last executing test programs: 27m26.585472932s ago: executing program 32 (id=17): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000002c0)=0x1) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/70, 0x46, 0x8002) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0xffdd) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 26m37.037195885s ago: executing program 33 (id=85): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000001c0)={0xffff, 0x1ff, 0x94c, 0x2, 0xf800, 0xfed}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 19m11.206931695s ago: executing program 34 (id=692): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x8040) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000240)='./file1\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) 17m43.219583645s ago: executing program 35 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0xf7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) unshare(0x28000600) r4 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000040)='\x00', 0x80, &(0x7f0000000180)={@_ha_fsid={[0x400, 0x87ef]}, {0x8, 0x5, 0x5, 0x24ff0e03}}, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x7}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, 0x0) 15m27.095760596s ago: executing program 6 (id=1019): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x4000000) fsopen(&(0x7f0000000080)='pstore\x00', 0x1) 15m21.299787477s ago: executing program 6 (id=1023): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d6174636800000020000280050003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 15m21.062302591s ago: executing program 6 (id=1025): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x89, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x800000}, 0x2c) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r6}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) socket(0x400000000010, 0x3, 0x0) 15m19.563594047s ago: executing program 6 (id=1026): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), 0x0}, 0x20) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$char_usb(r1, 0x0, 0x0) 15m17.963461586s ago: executing program 6 (id=1028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 15m17.44257669s ago: executing program 6 (id=1029): openat(0xffffffffffffff9c, 0x0, 0x340000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r3, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 15m1.928512802s ago: executing program 36 (id=1029): openat(0xffffffffffffff9c, 0x0, 0x340000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r3, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12m11.062630282s ago: executing program 1 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m10.814248922s ago: executing program 1 (id=1393): memfd_secret(0x80000) r0 = socket(0x1a, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="1055a1c8d2d66705956bb3354f2a65d345c40cc89a9dfa6f0dbddc2282c1f562dfb15f78d821305dc1e8caef4d62a9d62ab7f523ce1a7361702097cfc45ecea94a3907be58f9207ddfec078e2f8589a8668f355ca18bd8a3cde99dcbfb6114f88715d5f583b6544cedf7b795892057d1df381d7c78b0a70e9e565cd564"], 0x1c}}, 0x4) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/disk', 0x80900, 0x10a) syz_io_uring_setup(0x4853, &(0x7f0000000000)={0x0, 0x206d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 12m10.106373857s ago: executing program 1 (id=1395): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000080062719284a11b36fd40d1ed14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa4"], 0x30}}, 0x0) 12m10.071415082s ago: executing program 1 (id=1396): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x1000, 0x1000, &(0x7f0000fef000/0x1000)=nil}) close(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8838, 0x8, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x86ba, 0x0, 0x3, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 12m6.431394743s ago: executing program 1 (id=1401): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x472202, 0x2b) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000193000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000240)="3e440f30c48251df5fd0bbfdffffffab40c81838003ef33e2e0f01f8c4c26d9aa9070000000fc71b440f784f0b0f20a3", 0x30}], 0x1, 0x4e, 0x0, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x4000}, 0xc) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000b31000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000100)=0x90000000000000, 0x9, 0x1) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x3, 0x0, 0x1d}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x400) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000200)={0x1, 0x1, 0x8, &(0x7f00000001c0)={0x13, "a64facf230551fbebb4485ff0fd4fd7e7bc335a769fcb24b811659084a2c208acc"}}) 12m3.292638859s ago: executing program 1 (id=1411): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x6, 0xfffffffe) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 11m47.137043069s ago: executing program 37 (id=1411): openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r0 = socket$inet6(0xa, 0x6, 0xfffffffe) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 11m38.040835574s ago: executing program 9 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11m35.171852226s ago: executing program 9 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m34.972463211s ago: executing program 9 (id=1465): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe9}}}}}]}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x450100, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 11m27.57212096s ago: executing program 9 (id=1485): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 11m26.184473906s ago: executing program 9 (id=1489): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 11m25.711137387s ago: executing program 9 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11m10.072826697s ago: executing program 38 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x40100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 11m2.072125574s ago: executing program 2 (id=1534): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) lseek(0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000240)='./file1\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x9, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) 10m59.277675659s ago: executing program 2 (id=1539): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) fanotify_mark(r2, 0x21, 0x101a, 0xffffffffffffffff, 0x0) 10m58.911565932s ago: executing program 2 (id=1541): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) 10m57.235642842s ago: executing program 2 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x800) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 10m57.035627285s ago: executing program 2 (id=1544): ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 10m56.201096764s ago: executing program 2 (id=1546): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m41.117290376s ago: executing program 39 (id=1546): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m54.20981209s ago: executing program 7 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0xc014) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) 9m51.336865476s ago: executing program 7 (id=1633): mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000090000000000", @ANYRES32, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70402000200000000950000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r1, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000000300", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000460bbb050dde"], 0x50) semop(0x0, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 9m51.2236314s ago: executing program 7 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r4, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) 9m50.122353891s ago: executing program 7 (id=1637): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$qrtr(r0, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) 9m48.594759041s ago: executing program 7 (id=1638): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 9m47.76146832s ago: executing program 7 (id=1640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0xc014) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) 9m32.540482241s ago: executing program 40 (id=1640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x9}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0xc014) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) 3m16.433100861s ago: executing program 3 (id=1946): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005240600010524000000", @ANYRES64], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), 0x0}, 0x20) 3m12.449995681s ago: executing program 3 (id=1952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m9.054832033s ago: executing program 3 (id=1956): bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240048c1) sched_setscheduler(0x0, 0x2, 0x0) 3m7.789345731s ago: executing program 3 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001800dd8d000000000000000002001000fe040001000000200800"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002680)={0x2020}, 0x2020) 3m5.239778051s ago: executing program 3 (id=1960): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), &(0x7f00000001c0)=0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x95}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 3m3.888212603s ago: executing program 3 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) listen(r0, 0x80000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) wait4(0x0, &(0x7f0000000400), 0x8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) setgroups(0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m47.709733107s ago: executing program 41 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) listen(r0, 0x80000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) wait4(0x0, &(0x7f0000000400), 0x8, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) setgroups(0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m54.896428956s ago: executing program 5 (id=2045): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) 1m53.369340133s ago: executing program 5 (id=2046): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 1m51.59528539s ago: executing program 5 (id=2050): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), &(0x7f00000001c0)=0x1) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) close(0x3) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x95}, 0x28) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x5, 0x3, 0x2}}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 1m50.696328352s ago: executing program 5 (id=2051): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') lseek(r1, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000006540)={0x2020}, 0x5b3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r7, &(0x7f0000003a00)={0x2020}, 0x2020) 1m48.891382005s ago: executing program 5 (id=2052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 1m43.419148241s ago: executing program 5 (id=2056): syz_open_dev$tty20(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e10400004a0"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x86, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) connect$can_bcm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x0, 0x7, 0x5, 0x1, 0x4, 0x1, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff9a, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1m27.523718999s ago: executing program 42 (id=2056): syz_open_dev$tty20(0xc, 0x4, 0x1) syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e10400004a0"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x86, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) connect$can_bcm(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x0, 0x7, 0x5, 0x1, 0x4, 0x1, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff9a, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 14.859298943s ago: executing program 8 (id=2152): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x74, 0xad, 0x60, 0x10, 0x10c4, 0xeac1, 0xff7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x30, 0xc8, 0x1e}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$getown(r1, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0x6f, 0x1, 0x2, r3, 0x4, 0x4, 0x7, 0x7, 0x0, 0x6, 0xff}}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0004}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 13.554285407s ago: executing program 0 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 12.570091271s ago: executing program 0 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 10.909899182s ago: executing program 0 (id=2157): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 9.544569708s ago: executing program 4 (id=2158): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8825}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 7.616140095s ago: executing program 0 (id=2159): socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) shutdown(r2, 0x2) 7.422659221s ago: executing program 4 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) 7.421184461s ago: executing program 0 (id=2161): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffffff7f00"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000000000000000000000000000000000000000000fa2d0e26482a73df6d9e42955bb9e2c93d84b90b6e0634336f6f0ddb0e961d80cef2a426b1da5591152e3e06555c7f7c3817ae4f41530ba7dafb5e4c52abe6199a956dcd678e64da7dc8c488c0725b982714"], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x10, 0x5, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "03000500", "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "000000ff0000000000000020", "0000000000000000009700"]}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee024"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) 6.429639931s ago: executing program 4 (id=2162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 6.287467021s ago: executing program 8 (id=2163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 5.968285544s ago: executing program 8 (id=2164): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10122, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f78", 0x38, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.142757207s ago: executing program 4 (id=2165): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) 2.882515391s ago: executing program 4 (id=2166): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100140086dd600800000028060100000000000000000000000000000000fe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x201, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') lseek(r1, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000006540)={0x2020}, 0x5b3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r7, &(0x7f0000003a00)={0x2020}, 0x2020) 2.687067695s ago: executing program 8 (id=2167): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x180000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) 1.760609413s ago: executing program 4 (id=2168): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)}}], 0x1, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8825}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 474.242063ms ago: executing program 0 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001800dd8d000000000000000002001000fe040001000000200800"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) faccessat2(r6, &(0x7f0000000880)='\x00', 0x1, 0x1100) socket$unix(0x1, 0x5, 0x0) socket(0x2c, 0x3, 0xce33) socket$packet(0x11, 0x3, 0x300) 419.894513ms ago: executing program 8 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002680)={0x2020}, 0x2020) 0s ago: executing program 8 (id=2171): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x74, 0xad, 0x60, 0x10, 0x10c4, 0xeac1, 0xff7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x30, 0xc8, 0x1e}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = fcntl$getown(r1, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0x6f, 0x1, 0x2, r3, 0x4, 0x4, 0x7, 0x7, 0x0, 0x6, 0xff}}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0004}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) kernel console output (not intermixed with test programs): 369][ T2831] bond0 (unregistering): Released all slaves [ 1260.767071][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.828257][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.848545][ T2831] bond0 (unregistering): Released all slaves [ 1262.656270][ T2831] hsr_slave_0: left promiscuous mode [ 1262.696527][ T2831] hsr_slave_1: left promiscuous mode [ 1262.697486][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.748557][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.887566][ T2831] hsr_slave_0: left promiscuous mode [ 1262.906220][ T2831] hsr_slave_1: left promiscuous mode [ 1262.907034][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.958509][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.246262][ T2831] hsr_slave_0: left promiscuous mode [ 1263.266383][ T2831] hsr_slave_1: left promiscuous mode [ 1263.267204][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.208891][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.179499][T13626] netlink: set zone limit has 4 unknown bytes [ 1265.757343][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1265.917847][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1267.117515][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1267.268817][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1268.904781][T13636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.783123][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1270.136815][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1274.228412][T13404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.168604][T13506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1276.184787][ T8722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1276.210930][ T8722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1276.212633][ T8722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1276.214239][ T8722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1276.215098][ T8722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1276.424907][T13506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1276.450249][T13506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1276.515546][T13506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1278.335798][ T9271] Bluetooth: hci4: command tx timeout [ 1280.056523][T13668] chnl_net:caif_netlink_parms(): no params data found [ 1280.408416][ T9271] Bluetooth: hci4: command tx timeout [ 1280.528313][T13533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1280.748627][T13533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1280.889781][T13533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1281.091325][T13533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1281.451645][T13668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.453433][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.453649][T13668] bridge_slave_0: entered allmulticast mode [ 1281.455326][T13668] bridge_slave_0: entered promiscuous mode [ 1281.540786][T13668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.541429][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.541683][T13668] bridge_slave_1: entered allmulticast mode [ 1281.563648][T13668] bridge_slave_1: entered promiscuous mode [ 1281.780113][T13668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.812781][T13668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.826089][T13574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1282.036241][T13574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1282.337546][T13506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.486077][ T9271] Bluetooth: hci4: command tx timeout [ 1282.494471][T13574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1282.562253][T13668] team0: Port device team_slave_0 added [ 1282.581768][T13574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1282.712031][T13668] team0: Port device team_slave_1 added [ 1284.495094][T13668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.495111][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.495138][T13668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.538166][T13506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.565975][ T9271] Bluetooth: hci4: command tx timeout [ 1284.566075][T13668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.566087][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.566114][T13668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.631244][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.631409][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.916682][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.916818][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.017314][T13668] hsr_slave_0: entered promiscuous mode [ 1285.019051][T13668] hsr_slave_1: entered promiscuous mode [ 1286.406136][T13533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.692866][ T2831] bridge_slave_1: left allmulticast mode [ 1286.692900][ T2831] bridge_slave_1: left promiscuous mode [ 1286.693187][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.795363][ T2831] bridge_slave_0: left allmulticast mode [ 1286.795395][ T2831] bridge_slave_0: left promiscuous mode [ 1286.795709][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.140836][ T2831] bridge_slave_1: left allmulticast mode [ 1287.140869][ T2831] bridge_slave_1: left promiscuous mode [ 1287.141154][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.399487][ T2831] bridge_slave_0: left allmulticast mode [ 1287.399522][ T2831] bridge_slave_0: left promiscuous mode [ 1287.399798][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.997696][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.086756][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.109920][ T2831] bond0 (unregistering): Released all slaves [ 1291.406683][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.489153][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.548379][ T2831] bond0 (unregistering): Released all slaves [ 1291.771473][T13533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.991053][T13574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.995667][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.995822][T10953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.346914][ T2831] hsr_slave_0: left promiscuous mode [ 1292.594686][ T2831] hsr_slave_1: left promiscuous mode [ 1292.595369][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.649187][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.116226][ T2831] hsr_slave_0: left promiscuous mode [ 1293.138285][ T2831] hsr_slave_1: left promiscuous mode [ 1293.139340][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.189007][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.307806][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1298.421664][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1298.682197][ T8722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1298.697291][ T8722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1298.701819][ T8722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1298.703050][ T8722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1298.726676][ T8722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.340462][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.340573][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.869029][ T9271] Bluetooth: hci3: command tx timeout [ 1301.848162][T13982] overlay: Unknown parameter '/' [ 1302.507844][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1302.682834][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1302.692690][ T8722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1302.703334][ T8722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1302.713344][ T8722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1302.718611][ T8722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1302.719407][ T8722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1302.966054][ T8722] Bluetooth: hci3: command tx timeout [ 1303.831385][T13574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.910056][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.914454][ T9270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.120883][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.121040][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.827261][ T8722] Bluetooth: hci6: command tx timeout [ 1305.046311][ T8722] Bluetooth: hci3: command tx timeout [ 1305.475686][T13668] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1305.538113][T13668] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1305.617277][T13668] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1305.732103][T13668] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1306.310792][T13986] chnl_net:caif_netlink_parms(): no params data found [ 1306.419174][T13969] chnl_net:caif_netlink_parms(): no params data found [ 1306.886063][ T8722] Bluetooth: hci6: command tx timeout [ 1307.068170][T13986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.068320][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.068582][T13986] bridge_slave_0: entered allmulticast mode [ 1307.071697][T13986] bridge_slave_0: entered promiscuous mode [ 1307.132849][T13986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.133004][T13986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.133210][T13986] bridge_slave_1: entered allmulticast mode [ 1307.138739][ T8722] Bluetooth: hci3: command tx timeout [ 1307.176280][T13986] bridge_slave_1: entered promiscuous mode [ 1307.195249][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.195468][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.195742][T13969] bridge_slave_0: entered allmulticast mode [ 1307.857567][T13969] bridge_slave_0: entered promiscuous mode [ 1308.026204][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.026400][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.026674][T13969] bridge_slave_1: entered allmulticast mode [ 1308.029830][T13969] bridge_slave_1: entered promiscuous mode [ 1308.279942][T13986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.435320][T13986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.447976][T13574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.454864][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.782703][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.884814][T13986] team0: Port device team_slave_0 added [ 1308.932841][T13986] team0: Port device team_slave_1 added [ 1308.966679][ T8722] Bluetooth: hci6: command tx timeout [ 1309.348756][T13969] team0: Port device team_slave_0 added [ 1310.080994][T13969] team0: Port device team_slave_1 added [ 1311.456192][ T8722] Bluetooth: hci6: command tx timeout [ 1311.599532][T13986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.599552][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.599580][T13986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.725407][T13986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.725426][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.725456][T13986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.961875][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.961894][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.961924][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.144710][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.144730][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.144759][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.251828][ T9271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1312.281677][ T9271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1312.284508][ T9271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1312.285730][ T9271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1312.296973][ T9271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1314.620178][T13986] hsr_slave_0: entered promiscuous mode [ 1314.621761][T13986] hsr_slave_1: entered promiscuous mode [ 1314.622813][T13986] debugfs: 'hsr0' already exists in 'hsr' [ 1314.622839][T13986] Cannot create hsr debugfs directory [ 1314.660885][T13969] hsr_slave_0: entered promiscuous mode [ 1314.662414][T13969] hsr_slave_1: entered promiscuous mode [ 1314.664010][T13969] debugfs: 'hsr0' already exists in 'hsr' [ 1314.664045][T13969] Cannot create hsr debugfs directory [ 1314.696440][T13668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.604585][T13668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.942050][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.942290][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.166628][ T8722] Bluetooth: hci0: command tx timeout [ 1316.197544][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.197772][ T9270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.699064][T14093] chnl_net:caif_netlink_parms(): no params data found [ 1316.850031][T14093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.850249][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.850474][T14093] bridge_slave_0: entered allmulticast mode [ 1316.854093][T14093] bridge_slave_0: entered promiscuous mode [ 1316.884055][T14093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.884264][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.884535][T14093] bridge_slave_1: entered allmulticast mode [ 1316.903258][T14093] bridge_slave_1: entered promiscuous mode [ 1317.024009][T14093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.151586][T14093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.292686][T14093] team0: Port device team_slave_0 added [ 1317.341990][T14093] team0: Port device team_slave_1 added [ 1317.474758][T14093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.474772][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.474788][T14093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.603793][T14093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.603807][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.603824][T14093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.604948][ T2831] bridge_slave_1: left allmulticast mode [ 1317.604976][ T2831] bridge_slave_1: left promiscuous mode [ 1317.605232][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.737102][ T2831] bridge_slave_0: left allmulticast mode [ 1317.737125][ T2831] bridge_slave_0: left promiscuous mode [ 1317.737300][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.809161][ T2831] bridge_slave_1: left allmulticast mode [ 1317.809186][ T2831] bridge_slave_1: left promiscuous mode [ 1317.809356][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.867468][ T2831] bridge_slave_0: left allmulticast mode [ 1317.867492][ T2831] bridge_slave_0: left promiscuous mode [ 1317.867705][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.247750][ T8722] Bluetooth: hci0: command tx timeout [ 1320.219775][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.297198][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.318568][ T2831] bond0 (unregistering): Released all slaves [ 1320.356557][ T8722] Bluetooth: hci0: command tx timeout [ 1322.740152][T13508] Bluetooth: hci0: command tx timeout [ 1323.056651][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.177179][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.251632][ T2831] bond0 (unregistering): Released all slaves [ 1323.719379][T14152] fuse: Unknown parameter '0x0000000000000003' [ 1323.830388][T14093] hsr_slave_0: entered promiscuous mode [ 1323.831973][T14093] hsr_slave_1: entered promiscuous mode [ 1323.833124][T14093] debugfs: 'hsr0' already exists in 'hsr' [ 1323.833150][T14093] Cannot create hsr debugfs directory [ 1324.016073][ T2831] hsr_slave_0: left promiscuous mode [ 1324.059788][ T2831] hsr_slave_1: left promiscuous mode [ 1324.061038][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.108574][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.316178][ T2831] hsr_slave_0: left promiscuous mode [ 1324.366341][ T2831] hsr_slave_1: left promiscuous mode [ 1324.367105][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.458018][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.276584][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1329.426522][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1334.327389][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1334.476725][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1335.619065][ T8722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1335.636840][ T8722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1335.644291][ T8722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1335.653705][ T8722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1335.663219][ T8722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.777740][T13508] Bluetooth: hci2: command tx timeout [ 1337.932614][T14222] chnl_net:caif_netlink_parms(): no params data found [ 1338.472040][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.472189][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.472419][T14222] bridge_slave_0: entered allmulticast mode [ 1338.475498][T14222] bridge_slave_0: entered promiscuous mode [ 1338.494774][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.494899][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.495091][T14222] bridge_slave_1: entered allmulticast mode [ 1338.498688][T14222] bridge_slave_1: entered promiscuous mode [ 1338.533883][T13986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1338.672999][T13986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1338.720461][T14222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.006166][T13986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1339.040596][T14222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.088614][T13986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1339.451501][T14222] team0: Port device team_slave_0 added [ 1339.499423][T14222] team0: Port device team_slave_1 added [ 1339.798271][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.798291][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.798319][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.809812][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.809831][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.809859][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.846117][T13508] Bluetooth: hci2: command tx timeout [ 1340.808965][T14222] hsr_slave_0: entered promiscuous mode [ 1340.809901][T14222] hsr_slave_1: entered promiscuous mode [ 1340.810540][T14222] debugfs: 'hsr0' already exists in 'hsr' [ 1340.810557][T14222] Cannot create hsr debugfs directory [ 1341.928883][T13508] Bluetooth: hci2: command tx timeout [ 1343.082279][T13969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1343.572255][T13969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1343.696958][T13969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1343.819078][T13969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1344.006460][T13508] Bluetooth: hci2: command tx timeout [ 1344.318342][T14093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1344.352967][T14093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1344.435273][T14093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1344.500782][T14093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1344.673019][ T2831] bridge_slave_1: left allmulticast mode [ 1344.673052][ T2831] bridge_slave_1: left promiscuous mode [ 1344.673324][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.731306][ T2831] bridge_slave_0: left allmulticast mode [ 1344.731344][ T2831] bridge_slave_0: left promiscuous mode [ 1344.731660][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.819133][ T2831] bridge_slave_1: left allmulticast mode [ 1344.819167][ T2831] bridge_slave_1: left promiscuous mode [ 1344.819430][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.038706][ T2831] bridge_slave_0: left allmulticast mode [ 1345.038739][ T2831] bridge_slave_0: left promiscuous mode [ 1345.039139][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.967415][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.048089][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.068429][ T2831] bond0 (unregistering): Released all slaves [ 1349.476862][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.556693][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.598898][ T2831] bond0 (unregistering): Released all slaves [ 1349.786797][T13986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.176157][ T2831] hsr_slave_0: left promiscuous mode [ 1350.196256][ T2831] hsr_slave_1: left promiscuous mode [ 1350.197013][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.253487][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.406147][ T2831] hsr_slave_0: left promiscuous mode [ 1350.426072][ T2831] hsr_slave_1: left promiscuous mode [ 1350.426782][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.466910][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.935688][T14442] Bluetooth: MGMT ver 1.23 [ 1352.956769][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1353.414420][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1357.748626][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1358.078906][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1359.347598][ T8722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1359.355534][ T8722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1359.406073][ T8722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1359.407490][ T8722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1359.408406][ T8722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1361.446523][T13508] Bluetooth: hci4: command tx timeout [ 1361.465121][T13986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.634866][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.635033][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.774743][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.774851][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.797556][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.797797][ T9269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.412564][T14093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.526063][T13508] Bluetooth: hci4: command tx timeout [ 1363.532550][T14222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1363.592416][T14222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1363.655762][T14222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.713513][ T8722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1363.725528][ T8722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1363.736609][ T8722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1363.738376][ T8722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1363.739663][ T8722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1363.816161][T14222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1364.073874][T14093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.616186][T13508] Bluetooth: hci4: command tx timeout [ 1365.848354][T13508] Bluetooth: hci3: command tx timeout [ 1365.851430][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.851515][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.912709][T14465] chnl_net:caif_netlink_parms(): no params data found [ 1365.923183][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.923269][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.539997][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.540153][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.540411][T14465] bridge_slave_0: entered allmulticast mode [ 1366.542500][T14465] bridge_slave_0: entered promiscuous mode [ 1366.588029][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.588187][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.588819][T14465] bridge_slave_1: entered allmulticast mode [ 1366.592309][T14465] bridge_slave_1: entered promiscuous mode [ 1366.790735][T14465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.860180][T14465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.212337][T14465] team0: Port device team_slave_0 added [ 1367.689181][T13508] Bluetooth: hci4: command tx timeout [ 1367.926328][T13508] Bluetooth: hci3: command tx timeout [ 1368.402542][T14465] team0: Port device team_slave_1 added [ 1368.774780][T14516] tipc: Enabling of bearer rejected, failed to enable media [ 1368.840571][T14465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.840591][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.840619][T14465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.851047][T14486] chnl_net:caif_netlink_parms(): no params data found [ 1368.897290][T14465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.897309][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.897337][T14465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.677658][T14465] hsr_slave_0: entered promiscuous mode [ 1369.679156][T14465] hsr_slave_1: entered promiscuous mode [ 1369.744170][T14486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.744559][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.744824][T14486] bridge_slave_0: entered allmulticast mode [ 1369.772017][T14486] bridge_slave_0: entered promiscuous mode [ 1369.799599][T14486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.799704][T14486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.799838][T14486] bridge_slave_1: entered allmulticast mode [ 1369.801960][T14486] bridge_slave_1: entered promiscuous mode [ 1369.833828][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.006264][T13508] Bluetooth: hci3: command tx timeout [ 1370.109563][T14486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.134998][T14486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.341148][T14486] team0: Port device team_slave_0 added [ 1370.384025][T14486] team0: Port device team_slave_1 added [ 1370.482570][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.612552][T14093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.815796][T14486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.815810][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.826829][T14486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.944248][T14486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.944262][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1370.944279][T14486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.025740][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.026597][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.137734][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.137927][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.858672][T14486] hsr_slave_0: entered promiscuous mode [ 1371.860881][T14486] hsr_slave_1: entered promiscuous mode [ 1371.862043][T14486] debugfs: 'hsr0' already exists in 'hsr' [ 1371.862070][T14486] Cannot create hsr debugfs directory [ 1372.107742][T13508] Bluetooth: hci3: command tx timeout [ 1372.237160][ T8722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1372.263781][ T8722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1372.265468][ T8722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1372.285240][ T8722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1372.293574][ T8722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1374.042277][T14559] tipc: Enabling of bearer rejected, failed to enable media [ 1374.424254][ T8722] Bluetooth: hci5: command tx timeout [ 1375.204417][ T2831] bridge_slave_1: left allmulticast mode [ 1375.204449][ T2831] bridge_slave_1: left promiscuous mode [ 1375.204727][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.318119][ T2831] bridge_slave_0: left allmulticast mode [ 1375.318142][ T2831] bridge_slave_0: left promiscuous mode [ 1375.318325][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.380500][ T2831] bridge_slave_1: left allmulticast mode [ 1375.380524][ T2831] bridge_slave_1: left promiscuous mode [ 1375.380683][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.488883][ T2831] bridge_slave_0: left allmulticast mode [ 1375.488906][ T2831] bridge_slave_0: left promiscuous mode [ 1375.489073][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.497678][ T8722] Bluetooth: hci5: command tx timeout [ 1377.246535][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.330994][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.353650][ T2831] bond0 (unregistering): Released all slaves [ 1378.049395][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.176679][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.258217][ T2831] bond0 (unregistering): Released all slaves [ 1378.568350][ T8722] Bluetooth: hci5: command tx timeout [ 1380.227251][T14465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1380.324128][T14465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1380.557935][T14595] tipc: Enabling of bearer rejected, failed to enable media [ 1380.558270][T14465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1380.646148][T13508] Bluetooth: hci5: command tx timeout [ 1380.763115][ T2831] hsr_slave_0: left promiscuous mode [ 1380.776024][ T2831] hsr_slave_1: left promiscuous mode [ 1380.776726][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.817667][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.986127][ T2831] hsr_slave_0: left promiscuous mode [ 1381.006143][ T2831] hsr_slave_1: left promiscuous mode [ 1381.006852][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.046996][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.736715][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1381.897776][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1384.036638][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1384.177065][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1384.919148][T14465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1384.990805][T14548] chnl_net:caif_netlink_parms(): no params data found [ 1385.682434][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.778941][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.779159][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.779405][T14548] bridge_slave_0: entered allmulticast mode [ 1385.782326][T14548] bridge_slave_0: entered promiscuous mode [ 1385.854382][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.865755][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.888886][T14548] bridge_slave_1: entered allmulticast mode [ 1385.892020][T14548] bridge_slave_1: entered promiscuous mode [ 1386.124593][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.152355][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.578390][T14548] team0: Port device team_slave_0 added [ 1386.605067][T14548] team0: Port device team_slave_1 added [ 1387.057295][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.057314][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.057345][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.438007][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.438020][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.438036][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.438785][T14486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1387.535038][T14486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1387.676312][T14486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1388.728572][T14486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1389.062488][T14222] veth0_vlan: entered promiscuous mode [ 1389.119616][T14548] hsr_slave_0: entered promiscuous mode [ 1389.120836][T14548] hsr_slave_1: entered promiscuous mode [ 1389.121800][T14548] debugfs: 'hsr0' already exists in 'hsr' [ 1389.121818][T14548] Cannot create hsr debugfs directory [ 1389.368718][T14222] veth1_vlan: entered promiscuous mode [ 1390.159339][T14465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.661753][T14648] tipc: Enabling of bearer rejected, failed to enable media [ 1391.139495][T14465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.163142][T14222] veth0_macvtap: entered promiscuous mode [ 1391.244365][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.256132][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.596555][T14222] veth1_macvtap: entered promiscuous mode [ 1391.691816][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.691990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.799524][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.854992][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.860622][T14486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.060244][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.065227][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.100024][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.209624][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.446944][T14486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.621843][ T2831] bridge_slave_1: left allmulticast mode [ 1392.621875][ T2831] bridge_slave_1: left promiscuous mode [ 1392.622237][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.860410][ T2831] bridge_slave_0: left allmulticast mode [ 1392.860434][ T2831] bridge_slave_0: left promiscuous mode [ 1392.860612][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.197371][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.257349][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.301417][ T2831] bond0 (unregistering): Released all slaves [ 1396.319662][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.319820][ T6838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.879033][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.879203][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.474372][ T8722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.496678][ T8722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.501557][ T8722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.510793][ T8722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.511671][ T8722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.805990][ T2831] hsr_slave_0: left promiscuous mode [ 1398.843173][ T2831] hsr_slave_1: left promiscuous mode [ 1398.844108][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.907932][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.846034][T13508] Bluetooth: hci0: command tx timeout [ 1400.904031][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1401.338363][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1401.939762][T13508] Bluetooth: hci0: command tx timeout [ 1403.970803][T14695] tipc: Enabling of bearer rejected, failed to enable media [ 1404.006086][T13508] Bluetooth: hci0: command tx timeout [ 1405.508192][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.561887][T14486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.068721][T13508] Bluetooth: hci0: command tx timeout [ 1408.314123][T14679] chnl_net:caif_netlink_parms(): no params data found [ 1408.522129][T14548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1409.856862][T14548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1409.955400][T14548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1410.291450][ T2831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.353001][T14548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1410.652573][ T2831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.719477][T14679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.719609][T14679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.719788][T14679] bridge_slave_0: entered allmulticast mode [ 1410.727980][T14679] bridge_slave_0: entered promiscuous mode [ 1410.765250][T14679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.765328][T14679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.765446][T14679] bridge_slave_1: entered allmulticast mode [ 1410.772435][T14679] bridge_slave_1: entered promiscuous mode [ 1411.100963][ T2831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.242444][T14679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.248259][T14465] veth0_vlan: entered promiscuous mode [ 1411.307303][T14679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.541691][ T2831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.731784][T14486] veth0_vlan: entered promiscuous mode [ 1411.811682][T14679] team0: Port device team_slave_0 added [ 1411.822925][T14679] team0: Port device team_slave_1 added [ 1411.830930][T14465] veth1_vlan: entered promiscuous mode [ 1412.060974][T14679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.060993][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.061021][T14679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.062131][T14486] veth1_vlan: entered promiscuous mode [ 1412.112810][T14679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.112828][T14679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.112854][T14679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.328646][T14759] tipc: Enabling of bearer rejected, failed to enable media [ 1412.694329][T14679] hsr_slave_0: entered promiscuous mode [ 1412.697745][T14679] hsr_slave_1: entered promiscuous mode [ 1412.698758][T14679] debugfs: 'hsr0' already exists in 'hsr' [ 1412.698781][T14679] Cannot create hsr debugfs directory [ 1413.122649][ T2831] bridge_slave_1: left allmulticast mode [ 1413.122672][ T2831] bridge_slave_1: left promiscuous mode [ 1413.122841][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.187127][ T2831] bridge_slave_0: left allmulticast mode [ 1413.187149][ T2831] bridge_slave_0: left promiscuous mode [ 1413.187355][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.566879][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.647938][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.668696][ T2831] bond0 (unregistering): Released all slaves [ 1418.848636][T14790] tipc: Enabling of bearer rejected, failed to enable media [ 1418.897342][T14465] veth0_macvtap: entered promiscuous mode [ 1419.696256][ T2831] hsr_slave_0: left promiscuous mode [ 1419.718692][ T2831] hsr_slave_1: left promiscuous mode [ 1419.720196][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.720220][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.757068][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.757099][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.842026][ T2831] veth1_macvtap: left promiscuous mode [ 1419.842153][ T2831] veth0_macvtap: left promiscuous mode [ 1419.842350][ T2831] veth1_vlan: left promiscuous mode [ 1419.842456][ T2831] veth0_vlan: left promiscuous mode [ 1420.618332][ T8722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.645212][ T8722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.654571][ T8722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.716395][ T8722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.717433][ T8722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1422.812403][T13508] Bluetooth: hci2: command tx timeout [ 1422.927856][T14819] overlay: Unknown parameter '/' [ 1423.227405][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.227513][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.107816][ T8722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1424.163891][ T8722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1424.180239][ T8722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1424.187194][ T8722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1424.188344][ T8722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1425.234568][T13508] Bluetooth: hci2: command tx timeout [ 1426.533816][ T8722] Bluetooth: hci6: command tx timeout [ 1427.238527][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1427.296320][ T8722] Bluetooth: hci2: command tx timeout [ 1427.547119][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1428.586494][ T8722] Bluetooth: hci6: command tx timeout [ 1429.366643][ T8722] Bluetooth: hci2: command tx timeout [ 1429.964080][T14486] veth0_macvtap: entered promiscuous mode [ 1429.981713][T14835] tipc: Enabling of bearer rejected, failed to enable media [ 1430.646471][ T8722] Bluetooth: hci6: command tx timeout [ 1432.509950][T14548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.771750][ T8722] Bluetooth: hci6: command tx timeout [ 1434.542304][T13508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.560522][T13508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.563131][T13508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.564658][T13508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.565515][T13508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1436.646126][ T8722] Bluetooth: hci3: command tx timeout [ 1437.451248][T14808] chnl_net:caif_netlink_parms(): no params data found [ 1437.939106][T14821] chnl_net:caif_netlink_parms(): no params data found [ 1438.685412][T14679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1438.727214][ T8722] Bluetooth: hci3: command tx timeout [ 1438.755401][T14808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.755549][T14808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.755786][T14808] bridge_slave_0: entered allmulticast mode [ 1438.760460][T14808] bridge_slave_0: entered promiscuous mode [ 1438.799373][T14679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1438.867204][T14808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.867340][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.867581][T14808] bridge_slave_1: entered allmulticast mode [ 1438.870639][T14808] bridge_slave_1: entered promiscuous mode [ 1439.142227][T14679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1439.248052][T14679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1439.328383][T14821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.328599][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.328808][T14821] bridge_slave_0: entered allmulticast mode [ 1439.331863][T14821] bridge_slave_0: entered promiscuous mode [ 1439.400913][T14808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.401327][T14821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.401474][T14821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.401667][T14821] bridge_slave_1: entered allmulticast mode [ 1439.404719][T14821] bridge_slave_1: entered promiscuous mode [ 1439.547410][T14808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.730186][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.991396][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.028061][T14808] team0: Port device team_slave_0 added [ 1441.034048][ T8722] Bluetooth: hci3: command tx timeout [ 1441.100134][T14808] team0: Port device team_slave_1 added [ 1441.100571][T14896] chnl_net:caif_netlink_parms(): no params data found [ 1441.286055][T14821] team0: Port device team_slave_0 added [ 1441.471922][T14821] team0: Port device team_slave_1 added [ 1441.491793][T14808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.491811][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.491840][T14808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.604943][T14808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.604964][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.604994][T14808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.702147][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.702166][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.702195][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.767328][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.767349][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.767379][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.084348][T15014] tipc: Enabling of bearer rejected, failed to enable media [ 1442.206138][T14896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.206221][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.206604][T14896] bridge_slave_0: entered allmulticast mode [ 1442.208163][T14896] bridge_slave_0: entered promiscuous mode [ 1442.451953][T14808] hsr_slave_0: entered promiscuous mode [ 1442.453852][T14808] hsr_slave_1: entered promiscuous mode [ 1442.454547][T14808] debugfs: 'hsr0' already exists in 'hsr' [ 1442.454565][T14808] Cannot create hsr debugfs directory [ 1442.455085][T14896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.455179][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.455353][T14896] bridge_slave_1: entered allmulticast mode [ 1442.462140][T14896] bridge_slave_1: entered promiscuous mode [ 1442.586430][T14821] hsr_slave_0: entered promiscuous mode [ 1442.588039][T14821] hsr_slave_1: entered promiscuous mode [ 1442.589040][T14821] debugfs: 'hsr0' already exists in 'hsr' [ 1442.589066][T14821] Cannot create hsr debugfs directory [ 1443.750442][ T8722] Bluetooth: hci3: command tx timeout [ 1443.900334][T14896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.009968][T14896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.182617][T14896] team0: Port device team_slave_0 added [ 1446.238342][T14896] team0: Port device team_slave_1 added [ 1446.386790][T14896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.386808][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.386830][T14896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.468378][T14896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.468398][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.468427][T14896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.259302][T14896] hsr_slave_0: entered promiscuous mode [ 1447.260212][T14896] hsr_slave_1: entered promiscuous mode [ 1447.260837][T14896] debugfs: 'hsr0' already exists in 'hsr' [ 1447.260854][T14896] Cannot create hsr debugfs directory [ 1447.709915][T14679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.299017][T14679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.339188][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.339439][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.359419][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.360636][ T9270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.593847][ T2831] bridge_slave_1: left allmulticast mode [ 1448.593878][ T2831] bridge_slave_1: left promiscuous mode [ 1448.594144][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.677751][ T2831] bridge_slave_0: left allmulticast mode [ 1448.677783][ T2831] bridge_slave_0: left promiscuous mode [ 1448.678075][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.781873][ T2831] bridge_slave_1: left allmulticast mode [ 1448.781897][ T2831] bridge_slave_1: left promiscuous mode [ 1448.782060][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.867792][ T2831] bridge_slave_0: left allmulticast mode [ 1448.867826][ T2831] bridge_slave_0: left promiscuous mode [ 1448.868124][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.959226][ T2831] bridge_slave_1: left allmulticast mode [ 1448.959249][ T2831] bridge_slave_1: left promiscuous mode [ 1448.959422][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.037150][ T2831] bridge_slave_0: left allmulticast mode [ 1449.037173][ T2831] bridge_slave_0: left promiscuous mode [ 1449.037368][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.447600][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.546715][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.608769][ T2831] bond0 (unregistering): Released all slaves [ 1451.680149][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.716696][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.758805][ T2831] bond0 (unregistering): Released all slaves [ 1452.876784][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.936756][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.958521][ T2831] bond0 (unregistering): Released all slaves [ 1454.167004][ T2831] hsr_slave_0: left promiscuous mode [ 1455.208715][ T2831] hsr_slave_1: left promiscuous mode [ 1455.210199][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.236914][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.437127][ T2831] hsr_slave_0: left promiscuous mode [ 1455.476040][ T2831] hsr_slave_1: left promiscuous mode [ 1455.477229][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.527023][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.706093][ T2831] hsr_slave_0: left promiscuous mode [ 1455.745997][ T2831] hsr_slave_1: left promiscuous mode [ 1455.747189][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.811836][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.054285][ T2831] veth0_macvtap: left promiscuous mode [ 1456.054526][ T2831] veth1_vlan: left promiscuous mode [ 1456.054636][ T2831] veth0_vlan: left promiscuous mode [ 1456.810619][ T2831] veth0_macvtap: left promiscuous mode [ 1456.810950][ T2831] veth1_vlan: left promiscuous mode [ 1456.811154][ T2831] veth0_vlan: left promiscuous mode [ 1457.642476][T13508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1457.675153][T13508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1457.684550][T13508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1457.727439][T13508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1457.731197][T13508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.986625][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1458.136825][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1459.849202][ T8722] Bluetooth: hci4: command tx timeout [ 1461.948483][ T8722] Bluetooth: hci4: command tx timeout [ 1462.466612][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1462.696561][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1464.017191][ T8722] Bluetooth: hci4: command tx timeout [ 1464.110622][T15122] kAFS: No cell specified [ 1466.096335][ T8722] Bluetooth: hci4: command tx timeout [ 1470.776931][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1471.026651][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1474.733109][T15103] chnl_net:caif_netlink_parms(): no params data found [ 1475.200404][T15177] kAFS: No cell specified [ 1476.963979][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.017565][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.017834][T15103] bridge_slave_0: entered allmulticast mode [ 1477.020952][T15103] bridge_slave_0: entered promiscuous mode [ 1477.026044][T14808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1477.126464][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.126545][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.126715][T15103] bridge_slave_1: entered allmulticast mode [ 1477.128434][T15103] bridge_slave_1: entered promiscuous mode [ 1477.129288][T14808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1477.285442][T14808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1477.400797][T14808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1477.501282][T15103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.563094][T15103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.792316][T15103] team0: Port device team_slave_0 added [ 1477.818690][T15103] team0: Port device team_slave_1 added [ 1478.025713][T15103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.025732][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.025759][T15103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.122644][T14821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1479.585523][T15103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.585543][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.585572][T15103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.597695][T14821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1479.788071][T14821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1480.277835][T14821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1480.758447][T15103] hsr_slave_0: entered promiscuous mode [ 1480.759968][T15103] hsr_slave_1: entered promiscuous mode [ 1481.256031][T14896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1481.363139][T14896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1481.475985][T14896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1481.862498][T13508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1481.873546][T13508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1481.882828][T13508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1481.956095][T13508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1481.957791][T13508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1482.606561][T14896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1484.086354][T13508] Bluetooth: hci0: command tx timeout [ 1484.439268][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.652774][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.652869][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.823941][T15253] chnl_net:caif_netlink_parms(): no params data found [ 1484.858758][ T2831] bridge_slave_1: left allmulticast mode [ 1484.858794][ T2831] bridge_slave_1: left promiscuous mode [ 1484.859069][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.947821][ T2831] bridge_slave_0: left allmulticast mode [ 1484.947856][ T2831] bridge_slave_0: left promiscuous mode [ 1484.948156][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.402145][ T8722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1485.414487][ T8722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1485.424100][ T8722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1485.425528][ T8722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1485.437303][ T8722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1486.166232][ T8722] Bluetooth: hci0: command tx timeout [ 1486.496602][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.579005][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.618585][ T2831] bond0 (unregistering): Released all slaves [ 1487.279890][ T2831] hsr_slave_0: left promiscuous mode [ 1487.320812][ T2831] hsr_slave_1: left promiscuous mode [ 1487.321971][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.366954][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.528855][ T8722] Bluetooth: hci2: command tx timeout [ 1488.258516][ T8722] Bluetooth: hci0: command tx timeout [ 1488.487999][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1488.860264][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1489.329429][T15335] kAFS: No cell specified [ 1490.427519][ T8722] Bluetooth: hci2: command tx timeout [ 1490.427558][ T8722] Bluetooth: hci0: command tx timeout [ 1492.519465][T13508] Bluetooth: hci2: command tx timeout [ 1494.566150][T13508] Bluetooth: hci2: command tx timeout [ 1494.830176][T14896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.050585][T15253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.050739][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.050987][T15253] bridge_slave_0: entered allmulticast mode [ 1495.078190][T15253] bridge_slave_0: entered promiscuous mode [ 1495.166419][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.166572][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.166833][T15253] bridge_slave_1: entered allmulticast mode [ 1495.169900][T15253] bridge_slave_1: entered promiscuous mode [ 1495.618429][T15253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.635034][T15253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.778490][ T8722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1495.800723][ T8722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1495.802516][ T8722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1495.804280][ T8722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1495.805201][ T8722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1495.934788][T15253] team0: Port device team_slave_0 added [ 1495.995355][T15253] team0: Port device team_slave_1 added [ 1496.255008][T15253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.255026][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.255052][T15253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.340548][T15253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.340568][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.340596][T15253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.073236][T15253] hsr_slave_0: entered promiscuous mode [ 1497.074819][T15253] hsr_slave_1: entered promiscuous mode [ 1497.076613][T15253] debugfs: 'hsr0' already exists in 'hsr' [ 1497.076638][T15253] Cannot create hsr debugfs directory [ 1497.487547][T15103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1497.624161][T15314] chnl_net:caif_netlink_parms(): no params data found [ 1497.635533][T15103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1497.700487][T15103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1497.925959][ T8722] Bluetooth: hci5: command tx timeout [ 1497.962720][T15103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1498.609124][T15314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.609293][T15314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.609442][T15314] bridge_slave_0: entered allmulticast mode [ 1498.611192][T15314] bridge_slave_0: entered promiscuous mode [ 1498.662257][T15314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.662418][T15314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.662675][T15314] bridge_slave_1: entered allmulticast mode [ 1498.665404][T15314] bridge_slave_1: entered promiscuous mode [ 1498.941900][T15314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.956111][T15367] chnl_net:caif_netlink_parms(): no params data found [ 1499.171775][T15314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.512967][T15314] team0: Port device team_slave_0 added [ 1499.567485][T15314] team0: Port device team_slave_1 added [ 1499.933034][T15314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.933053][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.933080][T15314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.006202][ T8722] Bluetooth: hci5: command tx timeout [ 1500.047967][T15314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.047985][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.048002][T15314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.051045][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.051174][T15367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.051312][T15367] bridge_slave_0: entered allmulticast mode [ 1500.052983][T15367] bridge_slave_0: entered promiscuous mode [ 1500.302062][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.302203][T15367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.302399][T15367] bridge_slave_1: entered allmulticast mode [ 1500.327002][T15367] bridge_slave_1: entered promiscuous mode [ 1500.480329][T15367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.518191][T15367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.556588][T15314] hsr_slave_0: entered promiscuous mode [ 1500.557561][T15314] hsr_slave_1: entered promiscuous mode [ 1500.558231][T15314] debugfs: 'hsr0' already exists in 'hsr' [ 1500.558250][T15314] Cannot create hsr debugfs directory [ 1500.894801][T15367] team0: Port device team_slave_0 added [ 1500.933732][T15367] team0: Port device team_slave_1 added [ 1501.241578][T15367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.241592][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.241609][T15367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.277395][T15367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.277414][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.277440][T15367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.702298][T15253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1501.764206][T15253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1502.001999][T15367] hsr_slave_0: entered promiscuous mode [ 1502.002911][T15367] hsr_slave_1: entered promiscuous mode [ 1502.003518][T15367] debugfs: 'hsr0' already exists in 'hsr' [ 1502.003535][T15367] Cannot create hsr debugfs directory [ 1502.003707][T15253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1502.049376][T15253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1502.086071][ T8722] Bluetooth: hci5: command tx timeout [ 1502.103910][T15103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.332865][T15103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.449473][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.449703][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.570298][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.570523][ T9269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.668417][ T2831] bridge_slave_1: left allmulticast mode [ 1502.668450][ T2831] bridge_slave_1: left promiscuous mode [ 1502.669245][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.133270][ T2831] bridge_slave_0: left allmulticast mode [ 1503.133306][ T2831] bridge_slave_0: left promiscuous mode [ 1503.133582][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.149149][T15421] kAFS: No cell specified [ 1503.232697][ T2831] bridge_slave_1: left allmulticast mode [ 1503.232731][ T2831] bridge_slave_1: left promiscuous mode [ 1503.233034][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.166126][ T8722] Bluetooth: hci5: command tx timeout [ 1504.287564][ T2831] bridge_slave_0: left allmulticast mode [ 1504.287597][ T2831] bridge_slave_0: left promiscuous mode [ 1504.287872][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.661848][ T2831] bridge_slave_1: left allmulticast mode [ 1504.661892][ T2831] bridge_slave_1: left promiscuous mode [ 1504.662174][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.786801][ T2831] bridge_slave_0: left allmulticast mode [ 1505.786823][ T2831] bridge_slave_0: left promiscuous mode [ 1505.787007][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.516518][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.606751][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.668388][ T2831] bond0 (unregistering): Released all slaves [ 1509.786668][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.866492][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.939667][ T2831] bond0 (unregistering): Released all slaves [ 1510.396728][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.476794][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.547949][ T2831] bond0 (unregistering): Released all slaves [ 1511.396834][T15253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.606204][ T2831] hsr_slave_0: left promiscuous mode [ 1511.646057][ T2831] hsr_slave_1: left promiscuous mode [ 1511.646946][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.697676][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.859624][ T2831] hsr_slave_0: left promiscuous mode [ 1511.896273][ T2831] hsr_slave_1: left promiscuous mode [ 1511.897465][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.919793][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.078358][ T2831] hsr_slave_0: left promiscuous mode [ 1512.097842][ T2831] hsr_slave_1: left promiscuous mode [ 1512.098549][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.137258][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.867321][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1513.016906][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1514.341868][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1514.516625][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1515.758467][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1515.930523][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1516.811203][T15253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.832392][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.832531][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.864266][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.864401][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.893513][T15103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.241258][T15454] kAFS: No cell specified [ 1517.450221][T15457] syzkaller0: entered promiscuous mode [ 1517.450253][T15457] syzkaller0: entered allmulticast mode [ 1517.618404][T15457] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1517.738550][T15103] veth0_vlan: entered promiscuous mode [ 1518.312665][T15253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.179682][T13508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1519.184861][T13508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1519.202142][T13508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1519.204247][T13508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1519.205115][T13508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1520.242580][T15314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1520.394453][T15314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1521.497580][T13508] Bluetooth: hci3: command tx timeout [ 1522.007102][T15314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1522.111308][T15314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1522.476972][T15253] veth0_vlan: entered promiscuous mode [ 1522.495575][T15367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1522.599172][T15367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1522.665114][T15367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1522.728113][T15367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1522.797057][T15253] veth1_vlan: entered promiscuous mode [ 1522.988108][T15473] chnl_net:caif_netlink_parms(): no params data found [ 1523.303322][T15473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.303536][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.303778][T15473] bridge_slave_0: entered allmulticast mode [ 1523.305510][T15473] bridge_slave_0: entered promiscuous mode [ 1523.337716][T15473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.337871][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.338098][T15473] bridge_slave_1: entered allmulticast mode [ 1523.341389][T15473] bridge_slave_1: entered promiscuous mode [ 1523.374778][T15253] veth0_macvtap: entered promiscuous mode [ 1523.437441][T15473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.440404][T15253] veth1_macvtap: entered promiscuous mode [ 1523.461709][T15473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.606349][T13508] Bluetooth: hci3: command tx timeout [ 1523.664208][T15473] team0: Port device team_slave_0 added [ 1523.871992][T15473] team0: Port device team_slave_1 added [ 1523.924526][T15473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.924541][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.924557][T15473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.934751][T15314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.190058][T15253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.191049][T15473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.191065][T15473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.191081][T15473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.552148][T15253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.620395][T15473] hsr_slave_0: entered promiscuous mode [ 1524.621322][T15473] hsr_slave_1: entered promiscuous mode [ 1524.621944][T15473] debugfs: 'hsr0' already exists in 'hsr' [ 1524.621969][T15473] Cannot create hsr debugfs directory [ 1524.650728][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.819472][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.823349][T15314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.823608][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.855024][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.009051][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.009193][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.033892][T15367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.124148][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.124285][T10955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.591829][T15367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.686075][T13508] Bluetooth: hci3: command tx timeout [ 1526.849750][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.849776][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.976297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.976387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.043589][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.043787][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.069372][ T2831] bridge_slave_1: left allmulticast mode [ 1527.069405][ T2831] bridge_slave_1: left promiscuous mode [ 1527.069691][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.150486][ T2831] bridge_slave_0: left allmulticast mode [ 1527.150518][ T2831] bridge_slave_0: left promiscuous mode [ 1527.150798][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.786072][T13508] Bluetooth: hci3: command tx timeout [ 1528.176334][T13508] Bluetooth: hci1: command 0x0405 tx timeout [ 1528.458309][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.520186][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.558259][ T2831] bond0 (unregistering): Released all slaves [ 1528.804517][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.804540][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.035983][ T2831] hsr_slave_0: left promiscuous mode [ 1529.076224][ T2831] hsr_slave_1: left promiscuous mode [ 1529.077277][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.120623][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.257387][ T2831] veth0_vlan: left promiscuous mode [ 1531.336870][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 1531.676602][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 1533.966881][T15564] syzkaller0: entered promiscuous mode [ 1533.966911][T15564] syzkaller0: entered allmulticast mode [ 1534.480035][T15587] syzkaller0: entered promiscuous mode [ 1534.480068][T15587] syzkaller0: entered allmulticast mode [ 1536.937044][T15616] kAFS: No cell specified [ 1537.521027][T15314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.328064][T15473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1538.433090][T15367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.478457][T15473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1538.520340][T15473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1538.583307][T15473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1538.666073][ T9307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1538.815527][T15314] veth0_vlan: entered promiscuous mode [ 1538.827140][T15367] veth0_vlan: entered promiscuous mode [ 1538.850670][ T9307] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1538.850701][ T9307] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1538.850719][ T9307] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1538.850769][ T9307] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1538.853593][ T9307] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1538.853625][ T9307] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1538.853645][ T9307] usb 5-1: Product: syz [ 1538.853659][ T9307] usb 5-1: Manufacturer: syz [ 1538.888517][T15314] veth1_vlan: entered promiscuous mode [ 1538.912537][ T9307] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1538.938961][T15367] veth1_vlan: entered promiscuous mode [ 1539.200129][ T9307] usb 5-1: USB disconnect, device number 2 [ 1539.256571][T15314] veth0_macvtap: entered promiscuous mode [ 1539.274802][T15367] veth0_macvtap: entered promiscuous mode [ 1539.296653][T15473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.329702][T15314] veth1_macvtap: entered promiscuous mode [ 1539.353151][T15367] veth1_macvtap: entered promiscuous mode [ 1539.438157][T15473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.489900][T15314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.495380][T15367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.499642][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.512370][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.540990][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.541220][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.545102][T15314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.581379][T15367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1539.629661][T10956] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.643966][T10956] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.657834][T10956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.676215][T10956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.685092][T10956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.709757][T10956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.726693][T10956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.765982][T13508] Bluetooth: hci0: command tx timeout [ 1539.789529][T10956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.549992][T15665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1540.690246][T15669] syzkaller0: entered promiscuous mode [ 1540.690275][T15669] syzkaller0: entered allmulticast mode [ 1541.005870][ T9270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.005895][ T9270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.145357][ T9269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.145382][ T9269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.347955][T10953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.347977][T10953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.399377][T10953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.399402][T10953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.399943][T15697] kAFS: No cell specified [ 1543.510418][T15473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.068813][T15711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1546.118027][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1546.122605][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.122683][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.230352][T15473] veth0_vlan: entered promiscuous mode [ 1546.245979][T13508] Bluetooth: hci0: command tx timeout [ 1546.265929][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1546.268084][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.268141][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1546.270756][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1546.270790][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.270811][ T10] usb 4-1: Product: syz [ 1546.270826][ T10] usb 4-1: Manufacturer: syz [ 1546.270842][ T10] usb 4-1: SerialNumber: syz [ 1546.277137][ T10] usb 4-1: config 0 descriptor?? [ 1546.280044][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1546.280082][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1546.529524][T15473] veth1_vlan: entered promiscuous mode [ 1546.579886][T11405] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1546.695187][T15473] veth0_macvtap: entered promiscuous mode [ 1546.723645][T15473] veth1_macvtap: entered promiscuous mode [ 1546.738925][T11405] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1546.738958][T11405] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1546.739042][T11405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1546.739097][T11405] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1546.741475][T11405] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1546.741506][T11405] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1546.741527][T11405] usb 5-1: Product: syz [ 1546.741543][T11405] usb 5-1: Manufacturer: syz [ 1546.773062][T11405] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1546.881062][T15473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.884731][T15726] syzkaller0: entered promiscuous mode [ 1546.884802][T15726] syzkaller0: entered allmulticast mode [ 1546.918590][T15726] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1547.021964][T15473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.066820][T11405] usb 5-1: USB disconnect, device number 3 [ 1547.748960][ T2831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.749373][ T2831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.749735][ T2831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.750104][T10953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.768614][ T10] usb 4-1: USB disconnect, device number 32 [ 1550.333262][T15762] kAFS: No cell specified [ 1550.919274][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.919295][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.163845][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.163868][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.686872][T15782] ======================================================= [ 1552.686872][T15782] WARNING: The mand mount option has been deprecated and [ 1552.686872][T15782] and is ignored by this kernel. Remove the mand [ 1552.686872][T15782] option from the mount to silence this warning. [ 1552.686872][T15782] ======================================================= [ 1552.701793][T15782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1553.457599][T15789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1554.347069][T13508] Bluetooth: hci0: command tx timeout [ 1554.506001][T14312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1554.655927][T14312] usb 5-1: Using ep0 maxpacket: 32 [ 1554.658235][T14312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.658332][T14312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1554.660818][T14312] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1554.660848][T14312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.660869][T14312] usb 5-1: Product: syz [ 1554.660885][T14312] usb 5-1: Manufacturer: syz [ 1554.660899][T14312] usb 5-1: SerialNumber: syz [ 1554.738413][T14312] usb 5-1: config 0 descriptor?? [ 1554.760509][T14312] hub 5-1:0.0: bad descriptor, ignoring hub [ 1554.760553][T14312] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1555.163736][ T6101] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1556.396896][T11405] usb 5-1: USB disconnect, device number 4 [ 1556.456313][ T6101] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1556.456346][ T6101] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1556.456368][ T6101] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1556.456421][ T6101] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1556.475977][ T6101] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1556.476008][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1556.476027][ T6101] usb 1-1: Product: syz [ 1556.476041][ T6101] usb 1-1: Manufacturer: syz [ 1556.575027][ T6101] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1556.596460][T15802] syzkaller0: entered promiscuous mode [ 1556.596488][T15802] syzkaller0: entered allmulticast mode [ 1556.632114][T15802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1556.934959][T15808] kAFS: No cell specified [ 1557.250634][ T9198] usb 1-1: USB disconnect, device number 4 [ 1568.788047][ T6101] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1568.988749][ T6101] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1568.988783][ T6101] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1568.988804][ T6101] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1568.988858][ T6101] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1568.991184][ T6101] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1568.991213][ T6101] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1568.991235][ T6101] usb 4-1: Product: syz [ 1568.991250][ T6101] usb 4-1: Manufacturer: syz [ 1569.021283][ T6101] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1569.947062][T15169] usb 4-1: USB disconnect, device number 33 [ 1570.035964][T15876] kAFS: No cell specified [ 1570.806001][T13508] Bluetooth: hci3: command tx timeout [ 1571.303127][T15900] syzkaller0: entered promiscuous mode [ 1571.303156][T15900] syzkaller0: entered allmulticast mode [ 1571.366944][T15900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1577.621501][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 1584.438910][T15987] kAFS: No cell specified [ 1588.331368][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 1594.281539][T16036] kAFS: No cell specified [ 1594.405931][T11405] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1594.761439][T11405] usb 1-1: config 4 has an invalid interface number: 121 but max is 0 [ 1594.761474][T11405] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.761495][T11405] usb 1-1: config 4 has no interface number 0 [ 1594.761547][T11405] usb 1-1: config 4 interface 121 has no altsetting 0 [ 1594.776622][T11405] usb 1-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 1594.776658][T11405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.776680][T11405] usb 1-1: Product: syz [ 1594.776694][T11405] usb 1-1: Manufacturer: syz [ 1594.776715][T11405] usb 1-1: SerialNumber: syz [ 1595.657320][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 1596.622696][T11405] usb 1-1: USB disconnect, device number 5 [ 1596.813855][T13508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1596.837705][T13508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1596.846277][T13508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1596.894327][T13508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1596.906566][T13508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1599.422084][T13508] Bluetooth: hci4: command tx timeout [ 1601.486745][ T8722] Bluetooth: hci4: command tx timeout [ 1603.202877][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1991'. [ 1603.784284][T13508] Bluetooth: hci4: command tx timeout [ 1604.309635][T16054] chnl_net:caif_netlink_parms(): no params data found [ 1605.109488][T16119] kAFS: No cell specified [ 1605.973176][ T8722] Bluetooth: hci4: command tx timeout [ 1607.531557][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.531657][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.341084][T10953] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.372294][T10953] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.693786][ T8722] Bluetooth: hci2: command 0x0406 tx timeout [ 1610.172956][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.173109][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.173359][T16054] bridge_slave_0: entered allmulticast mode [ 1610.181691][T16054] bridge_slave_0: entered promiscuous mode [ 1610.233071][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.243605][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.243858][T16054] bridge_slave_1: entered allmulticast mode [ 1610.268331][T16054] bridge_slave_1: entered promiscuous mode [ 1610.441091][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1610.470035][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.085965][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1611.383112][T10953] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.623699][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2001'. [ 1612.168003][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1612.168025][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1612.168036][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1612.168066][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1612.171166][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1612.171186][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1612.171202][ T10] usb 1-1: Product: syz [ 1612.171211][ T10] usb 1-1: Manufacturer: syz [ 1612.284458][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1612.474133][T16054] team0: Port device team_slave_0 added [ 1612.575880][T14312] usb 1-1: USB disconnect, device number 6 [ 1612.670205][T16054] team0: Port device team_slave_1 added [ 1613.133840][T10953] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.276164][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1614.276185][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.276215][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.466615][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.466685][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.466752][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.491000][T16180] kAFS: No cell specified [ 1615.675137][T16054] hsr_slave_0: entered promiscuous mode [ 1616.257140][T16189] overlayfs: missing 'lowerdir' [ 1617.239438][T16054] hsr_slave_1: entered promiscuous mode [ 1619.670806][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 1620.496078][T10953] bridge_slave_1: left allmulticast mode [ 1620.496113][T10953] bridge_slave_1: left promiscuous mode [ 1620.496416][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.163358][T10953] bridge_slave_0: left allmulticast mode [ 1621.163393][T10953] bridge_slave_0: left promiscuous mode [ 1621.163698][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.975891][T15169] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1624.205626][T15169] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1624.205660][T15169] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1624.205690][T15169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1624.243514][T15169] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1624.249018][T15169] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1624.249053][T15169] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1624.249075][T15169] usb 5-1: Product: syz [ 1624.249090][T15169] usb 5-1: Manufacturer: syz [ 1624.299027][T15169] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1624.625596][T15169] usb 5-1: USB disconnect, device number 5 [ 1626.763517][T16236] kAFS: No cell specified [ 1632.862274][T11405] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1633.231180][T16282] kAFS: No cell specified [ 1633.531394][T11405] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1633.531426][T11405] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1633.531463][T11405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1633.531518][T11405] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1633.586284][T11405] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1633.586319][T11405] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1633.586341][T11405] usb 5-1: Product: syz [ 1633.586356][T11405] usb 5-1: Manufacturer: syz [ 1633.637282][T11405] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1633.854253][T11405] usb 5-1: USB disconnect, device number 6 [ 1634.391324][T10953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.686239][T10953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1634.831497][T10953] bond0 (unregistering): Released all slaves [ 1637.597037][T16300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.685866][ T8722] Bluetooth: hci4: command 0x0405 tx timeout [ 1643.686514][T14385] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1643.887523][T14385] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1643.887545][T14385] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1643.887557][T14385] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1643.887586][T14385] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1643.889221][T14385] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1643.889240][T14385] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1643.889253][T14385] usb 5-1: Product: syz [ 1643.889262][T14385] usb 5-1: Manufacturer: syz [ 1644.026471][T14385] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1645.449031][T14385] usb 5-1: USB disconnect, device number 7 [ 1646.202079][T10953] hsr_slave_0: left promiscuous mode [ 1646.326330][T10953] hsr_slave_1: left promiscuous mode [ 1646.327445][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.327473][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.401218][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.401249][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1646.744166][T10953] veth1_macvtap: left promiscuous mode [ 1646.744241][T10953] veth0_macvtap: left promiscuous mode [ 1646.744401][T10953] veth1_vlan: left promiscuous mode [ 1646.744508][T10953] veth0_vlan: left promiscuous mode [ 1652.861261][T16403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1660.036961][ T8722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1660.075938][ T8722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1660.117985][ T8722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1660.156421][ T8722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1660.157234][ T8722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1662.262746][ T9271] Bluetooth: hci5: command tx timeout [ 1664.376054][ T9271] Bluetooth: hci5: command tx timeout [ 1665.152236][ T5933] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1665.307952][ T5933] usb 6-1: config 4 has an invalid interface number: 121 but max is 0 [ 1665.307985][ T5933] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.308003][ T5933] usb 6-1: config 4 has no interface number 0 [ 1665.308032][ T5933] usb 6-1: config 4 interface 121 has no altsetting 0 [ 1665.312557][ T5933] usb 6-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 1665.312602][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.312625][ T5933] usb 6-1: Product: syz [ 1665.312639][ T5933] usb 6-1: Manufacturer: syz [ 1665.312647][ T5933] usb 6-1: SerialNumber: syz [ 1665.820917][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2056'. [ 1666.438735][ T9271] Bluetooth: hci5: command tx timeout [ 1666.738768][T10953] team0 (unregistering): Port device team_slave_1 removed [ 1667.341258][T10953] team0 (unregistering): Port device team_slave_0 removed [ 1668.650802][ T9271] Bluetooth: hci5: command tx timeout [ 1668.728179][T16460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.448957][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.451923][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.871962][ T9271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1676.902543][ T9271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1676.952590][ T9271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1676.971800][ T9271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1676.972775][ T9271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1677.981087][ T37] audit: type=1800 audit(1771496319.341:103): pid=16502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2075" name="bus" dev="overlay" ino=2458 res=0 errno=0 [ 1679.265950][ T8722] Bluetooth: hci6: command tx timeout [ 1681.285929][ T8722] Bluetooth: hci6: command tx timeout [ 1682.226982][T16525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1683.589494][ T9271] Bluetooth: hci6: command tx timeout [ 1684.808754][ T37] audit: type=1800 audit(1771496326.211:104): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2085" name="bus" dev="overlay" ino=207 res=0 errno=0 [ 1685.160921][T14385] usb 6-1: USB disconnect, device number 2 [ 1685.620717][ T9271] Bluetooth: hci6: command 0x0419 tx timeout [ 1687.800193][ T8722] Bluetooth: hci6: command 0x0419 tx timeout [ 1688.128457][T16423] chnl_net:caif_netlink_parms(): no params data found [ 1689.957675][T10953] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.253795][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1690.730313][T16497] chnl_net:caif_netlink_parms(): no params data found [ 1690.908141][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.908180][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.908204][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1690.908249][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1690.908275][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.914638][ T10] usb 5-1: config 0 descriptor?? [ 1692.456343][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1692.493762][T10953] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.662565][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.668089][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.271046][ T10] usb 5-1: USB disconnect, device number 8 [ 1694.414405][T10953] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.788099][T16423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.788179][T16423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.788357][T16423] bridge_slave_0: entered allmulticast mode [ 1694.790032][T16423] bridge_slave_0: entered promiscuous mode [ 1695.170507][T10953] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.266577][T16423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.266748][T16423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.267020][T16423] bridge_slave_1: entered allmulticast mode [ 1695.270223][T16423] bridge_slave_1: entered promiscuous mode [ 1695.382424][ T37] audit: type=1800 audit(1771496336.771:105): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2094" name="bus" dev="overlay" ino=238 res=0 errno=0 [ 1695.483750][T16497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.483907][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.484126][T16497] bridge_slave_0: entered allmulticast mode [ 1695.518007][T16497] bridge_slave_0: entered promiscuous mode [ 1695.567805][T16497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.567961][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.568182][T16497] bridge_slave_1: entered allmulticast mode [ 1695.571226][T16497] bridge_slave_1: entered promiscuous mode [ 1695.608875][T16423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.688967][T16423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.584513][T16497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.643106][T16497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.660132][T16423] team0: Port device team_slave_0 added [ 1697.799628][T16423] team0: Port device team_slave_1 added [ 1697.941263][T16497] team0: Port device team_slave_0 added [ 1698.046534][T16497] team0: Port device team_slave_1 added [ 1698.052697][T16423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.052719][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.052746][T16423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.214578][T16423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.214598][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.214625][T16423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.779029][T16497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.779049][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.779081][T16497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.901911][T16497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.901925][T16497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.901941][T16497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.902540][T10953] bridge_slave_1: left allmulticast mode [ 1698.902558][T10953] bridge_slave_1: left promiscuous mode [ 1698.902732][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.027240][T10953] bridge_slave_0: left allmulticast mode [ 1699.027264][T10953] bridge_slave_0: left promiscuous mode [ 1699.027436][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.706186][T14312] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1702.855847][T14312] usb 5-1: Using ep0 maxpacket: 16 [ 1702.858704][T14312] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1702.858733][T14312] usb 5-1: config 0 has no interface number 0 [ 1702.858767][T14312] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1702.863542][T14312] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 1702.863573][T14312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.863594][T14312] usb 5-1: Product: syz [ 1702.863608][T14312] usb 5-1: Manufacturer: syz [ 1702.863623][T14312] usb 5-1: SerialNumber: syz [ 1702.942953][T14312] usb 5-1: config 0 descriptor?? [ 1704.042915][T14312] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1705.033875][T14312] usb 5-1: USB disconnect, device number 9 [ 1705.336679][T10953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.726707][T10953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.793792][T10953] bond0 (unregistering): Released all slaves [ 1706.131670][T16423] hsr_slave_0: entered promiscuous mode [ 1706.133916][T16423] hsr_slave_1: entered promiscuous mode [ 1706.135016][T16423] debugfs: 'hsr0' already exists in 'hsr' [ 1706.135042][T16423] Cannot create hsr debugfs directory [ 1707.670837][T16497] hsr_slave_0: entered promiscuous mode [ 1707.672232][T16497] hsr_slave_1: entered promiscuous mode [ 1707.689770][T16497] debugfs: 'hsr0' already exists in 'hsr' [ 1707.689803][T16497] Cannot create hsr debugfs directory [ 1709.445856][ T9271] Bluetooth: hci6: command 0x0419 tx timeout [ 1710.226986][T10953] hsr_slave_0: left promiscuous mode [ 1710.265880][T10953] hsr_slave_1: left promiscuous mode [ 1710.266571][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.266590][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.309438][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.309460][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.521877][T10953] veth1_macvtap: left promiscuous mode [ 1710.521948][T10953] veth0_macvtap: left promiscuous mode [ 1710.522102][T10953] veth1_vlan: left promiscuous mode [ 1710.522208][T10953] veth0_vlan: left promiscuous mode [ 1713.065922][T15759] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1713.225860][T15759] usb 5-1: Using ep0 maxpacket: 16 [ 1713.228293][T15759] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1713.228321][T15759] usb 5-1: config 0 has no interface number 0 [ 1713.228355][T15759] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1713.231531][T15759] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 1713.231560][T15759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.231580][T15759] usb 5-1: Product: syz [ 1713.231595][T15759] usb 5-1: Manufacturer: syz [ 1713.231611][T15759] usb 5-1: SerialNumber: syz [ 1713.325244][T15759] usb 5-1: config 0 descriptor?? [ 1713.828813][ T37] audit: type=1800 audit(1771496355.231:106): pid=16666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2116" name="bus" dev="overlay" ino=386 res=0 errno=0 [ 1714.741456][T15759] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1715.060347][T15759] usb 5-1: USB disconnect, device number 10 [ 1717.713378][ T9271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1717.868003][ T9271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1717.892623][ T9271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1717.935988][ T9271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1717.955440][ T9271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1720.028502][ T8722] Bluetooth: hci2: command tx timeout [ 1720.718474][T10953] team0 (unregistering): Port device team_slave_1 removed [ 1721.826690][T10953] team0 (unregistering): Port device team_slave_0 removed [ 1722.102046][ T8722] Bluetooth: hci2: command 0x041b tx timeout [ 1724.168917][ T9271] Bluetooth: hci2: command 0x041b tx timeout [ 1727.835785][ T9271] Bluetooth: hci2: command 0x041b tx timeout [ 1728.416228][ T6101] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1728.629417][ T6101] usb 5-1: Using ep0 maxpacket: 16 [ 1728.631944][ T6101] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1728.631973][ T6101] usb 5-1: config 0 has no interface number 0 [ 1728.632009][ T6101] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1728.635194][ T6101] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 1728.635224][ T6101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.635245][ T6101] usb 5-1: Product: syz [ 1728.635260][ T6101] usb 5-1: Manufacturer: syz [ 1728.635275][ T6101] usb 5-1: SerialNumber: syz [ 1728.706817][ T6101] usb 5-1: config 0 descriptor?? [ 1729.236283][ T37] audit: type=1800 audit(1771496370.581:107): pid=16733 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2134" name="bus" dev="overlay" ino=422 res=0 errno=0 [ 1729.823253][ T6101] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1729.825848][ T6101] usb 5-1: USB disconnect, device number 11 [ 1729.846547][ T9271] Bluetooth: hci2: command 0x041b tx timeout [ 1730.402380][T16738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1730.412197][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.412246][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.973256][T14385] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1735.127024][T14385] usb 5-1: Using ep0 maxpacket: 16 [ 1735.129438][T14385] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1735.129467][T14385] usb 5-1: config 0 has no interface number 0 [ 1735.129502][T14385] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1735.133954][T14385] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 1735.134079][T14385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.134102][T14385] usb 5-1: Product: syz [ 1735.134117][T14385] usb 5-1: Manufacturer: syz [ 1735.134133][T14385] usb 5-1: SerialNumber: syz [ 1735.326354][T14385] usb 5-1: config 0 descriptor?? [ 1738.570172][ T9271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1738.592775][ T9271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1738.600156][ T9271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1738.613503][ T9271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1738.616144][ T9271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1738.903267][T10953] bridge_slave_1: left allmulticast mode [ 1738.903361][T10953] bridge_slave_1: left promiscuous mode [ 1738.934787][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.011085][T10953] bridge_slave_0: left allmulticast mode [ 1739.011119][T10953] bridge_slave_0: left promiscuous mode [ 1739.011385][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.122115][T10953] bridge_slave_1: left allmulticast mode [ 1739.122153][T10953] bridge_slave_1: left promiscuous mode [ 1739.122414][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.214940][T10953] bridge_slave_0: left allmulticast mode [ 1739.214976][T10953] bridge_slave_0: left promiscuous mode [ 1739.215255][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.805241][T14385] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 1739.843719][T14385] usb 5-1: USB disconnect, device number 12 [ 1740.725984][ T9271] Bluetooth: hci4: command tx timeout [ 1741.051132][T10953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.326021][T10953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.992423][ T9271] Bluetooth: hci4: command tx timeout [ 1743.088333][T10953] bond0 (unregistering): Released all slaves [ 1744.814805][T16796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.017224][T10953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.045795][ T8722] Bluetooth: hci4: command tx timeout [ 1745.169439][T10953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.256899][T10953] bond0 (unregistering): Released all slaves [ 1746.126356][T16686] chnl_net:caif_netlink_parms(): no params data found [ 1746.707738][T10953] hsr_slave_0: left promiscuous mode [ 1746.789151][T10953] hsr_slave_1: left promiscuous mode [ 1746.792588][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1746.826705][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.158153][ T8722] Bluetooth: hci4: command 0x0419 tx timeout [ 1748.619216][T10953] hsr_slave_0: left promiscuous mode [ 1748.687476][T10953] hsr_slave_1: left promiscuous mode [ 1748.688802][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.758082][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.585467][ T9271] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1750.167857][ T9271] Bluetooth: hci4: command 0x0419 tx timeout [ 1754.048344][T10953] team0 (unregistering): Port device team_slave_1 removed [ 1754.356927][T10953] team0 (unregistering): Port device team_slave_0 removed [ 1756.715380][T16846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1757.505928][ T5933] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1757.802634][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.802673][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.802698][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1757.802744][ T5933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1757.802769][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.808619][ T5933] usb 5-1: config 0 descriptor?? [ 1758.300188][ T5933] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1758.538586][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.539369][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.806136][ T8722] Bluetooth: hci4: command 0x0419 tx timeout [ 1760.280701][ T10] usb 5-1: USB disconnect, device number 13 [ 1761.653092][T10953] team0 (unregistering): Port device team_slave_1 removed [ 1762.971015][ T8722] Bluetooth: hci4: command 0x0419 tx timeout [ 1763.476708][T10953] team0 (unregistering): Port device team_slave_0 removed [ 1763.770066][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 1764.839481][T15759] ------------[ cut here ]------------ [ 1764.839499][T15759] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1764.839514][T15759] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:8/15759 [ 1764.839711][T15759] Modules linked in: [ 1764.839734][T15759] CPU: 1 UID: 0 PID: 15759 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1764.839762][T15759] Tainted: [L]=SOFTLOCKUP [ 1764.839769][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1764.839782][T15759] Workqueue: events drm_fb_helper_damage_work [ 1764.839823][T15759] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1764.839844][T15759] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1764.839862][T15759] RSP: 0018:ffffc900056478e0 EFLAGS: 00010246 [ 1764.839879][T15759] RAX: 1ffff1100492c800 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1764.839894][T15759] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1764.839909][T15759] RBP: ffffc900056479c8 R08: 0000000000000000 R09: 0000000000000000 [ 1764.839923][T15759] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1764.839938][T15759] R13: ffff888024964000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1764.839952][T15759] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 1764.839969][T15759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.839983][T15759] CR2: 0000001b33f15ff8 CR3: 000000005bed0000 CR4: 00000000003526f0 [ 1764.840003][T15759] Call Trace: [ 1764.840012][T15759] [ 1764.840027][T15759] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1764.840049][T15759] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1764.840120][T15759] ? rt_spin_unlock+0x160/0x200 [ 1764.840233][T15759] ? drm_vblank_get+0x147/0x260 [ 1764.840284][T15759] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1764.840314][T15759] drm_fb_helper_damage_work+0x131/0x6f0 [ 1764.840338][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.840367][T15759] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1764.840388][T15759] ? preempt_schedule_thunk+0x16/0x30 [ 1764.840437][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.840458][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.840483][T15759] process_scheduled_works+0xaec/0x17a0 [ 1764.840559][T15759] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.840589][T15759] ? assign_work+0x3d5/0x5e0 [ 1764.840619][T15759] worker_thread+0xa50/0xfc0 [ 1764.840674][T15759] kthread+0x388/0x470 [ 1764.840703][T15759] ? __pfx_worker_thread+0x10/0x10 [ 1764.840734][T15759] ? __pfx_kthread+0x10/0x10 [ 1764.840763][T15759] ret_from_fork+0x51e/0xb90 [ 1764.840808][T15759] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.840831][T15759] ? __switch_to+0xc7d/0x1400 [ 1764.840870][T15759] ? __pfx_kthread+0x10/0x10 [ 1764.840899][T15759] ret_from_fork_asm+0x1a/0x30 [ 1764.840947][T15759] [ 1764.840959][T15759] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1764.840976][T15759] CPU: 1 UID: 0 PID: 15759 Comm: kworker/1:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1764.841003][T15759] Tainted: [L]=SOFTLOCKUP [ 1764.841011][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1764.841024][T15759] Workqueue: events drm_fb_helper_damage_work [ 1764.841044][T15759] Call Trace: [ 1764.841053][T15759] [ 1764.841061][T15759] vpanic+0x1e0/0x670 [ 1764.841106][T15759] panic+0xc5/0xd0 [ 1764.841132][T15759] ? __pfx_panic+0x10/0x10 [ 1764.841169][T15759] ? ret_from_fork_asm+0x1a/0x30 [ 1764.841203][T15759] __warn+0x315/0x4a0 [ 1764.841228][T15759] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1764.841250][T15759] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1764.841272][T15759] __report_bug+0x29a/0x540 [ 1764.841357][T15759] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1764.841378][T15759] ? __pfx___report_bug+0x10/0x10 [ 1764.841425][T15759] report_bug_entry+0x19a/0x290 [ 1764.841450][T15759] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1764.841469][T15759] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1764.841487][T15759] handle_bug+0xca/0x200 [ 1764.841566][T15759] exc_invalid_op+0x1a/0x50 [ 1764.841594][T15759] asm_exc_invalid_op+0x1a/0x20 [ 1764.841637][T15759] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1764.841656][T15759] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1764.841672][T15759] RSP: 0018:ffffc900056478e0 EFLAGS: 00010246 [ 1764.841689][T15759] RAX: 1ffff1100492c800 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1764.841704][T15759] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1764.841719][T15759] RBP: ffffc900056479c8 R08: 0000000000000000 R09: 0000000000000000 [ 1764.841733][T15759] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1764.841747][T15759] R13: ffff888024964000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1764.841787][T15759] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1764.841807][T15759] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1764.841836][T15759] ? rt_spin_unlock+0x160/0x200 [ 1764.841860][T15759] ? drm_vblank_get+0x147/0x260 [ 1764.841891][T15759] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1764.841922][T15759] drm_fb_helper_damage_work+0x131/0x6f0 [ 1764.841945][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.841973][T15759] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1764.841995][T15759] ? preempt_schedule_thunk+0x16/0x30 [ 1764.842020][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.842041][T15759] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.842066][T15759] process_scheduled_works+0xaec/0x17a0 [ 1764.842120][T15759] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.842150][T15759] ? assign_work+0x3d5/0x5e0 [ 1764.842179][T15759] worker_thread+0xa50/0xfc0 [ 1764.842233][T15759] kthread+0x388/0x470 [ 1764.842261][T15759] ? __pfx_worker_thread+0x10/0x10 [ 1764.842283][T15759] ? __pfx_kthread+0x10/0x10 [ 1764.842312][T15759] ret_from_fork+0x51e/0xb90 [ 1764.842339][T15759] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.842362][T15759] ? __switch_to+0xc7d/0x1400 [ 1764.842387][T15759] ? __pfx_kthread+0x10/0x10 [ 1764.842416][T15759] ret_from_fork_asm+0x1a/0x30 [ 1764.842464][T15759] [ 1764.867065][T15759] Kernel Offset: disabled