0x0, 0x800) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000600)={0x3, &(0x7f0000000540)=[{0x9, 0x18, 0x7, 0xd210000}, {0x5, 0xb, 0x7, 0x9}, {0x3, 0x3a, 0xc, 0x7}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44080}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5225f}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x20040054) getsockname$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast1}, &(0x7f0000000240)=0xc) 12m20.386088439s ago: executing program 33 (id=125): r0 = socket(0x2b, 0x1, 0x1) r1 = accept4$packet(r0, 0x0, 0x0, 0x800) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000600)={0x3, &(0x7f0000000540)=[{0x9, 0x18, 0x7, 0xd210000}, {0x5, 0xb, 0x7, 0x9}, {0x3, 0x3a, 0xc, 0x7}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x2, @val=@tcx={@void, @value=r7}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44080}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5225f}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x20040054) getsockname$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast1}, &(0x7f0000000240)=0xc) 10m10.806052932s ago: executing program 4 (id=305): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 10m8.631959748s ago: executing program 4 (id=307): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYRESHEX], 0x16) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="3800308014000400403a050c5baee2004ef2b6d713459a7a180001800800010003865bdd36c8e216c53b320000000c000500000000000600"], 0x54}}, 0x0) r6 = msgget(0x1, 0x101) msgrcv(r6, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 10m2.980819066s ago: executing program 4 (id=311): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = msgget$private(0x0, 0x31) msgsnd(r2, 0x0, 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x7e, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 9m57.441140187s ago: executing program 4 (id=315): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) 9m56.389933801s ago: executing program 4 (id=317): write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, 0x0, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd) 9m54.323055188s ago: executing program 4 (id=319): r0 = socket(0x2b, 0x1, 0x1) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44080}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5225f}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x20040054) getsockname$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast1}, &(0x7f0000000240)=0xc) 9m38.598697221s ago: executing program 34 (id=319): r0 = socket(0x2b, 0x1, 0x1) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44080}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5225f}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x41}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}]}]}}]}, 0x4c}}, 0x20040054) getsockname$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @multicast1}, &(0x7f0000000240)=0xc) 20.306219865s ago: executing program 1 (id=831): socket(0x2b, 0x80801, 0x1) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x5b) keyctl$revoke(0x3, r0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 18.609966461s ago: executing program 1 (id=833): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x1ff, 0x7, 0xffff, 0x7}, 0x38, [0x2, 0x9, 0x0, 0x1, 0x7, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x5, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0x6, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0xc, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x5, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x10006, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x4, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f17, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x5, 0x7, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x8, 0x7ff, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x0, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0x800000c3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x5, 0x1, 0x1, 0xfffffff7, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x10000200, 0xfe, 0x2, 0x66608000, 0x5e8a, 0x7fb, 0x6, 0x1, 0x4, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0xffd, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xd, 0x936d, 0xf89, 0x7, 0x8, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x1, 0x3, 0x0, 0xffffffff, 'syz0\x00', 0x73}, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 16.296460167s ago: executing program 2 (id=834): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) 14.915865538s ago: executing program 1 (id=835): r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) fallocate(r0, 0x0, 0x9e1f, 0x575) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') inotify_init() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000440), 0x0, 0x40) bind$xdp(r2, &(0x7f0000000480)={0x2c, 0x4, 0x0, 0x14, r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x9, 0xfffffff9) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 14.513570419s ago: executing program 2 (id=836): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x20000000) ioctl$FITRIM(r0, 0xc0185879, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) 12.84248988s ago: executing program 2 (id=837): syz_socket_connect_nvme_tcp() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, 0x0, &(0x7f0000000180)) bind$inet6(0xffffffffffffffff, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_SETWSUBD(r7, 0x6411) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000200)={'das16m1\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x800000, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) 11.676865721s ago: executing program 2 (id=838): r0 = socket(0x10, 0x2, 0x0) r1 = creat(0x0, 0xdafbe5d6891b6e4) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4680"], 0x158) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x1214040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x2f, 0x61, 0x1, 0x3, 0x68, @remote, @dev={0xfe, 0x80, '\x00', 0x23}, 0x70, 0x10, 0x836, 0x7}}) 11.546044729s ago: executing program 1 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$btrfs_control(0xffffff9c, &(0x7f0000001400), 0x4040, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x90) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.335918423s ago: executing program 1 (id=840): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c900", @ANYRESHEX], 0x16) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r4], 0x54}}, 0x0) r5 = msgget(0x1, 0x101) msgrcv(r5, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) 5.646806783s ago: executing program 2 (id=841): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x54) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="021604000a00000026bd7000fcdbdf250800120002000200bc6b6e00000000000600320009070000030000000000000064ee0400"/79], 0x50}}, 0x890) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 6.587159ms ago: executing program 1 (id=842): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x44) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, r9, 0x0, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=843): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x6b16, 0x3, 0x10001, 0x400e0a, 0x10, "203c5e0000ff765e000080fffffffffffffff2", 0xb, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): slaving as an active interface with an up link [ 488.761641][ T7962] hub 8-0:1.0: USB hub found [ 488.765234][ T7962] hub 8-0:1.0: 1 port detected [ 489.733882][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.027406][ T7966] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 490.027422][ T7966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.409'. [ 490.151983][ T7771] team0: Port device team_slave_0 added [ 490.166919][ T7774] team0: Port device team_slave_0 added [ 490.195398][ T7771] team0: Port device team_slave_1 added [ 490.217105][ T7774] team0: Port device team_slave_1 added [ 490.270135][ T7971] syz.2.411 (7971): drop_caches: 2 [ 490.538730][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.538747][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.538773][ T7771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.544603][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.544617][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.544641][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.571652][ T7771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.571670][ T7771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.571696][ T7771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.578779][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.578794][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.578822][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.389012][ T7990] misc userio: No port type given on /dev/userio [ 493.528755][ T7771] hsr_slave_0: entered promiscuous mode [ 493.542123][ T7771] hsr_slave_1: entered promiscuous mode [ 493.557976][ T7771] debugfs: 'hsr0' already exists in 'hsr' [ 493.558004][ T7771] Cannot create hsr debugfs directory [ 493.633868][ T7774] hsr_slave_0: entered promiscuous mode [ 493.639571][ T7774] hsr_slave_1: entered promiscuous mode [ 493.648139][ T7774] debugfs: 'hsr0' already exists in 'hsr' [ 493.648213][ T7774] Cannot create hsr debugfs directory [ 493.807400][ T7862] chnl_net:caif_netlink_parms(): no params data found [ 494.332037][ T8004] hub 8-0:1.0: USB hub found [ 494.338932][ T8004] hub 8-0:1.0: 1 port detected [ 497.556644][ T8030] syz.1.422 (8030): drop_caches: 2 [ 498.636479][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.637050][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.637506][ T7862] bridge_slave_0: entered allmulticast mode [ 498.669546][ T7862] bridge_slave_0: entered promiscuous mode [ 498.756876][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.757161][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.757413][ T7862] bridge_slave_1: entered allmulticast mode [ 498.774467][ T7862] bridge_slave_1: entered promiscuous mode [ 498.802398][ T5835] kernel read not supported for file /video7 (pid: 5835 comm: kworker/0:3) [ 498.802405][ T8050] openvswitch: netlink: Key 26 has unexpected len 8 expected 16 [ 499.608750][ T5834] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 501.541810][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.926134][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.821529][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.777414][ T7862] team0: Port device team_slave_0 added [ 504.829224][ T7862] team0: Port device team_slave_1 added [ 505.397640][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.397653][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.397673][ T7862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.450266][ T7862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.450283][ T7862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.451897][ T7862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.515610][ T44] bridge_slave_1: left allmulticast mode [ 505.515638][ T44] bridge_slave_1: left promiscuous mode [ 505.515844][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.583604][ T44] bridge_slave_0: left allmulticast mode [ 505.583631][ T44] bridge_slave_0: left promiscuous mode [ 505.594226][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.401519][ T44] bridge_slave_1: left allmulticast mode [ 506.401671][ T44] bridge_slave_1: left promiscuous mode [ 506.402548][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.476646][ T44] bridge_slave_0: left allmulticast mode [ 506.476747][ T44] bridge_slave_0: left promiscuous mode [ 506.516734][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.051940][ T44] bridge_slave_1: left allmulticast mode [ 507.052156][ T44] bridge_slave_1: left promiscuous mode [ 507.069829][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.196983][ T44] bridge_slave_0: left allmulticast mode [ 507.197341][ T44] bridge_slave_0: left promiscuous mode [ 507.199545][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.789014][ T5834] Bluetooth: hci4: Invalid handle: 0x30c9 > 0x0eff [ 509.905255][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 511.119128][ T8099] hub 8-0:1.0: USB hub found [ 511.121430][ T8099] hub 8-0:1.0: 1 port detected [ 511.774950][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.862161][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.956361][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.065150][ T44] bond0 (unregistering): Released all slaves [ 512.205592][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.236200][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.295702][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.297145][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.612174][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.789103][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.917432][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.956127][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.118254][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.247852][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.270556][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.335077][ T44] bond0 (unregistering): Released all slaves [ 513.912581][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.982935][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.055469][ T44] bond0 (unregistering): Released all slaves [ 515.029576][ T5834] Bluetooth: hci0: command tx timeout [ 515.071918][ T8088] nbd: socks must be embedded in a SOCK_ITEM attr [ 515.388760][ T7862] hsr_slave_0: entered promiscuous mode [ 515.501567][ T7862] hsr_slave_1: entered promiscuous mode [ 515.517849][ T7862] debugfs: 'hsr0' already exists in 'hsr' [ 515.517878][ T7862] Cannot create hsr debugfs directory [ 515.830189][ T8061] udevd[8061]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 516.927437][ T5834] Bluetooth: hci6: command tx timeout [ 517.032577][ T8114] batman_adv: batadv0: Adding interface: dummy0 [ 517.032590][ T8114] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.032614][ T8114] batman_adv: batadv0: Interface activated: dummy0 [ 517.102741][ T5834] Bluetooth: hci0: command tx timeout [ 517.301036][ T8114] batadv0: mtu less than device minimum [ 517.305986][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.311029][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.316018][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.321085][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.326105][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.331173][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.336144][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.341098][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 517.346003][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.811375][ T44] hsr_slave_0: left promiscuous mode [ 518.831249][ T44] hsr_slave_1: left promiscuous mode [ 518.832205][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.872016][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.941312][ T5834] Bluetooth: hci6: command tx timeout [ 519.031423][ T44] hsr_slave_0: left promiscuous mode [ 519.071676][ T44] hsr_slave_1: left promiscuous mode [ 519.072708][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.113038][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.181523][ T5834] Bluetooth: hci0: command tx timeout [ 519.261091][ T44] hsr_slave_0: left promiscuous mode [ 519.302229][ T44] hsr_slave_1: left promiscuous mode [ 519.303787][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.324580][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.721986][ T44] team0 (unregistering): Port device team_slave_1 removed [ 519.771880][ T44] team0 (unregistering): Port device team_slave_0 removed [ 520.281847][ T44] team0 (unregistering): Port device team_slave_1 removed [ 520.322458][ T44] team0 (unregistering): Port device team_slave_0 removed [ 520.841845][ T44] team0 (unregistering): Port device team_slave_1 removed [ 520.881853][ T44] team0 (unregistering): Port device team_slave_0 removed [ 521.021406][ T5834] Bluetooth: hci6: command tx timeout [ 521.261319][ T5834] Bluetooth: hci0: command tx timeout [ 522.478425][ T8141] hub 8-0:1.0: USB hub found [ 522.481836][ T8141] hub 8-0:1.0: 1 port detected [ 523.107551][ T5834] Bluetooth: hci6: command tx timeout [ 523.491028][ T37] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 523.952145][ T37] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 523.952176][ T37] usb 2-1: config 0 has no interface number 0 [ 523.952221][ T37] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.952245][ T37] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 523.952272][ T37] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.952295][ T37] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 523.952337][ T37] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 523.952361][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.970743][ T37] usb 2-1: config 0 descriptor?? [ 523.978328][ T8137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.011354][ T37] ldusb 2-1:0.55: Interrupt in endpoint not found [ 525.852529][ T5835] usb 2-1: USB disconnect, device number 5 [ 528.050538][ T8087] chnl_net:caif_netlink_parms(): no params data found [ 529.013682][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 529.047625][ T8170] syz.2.451 (8170): drop_caches: 2 [ 529.105533][ T7862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 529.352508][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.243048][ T7862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.347562][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.424151][ T7862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.537239][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.591383][ T5835] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 530.626528][ T7862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.720391][ T7862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.873568][ T5835] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.873599][ T5835] usb 2-1: config 0 has no interface number 0 [ 530.873642][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.873666][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 530.873693][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.873715][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.873757][ T5835] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 530.873781][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.973182][ T5835] usb 2-1: config 0 descriptor?? [ 530.974250][ T8183] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 531.010317][ T5835] ldusb 2-1:0.55: Interrupt in endpoint not found [ 531.487632][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.488074][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.488458][ T8087] bridge_slave_0: entered allmulticast mode [ 531.533293][ T37] usb 2-1: USB disconnect, device number 6 [ 531.552242][ T8087] bridge_slave_0: entered promiscuous mode [ 531.699067][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.699388][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.699665][ T8087] bridge_slave_1: entered allmulticast mode [ 531.751366][ T8087] bridge_slave_1: entered promiscuous mode [ 531.833342][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.833719][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.834052][ T8091] bridge_slave_0: entered allmulticast mode [ 531.837314][ T8091] bridge_slave_0: entered promiscuous mode [ 531.884840][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.885314][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.885603][ T8091] bridge_slave_1: entered allmulticast mode [ 531.888292][ T8091] bridge_slave_1: entered promiscuous mode [ 531.944689][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.283909][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.464874][ T8208] overlayfs: missing 'lowerdir' [ 533.869901][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.005922][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.029914][ T8087] team0: Port device team_slave_0 added [ 534.211604][ T8087] team0: Port device team_slave_1 added [ 534.394904][ T8091] team0: Port device team_slave_0 added [ 534.536487][ T8091] team0: Port device team_slave_1 added [ 534.550397][ T5487] 8021q: adding VLAN 0 to HW filter on device eth9 [ 534.580338][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.580356][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.580386][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.676442][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.676460][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.676486][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.870387][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.936433][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.939089][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.957150][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.958148][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.178973][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.179020][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.179046][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.500704][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.500722][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.500751][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.621643][ T8253] syz.2.462 (8253): drop_caches: 2 [ 537.123005][ T5834] Bluetooth: hci1: command tx timeout [ 537.678333][ T8087] hsr_slave_0: entered promiscuous mode [ 537.680448][ T8087] hsr_slave_1: entered promiscuous mode [ 537.688204][ T8087] debugfs: 'hsr0' already exists in 'hsr' [ 537.688312][ T8087] Cannot create hsr debugfs directory [ 537.841846][ T10] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 539.600083][ T5834] Bluetooth: hci1: command tx timeout [ 539.633983][ T8091] hsr_slave_0: entered promiscuous mode [ 539.636381][ T8091] hsr_slave_1: entered promiscuous mode [ 539.656947][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 539.656974][ T8091] Cannot create hsr debugfs directory [ 539.792584][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 539.792615][ T10] usb 2-1: config 0 has no interface number 0 [ 539.792659][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.792683][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 539.792710][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 539.792744][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 539.792770][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 539.792793][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.792838][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 539.792863][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.942941][ T10] usb 2-1: config 0 descriptor?? [ 539.943900][ T8265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 540.000027][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 540.151759][ T8265] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 540.168569][ T10] usb 2-1: USB disconnect, device number 7 [ 540.205373][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 542.792856][ T5834] Bluetooth: hci1: command tx timeout [ 542.967082][ T8284] loop2: detected capacity change from 0 to 64 [ 543.331571][ T44] bridge_slave_1: left allmulticast mode [ 543.331609][ T44] bridge_slave_1: left promiscuous mode [ 543.331894][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.412925][ T44] bridge_slave_0: left allmulticast mode [ 543.412963][ T44] bridge_slave_0: left promiscuous mode [ 543.413276][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.581200][ T44] bridge_slave_1: left allmulticast mode [ 543.581241][ T44] bridge_slave_1: left promiscuous mode [ 543.581528][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.647150][ T44] bridge_slave_0: left allmulticast mode [ 543.647192][ T44] bridge_slave_0: left promiscuous mode [ 543.647612][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.753793][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.862549][ T5834] Bluetooth: hci1: command tx timeout [ 544.875466][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.937670][ T44] bond0 (unregistering): Released all slaves [ 545.205102][ T8295] syz.1.474 (8295): drop_caches: 2 [ 545.233011][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.311871][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.403511][ T44] bond0 (unregistering): Released all slaves [ 546.121188][ T37] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 546.153040][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 546.379814][ T8310] hub 8-0:1.0: USB hub found [ 546.386325][ T8310] hub 8-0:1.0: 1 port detected [ 547.341827][ T44] hsr_slave_0: left promiscuous mode [ 547.361318][ T44] hsr_slave_1: left promiscuous mode [ 547.362473][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.370657][ T37] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 547.370685][ T37] usb 3-1: config 0 has no interface number 0 [ 547.370730][ T37] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.370753][ T37] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 547.370780][ T37] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 547.370806][ T37] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 547.370833][ T37] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 547.373707][ T37] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.373851][ T37] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 547.373918][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.410643][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.431098][ T37] usb 3-1: config 0 descriptor?? [ 547.502963][ T8302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.545017][ T37] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.631174][ T44] hsr_slave_0: left promiscuous mode [ 547.651118][ T44] hsr_slave_1: left promiscuous mode [ 547.652029][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.692002][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.730154][ T8302] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 547.747990][ T5842] usb 3-1: USB disconnect, device number 6 [ 547.778486][ T5842] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 548.082028][ T44] team0 (unregistering): Port device team_slave_1 removed [ 548.112950][ T44] team0 (unregistering): Port device team_slave_0 removed [ 548.603575][ T44] team0 (unregistering): Port device team_slave_1 removed [ 548.651610][ T44] team0 (unregistering): Port device team_slave_0 removed [ 555.270203][ T8341] trusted_key: encrypted_key: key user:syz not found [ 555.455809][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.459459][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.459821][ T8229] bridge_slave_0: entered allmulticast mode [ 555.739709][ T8229] bridge_slave_0: entered promiscuous mode [ 555.819995][ T8350] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[8350] [ 556.698444][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.698790][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.801208][ T8229] bridge_slave_1: entered allmulticast mode [ 556.834013][ T8229] bridge_slave_1: entered promiscuous mode [ 556.836738][ T8352] loop2: detected capacity change from 0 to 64 [ 556.989039][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.008104][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.135261][ T8229] team0: Port device team_slave_0 added [ 557.155322][ T8229] team0: Port device team_slave_1 added [ 557.269484][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.269504][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.269530][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.510675][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.510694][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.510725][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.982349][ T8229] hsr_slave_0: entered promiscuous mode [ 558.985192][ T8229] hsr_slave_1: entered promiscuous mode [ 558.987380][ T8229] debugfs: 'hsr0' already exists in 'hsr' [ 558.987405][ T8229] Cannot create hsr debugfs directory [ 559.204424][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 559.254040][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.353870][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 559.423921][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.469462][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 559.515278][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.694531][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 560.815476][ T8371] trusted_key: encrypted_key: key user:syz not found [ 560.841791][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.211971][ T8382] hub 8-0:1.0: USB hub found [ 561.214535][ T8382] hub 8-0:1.0: 1 port detected [ 564.038589][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.214131][ T8395] loop1: detected capacity change from 0 to 64 [ 565.627530][ T8087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.702905][ T8087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.063917][ T5142] Bluetooth: hci1: command 0x0405 tx timeout [ 567.136096][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.178024][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.199562][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.224424][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.225302][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.974336][ T8416] trusted_key: encrypted_key: key user:syz not found [ 571.162402][ T5834] Bluetooth: hci0: command tx timeout [ 571.637400][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 571.653297][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 571.681932][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 571.687847][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 571.707060][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 572.444137][ T8427] loop1: detected capacity change from 0 to 64 [ 572.862629][ T44] bridge_slave_1: left allmulticast mode [ 572.862668][ T44] bridge_slave_1: left promiscuous mode [ 572.862967][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.947007][ T44] bridge_slave_0: left allmulticast mode [ 572.947045][ T44] bridge_slave_0: left promiscuous mode [ 572.947383][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.181499][ T5834] Bluetooth: hci0: command tx timeout [ 573.597127][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.111828][ T5834] Bluetooth: hci2: command tx timeout [ 574.152070][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.237170][ T44] bond0 (unregistering): Released all slaves [ 575.270130][ T37] kernel read not supported for file /video7 (pid: 37 comm: kworker/1:1) [ 575.427382][ T5834] Bluetooth: hci0: command tx timeout [ 575.646341][ T8451] trusted_key: encrypted_key: key user:syz not found [ 577.547007][ T5834] Bluetooth: hci2: command tx timeout [ 577.547045][ T5834] Bluetooth: hci0: command tx timeout [ 577.921315][ T44] hsr_slave_0: left promiscuous mode [ 578.022459][ T44] hsr_slave_1: left promiscuous mode [ 578.023360][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.062429][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.309930][ T8460] syz.2.514 (8460): drop_caches: 2 [ 578.893208][ T44] team0 (unregistering): Port device team_slave_1 removed [ 578.963110][ T44] team0 (unregistering): Port device team_slave_0 removed [ 579.097266][ T8469] hub 8-0:1.0: USB hub found [ 579.101497][ T8469] hub 8-0:1.0: 1 port detected [ 580.238096][ T5142] Bluetooth: hci2: command tx timeout [ 580.359189][ T8472] loop1: detected capacity change from 0 to 64 [ 580.615963][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 582.362847][ T5142] Bluetooth: hci2: command tx timeout [ 582.819852][ T8489] trusted_key: encrypted_key: key user:syz not found [ 583.527613][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.527886][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.528183][ T8404] bridge_slave_0: entered allmulticast mode [ 583.537066][ T8404] bridge_slave_0: entered promiscuous mode [ 583.814451][ T8500] hub 8-0:1.0: USB hub found [ 583.818347][ T8500] hub 8-0:1.0: 1 port detected [ 584.968584][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.979026][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.990473][ T8404] bridge_slave_1: entered allmulticast mode [ 585.010312][ T8404] bridge_slave_1: entered promiscuous mode [ 585.490707][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 585.541659][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.885695][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.526849][ T8404] team0: Port device team_slave_0 added [ 587.247220][ T8513] loop2: detected capacity change from 0 to 64 [ 587.436092][ T8404] team0: Port device team_slave_1 added [ 589.251109][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.251128][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.251187][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.656554][ T8523] trusted_key: encrypted_key: key user:syz not found [ 592.176643][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.176657][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.176678][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.177494][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.177795][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.178020][ T8423] bridge_slave_0: entered allmulticast mode [ 592.180587][ T8423] bridge_slave_0: entered promiscuous mode [ 592.865568][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.865831][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.866081][ T8423] bridge_slave_1: entered allmulticast mode [ 592.874241][ T8423] bridge_slave_1: entered promiscuous mode [ 593.008780][ T8542] loop1: detected capacity change from 0 to 64 [ 593.264561][ T8229] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.271081][ T5835] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 593.290691][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.358340][ T8229] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 593.408537][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.435635][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.450776][ T5835] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 593.450803][ T5835] usb 3-1: config 0 has no interface number 0 [ 593.450963][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.450989][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 593.451016][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 593.451043][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 593.451069][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 593.451093][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.451135][ T5835] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 593.451159][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.560423][ T5835] usb 3-1: config 0 descriptor?? [ 593.561992][ T8544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.566552][ T8544] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 593.602473][ T5835] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 593.633767][ T8229] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 593.682441][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.687936][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.716064][ T8404] hsr_slave_0: entered promiscuous mode [ 593.717890][ T8404] hsr_slave_1: entered promiscuous mode [ 593.719551][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 593.719570][ T8404] Cannot create hsr debugfs directory [ 593.720103][ T8229] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.822592][ T5835] usb 3-1: USB disconnect, device number 7 [ 593.835946][ T8229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.865066][ T5835] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 594.038791][ T8423] team0: Port device team_slave_0 added [ 594.207955][ T8423] team0: Port device team_slave_1 added [ 595.395694][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.395712][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.395741][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.483760][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.483780][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.483808][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.046903][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 597.078548][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 597.079903][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 597.103921][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.106549][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.579322][ T8575] NILFS (nullb0): couldn't find nilfs on the device [ 599.182567][ T5142] Bluetooth: hci5: command tx timeout [ 599.496388][ T8577] syz.1.540 (8577): drop_caches: 2 [ 599.606968][ T8423] hsr_slave_0: entered promiscuous mode [ 599.608787][ T8423] hsr_slave_1: entered promiscuous mode [ 599.610308][ T8423] debugfs: 'hsr0' already exists in 'hsr' [ 599.610327][ T8423] Cannot create hsr debugfs directory [ 600.695241][ T8585] loop2: detected capacity change from 0 to 64 [ 600.901533][ T5835] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 601.053966][ T5835] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 601.053996][ T5835] usb 2-1: config 0 has no interface number 0 [ 601.054043][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.054067][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 601.054094][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 601.054120][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 601.054146][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 601.054173][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.054215][ T5835] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 601.054239][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.162845][ T5835] usb 2-1: config 0 descriptor?? [ 601.174567][ T8583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.174782][ T8583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.237166][ T5835] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 601.261089][ T5142] Bluetooth: hci5: command tx timeout [ 601.388827][ T5811] usb 2-1: USB disconnect, device number 8 [ 601.404744][ T5811] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 603.505611][ T5142] Bluetooth: hci5: command tx timeout [ 605.585758][ T5142] Bluetooth: hci5: command tx timeout [ 605.626573][ T8607] syz.1.548 (8607): drop_caches: 2 [ 605.888153][ T8619] syz.2.550 (8619): drop_caches: 2 [ 605.982567][ T8623] loop1: detected capacity change from 0 to 64 [ 606.103458][ T8565] chnl_net:caif_netlink_parms(): no params data found [ 607.441158][ T44] bridge_slave_1: left allmulticast mode [ 607.441195][ T44] bridge_slave_1: left promiscuous mode [ 607.441504][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.522305][ T44] bridge_slave_0: left allmulticast mode [ 607.522332][ T44] bridge_slave_0: left promiscuous mode [ 607.524399][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.741253][ T5835] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 607.781428][ T44] bridge_slave_1: left allmulticast mode [ 607.781457][ T44] bridge_slave_1: left promiscuous mode [ 607.781727][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.436319][ T44] bridge_slave_0: left allmulticast mode [ 608.436549][ T44] bridge_slave_0: left promiscuous mode [ 608.438429][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.857302][ T5835] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 608.857331][ T5835] usb 2-1: config 0 has no interface number 0 [ 608.857376][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.857393][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 608.857412][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 608.857429][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 608.857448][ T5835] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 608.857466][ T5835] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.857496][ T5835] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 608.857512][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.883485][ T5835] usb 2-1: config 0 descriptor?? [ 608.893513][ T8632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.893859][ T8632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.090236][ T5835] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 609.151539][ T5835] usb 2-1: USB disconnect, device number 9 [ 609.159200][ T5835] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 609.272163][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.351738][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.412819][ T44] bond0 (unregistering): Released all slaves [ 609.591940][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.672165][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.738117][ T44] bond0 (unregistering): Released all slaves [ 609.938776][ T8642] hub 8-0:1.0: USB hub found [ 609.968588][ T8642] hub 8-0:1.0: 1 port detected [ 610.940191][ T8648] hub 8-0:1.0: USB hub found [ 610.945759][ T8648] hub 8-0:1.0: 1 port detected [ 612.200606][ T8565] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.201583][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.201969][ T8565] bridge_slave_0: entered allmulticast mode [ 612.229727][ T8565] bridge_slave_0: entered promiscuous mode [ 612.422105][ T8565] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.422395][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.422718][ T8565] bridge_slave_1: entered allmulticast mode [ 612.473372][ T8565] bridge_slave_1: entered promiscuous mode [ 613.772018][ T8658] trusted_key: encrypted_key: key user:syz not found [ 613.862372][ T8565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.886182][ T8565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.021400][ T8663] hub 8-0:1.0: USB hub found [ 614.025339][ T8663] hub 8-0:1.0: 1 port detected [ 614.975492][ T37] kernel read not supported for file /video7 (pid: 37 comm: kworker/1:1) [ 614.980260][ T8665] net_ratelimit: 10 callbacks suppressed [ 614.980282][ T8665] openvswitch: netlink: Key 26 has unexpected len 8 expected 16 [ 615.054456][ T44] hsr_slave_0: left promiscuous mode [ 615.091218][ T44] hsr_slave_1: left promiscuous mode [ 615.092396][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.115632][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.270987][ T44] hsr_slave_0: left promiscuous mode [ 615.291071][ T44] hsr_slave_1: left promiscuous mode [ 615.291962][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.332410][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.702946][ T44] team0 (unregistering): Port device team_slave_1 removed [ 615.733190][ T44] team0 (unregistering): Port device team_slave_0 removed [ 616.192646][ T44] team0 (unregistering): Port device team_slave_1 removed [ 616.223083][ T44] team0 (unregistering): Port device team_slave_0 removed [ 616.695408][ T8565] team0: Port device team_slave_0 added [ 617.605715][ T37] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 617.704500][ T8565] team0: Port device team_slave_1 added [ 617.815297][ T37] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 617.815328][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.815347][ T37] usb 3-1: config 0 has no interface number 0 [ 617.817601][ T37] usb 3-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 617.817631][ T37] usb 3-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 617.817654][ T37] usb 3-1: config 0 interface 70 has no altsetting 0 [ 617.912369][ T37] usb 3-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 617.912402][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.912424][ T37] usb 3-1: Product: syz [ 617.912439][ T37] usb 3-1: Manufacturer: syz [ 617.912454][ T37] usb 3-1: SerialNumber: syz [ 618.277822][ T37] usb 3-1: config 0 descriptor?? [ 618.934800][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.934820][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.934848][ T8565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.005980][ T8565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.006087][ T8565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.006118][ T8565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.704005][ T38] audit: type=1800 audit(1776937718.371:7): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.565" name="file1" dev="tmpfs" ino=1189 res=0 errno=0 [ 619.735374][ T8565] hsr_slave_0: entered promiscuous mode [ 619.767780][ T8565] hsr_slave_1: entered promiscuous mode [ 619.773036][ T8565] debugfs: 'hsr0' already exists in 'hsr' [ 619.773227][ T8565] Cannot create hsr debugfs directory [ 620.161016][ T5835] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 620.330792][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.331421][ T5835] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 620.339984][ T5835] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 620.340016][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 620.340038][ T5835] usb 2-1: Product: syz [ 620.415006][ T5835] usb 2-1: config 0 descriptor?? [ 621.418790][ T5835] usb 2-1: USB disconnect, device number 10 [ 623.939861][ T37] ti_usb_3410_5052 3-1:0.70: TI USB 3410 1 port adapter converter detected [ 623.965369][ T37] ti_usb_3410_5052 3-1:0.70: missing endpoints [ 624.339111][ T37] usb 3-1: USB disconnect, device number 8 [ 624.412268][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.442479][ T8693] trusted_key: encrypted_key: key user:syz not found [ 624.826581][ T8700] comedi comedi3: das16m1: I/O base address or length out of range [ 625.468848][ T8697] syzkaller0: entered promiscuous mode [ 625.468876][ T8697] syzkaller0: entered allmulticast mode [ 625.550467][ T8697] tipc: Enabled bearer , priority 0 [ 625.657843][ T8696] tipc: Resetting bearer [ 625.835751][ T8696] tipc: Disabling bearer [ 631.525673][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.565413][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.568012][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.570419][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.585106][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.095794][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 632.096205][ T8726] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 633.004234][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.008736][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.010087][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.023257][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.142094][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.662469][ T5834] Bluetooth: hci1: command tx timeout [ 633.849685][ T8734] trusted_key: encrypted_key: key user:syz not found [ 634.001802][ T5811] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 634.891516][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 634.892018][ T8738] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 636.430110][ T5834] Bluetooth: hci0: command tx timeout [ 636.430420][ T5834] Bluetooth: hci1: command tx timeout [ 636.444321][ T5811] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 636.444349][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.444369][ T5811] usb 3-1: config 0 has no interface number 0 [ 636.444426][ T5811] usb 3-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 636.444449][ T5811] usb 3-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 636.444473][ T5811] usb 3-1: config 0 interface 70 has no altsetting 0 [ 636.504759][ T5811] usb 3-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 636.504790][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.504811][ T5811] usb 3-1: Product: syz [ 636.504827][ T5811] usb 3-1: Manufacturer: syz [ 636.504842][ T5811] usb 3-1: SerialNumber: syz [ 636.543474][ T5811] usb 3-1: config 0 descriptor?? [ 636.844376][ T5811] ti_usb_3410_5052 3-1:0.70: TI USB 3410 1 port adapter converter detected [ 636.844532][ T5811] ti_usb_3410_5052 3-1:0.70: missing endpoints [ 637.649157][ T5811] usb 3-1: USB disconnect, device number 9 [ 638.517017][ T5142] Bluetooth: hci1: command tx timeout [ 638.517195][ T5142] Bluetooth: hci0: command tx timeout [ 640.541584][ T5142] Bluetooth: hci1: command tx timeout [ 640.701525][ T5142] Bluetooth: hci0: command tx timeout [ 642.958942][ T5142] Bluetooth: hci0: command tx timeout [ 643.282622][ T8765] trusted_key: encrypted_key: key user:syz not found [ 643.473049][ T5487] 8021q: adding VLAN 0 to HW filter on device eth10 [ 645.475942][ T8798] NILFS (nullb0): couldn't find nilfs on the device [ 647.068243][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 647.616524][ T8813] hub 8-0:1.0: USB hub found [ 647.633685][ T8813] hub 8-0:1.0: 1 port detected [ 647.703761][ T44] bridge_slave_1: left allmulticast mode [ 647.703799][ T44] bridge_slave_1: left promiscuous mode [ 647.706452][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.658018][ T44] bridge_slave_0: left allmulticast mode [ 648.658047][ T44] bridge_slave_0: left promiscuous mode [ 648.658242][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.941732][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.215090][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.333595][ T44] bond0 (unregistering): Released all slaves [ 650.769945][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 650.846134][ T8828] trusted_key: encrypted_key: key user:syz not found [ 652.431009][ T44] hsr_slave_0: left promiscuous mode [ 652.471284][ T44] hsr_slave_1: left promiscuous mode [ 652.472534][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.515150][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.891778][ T44] team0 (unregistering): Port device team_slave_1 removed [ 653.953252][ T44] team0 (unregistering): Port device team_slave_0 removed [ 658.394904][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.396262][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.410710][ T8719] bridge_slave_0: entered allmulticast mode [ 658.500580][ T8719] bridge_slave_0: entered promiscuous mode [ 660.786152][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.798517][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.799677][ T8719] bridge_slave_1: entered allmulticast mode [ 660.919117][ T8719] bridge_slave_1: entered promiscuous mode [ 661.616769][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.356296][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.396150][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.428999][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.438287][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 663.839670][ T8884] hub 8-0:1.0: USB hub found [ 663.844402][ T8884] hub 8-0:1.0: 1 port detected [ 664.814051][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.814419][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.814741][ T8727] bridge_slave_0: entered allmulticast mode [ 664.822620][ T8727] bridge_slave_0: entered promiscuous mode [ 664.880244][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.899358][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.908319][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.908704][ T8727] bridge_slave_1: entered allmulticast mode [ 664.989099][ T8727] bridge_slave_1: entered promiscuous mode [ 665.007899][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.375368][ T8889] trusted_key: encrypted_key: key user:syz not found [ 665.639062][ T5834] Bluetooth: hci2: command tx timeout [ 666.602553][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.608309][ T8719] team0: Port device team_slave_0 added [ 666.669367][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.700530][ T8719] team0: Port device team_slave_1 added [ 667.676404][ T5834] Bluetooth: hci2: command tx timeout [ 667.919229][ T8727] team0: Port device team_slave_0 added [ 668.288622][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.288641][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.288670][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.355015][ T8727] team0: Port device team_slave_1 added [ 668.417201][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.417220][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.417249][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.741187][ T5142] Bluetooth: hci2: command tx timeout [ 670.316194][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.316208][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.316227][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.403981][ T5487] 8021q: adding VLAN 0 to HW filter on device eth11 [ 670.543925][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.543944][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.543973][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.106352][ T5142] Bluetooth: hci2: command 0x0419 tx timeout [ 674.543339][ T5142] Bluetooth: hci2: command 0x0419 tx timeout [ 677.075160][ T8719] hsr_slave_0: entered promiscuous mode [ 677.093060][ T8719] hsr_slave_1: entered promiscuous mode [ 677.096611][ T8719] debugfs: 'hsr0' already exists in 'hsr' [ 677.096630][ T8719] Cannot create hsr debugfs directory [ 677.156186][ T5487] 8021q: adding VLAN 0 to HW filter on device eth12 [ 677.294682][ T8956] trusted_key: encrypted_key: insufficient parameters specified [ 679.455406][ T8968] comedi comedi3: das16m1: I/O base address or length out of range [ 680.295921][ T8727] hsr_slave_0: entered promiscuous mode [ 680.313458][ T8727] hsr_slave_1: entered promiscuous mode [ 680.316670][ T8727] debugfs: 'hsr0' already exists in 'hsr' [ 680.316690][ T8727] Cannot create hsr debugfs directory [ 683.615652][ T9005] comedi comedi3: das16m1: I/O base address or length out of range [ 683.866600][ T8870] chnl_net:caif_netlink_parms(): no params data found [ 685.200336][ T9007] syz.1.618 (9007): drop_caches: 2 [ 685.712061][ T9020] trusted_key: encrypted_key: insufficient parameters specified [ 685.843665][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.085467][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.093704][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.111803][ T8870] bridge_slave_0: entered allmulticast mode [ 688.209914][ T8870] bridge_slave_0: entered promiscuous mode [ 688.576159][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.577295][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.580634][ T8870] bridge_slave_1: entered allmulticast mode [ 688.634663][ T8870] bridge_slave_1: entered promiscuous mode [ 688.839618][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.858920][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.925962][ T8870] team0: Port device team_slave_0 added [ 688.937692][ T8870] team0: Port device team_slave_1 added [ 689.055684][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.055697][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.055717][ T8870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.059429][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.059442][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.059462][ T8870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.387922][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.436113][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.438496][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.439754][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.467705][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 690.928519][ T8870] hsr_slave_0: entered promiscuous mode [ 690.932989][ T8870] hsr_slave_1: entered promiscuous mode [ 690.935090][ T8870] debugfs: 'hsr0' already exists in 'hsr' [ 690.935117][ T8870] Cannot create hsr debugfs directory [ 691.331481][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 691.481394][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 691.483993][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.484045][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.484070][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.491660][ T10] usb 3-1: config 0 descriptor?? [ 691.572542][ T44] bridge_slave_1: left allmulticast mode [ 691.572580][ T44] bridge_slave_1: left promiscuous mode [ 691.573062][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.638153][ T44] bridge_slave_0: left allmulticast mode [ 691.638194][ T44] bridge_slave_0: left promiscuous mode [ 691.638696][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.661221][ T5142] Bluetooth: hci5: command tx timeout [ 691.762056][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 691.841559][ T44] bridge_slave_1: left allmulticast mode [ 691.841597][ T44] bridge_slave_1: left promiscuous mode [ 691.841869][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.903098][ T44] bridge_slave_0: left allmulticast mode [ 691.903127][ T44] bridge_slave_0: left promiscuous mode [ 691.903339][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.982795][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.983557][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.302516][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.383547][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.471960][ T44] bond0 (unregistering): Released all slaves [ 692.552415][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 692.615732][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 692.638128][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 692.639979][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 692.646815][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 693.026897][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.104083][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.196034][ T44] bond0 (unregistering): Released all slaves [ 693.272413][ T9053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.550772][ T5893] usb 3-1: USB disconnect, device number 10 [ 693.746962][ T5834] Bluetooth: hci5: command tx timeout [ 694.205508][ T44] hsr_slave_0: left promiscuous mode [ 694.246345][ T44] hsr_slave_1: left promiscuous mode [ 694.249078][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.286343][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.461308][ T44] hsr_slave_0: left promiscuous mode [ 694.502664][ T44] hsr_slave_1: left promiscuous mode [ 694.503788][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.544139][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.711482][ T5834] Bluetooth: hci6: command tx timeout [ 695.344455][ T44] team0 (unregistering): Port device team_slave_1 removed [ 695.405490][ T44] team0 (unregistering): Port device team_slave_0 removed [ 695.832724][ T9074] hub 8-0:1.0: USB hub found [ 695.833149][ T9074] hub 8-0:1.0: 1 port detected [ 696.416639][ T5834] Bluetooth: hci5: command tx timeout [ 696.847731][ T5834] Bluetooth: hci6: command tx timeout [ 697.182892][ T44] team0 (unregistering): Port device team_slave_1 removed [ 697.232294][ T44] team0 (unregistering): Port device team_slave_0 removed [ 698.483900][ T5834] Bluetooth: hci5: command tx timeout [ 700.718849][ T5834] Bluetooth: hci6: command tx timeout [ 702.780946][ T5834] Bluetooth: hci6: command tx timeout [ 703.025900][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 705.805883][ T57] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 708.655302][ T9129] comedi comedi3: das16m1: I/O base address or length out of range [ 715.864383][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.864754][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.865175][ T9041] bridge_slave_0: entered allmulticast mode [ 715.880635][ T9041] bridge_slave_0: entered promiscuous mode [ 715.920111][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 716.076807][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.077195][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.077566][ T9041] bridge_slave_1: entered allmulticast mode [ 716.109485][ T9041] bridge_slave_1: entered promiscuous mode [ 716.321413][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.389459][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.701587][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 717.414449][ T9041] team0: Port device team_slave_0 added [ 717.572675][ T759] bridge_slave_1: left allmulticast mode [ 717.572713][ T759] bridge_slave_1: left promiscuous mode [ 717.573026][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.666748][ T759] bridge_slave_0: left allmulticast mode [ 717.666786][ T759] bridge_slave_0: left promiscuous mode [ 717.667108][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.999562][ T759] bridge_slave_1: left allmulticast mode [ 718.999600][ T759] bridge_slave_1: left promiscuous mode [ 718.999851][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.286201][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 719.286354][ T9199] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 720.358809][ T759] bridge_slave_0: left allmulticast mode [ 720.358845][ T759] bridge_slave_0: left promiscuous mode [ 720.359121][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.552649][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.591843][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.593090][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.594429][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.595289][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.063527][ T5834] Bluetooth: hci0: command tx timeout [ 725.011802][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.111325][ T5834] Bluetooth: hci0: command tx timeout [ 725.131902][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.213647][ T759] bond0 (unregistering): Released all slaves [ 725.381681][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.461859][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.522991][ T759] bond0 (unregistering): Released all slaves [ 725.593767][ T9041] team0: Port device team_slave_1 added [ 725.757086][ T9224] syz.2.653 (9224): drop_caches: 2 [ 726.005906][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.007127][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.007605][ T9059] bridge_slave_0: entered allmulticast mode [ 726.040372][ T9059] bridge_slave_0: entered promiscuous mode [ 726.098861][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.099688][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.124644][ T9059] bridge_slave_1: entered allmulticast mode [ 726.220027][ T9059] bridge_slave_1: entered promiscuous mode [ 727.145623][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.145641][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.145671][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.182738][ T5834] Bluetooth: hci0: command tx timeout [ 727.241416][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.241435][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.241464][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.952356][ T759] hsr_slave_0: left promiscuous mode [ 729.271558][ T5834] Bluetooth: hci0: command tx timeout [ 729.286429][ T759] hsr_slave_1: left promiscuous mode [ 729.287667][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.322099][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.511793][ T759] hsr_slave_0: left promiscuous mode [ 729.551381][ T759] hsr_slave_1: left promiscuous mode [ 729.553116][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.592216][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.332456][ T759] team0 (unregistering): Port device team_slave_1 removed [ 730.413270][ T759] team0 (unregistering): Port device team_slave_0 removed [ 730.501767][ T5834] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 737.453929][ T759] team0 (unregistering): Port device team_slave_1 removed [ 737.491967][ T759] team0 (unregistering): Port device team_slave_0 removed [ 737.696531][ T9282] syz_tun: entered allmulticast mode [ 737.699925][ T9282] syz_tun: left allmulticast mode [ 737.820167][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.933436][ T9286] syz.2.662 (9286): drop_caches: 2 [ 738.007595][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.055580][ T9312] comedi comedi3: 8255: I/O base address not correctly aligned [ 740.623654][ T9059] team0: Port device team_slave_0 added [ 740.673808][ T9041] hsr_slave_0: entered promiscuous mode [ 740.731346][ T9041] hsr_slave_1: entered promiscuous mode [ 740.733343][ T9041] debugfs: 'hsr0' already exists in 'hsr' [ 740.733369][ T9041] Cannot create hsr debugfs directory [ 740.807124][ T9059] team0: Port device team_slave_1 added [ 743.472688][ T6008] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 744.506122][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.506141][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.506178][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.552502][ T6008] usb 3-1: device not accepting address 11, error -71 [ 744.641937][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.641955][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.641982][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.797422][ T9333] syz.2.670 (9333): drop_caches: 2 [ 745.509406][ T9346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 747.268624][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.633344][ T9059] hsr_slave_0: entered promiscuous mode [ 747.635879][ T9059] hsr_slave_1: entered promiscuous mode [ 747.655327][ T9059] debugfs: 'hsr0' already exists in 'hsr' [ 747.655355][ T9059] Cannot create hsr debugfs directory [ 748.630105][ T9365] hub 8-0:1.0: USB hub found [ 748.644084][ T9365] hub 8-0:1.0: 1 port detected [ 750.006507][ T9367] overlayfs: missing 'lowerdir' [ 750.848410][ T9204] chnl_net:caif_netlink_parms(): no params data found [ 751.885613][ T9383] syz_tun: entered allmulticast mode [ 752.971114][ T9376] syz_tun: left allmulticast mode [ 753.157078][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.167268][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.178405][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.199252][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.204300][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.485652][ T9204] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.485938][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.486354][ T9204] bridge_slave_0: entered allmulticast mode [ 754.492957][ T9204] bridge_slave_0: entered promiscuous mode [ 754.585084][ T9204] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.585724][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.586037][ T9204] bridge_slave_1: entered allmulticast mode [ 754.590176][ T9204] bridge_slave_1: entered promiscuous mode [ 754.852098][ T9204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.874489][ T9204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.139045][ T9389] syz.2.679 (9389): drop_caches: 2 [ 756.182232][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 756.219358][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 756.224699][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 756.258559][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 756.266858][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.533278][ T5834] Bluetooth: hci1: command tx timeout [ 756.555515][ T9204] team0: Port device team_slave_0 added [ 756.698346][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 756.698377][ T9397] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 757.741766][ T9204] team0: Port device team_slave_1 added [ 759.685863][ T5841] Bluetooth: hci1: command tx timeout [ 759.704132][ T5834] Bluetooth: hci2: command tx timeout [ 760.500159][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.500174][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.500197][ T9204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.618201][ T9204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.618220][ T9204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.618249][ T9204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.948436][ T9204] hsr_slave_0: entered promiscuous mode [ 761.957166][ T9204] hsr_slave_1: entered promiscuous mode [ 761.959191][ T9204] debugfs: 'hsr0' already exists in 'hsr' [ 761.959217][ T9204] Cannot create hsr debugfs directory [ 762.014064][ T5844] Bluetooth: hci1: command tx timeout [ 762.014158][ T5834] Bluetooth: hci2: command tx timeout [ 762.308390][ T9419] hub 8-0:1.0: USB hub found [ 762.312795][ T9419] hub 8-0:1.0: 1 port detected [ 765.202307][ T5844] Bluetooth: hci1: command tx timeout [ 765.203164][ T5834] Bluetooth: hci2: command 0x040f tx timeout [ 766.933619][ T759] bridge_slave_1: left allmulticast mode [ 766.933659][ T759] bridge_slave_1: left promiscuous mode [ 766.934104][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.015221][ T759] bridge_slave_0: left allmulticast mode [ 767.015267][ T759] bridge_slave_0: left promiscuous mode [ 767.017217][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.221172][ T759] bridge_slave_1: left allmulticast mode [ 767.221250][ T759] bridge_slave_1: left promiscuous mode [ 767.222154][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.345616][ T759] bridge_slave_0: left allmulticast mode [ 767.345786][ T759] bridge_slave_0: left promiscuous mode [ 767.346568][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.351338][ T9426] Bluetooth: hci2: command 0x040f tx timeout [ 770.153421][ T9426] Bluetooth: hci2: command 0x040f tx timeout [ 770.303467][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.401787][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.464278][ T759] bond0 (unregistering): Released all slaves [ 770.765867][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.818213][ T9444] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.691'. [ 770.862372][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.923033][ T759] bond0 (unregistering): Released all slaves [ 771.343175][ T9380] chnl_net:caif_netlink_parms(): no params data found [ 774.166397][ T9462] overlayfs: missing 'lowerdir' [ 775.261009][ T759] hsr_slave_0: left promiscuous mode [ 775.310943][ T759] hsr_slave_1: left promiscuous mode [ 775.312184][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.352508][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.071810][ T759] hsr_slave_0: left promiscuous mode [ 776.091078][ T759] hsr_slave_1: left promiscuous mode [ 776.119603][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.221268][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.728355][ T9481] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.700'. [ 779.031567][ T759] team0 (unregistering): Port device team_slave_1 removed [ 779.126731][ T759] team0 (unregistering): Port device team_slave_0 removed [ 781.225139][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 781.282400][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 781.287495][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 781.290458][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 781.301499][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 782.021641][ T759] team0 (unregistering): Port device team_slave_1 removed [ 782.072310][ T759] team0 (unregistering): Port device team_slave_0 removed [ 782.275597][ T9488] syz_tun: entered allmulticast mode [ 782.275987][ T9488] syz_tun: left allmulticast mode [ 782.617179][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.617641][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.617957][ T9380] bridge_slave_0: entered allmulticast mode [ 782.676234][ T9380] bridge_slave_0: entered promiscuous mode [ 783.348189][ T9426] Bluetooth: hci5: command tx timeout [ 783.586688][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.588046][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.588415][ T9380] bridge_slave_1: entered allmulticast mode [ 783.868438][ T9380] bridge_slave_1: entered promiscuous mode [ 785.076967][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 785.369346][ T9497] syz.2.702 (9497): drop_caches: 2 [ 785.422135][ T9426] Bluetooth: hci5: command tx timeout [ 785.751176][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.232222][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.486875][ T9380] team0: Port device team_slave_0 added [ 787.505258][ T9426] Bluetooth: hci5: command tx timeout [ 787.546858][ T9380] team0: Port device team_slave_1 added [ 787.937411][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.937430][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.937460][ T9380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.940196][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.940547][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.942739][ T9392] bridge_slave_0: entered allmulticast mode [ 788.039055][ T9392] bridge_slave_0: entered promiscuous mode [ 788.102416][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.102435][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.102467][ T9380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.103789][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.104142][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.104469][ T9392] bridge_slave_1: entered allmulticast mode [ 788.139134][ T9392] bridge_slave_1: entered promiscuous mode [ 788.521408][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.613820][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.767736][ T9380] hsr_slave_0: entered promiscuous mode [ 788.782410][ T9380] hsr_slave_1: entered promiscuous mode [ 788.816425][ T9380] debugfs: 'hsr0' already exists in 'hsr' [ 788.816689][ T9380] Cannot create hsr debugfs directory [ 788.882743][ T9525] overlayfs: missing 'lowerdir' [ 789.482722][ T9392] team0: Port device team_slave_0 added [ 789.582672][ T9426] Bluetooth: hci5: command tx timeout [ 790.145403][ T9530] syz.1.709 (9530): drop_caches: 2 [ 790.213864][ T9392] team0: Port device team_slave_1 added [ 790.426361][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.426380][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.426407][ T9392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.572941][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.572960][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.572990][ T9392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.356982][ T9547] syz_tun: entered allmulticast mode [ 792.208776][ T9542] syz_tun: left allmulticast mode [ 792.732519][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 794.928968][ T9392] hsr_slave_0: entered promiscuous mode [ 794.947050][ T9392] hsr_slave_1: entered promiscuous mode [ 794.960143][ T9392] debugfs: 'hsr0' already exists in 'hsr' [ 794.960172][ T9392] Cannot create hsr debugfs directory [ 799.003117][ T9572] syz.2.717 (9572): drop_caches: 2 [ 799.027235][ T9573] NILFS (nullb0): couldn't find nilfs on the device [ 799.697808][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.698173][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.698516][ T9492] bridge_slave_0: entered allmulticast mode [ 799.724838][ T9492] bridge_slave_0: entered promiscuous mode [ 799.921952][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.922247][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.922585][ T9492] bridge_slave_1: entered allmulticast mode [ 799.926923][ T9492] bridge_slave_1: entered promiscuous mode [ 800.332812][ T9492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.400479][ T9492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.959464][ T38] audit: type=1800 audit(1776937900.671:8): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.722" name="file1" dev="tmpfs" ino=1676 res=0 errno=0 [ 802.048701][ T9595] comedi comedi3: 8255: I/O base address not correctly aligned [ 802.948918][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 803.063729][ T9492] team0: Port device team_slave_0 added [ 803.118544][ T9492] team0: Port device team_slave_1 added [ 803.119455][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.119480][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.151690][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 803.151723][ T10] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 803.151745][ T10] usb 2-1: Product: syz [ 803.262345][ T10] usb 2-1: config 0 descriptor?? [ 804.370116][ T9380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.408044][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.412773][ T37] usb 2-1: USB disconnect, device number 11 [ 808.146174][ T9380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.060048][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.827027][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.862778][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.862797][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.862825][ T9492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.864999][ T9380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.973170][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.980379][ T9492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.980397][ T9492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.980426][ T9492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.048921][ T9380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 810.090263][ T9380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 810.371299][ T759] bridge_slave_1: left allmulticast mode [ 810.371338][ T759] bridge_slave_1: left promiscuous mode [ 810.380707][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.462972][ T759] bridge_slave_0: left allmulticast mode [ 810.463011][ T759] bridge_slave_0: left promiscuous mode [ 810.463516][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.652988][ T759] bridge_slave_1: left allmulticast mode [ 810.653025][ T759] bridge_slave_1: left promiscuous mode [ 810.653292][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.712909][ T759] bridge_slave_0: left allmulticast mode [ 810.712938][ T759] bridge_slave_0: left promiscuous mode [ 810.713181][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.981182][ T759] bridge_slave_1: left allmulticast mode [ 810.981220][ T759] bridge_slave_1: left promiscuous mode [ 810.981507][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.098789][ T9634] overlayfs: missing 'lowerdir' [ 811.210443][ T759] bridge_slave_0: left allmulticast mode [ 811.210536][ T759] bridge_slave_0: left promiscuous mode [ 811.245153][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.412066][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.491858][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.553593][ T759] bond0 (unregistering): Released all slaves [ 812.802481][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.906637][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.939480][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.970591][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 812.980207][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.997485][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.998542][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.122423][ T759] bond0 (unregistering): Released all slaves [ 813.373518][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.453195][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.514342][ T759] bond0 (unregistering): Released all slaves [ 815.495115][ T9492] hsr_slave_0: entered promiscuous mode [ 815.497581][ T9492] hsr_slave_1: entered promiscuous mode [ 815.499642][ T9492] debugfs: 'hsr0' already exists in 'hsr' [ 815.499669][ T9492] Cannot create hsr debugfs directory [ 815.514409][ T9426] Bluetooth: hci0: command tx timeout [ 817.631525][ T9426] Bluetooth: hci0: command tx timeout [ 818.031390][ T759] hsr_slave_0: left promiscuous mode [ 818.100947][ T759] hsr_slave_1: left promiscuous mode [ 818.101922][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.155146][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.427456][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.468275][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.483901][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.485578][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.486456][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.650978][ T759] hsr_slave_0: left promiscuous mode [ 818.691108][ T759] hsr_slave_1: left promiscuous mode [ 818.692135][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.668564][ T5841] Bluetooth: hci0: command tx timeout [ 820.096441][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.480921][ T759] hsr_slave_0: left promiscuous mode [ 821.142850][ T759] hsr_slave_1: left promiscuous mode [ 821.144131][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.170950][ T5841] Bluetooth: hci1: command tx timeout [ 821.426020][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.741356][ T5841] Bluetooth: hci0: command tx timeout [ 822.975143][ T9682] comedi comedi3: 8255: I/O base address not correctly aligned [ 823.525682][ T5841] Bluetooth: hci1: command tx timeout [ 823.794791][ T9684] syz.1.741 (9684): drop_caches: 2 [ 823.901710][ T759] team0 (unregistering): Port device team_slave_1 removed [ 823.961835][ T759] team0 (unregistering): Port device team_slave_0 removed [ 824.702374][ T759] team0 (unregistering): Port device team_slave_1 removed [ 824.762207][ T759] team0 (unregistering): Port device team_slave_0 removed [ 825.251873][ T759] team0 (unregistering): Port device team_slave_1 removed [ 825.294525][ T759] team0 (unregistering): Port device team_slave_0 removed [ 825.581951][ T5841] Bluetooth: hci1: command tx timeout [ 827.733538][ T9426] Bluetooth: hci1: command tx timeout [ 829.687623][ T5811] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 829.743878][ T5142] Bluetooth: hci1: command 0x0405 tx timeout [ 829.893170][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 829.919702][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 829.919754][ T5811] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 829.919779][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.013744][ T5811] usb 2-1: config 0 descriptor?? [ 830.270215][ T5811] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 830.513149][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.514578][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.904829][ T9704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.950623][ T5811] usb 2-1: USB disconnect, device number 12 [ 832.625379][ T9643] chnl_net:caif_netlink_parms(): no params data found [ 838.758789][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 842.285210][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.287126][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.287373][ T9643] bridge_slave_0: entered allmulticast mode [ 842.290026][ T9643] bridge_slave_0: entered promiscuous mode [ 842.345484][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.345828][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.346126][ T9643] bridge_slave_1: entered allmulticast mode [ 842.384641][ T9643] bridge_slave_1: entered promiscuous mode [ 843.998661][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.998945][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.999000][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.999316][ T9659] bridge_slave_0: entered allmulticast mode [ 844.035307][ T9659] bridge_slave_0: entered promiscuous mode [ 844.096049][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.111523][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.121642][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.122477][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.777399][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.780315][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.780589][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.781385][ T9659] bridge_slave_1: entered allmulticast mode [ 844.825207][ T9659] bridge_slave_1: entered promiscuous mode [ 844.852357][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.268713][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.124212][ T9643] team0: Port device team_slave_0 added [ 846.143504][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.171633][ T9643] team0: Port device team_slave_1 added [ 846.380622][ T5142] Bluetooth: hci2: command tx timeout [ 848.460939][ T5142] Bluetooth: hci2: command tx timeout [ 849.584894][ T9659] team0: Port device team_slave_0 added [ 849.588712][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.588729][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.588757][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.707148][ T9659] team0: Port device team_slave_1 added [ 849.717037][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.717083][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.717183][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.861030][ T9793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.116688][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.116707][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.116737][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.341170][ T9798] hub 8-0:1.0: USB hub found [ 850.345694][ T9798] hub 8-0:1.0: 1 port detected [ 850.563434][ T5142] Bluetooth: hci2: command tx timeout [ 850.759023][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.759071][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.759130][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.535803][ T9643] hsr_slave_0: entered promiscuous mode [ 851.539847][ T9643] hsr_slave_1: entered promiscuous mode [ 851.833458][ T9643] debugfs: 'hsr0' already exists in 'hsr' [ 851.833488][ T9643] Cannot create hsr debugfs directory [ 852.629888][ T5142] Bluetooth: hci2: command tx timeout [ 854.814628][ T9659] hsr_slave_0: entered promiscuous mode [ 854.817141][ T9659] hsr_slave_1: entered promiscuous mode [ 854.819241][ T9659] debugfs: 'hsr0' already exists in 'hsr' [ 854.819268][ T9659] Cannot create hsr debugfs directory [ 855.571288][ T759] bridge_slave_1: left allmulticast mode [ 855.571328][ T759] bridge_slave_1: left promiscuous mode [ 855.571614][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.654364][ T759] bridge_slave_0: left allmulticast mode [ 855.654401][ T759] bridge_slave_0: left promiscuous mode [ 855.654705][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.751400][ T759] bridge_slave_1: left allmulticast mode [ 856.751440][ T759] bridge_slave_1: left promiscuous mode [ 856.751718][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.924601][ T759] bridge_slave_0: left allmulticast mode [ 856.924639][ T759] bridge_slave_0: left promiscuous mode [ 856.924922][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.979647][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.072533][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.123127][ T759] bond0 (unregistering): Released all slaves [ 860.374080][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.472416][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.534195][ T759] bond0 (unregistering): Released all slaves [ 861.375541][ T5835] hid_parser_main: 22 callbacks suppressed [ 861.375562][ T5835] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 861.457496][ T5835] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 865.892993][ T9768] chnl_net:caif_netlink_parms(): no params data found [ 867.381572][ T759] hsr_slave_0: left promiscuous mode [ 867.603045][ T759] hsr_slave_1: left promiscuous mode [ 867.603858][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.641760][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.820938][ T759] hsr_slave_0: left promiscuous mode [ 867.841059][ T759] hsr_slave_1: left promiscuous mode [ 867.842344][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.882189][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.451901][ T759] team0 (unregistering): Port device team_slave_1 removed [ 868.497978][ T759] team0 (unregistering): Port device team_slave_0 removed [ 869.242405][ T759] team0 (unregistering): Port device team_slave_1 removed [ 869.252477][ T9854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.423533][ T759] team0 (unregistering): Port device team_slave_0 removed [ 870.189157][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.674748][ T9768] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.675129][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.675511][ T9768] bridge_slave_0: entered allmulticast mode [ 871.684763][ T9768] bridge_slave_0: entered promiscuous mode [ 871.726509][ T9768] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.726799][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.727107][ T9768] bridge_slave_1: entered allmulticast mode [ 871.773903][ T9768] bridge_slave_1: entered promiscuous mode [ 872.040573][ T9768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.162331][ T9768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.416785][ T9768] team0: Port device team_slave_0 added [ 872.446321][ T9768] team0: Port device team_slave_1 added [ 873.125273][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.125289][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.125314][ T9768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.231142][ T9768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.231159][ T9768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.231188][ T9768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.557455][ T9768] hsr_slave_0: entered promiscuous mode [ 873.559583][ T9768] hsr_slave_1: entered promiscuous mode [ 873.579417][ T9768] debugfs: 'hsr0' already exists in 'hsr' [ 873.579446][ T9768] Cannot create hsr debugfs directory [ 874.360526][ T5835] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 874.396527][ T5835] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 875.558695][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 875.600200][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 875.611753][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 875.614130][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 875.615227][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 876.399186][ T5893] kernel read not supported for file /video7 (pid: 5893 comm: kworker/1:4) [ 876.426728][ T9911] openvswitch: netlink: Key 26 has unexpected len 8 expected 16 [ 878.407135][ T5142] Bluetooth: hci5: command tx timeout [ 879.106167][ T9659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 879.172655][ T9659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.461383][ T5142] Bluetooth: hci5: command tx timeout [ 880.467486][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 881.397958][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 881.412414][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 881.416748][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 881.419406][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.541221][ T5142] Bluetooth: hci5: command 0x040f tx timeout [ 883.307189][ T9896] chnl_net:caif_netlink_parms(): no params data found [ 885.862483][ T5142] Bluetooth: hci5: command 0x040f tx timeout [ 885.862644][ T5841] Bluetooth: hci0: command tx timeout [ 885.900663][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 885.901315][ T9968] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 887.726449][ T9979] syz.2.784 (9979): drop_caches: 2 [ 888.545993][ T9426] Bluetooth: hci5: command 0x040f tx timeout [ 888.546051][ T5841] Bluetooth: hci0: command tx timeout [ 888.562532][ T759] bridge_slave_1: left allmulticast mode [ 888.562568][ T759] bridge_slave_1: left promiscuous mode [ 888.562860][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.753213][ T759] bridge_slave_0: left allmulticast mode [ 888.753249][ T759] bridge_slave_0: left promiscuous mode [ 888.783738][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.305550][T10002] overlayfs: failed to resolve './file1': -2 [ 890.153543][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.625142][ T5841] Bluetooth: hci0: command tx timeout [ 890.841540][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.904582][ T759] bond0 (unregistering): Released all slaves [ 891.207630][ T9426] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 892.701961][ T5841] Bluetooth: hci0: command tx timeout [ 893.107978][T10014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 895.601021][ T759] hsr_slave_0: left promiscuous mode [ 895.630994][ T759] hsr_slave_1: left promiscuous mode [ 895.632001][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.539076][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.541066][T10035] uprobe: syz.1.790:10035 failed to unregister, leaking uprobe [ 897.593286][T10038] loop2: detected capacity change from 0 to 256 [ 897.594578][T10038] exfat: Deprecated parameter 'utf8' [ 897.807593][T10038] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 901.593167][ T759] team0 (unregistering): Port device team_slave_1 removed [ 901.678833][T10051] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10051] [ 902.456640][ T759] team0 (unregistering): Port device team_slave_0 removed [ 902.707728][T10055] hub 8-0:1.0: USB hub found [ 902.716802][T10055] hub 8-0:1.0: 1 port detected [ 903.912007][ T9896] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.912353][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.912703][ T9896] bridge_slave_0: entered allmulticast mode [ 903.972443][ T9896] bridge_slave_0: entered promiscuous mode [ 904.272935][ T9426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.317412][ T9426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.333071][ T9426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.355756][ T9426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.358772][ T9426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.361857][ T9896] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.362242][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.362607][ T9896] bridge_slave_1: entered allmulticast mode [ 904.408582][ T9896] bridge_slave_1: entered promiscuous mode [ 904.823736][ T9896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.092031][ T9896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.952736][ T9896] team0: Port device team_slave_0 added [ 906.591492][ T5841] Bluetooth: hci1: command tx timeout [ 906.652275][ T9896] team0: Port device team_slave_1 added [ 908.465125][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.465145][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.465173][ T9896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.802446][ T5841] Bluetooth: hci1: command tx timeout [ 908.805507][ T9896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.805523][ T9896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.805554][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.007709][ T5841] Bluetooth: hci1: command tx timeout [ 912.026246][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 913.214617][ T9896] hsr_slave_0: entered promiscuous mode [ 913.217761][ T9896] hsr_slave_1: entered promiscuous mode [ 913.219888][ T9896] debugfs: 'hsr0' already exists in 'hsr' [ 913.219915][ T9896] Cannot create hsr debugfs directory [ 915.952535][ T5841] Bluetooth: hci1: command tx timeout [ 916.467464][T10110] loop1: detected capacity change from 0 to 256 [ 916.887093][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.887381][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.887656][ T9934] bridge_slave_0: entered allmulticast mode [ 916.922233][ T9934] bridge_slave_0: entered promiscuous mode [ 917.248679][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.249070][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.249432][ T9934] bridge_slave_1: entered allmulticast mode [ 917.270150][ T9934] bridge_slave_1: entered promiscuous mode [ 918.887780][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.926524][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.074588][T10132] overlayfs: failed to resolve './file0': -2 [ 919.752910][ T38] audit: type=1800 audit(1776938018.471:9): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.810" name="file1" dev="tmpfs" ino=1930 res=0 errno=0 [ 919.950673][T10060] chnl_net:caif_netlink_parms(): no params data found [ 919.991181][ T9938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 920.109995][ T9934] team0: Port device team_slave_0 added [ 920.181135][ T9938] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 920.181170][ T9938] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 920.181192][ T9938] usb 2-1: Product: syz [ 920.259819][ T9938] usb 2-1: config 0 descriptor?? [ 921.234265][ T9938] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 921.240080][ T9938] usb 2-1: Detected FT232H [ 921.273534][ T9934] team0: Port device team_slave_1 added [ 921.324446][ T9938] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 921.328477][ T9938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 921.329448][ T9938] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 921.372730][ T9938] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 921.406159][ T9938] usb 2-1: USB disconnect, device number 13 [ 921.439555][ T9938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 921.479156][ T9938] ftdi_sio 2-1:0.0: device disconnected [ 924.579257][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.579273][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.579293][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.733768][ T9426] Bluetooth: hci1: command 0x0405 tx timeout [ 926.784761][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.784782][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.784811][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.297530][T10162] Trying to write to read-only block-device nullb0 [ 927.406973][T10060] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.407328][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.407705][T10060] bridge_slave_0: entered allmulticast mode [ 927.417449][T10060] bridge_slave_0: entered promiscuous mode [ 927.563727][T10169] syz_tun: entered allmulticast mode [ 928.517117][T10060] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.517380][T10060] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.517646][T10060] bridge_slave_1: entered allmulticast mode [ 928.520274][T10060] bridge_slave_1: entered promiscuous mode [ 930.060168][ T9934] hsr_slave_0: entered promiscuous mode [ 930.064405][ T9934] hsr_slave_1: entered promiscuous mode [ 930.069281][ T9934] debugfs: 'hsr0' already exists in 'hsr' [ 930.069324][ T9934] Cannot create hsr debugfs directory [ 931.156830][T10060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.606021][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.552064][T10060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.649125][T10179] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[10179] [ 935.132818][T10060] team0: Port device team_slave_0 added [ 935.163686][T10060] team0: Port device team_slave_1 added [ 935.282857][T10060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.282875][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.282905][T10060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.354990][T10060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.355010][T10060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.355039][T10060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.691010][T10060] hsr_slave_0: entered promiscuous mode [ 935.695286][T10060] hsr_slave_1: entered promiscuous mode [ 935.699305][T10060] debugfs: 'hsr0' already exists in 'hsr' [ 935.699337][T10060] Cannot create hsr debugfs directory [ 936.454183][ T9426] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 936.465900][ T9426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 936.499327][ T9426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.063058][ T9426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.615866][ T9426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 940.781236][ T5841] Bluetooth: hci2: command tx timeout [ 940.810978][ T759] bridge_slave_1: left allmulticast mode [ 940.811016][ T759] bridge_slave_1: left promiscuous mode [ 940.811323][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.893816][ T759] bridge_slave_0: left allmulticast mode [ 940.893845][ T759] bridge_slave_0: left promiscuous mode [ 940.894099][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.091277][ T759] bridge_slave_1: left allmulticast mode [ 941.091318][ T759] bridge_slave_1: left promiscuous mode [ 941.091557][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.208791][ T759] bridge_slave_0: left allmulticast mode [ 941.208835][ T759] bridge_slave_0: left promiscuous mode [ 941.209121][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.491704][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.613493][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.682025][ T759] bond0 (unregistering): Released all slaves [ 941.715097][ T9426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.757366][ T9426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.759129][ T9426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 941.775815][ T9426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.805406][ T9426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 942.171918][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.272398][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.334361][ T759] bond0 (unregistering): Released all slaves [ 942.872549][ T9426] Bluetooth: hci2: command tx timeout [ 943.221112][ T759] hsr_slave_0: left promiscuous mode [ 943.400501][T10228] comedi comedi3: das16m1: I/O base address or length out of range [ 944.495278][ T759] hsr_slave_1: left promiscuous mode [ 944.496531][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.591090][ T9426] Bluetooth: hci5: command tx timeout [ 944.856925][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.173113][ T5841] Bluetooth: hci2: command tx timeout [ 945.313417][T10239] overlayfs: failed to resolve './file1': -2 [ 946.026054][ T759] hsr_slave_0: left promiscuous mode [ 946.132997][ T759] hsr_slave_1: left promiscuous mode [ 946.135776][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.475293][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.578853][T10247] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[10247] [ 947.261289][ T5841] Bluetooth: hci2: command tx timeout [ 947.554825][ T5841] Bluetooth: hci5: command tx timeout [ 949.581354][ T5841] Bluetooth: hci5: command tx timeout [ 950.483322][ T759] team0 (unregistering): Port device team_slave_1 removed [ 950.551945][ T759] team0 (unregistering): Port device team_slave_0 removed [ 951.323662][ T759] team0 (unregistering): Port device team_slave_1 removed [ 951.337091][ T38] audit: type=1800 audit(1776938050.051:10): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.835" name="file1" dev="tmpfs" ino=1990 res=0 errno=0 [ 951.402016][ T759] team0 (unregistering): Port device team_slave_0 removed [ 951.593693][ T5981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 951.660951][ T5841] Bluetooth: hci5: command tx timeout [ 951.735547][T10266] loop2: detected capacity change from 0 to 256 [ 951.750408][T10266] exfat: Deprecated parameter 'utf8' [ 951.766677][ T5981] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 951.766723][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 951.766738][ T5981] usb 2-1: Product: syz [ 951.793182][ T5981] usb 2-1: config 0 descriptor?? [ 951.870015][ T5981] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 951.907649][ T5981] usb 2-1: Detected FT232H [ 951.923978][T10266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 953.259370][ T5981] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 953.259823][ T5981] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 953.262835][ T5981] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 953.311510][ T5981] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 953.408963][ T5981] usb 2-1: USB disconnect, device number 14 [ 953.559697][ T5981] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 953.560574][ T5981] ftdi_sio 2-1:0.0: device disconnected [ 953.737406][T10275] comedi comedi3: das16m1: I/O base address or length out of range [ 960.084432][T10191] chnl_net:caif_netlink_parms(): no params data found [ 960.237523][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 960.237552][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 960.237578][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 960.237593][ T5841] Workqueue: hci3 hci_rx_work [ 960.237642][ T5841] Call Trace: [ 960.237651][ T5841] [ 960.237661][ T5841] dump_stack_lvl+0xe8/0x150 [ 960.237695][ T5841] sysfs_create_dir_ns+0x271/0x2a0 [ 960.237725][ T5841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 960.237752][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 960.237785][ T5841] ? rt_spin_unlock+0x160/0x200 [ 960.237814][ T5841] kobject_add_internal+0x631/0xd10 [ 960.237858][ T5841] kobject_add+0x163/0x240 [ 960.237899][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 960.237939][ T5841] ? get_device_parent+0x370/0x3a0 [ 960.237974][ T5841] device_add+0x408/0xbb0 [ 960.238006][ T5841] hci_conn_add_sysfs+0xd5/0x210 [ 960.238038][ T5841] le_conn_complete_evt+0x10e6/0x16b0 [ 960.238073][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 960.238098][ T5841] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 960.238129][ T5841] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.238162][ T5841] ? skb_pull_data+0xfb/0x200 [ 960.238191][ T5841] hci_le_conn_complete_evt+0x187/0x470 [ 960.238220][ T5841] hci_event_packet+0x659/0xef0 [ 960.238260][ T5841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 960.238283][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 960.238317][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 960.238349][ T5841] ? rt_spin_unlock+0x14f/0x200 [ 960.238383][ T5841] ? hci_send_to_monitor+0xe2/0x590 [ 960.238411][ T5841] hci_rx_work+0x3ee/0x1040 [ 960.238453][ T5841] ? process_one_work+0x8b7/0x1710 [ 960.238477][ T5841] process_one_work+0x9a3/0x1710 [ 960.238525][ T5841] ? __pfx_process_one_work+0x10/0x10 [ 960.238546][ T5841] ? do_raw_spin_lock+0x12b/0x2f0 [ 960.238591][ T5841] worker_thread+0xba8/0x11e0 [ 960.238653][ T5841] kthread+0x388/0x470 [ 960.238685][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 960.238706][ T5841] ? __pfx_kthread+0x10/0x10 [ 960.238738][ T5841] ret_from_fork+0x514/0xb70 [ 960.238766][ T5841] ? __pfx_ret_from_fork+0x10/0x10 [ 960.238792][ T5841] ? __switch_to+0xc79/0x1410 [ 960.238831][ T5841] ? __pfx_kthread+0x10/0x10 [ 960.238863][ T5841] ret_from_fork_asm+0x1a/0x30 [ 960.238909][ T5841] [ 960.255242][ T5841] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 960.255294][ T5841] Bluetooth: hci3: failed to register connection device [ 965.578503][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.578767][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.579073][T10191] bridge_slave_0: entered allmulticast mode [ 965.582509][T10191] bridge_slave_0: entered promiscuous mode [ 965.654675][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.655073][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.655403][T10191] bridge_slave_1: entered allmulticast mode [ 965.713454][T10191] bridge_slave_1: entered promiscuous mode [ 966.209501][T10191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.422692][T10191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.747721][ T9938] ------------[ cut here ]------------ [ 967.747736][ T9938] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 967.747775][ T9938] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd5c/0x1010, CPU#0: kworker/0:2/9938 [ 967.747812][ T9938] Modules linked in: [ 967.747828][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 967.747848][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.747860][ T9938] Workqueue: events l2cap_chan_timeout [ 967.747885][ T9938] RIP: 0010:__queue_work+0xd87/0x1010 [ 967.747906][ T9938] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 ba dc a0 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 967.747923][ T9938] RSP: 0018:ffffc90004527908 EFLAGS: 00010082 [ 967.747937][ T9938] RAX: 1ffff1100c31215b RBX: 0000000000000008 RCX: ffff8880304d3d80 [ 967.747951][ T9938] RDX: ffff88803cbae168 RSI: ffffffff8a28e500 RDI: ffffffff8f902770 [ 967.747964][ T9938] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 967.747974][ T9938] R10: dffffc0000000000 R11: ffffed100c312159 R12: dffffc0000000000 [ 967.747988][ T9938] R13: ffff888061890ad8 R14: ffffffff8f902770 R15: ffff88803cbae168 [ 967.748002][ T9938] FS: 0000000000000000(0000) GS:ffff888125eb4000(0000) knlGS:0000000000000000 [ 967.748017][ T9938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 967.748029][ T9938] CR2: 0000001b30f08ff8 CR3: 0000000011faa000 CR4: 00000000003526f0 [ 967.748044][ T9938] Call Trace: [ 967.748051][ T9938] [ 967.748064][ T9938] ? rcu_is_watching+0x15/0xb0 [ 967.748092][ T9938] ? __queue_delayed_work+0xd3/0x2b0 [ 967.748116][ T9938] queue_delayed_work_on+0x11a/0x1e0 [ 967.748144][ T9938] l2cap_chan_del+0x285/0x610 [ 967.748174][ T9938] l2cap_chan_close+0x4d7/0x770 [ 967.748204][ T9938] ? __pfx_l2cap_chan_close+0x10/0x10 [ 967.748229][ T9938] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.748254][ T9938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.748279][ T9938] ? mutex_lock_nested+0x152/0x1d0 [ 967.748297][ T9938] ? l2cap_chan_timeout+0xa0/0x3b0 [ 967.748325][ T9938] l2cap_chan_timeout+0x158/0x3b0 [ 967.748351][ T9938] ? process_one_work+0x8b7/0x1710 [ 967.748370][ T9938] process_one_work+0x9a3/0x1710 [ 967.748407][ T9938] ? __pfx_process_one_work+0x10/0x10 [ 967.748424][ T9938] ? do_raw_spin_lock+0x12b/0x2f0 [ 967.748459][ T9938] worker_thread+0xba8/0x11e0 [ 967.748487][ T9938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 967.748513][ T9938] ? __kthread_parkme+0x7a/0x1f0 [ 967.748535][ T9938] ? __kthread_parkme+0x19c/0x1f0 [ 967.748561][ T9938] kthread+0x388/0x470 [ 967.748586][ T9938] ? __pfx_worker_thread+0x10/0x10 [ 967.748604][ T9938] ? __pfx_kthread+0x10/0x10 [ 967.748630][ T9938] ret_from_fork+0x514/0xb70 [ 967.748653][ T9938] ? __pfx_ret_from_fork+0x10/0x10 [ 967.748673][ T9938] ? __switch_to+0xc79/0x1410 [ 967.748706][ T9938] ? __pfx_kthread+0x10/0x10 [ 967.748734][ T9938] ret_from_fork_asm+0x1a/0x30 [ 967.748778][ T9938] [ 967.748791][ T9938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 967.748806][ T9938] CPU: 0 UID: 0 PID: 9938 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 967.748826][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.748837][ T9938] Workqueue: events l2cap_chan_timeout [ 967.748860][ T9938] Call Trace: [ 967.748866][ T9938] [ 967.748873][ T9938] vpanic+0x56c/0xa60 [ 967.748894][ T9938] ? __pfx__printk+0x10/0x10 [ 967.748920][ T9938] ? __pfx_vpanic+0x10/0x10 [ 967.748939][ T9938] ? is_bpf_text_address+0x292/0x2b0 [ 967.748963][ T9938] ? is_bpf_text_address+0x26/0x2b0 [ 967.748993][ T9938] panic+0xc5/0xd0 [ 967.749014][ T9938] ? __pfx_panic+0x10/0x10 [ 967.749042][ T9938] ? ret_from_fork_asm+0x1a/0x30 [ 967.749071][ T9938] __warn+0x315/0x4c0 [ 967.749095][ T9938] ? __queue_work+0xd5c/0x1010 [ 967.749115][ T9938] ? __queue_work+0xd5c/0x1010 [ 967.749141][ T9938] __report_bug+0x29a/0x540 [ 967.749169][ T9938] ? __queue_work+0xd5c/0x1010 [ 967.749189][ T9938] ? __pfx___report_bug+0x10/0x10 [ 967.749211][ T9938] ? __pfx_hci_conn_timeout+0x10/0x10 [ 967.749241][ T9938] ? do_raw_spin_lock+0x12b/0x2f0 [ 967.749267][ T9938] report_bug_entry+0x19a/0x290 [ 967.749290][ T9938] ? __queue_work+0xd87/0x1010 [ 967.749308][ T9938] ? __queue_work+0xd8c/0x1010 [ 967.749326][ T9938] handle_bug+0xce/0x200 [ 967.749353][ T9938] exc_invalid_op+0x1a/0x50 [ 967.749380][ T9938] asm_exc_invalid_op+0x1a/0x20 [ 967.749398][ T9938] RIP: 0010:__queue_work+0xd87/0x1010 [ 967.749417][ T9938] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 ba dc a0 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 967.749432][ T9938] RSP: 0018:ffffc90004527908 EFLAGS: 00010082 [ 967.749446][ T9938] RAX: 1ffff1100c31215b RBX: 0000000000000008 RCX: ffff8880304d3d80 [ 967.749459][ T9938] RDX: ffff88803cbae168 RSI: ffffffff8a28e500 RDI: ffffffff8f902770 [ 967.749471][ T9938] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 967.749481][ T9938] R10: dffffc0000000000 R11: ffffed100c312159 R12: dffffc0000000000 [ 967.749494][ T9938] R13: ffff888061890ad8 R14: ffffffff8f902770 R15: ffff88803cbae168 [ 967.749516][ T9938] ? __pfx_hci_conn_timeout+0x10/0x10 [ 967.749542][ T9938] ? __queue_work+0xfcf/0x1010 [ 967.749565][ T9938] ? rcu_is_watching+0x15/0xb0 [ 967.749590][ T9938] ? __queue_delayed_work+0xd3/0x2b0 [ 967.749613][ T9938] queue_delayed_work_on+0x11a/0x1e0 [ 967.749640][ T9938] l2cap_chan_del+0x285/0x610 [ 967.749669][ T9938] l2cap_chan_close+0x4d7/0x770 [ 967.749696][ T9938] ? __pfx_l2cap_chan_close+0x10/0x10 [ 967.749721][ T9938] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.749743][ T9938] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.749778][ T9938] ? mutex_lock_nested+0x152/0x1d0 [ 967.749795][ T9938] ? l2cap_chan_timeout+0xa0/0x3b0 [ 967.749822][ T9938] l2cap_chan_timeout+0x158/0x3b0 [ 967.749847][ T9938] ? process_one_work+0x8b7/0x1710 [ 967.749865][ T9938] process_one_work+0x9a3/0x1710 [ 967.749900][ T9938] ? __pfx_process_one_work+0x10/0x10 [ 967.749916][ T9938] ? do_raw_spin_lock+0x12b/0x2f0 [ 967.749950][ T9938] worker_thread+0xba8/0x11e0 [ 967.749978][ T9938] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 967.750004][ T9938] ? __kthread_parkme+0x7a/0x1f0 [ 967.750027][ T9938] ? __kthread_parkme+0x19c/0x1f0 [ 967.750054][ T9938] kthread+0x388/0x470 [ 967.750078][ T9938] ? __pfx_worker_thread+0x10/0x10 [ 967.750096][ T9938] ? __pfx_kthread+0x10/0x10 [ 967.750122][ T9938] ret_from_fork+0x514/0xb70 [ 967.750145][ T9938] ? __pfx_ret_from_fork+0x10/0x10 [ 967.750164][ T9938] ? __switch_to+0xc79/0x1410 [ 967.750207][ T9938] ? __pfx_kthread+0x10/0x10 [ 967.750231][ T9938] ret_from_fork_asm+0x1a/0x30 [ 967.750268][ T9938] [ 967.752040][ T9938] Kernel Offset: disabled