last executing test programs: 6m27.059364766s ago: executing program 1 (id=2): mkdirat(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000300)='LL', 0x2, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000000)={0x18, 0x0, 0x5, 0x1c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6m25.343972884s ago: executing program 4 (id=5): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc103e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xfffffff8}}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x3}, 0x28) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6m25.207558597s ago: executing program 1 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x6, r5, 0x334, 0x10000, 0x0, 0x8, 0x7de95, 0x2, 0xffffffffffffff7b}) 6m23.720613815s ago: executing program 4 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"}) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 6m21.567297194s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x489, &(0x7f0000000600)={0x0, 0x3f73, 0x10, 0x0, 0x1a}, &(0x7f00000005c0)=0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0xc0044dff, &(0x7f0000004000)) getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000140)=""/56, &(0x7f0000000180)=0x38) 6m16.34613671s ago: executing program 4 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$I2C(0x0, 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m7.566323508s ago: executing program 32 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x6, r5, 0x334, 0x10000, 0x0, 0x8, 0x7de95, 0x2, 0xffffffffffffff7b}) 5m59.593723026s ago: executing program 33 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$I2C(0x0, 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20.550726205s ago: executing program 6 (id=32): mkdirat(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000300)='LL', 0x2, 0x2}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000000)={0x18, 0x0, 0x5, 0x1c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 19.89984857s ago: executing program 6 (id=474): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="46c6", 0x2) 19.491002984s ago: executing program 6 (id=475): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 17.384770372s ago: executing program 6 (id=479): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 16.627744013s ago: executing program 6 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x725e65a6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 10.107209888s ago: executing program 3 (id=506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418, 0x96b2}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f00000001c0)={0xe, 0x5, 0x7fffffffffffffff, 0x8, 0x401, 0x8}) fcntl$lock(r0, 0x25, 0x0) 6.808737734s ago: executing program 3 (id=519): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x30c}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40fffffffc0900010073797a310000000014"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.48934344s ago: executing program 3 (id=523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40ffff"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.161131504s ago: executing program 3 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x4000800) 5.90811377s ago: executing program 3 (id=529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x24}], 0x1, 0x0, 0x0, 0x4000081}, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418, 0x96b2}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f00000001c0)={0xe, 0x5, 0x7fffffffffffffff, 0x8, 0x401, 0x8}) fcntl$lock(r0, 0x25, 0x0) 4.912446976s ago: executing program 2 (id=530): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.905188257s ago: executing program 5 (id=531): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x1) 4.800545555s ago: executing program 0 (id=532): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xec}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.543934979s ago: executing program 2 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff81, 0x1, 0x3, 0xffffffe2}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.585531029s ago: executing program 5 (id=534): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x30c}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40fffffffc0900010073797a310000000014"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.468322365s ago: executing program 0 (id=535): sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2007, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000"], 0x108}}], 0x1, 0xc040) 3.409179899s ago: executing program 5 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) 3.395938043s ago: executing program 2 (id=537): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x1400037e) timerfd_create(0x7, 0x800) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) pipe2$watch_queue(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0086401, &(0x7f00000020c0)={0x6d, &(0x7f0000002040)=""/109}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x20}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') pread64(r5, &(0x7f0000002140)=""/1, 0x1, 0x80000001) 2.975374354s ago: executing program 0 (id=538): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40ffff"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.174848909s ago: executing program 0 (id=539): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 2.141538347s ago: executing program 5 (id=540): openat(0xffffffffffffff9c, 0x0, 0x197343, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$packet(r5, 0x0, 0x0, 0x48010, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xa1, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.012321864s ago: executing program 2 (id=541): r0 = userfaultfd(0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 471.336671ms ago: executing program 34 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x725e65a6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 449.199078ms ago: executing program 5 (id=543): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 430.983581ms ago: executing program 2 (id=544): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 388.108454ms ago: executing program 3 (id=545): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/181, 0xb5, 0x365) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000380)={0x0, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108) 387.5188ms ago: executing program 0 (id=546): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x30c}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40fffffffc0900010073797a310000000014"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 113.680648ms ago: executing program 2 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 70.927722ms ago: executing program 0 (id=548): io_uring_setup(0x7, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_complete(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) 0s ago: executing program 5 (id=549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x186}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40fffffffc0900010073797a310000000014"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 81.813386][ T5824] cgroup: Unknown subsys name 'net' [ 82.043641][ T5824] cgroup: Unknown subsys name 'cpuset' [ 82.079222][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.778300][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.907951][ T10] cfg80211: failed to load regulatory.db [ 88.217853][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.229918][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.230790][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.248522][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.277450][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.294221][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.294469][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.295996][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.309949][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.310775][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.320226][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.322777][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.326730][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.327533][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.330396][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.352408][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.355484][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.356209][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.357522][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.415325][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.439654][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.441117][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.441865][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.442994][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.443752][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.390377][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.452921][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.470022][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.621623][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.735781][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.420008][ T5154] Bluetooth: hci3: command tx timeout [ 90.420016][ T5841] Bluetooth: hci1: command tx timeout [ 90.420310][ T5843] Bluetooth: hci0: command tx timeout [ 90.422891][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425022][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.425579][ T5836] bridge_slave_0: entered allmulticast mode [ 90.427274][ T5836] bridge_slave_0: entered promiscuous mode [ 90.498891][ T5841] Bluetooth: hci2: command tx timeout [ 90.499068][ T5843] Bluetooth: hci4: command tx timeout [ 90.611471][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.611617][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.611815][ T5836] bridge_slave_1: entered allmulticast mode [ 90.613367][ T5836] bridge_slave_1: entered promiscuous mode [ 90.614801][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.614969][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.615083][ T5847] bridge_slave_0: entered allmulticast mode [ 90.616540][ T5847] bridge_slave_0: entered promiscuous mode [ 90.725435][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.725560][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.725683][ T5844] bridge_slave_0: entered allmulticast mode [ 90.727148][ T5844] bridge_slave_0: entered promiscuous mode [ 90.820349][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.820489][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.820672][ T5847] bridge_slave_1: entered allmulticast mode [ 90.823451][ T5847] bridge_slave_1: entered promiscuous mode [ 91.030039][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.030231][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.030409][ T5844] bridge_slave_1: entered allmulticast mode [ 91.033265][ T5844] bridge_slave_1: entered promiscuous mode [ 91.210090][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.210228][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.210431][ T5840] bridge_slave_0: entered allmulticast mode [ 91.213142][ T5840] bridge_slave_0: entered promiscuous mode [ 91.366187][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.450738][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.450937][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.451115][ T5840] bridge_slave_1: entered allmulticast mode [ 91.452923][ T5840] bridge_slave_1: entered promiscuous mode [ 91.454257][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.454370][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.454479][ T5845] bridge_slave_0: entered allmulticast mode [ 91.455931][ T5845] bridge_slave_0: entered promiscuous mode [ 91.532536][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.538094][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.730393][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.730555][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.730753][ T5845] bridge_slave_1: entered allmulticast mode [ 91.733527][ T5845] bridge_slave_1: entered promiscuous mode [ 91.738947][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.845485][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.001379][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.155444][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.277616][ T5836] team0: Port device team_slave_0 added [ 92.357263][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.362202][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.425676][ T5836] team0: Port device team_slave_1 added [ 92.428301][ T5847] team0: Port device team_slave_0 added [ 92.498691][ T5154] Bluetooth: hci1: command tx timeout [ 92.498860][ T5841] Bluetooth: hci0: command tx timeout [ 92.498935][ T5843] Bluetooth: hci3: command tx timeout [ 92.513760][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.516435][ T5844] team0: Port device team_slave_0 added [ 92.520074][ T5847] team0: Port device team_slave_1 added [ 92.578855][ T5841] Bluetooth: hci2: command tx timeout [ 92.578953][ T5843] Bluetooth: hci4: command tx timeout [ 92.762218][ T5844] team0: Port device team_slave_1 added [ 93.143146][ T5840] team0: Port device team_slave_0 added [ 93.371927][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.371944][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.371976][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.376286][ T5840] team0: Port device team_slave_1 added [ 93.377822][ T5845] team0: Port device team_slave_0 added [ 93.487503][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.487519][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.487537][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.490256][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.490269][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.490291][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.625244][ T5845] team0: Port device team_slave_1 added [ 93.626140][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.626150][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.626163][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.627245][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.627257][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.627279][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.841465][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.841481][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.841505][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.918839][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.918857][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.918881][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.028197][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.028213][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.028234][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.074267][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.074284][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.074308][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.180628][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.180643][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.180666][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.478309][ T5836] hsr_slave_0: entered promiscuous mode [ 94.480564][ T5836] hsr_slave_1: entered promiscuous mode [ 94.579734][ T5154] Bluetooth: hci1: command tx timeout [ 94.579834][ T5841] Bluetooth: hci0: command tx timeout [ 94.579946][ T5843] Bluetooth: hci3: command tx timeout [ 94.594936][ T5847] hsr_slave_0: entered promiscuous mode [ 94.596268][ T5847] hsr_slave_1: entered promiscuous mode [ 94.597931][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 94.598048][ T5847] Cannot create hsr debugfs directory [ 94.658613][ T5841] Bluetooth: hci2: command tx timeout [ 94.658756][ T5843] Bluetooth: hci4: command tx timeout [ 94.666486][ T5844] hsr_slave_0: entered promiscuous mode [ 94.667279][ T5844] hsr_slave_1: entered promiscuous mode [ 94.667841][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 94.667856][ T5844] Cannot create hsr debugfs directory [ 94.851864][ T5840] hsr_slave_0: entered promiscuous mode [ 94.853201][ T5840] hsr_slave_1: entered promiscuous mode [ 94.853906][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.853923][ T5840] Cannot create hsr debugfs directory [ 95.111286][ T5845] hsr_slave_0: entered promiscuous mode [ 95.112042][ T5845] hsr_slave_1: entered promiscuous mode [ 95.112591][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 95.112608][ T5845] Cannot create hsr debugfs directory [ 96.659588][ T5843] Bluetooth: hci3: command tx timeout [ 96.659620][ T5843] Bluetooth: hci0: command tx timeout [ 96.659641][ T5843] Bluetooth: hci1: command tx timeout [ 96.705245][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.738843][ T5841] Bluetooth: hci4: command tx timeout [ 96.738875][ T5841] Bluetooth: hci2: command tx timeout [ 96.756415][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.794378][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.845246][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.969359][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.007966][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.046478][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.104110][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.250467][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.297876][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.342794][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.394650][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.530345][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.580179][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.626475][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.686240][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.803963][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.872465][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.908540][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.952804][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.000525][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.068305][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.139251][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.139450][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.195605][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.211039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.211210][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.321084][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.381862][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.386207][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.386984][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.435695][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.435875][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.527821][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.553734][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.594211][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.594460][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.662910][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.663083][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.745019][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.802177][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.833011][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.833867][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.883588][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.884634][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.984047][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.038144][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.045581][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.105487][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.105633][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.135301][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.554367][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.622475][ T5836] veth0_vlan: entered promiscuous mode [ 99.727124][ T5836] veth1_vlan: entered promiscuous mode [ 99.762636][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.933686][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.017568][ T5847] veth0_vlan: entered promiscuous mode [ 100.023170][ T5836] veth0_macvtap: entered promiscuous mode [ 100.055882][ T5836] veth1_macvtap: entered promiscuous mode [ 100.076551][ T5847] veth1_vlan: entered promiscuous mode [ 100.086926][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.190571][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.235343][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.278753][ T5840] veth0_vlan: entered promiscuous mode [ 100.322341][ T4016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.353690][ T4016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.369131][ T4016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.386777][ T5847] veth0_macvtap: entered promiscuous mode [ 100.395395][ T4016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.398176][ T5840] veth1_vlan: entered promiscuous mode [ 100.466805][ T5847] veth1_macvtap: entered promiscuous mode [ 100.505750][ T5845] veth0_vlan: entered promiscuous mode [ 100.647642][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.648280][ T5845] veth1_vlan: entered promiscuous mode [ 100.711430][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.804828][ T5844] veth0_vlan: entered promiscuous mode [ 100.805250][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.807008][ T5840] veth0_macvtap: entered promiscuous mode [ 100.831475][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.833921][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.833944][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.869940][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.877553][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.903373][ T5840] veth1_macvtap: entered promiscuous mode [ 100.991721][ T5844] veth1_vlan: entered promiscuous mode [ 101.015941][ T4016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.015962][ T4016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.113901][ T5845] veth0_macvtap: entered promiscuous mode [ 101.185306][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.209074][ T5845] veth1_macvtap: entered promiscuous mode [ 101.277372][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.662406][ T1421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.662497][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.662509][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.678469][ T1421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.698176][ T1421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.699113][ T5844] veth0_macvtap: entered promiscuous mode [ 102.131435][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.413108][ T1421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.527885][ T5844] veth1_macvtap: entered promiscuous mode [ 102.548263][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.602679][ T4016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.602698][ T4016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.684938][ T1433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.688273][ T1433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.865285][ T1433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822922][ T1433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.965430][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.028500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.318420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.328819][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.418416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.202500][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.202520][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.494009][ T1134] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.514674][ T1134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.696547][ T5975] process 'syz.0.8' launched './file0' with NULL argv: empty string added [ 107.225849][ T5976] team0: Device gtp0 is of different type [ 107.423243][ T1134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.550253][ T1134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.779706][ T4016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.779724][ T4016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.250995][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.251014][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.422711][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.422731][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.539567][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.539580][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.748415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.072418][ T5988] Zero length message leads to an empty skb [ 111.470350][ T5992] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10'. [ 111.487780][ T5992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.033184][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.033206][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.119873][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.278436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.278608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.279591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.279648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.279682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.279715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.538302][ T6010] mmap: syz.0.12 (6010) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.276512][ T6020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.503504][ T6030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.235911][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 131.236026][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 131.239534][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 131.247975][ T6094] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.261825][ T6094] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.614888][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 132.616726][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 132.618246][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 132.619886][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 132.621365][ T6094] wlan0 speed is unknown, defaulting to 1000 [ 132.985313][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985415][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.057858][ T6103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.394265][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.397817][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.413918][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.415096][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.415909][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.817698][ T6114] team0: Device gtp0 is of different type [ 138.508654][ T5841] Bluetooth: hci5: command tx timeout [ 138.607771][ T6116] team0: Device gtp0 is of different type [ 141.278578][ T5841] Bluetooth: hci5: command tx timeout [ 142.493305][ T6107] wlan0 speed is unknown, defaulting to 1000 [ 142.789898][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.795854][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.796813][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.797514][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.797971][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.300634][ T5841] Bluetooth: hci5: command tx timeout [ 143.467062][ T6140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.248627][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 144.916386][ T5841] Bluetooth: hci2: command tx timeout [ 146.049061][ T5841] Bluetooth: hci5: command tx timeout [ 146.197781][ T6151] siw: device registration error -23 [ 147.098226][ T5841] Bluetooth: hci2: command tx timeout [ 148.178730][ T37] audit: type=1800 audit(1756924288.270:2): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.41" name="blkio.bfq.time_recursive" dev="tmpfs" ino=91 res=0 errno=0 [ 149.657612][ T5841] Bluetooth: hci2: command tx timeout [ 149.705257][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.893804][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.732884][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.747490][ T5841] Bluetooth: hci2: command tx timeout [ 152.316648][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.478211][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.714746][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.800971][ T6134] wlan0 speed is unknown, defaulting to 1000 [ 152.950121][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.777208][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.390043][ T6107] chnl_net:caif_netlink_parms(): no params data found [ 154.872957][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.384521][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.612110][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.109756][ T37] audit: type=1800 audit(1756924296.220:3): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.52" name="blkio.bfq.time_recursive" dev="tmpfs" ino=107 res=0 errno=0 [ 157.923672][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.923767][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.923942][ T6107] bridge_slave_0: entered allmulticast mode [ 157.926458][ T6107] bridge_slave_0: entered promiscuous mode [ 157.970201][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.970281][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.970450][ T6107] bridge_slave_1: entered allmulticast mode [ 157.972036][ T6107] bridge_slave_1: entered promiscuous mode [ 159.752814][ T6229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.187814][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 160.332201][ T6107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.380548][ T6107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.672886][ T6232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.762606][ T6243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.275907][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 164.277172][ T43] bridge_slave_1: left allmulticast mode [ 164.294468][ T43] bridge_slave_1: left promiscuous mode [ 164.309432][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.513936][ T43] bridge_slave_0: left allmulticast mode [ 164.518666][ T43] bridge_slave_0: left promiscuous mode [ 164.519324][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.763936][ T37] audit: type=1800 audit(1756924304.880:4): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.62" name="blkio.bfq.time_recursive" dev="tmpfs" ino=129 res=0 errno=0 [ 171.147119][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.389529][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.070355][ T43] bond0 (unregistering): Released all slaves [ 173.933614][ T6107] team0: Port device team_slave_0 added [ 174.017218][ T6107] team0: Port device team_slave_1 added [ 175.935482][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.017767][ T6310] syz.3.76 (6310) used greatest stack depth: 18872 bytes left [ 177.777085][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.934216][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.543425][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.617534][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.138721][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.980270][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.283413][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.283429][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.283453][ T6107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.334389][ T6134] chnl_net:caif_netlink_parms(): no params data found [ 180.389792][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.389809][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.389833][ T6107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.974031][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.044528][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.286342][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.453242][ T37] audit: type=1800 audit(1756924322.570:5): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.81" name="blkio.bfq.time_recursive" dev="tmpfs" ino=129 res=0 errno=0 [ 182.759040][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.890141][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.721852][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.740483][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.808972][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.389535][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.671345][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.718017][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 184.864905][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.914948][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.024683][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.430969][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.972495][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.110351][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.605392][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.731039][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.048074][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.703310][ T6107] hsr_slave_0: entered promiscuous mode [ 188.704825][ T6107] hsr_slave_1: entered promiscuous mode [ 188.728673][ T6107] debugfs: 'hsr0' already exists in 'hsr' [ 188.728727][ T6107] Cannot create hsr debugfs directory [ 188.962868][ T43] hsr_slave_0: left promiscuous mode [ 189.000097][ T43] hsr_slave_1: left promiscuous mode [ 189.001263][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.001356][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.066891][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.066919][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.313797][ T43] veth1_macvtap: left promiscuous mode [ 189.331744][ T43] veth0_macvtap: left promiscuous mode [ 189.332122][ T43] veth1_vlan: left promiscuous mode [ 189.332500][ T43] veth0_vlan: left promiscuous mode [ 192.753012][ T6395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.931283][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.936821][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.973218][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.020843][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.022874][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.436331][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436412][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.467854][ T43] team0 (unregistering): Port device team_slave_1 removed [ 195.742205][ T43] team0 (unregistering): Port device team_slave_0 removed [ 196.100780][ T5843] Bluetooth: hci4: command tx timeout [ 198.178545][ T5843] Bluetooth: hci4: command tx timeout [ 198.302121][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 200.057261][ T6397] wlan0 speed is unknown, defaulting to 1000 [ 200.283964][ T5843] Bluetooth: hci4: command tx timeout [ 202.338507][ T5843] Bluetooth: hci4: command tx timeout [ 202.690300][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.709703][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.723808][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.931731][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.932614][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.312264][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 204.808452][ T6453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.036011][ T5843] Bluetooth: hci6: command tx timeout [ 207.058595][ T5843] Bluetooth: hci6: command tx timeout [ 207.368064][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 209.245056][ T5843] Bluetooth: hci6: command tx timeout [ 209.747929][ T6440] wlan0 speed is unknown, defaulting to 1000 [ 211.329103][ T5841] Bluetooth: hci6: command tx timeout [ 211.560237][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.560327][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.560500][ T6397] bridge_slave_0: entered allmulticast mode [ 211.562332][ T6397] bridge_slave_0: entered promiscuous mode [ 211.768062][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.790395][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.790578][ T6397] bridge_slave_1: entered allmulticast mode [ 211.818498][ T6397] bridge_slave_1: entered promiscuous mode [ 211.859501][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.859691][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.859786][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 212.682244][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.823589][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.086277][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.691166][ T6397] team0: Port device team_slave_0 added [ 218.087035][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.160215][ T6397] team0: Port device team_slave_1 added [ 218.927391][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.150082][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.150093][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.150107][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.226230][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.226241][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.226261][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.781230][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.786852][ T6397] hsr_slave_0: entered promiscuous mode [ 227.792775][ T6397] hsr_slave_1: entered promiscuous mode [ 227.795538][ T6397] debugfs: 'hsr0' already exists in 'hsr' [ 227.795563][ T6397] Cannot create hsr debugfs directory [ 228.300514][ T6440] chnl_net:caif_netlink_parms(): no params data found [ 228.781138][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.166236][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.479545][ T6567] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 229.500115][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.533306][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.829925][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.367768][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.458995][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.753582][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.806856][ T6574] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 231.624856][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.029340][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.790965][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.851826][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.213237][ T6586] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 233.438445][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.523578][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.406951][ T6587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.519059][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.647918][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.937837][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.051724][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.820306][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.310377][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.037273][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.427603][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 238.435718][ T6603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.497929][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.450331][ T6614] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 240.252022][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.357930][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.628183][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 240.805421][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.805757][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.805977][ T6440] bridge_slave_0: entered allmulticast mode [ 240.835711][ T6440] bridge_slave_0: entered promiscuous mode [ 240.969564][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.969712][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.969891][ T6440] bridge_slave_1: entered allmulticast mode [ 241.007729][ T6440] bridge_slave_1: entered promiscuous mode [ 241.015203][ T43] bridge_slave_1: left allmulticast mode [ 241.015231][ T43] bridge_slave_1: left promiscuous mode [ 241.015529][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.132585][ T43] bridge_slave_0: left allmulticast mode [ 241.132617][ T43] bridge_slave_0: left promiscuous mode [ 241.133383][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.182530][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.430082][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.554105][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.983734][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.441744][ T43] bridge_slave_1: left allmulticast mode [ 242.441776][ T43] bridge_slave_1: left promiscuous mode [ 242.442058][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.459149][ T6629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.835554][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.437354][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.611658][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.631757][ T43] bridge_slave_0: left allmulticast mode [ 243.631789][ T43] bridge_slave_0: left promiscuous mode [ 243.632049][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.930750][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.207455][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.425460][ T6635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.339417][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.439411][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.519290][ T43] bond0 (unregistering): Released all slaves [ 245.759122][ T43] bond0 (unregistering): Released all slaves [ 247.011417][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.059845][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.105800][ T43] bond0 (unregistering): Released all slaves [ 247.138992][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 247.139054][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 249.648335][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.436466][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 252.647954][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.690354][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.542679][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.546332][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.555880][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.570233][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.575447][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.037483][ T6440] team0: Port device team_slave_0 added [ 255.134002][ T6440] team0: Port device team_slave_1 added [ 255.868751][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.868829][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.521614][ T6702] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 256.751841][ T5843] Bluetooth: hci2: command tx timeout [ 257.370443][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.325668][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.325679][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.325692][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.340409][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.340424][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.340447][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.819186][ T5843] Bluetooth: hci2: command tx timeout [ 259.878880][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.907126][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.119071][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.154497][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.340629][ T6717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.431678][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.594501][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.646724][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.861469][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 260.898648][ T5843] Bluetooth: hci2: command tx timeout [ 261.026330][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.218663][ T6683] wlan0 speed is unknown, defaulting to 1000 [ 261.529264][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.558549][ T43] hsr_slave_0: left promiscuous mode [ 262.702160][ T43] hsr_slave_1: left promiscuous mode [ 262.703117][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.741294][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.793045][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.805547][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.806973][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.812990][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.816709][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.978550][ T59] Bluetooth: hci2: command tx timeout [ 263.022247][ T43] hsr_slave_0: left promiscuous mode [ 263.070944][ T43] hsr_slave_1: left promiscuous mode [ 263.071921][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.071952][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.127848][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.127880][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.443532][ T43] veth1_macvtap: left promiscuous mode [ 263.443650][ T43] veth0_macvtap: left promiscuous mode [ 263.443964][ T43] veth1_vlan: left promiscuous mode [ 263.444174][ T43] veth0_vlan: left promiscuous mode [ 264.859834][ T43] team0 (unregistering): Port device team_slave_1 removed [ 264.898632][ T59] Bluetooth: hci4: command tx timeout [ 265.184805][ T43] team0 (unregistering): Port device team_slave_0 removed [ 267.005794][ T59] Bluetooth: hci4: command tx timeout [ 269.067551][ T59] Bluetooth: hci4: command tx timeout [ 271.138496][ T59] Bluetooth: hci4: command tx timeout [ 278.321335][ T43] team0 (unregistering): Port device team_slave_1 removed [ 278.909736][ T43] team0 (unregistering): Port device team_slave_0 removed [ 288.425650][ T6866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.650142][ T6867] kAFS: No cell specified [ 290.199338][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 290.924111][ T6667] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 291.084102][ T6732] wlan0 speed is unknown, defaulting to 1000 [ 291.229921][ T6667] usb 1-1: Using ep0 maxpacket: 32 [ 291.264147][ T6667] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 291.264176][ T6667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.576535][ T6667] usb 1-1: config 0 descriptor?? [ 292.617700][ T6667] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 292.722348][ T6667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.724238][ T6667] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 292.724329][ T6667] usb 1-1: media controller created [ 292.781514][ T6667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.170966][ T6667] az6027: usb out operation failed. (-71) [ 293.170983][ T6667] stb0899_attach: Driver disabled by Kconfig [ 293.170993][ T6667] az6027: no front-end attached [ 293.170993][ T6667] [ 293.172570][ T6667] az6027: usb out operation failed. (-71) [ 293.172598][ T6667] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 293.268807][ T6667] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 293.406698][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 293.427238][ T6667] dvb-usb: schedule remote query interval to 400 msecs. [ 293.427264][ T6667] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 293.635590][ T6667] usb 1-1: USB disconnect, device number 2 [ 294.853223][ T6667] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 296.858286][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.868936][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.869496][ T6683] bridge_slave_0: entered allmulticast mode [ 296.874509][ T6683] bridge_slave_0: entered promiscuous mode [ 296.908534][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.908675][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.908920][ T6683] bridge_slave_1: entered allmulticast mode [ 296.940681][ T6683] bridge_slave_1: entered promiscuous mode [ 297.190392][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 298.662806][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.702543][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.800135][ T6683] team0: Port device team_slave_0 added [ 299.826309][ T6683] team0: Port device team_slave_1 added [ 300.690508][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.690524][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.690547][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.731192][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.731330][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.731583][ T6732] bridge_slave_0: entered allmulticast mode [ 300.734339][ T6732] bridge_slave_0: entered promiscuous mode [ 300.776274][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.776290][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.776313][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.788838][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.788981][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.789228][ T6732] bridge_slave_1: entered allmulticast mode [ 300.791897][ T6732] bridge_slave_1: entered promiscuous mode [ 301.193213][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.452507][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.224384][ T6683] hsr_slave_0: entered promiscuous mode [ 303.232567][ T6683] hsr_slave_1: entered promiscuous mode [ 303.236176][ T6683] debugfs: 'hsr0' already exists in 'hsr' [ 303.236205][ T6683] Cannot create hsr debugfs directory [ 303.397138][ T6732] team0: Port device team_slave_0 added [ 303.650572][ T6732] team0: Port device team_slave_1 added [ 304.390989][ T43] bridge_slave_1: left allmulticast mode [ 304.391022][ T43] bridge_slave_1: left promiscuous mode [ 304.391281][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.460817][ T43] bridge_slave_0: left allmulticast mode [ 304.460851][ T43] bridge_slave_0: left promiscuous mode [ 304.461312][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.623615][ T43] bridge_slave_1: left allmulticast mode [ 304.623638][ T43] bridge_slave_1: left promiscuous mode [ 304.623877][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.780138][ T43] bridge_slave_0: left allmulticast mode [ 304.780169][ T43] bridge_slave_0: left promiscuous mode [ 304.780448][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.168698][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 305.428634][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 305.430365][ T45] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 305.430380][ T45] usb 3-1: config 0 has no interface number 0 [ 305.430410][ T45] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.430423][ T45] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 305.430436][ T45] usb 3-1: config 0 interface 126 has no altsetting 0 [ 305.432445][ T45] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 305.432461][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.432471][ T45] usb 3-1: Product: syz [ 305.432478][ T45] usb 3-1: Manufacturer: syz [ 305.432485][ T45] usb 3-1: SerialNumber: syz [ 305.521094][ T45] usb 3-1: config 0 descriptor?? [ 305.524560][ T6999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.528283][ T6999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.840761][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.946884][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.068864][ T43] bond0 (unregistering): Released all slaves [ 306.367468][ T45] ir_usb 3-1:0.126: IR Dongle converter detected [ 306.374933][ T45] usb 3-1: IRDA class descriptor not found, device not bound [ 307.128697][ T45] usb 3-1: USB disconnect, device number 2 [ 311.132213][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.427305][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.478618][ T6666] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 311.503342][ T43] bond0 (unregistering): Released all slaves [ 311.632242][ T6666] usb 4-1: Using ep0 maxpacket: 32 [ 311.639404][ T6666] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 311.639430][ T6666] usb 4-1: config 0 has no interface number 0 [ 311.639479][ T6666] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 311.639503][ T6666] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 311.639526][ T6666] usb 4-1: config 0 interface 126 has no altsetting 0 [ 311.690385][ T6666] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 311.690402][ T6666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.690412][ T6666] usb 4-1: Product: syz [ 311.690419][ T6666] usb 4-1: Manufacturer: syz [ 311.690426][ T6666] usb 4-1: SerialNumber: syz [ 311.737979][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.737997][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.738024][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.754996][ T6666] usb 4-1: config 0 descriptor?? [ 311.755997][ T7028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.756180][ T7028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.874437][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.874448][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.874465][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.301778][ T6666] ir_usb 4-1:0.126: IR Dongle converter detected [ 312.319366][ T6666] usb 4-1: IRDA class descriptor not found, device not bound [ 312.364880][ T6666] usb 4-1: USB disconnect, device number 2 [ 312.947029][ T6732] hsr_slave_0: entered promiscuous mode [ 312.950226][ T6732] hsr_slave_1: entered promiscuous mode [ 312.951189][ T6732] debugfs: 'hsr0' already exists in 'hsr' [ 312.951211][ T6732] Cannot create hsr debugfs directory [ 313.013077][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.062304][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.541631][ T43] hsr_slave_0: left promiscuous mode [ 314.605128][ T43] hsr_slave_1: left promiscuous mode [ 314.607376][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.683554][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.309605][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.313148][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.313219][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.397016][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.407978][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.418469][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.421311][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.599765][ T43] team0 (unregistering): Port device team_slave_1 removed [ 318.895227][ T43] team0 (unregistering): Port device team_slave_0 removed [ 319.128788][ T5964] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 319.278480][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 319.285344][ T5964] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 319.285370][ T5964] usb 4-1: config 0 has no interface number 0 [ 319.285414][ T5964] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.285437][ T5964] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 319.285457][ T5964] usb 4-1: config 0 interface 126 has no altsetting 0 [ 319.287918][ T5964] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 319.287946][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.287964][ T5964] usb 4-1: Product: syz [ 319.287977][ T5964] usb 4-1: Manufacturer: syz [ 319.287990][ T5964] usb 4-1: SerialNumber: syz [ 319.633163][ T5964] usb 4-1: config 0 descriptor?? [ 319.633994][ T7067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.634120][ T7067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.711505][ T59] Bluetooth: hci5: command tx timeout [ 320.994334][ T5964] ir_usb 4-1:0.126: IR Dongle converter detected [ 320.996727][ T5964] usb 4-1: IRDA class descriptor not found, device not bound [ 321.224961][ T5964] usb 4-1: USB disconnect, device number 3 [ 321.508022][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.523910][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.526229][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.529347][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.533147][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.757931][ T59] Bluetooth: hci5: command tx timeout [ 323.633431][ T59] Bluetooth: hci2: command tx timeout [ 324.876857][ T59] Bluetooth: hci5: command tx timeout [ 325.798606][ T59] Bluetooth: hci2: command tx timeout [ 326.065442][ T43] team0 (unregistering): Port device team_slave_1 removed [ 327.425346][ T59] Bluetooth: hci5: command tx timeout [ 328.758494][ T59] Bluetooth: hci2: command tx timeout [ 328.963102][ T43] team0 (unregistering): Port device team_slave_0 removed [ 330.856583][ T7144] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 331.468536][ T59] Bluetooth: hci2: command tx timeout [ 332.262785][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.442725][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.796656][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.496607][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.550265][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.763189][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.337038][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.395679][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.302513][ T7059] wlan0 speed is unknown, defaulting to 1000 [ 335.396955][ T7085] wlan0 speed is unknown, defaulting to 1000 [ 335.619436][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.769287][ T7172] netlink: 96 bytes leftover after parsing attributes in process `syz.0.252'. [ 335.781118][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.978046][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.010621][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.832079][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.508777][ T7184] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 338.451598][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.714982][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.394631][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.901609][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.682077][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 341.913604][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 344.739372][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.739499][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.739672][ T7059] bridge_slave_0: entered allmulticast mode [ 344.744023][ T7059] bridge_slave_0: entered promiscuous mode [ 344.953400][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.953496][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.953624][ T7059] bridge_slave_1: entered allmulticast mode [ 344.955254][ T7059] bridge_slave_1: entered promiscuous mode [ 344.956365][ T43] bridge_slave_1: left allmulticast mode [ 344.956384][ T43] bridge_slave_1: left promiscuous mode [ 344.956662][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.220718][ T43] bridge_slave_0: left allmulticast mode [ 345.220740][ T43] bridge_slave_0: left promiscuous mode [ 345.223959][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.327106][ T43] bridge_slave_1: left allmulticast mode [ 345.327142][ T43] bridge_slave_1: left promiscuous mode [ 345.327450][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.419250][ T43] bridge_slave_0: left allmulticast mode [ 345.419283][ T43] bridge_slave_0: left promiscuous mode [ 345.419556][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.019493][ T6667] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 348.168596][ T6667] usb 1-1: Using ep0 maxpacket: 32 [ 348.173707][ T6667] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 348.173734][ T6667] usb 1-1: config 0 has no interface number 0 [ 348.173812][ T6667] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 348.173837][ T6667] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 348.173860][ T6667] usb 1-1: config 0 interface 126 has no altsetting 0 [ 348.177195][ T6667] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 348.177220][ T6667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.177240][ T6667] usb 1-1: Product: syz [ 348.177254][ T6667] usb 1-1: Manufacturer: syz [ 348.177268][ T6667] usb 1-1: SerialNumber: syz [ 348.287740][ T6667] usb 1-1: config 0 descriptor?? [ 348.289239][ T7260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.303245][ T7260] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.521059][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.682505][ T7264] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 349.574561][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.661754][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.756931][ T43] bond0 (unregistering): Released all slaves [ 349.860378][ T6667] ir_usb 1-1:0.126: IR Dongle converter detected [ 349.863311][ T6667] usb 1-1: IRDA class descriptor not found, device not bound [ 349.939988][ T6667] usb 1-1: USB disconnect, device number 3 [ 350.528120][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.682828][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.958933][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.016724][ T43] bond0 (unregistering): Released all slaves [ 351.772631][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.127054][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.135654][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.135776][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.136004][ T7085] bridge_slave_0: entered allmulticast mode [ 353.384984][ T7287] netlink: 96 bytes leftover after parsing attributes in process `syz.0.273'. [ 353.500879][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.162732][ T7085] bridge_slave_0: entered promiscuous mode [ 355.345221][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.345298][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.345459][ T7085] bridge_slave_1: entered allmulticast mode [ 355.346997][ T7085] bridge_slave_1: entered promiscuous mode [ 355.350286][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.760792][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.098560][ T43] hsr_slave_0: left promiscuous mode [ 357.114269][ T43] hsr_slave_1: left promiscuous mode [ 357.114932][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.149520][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.352085][ T43] hsr_slave_0: left promiscuous mode [ 357.398789][ T43] hsr_slave_1: left promiscuous mode [ 357.399812][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.449065][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.502574][ T43] team0 (unregistering): Port device team_slave_1 removed [ 359.701372][ T43] team0 (unregistering): Port device team_slave_0 removed [ 359.822606][ T7320] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 359.938710][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.292052][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.626965][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.684404][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.752886][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.026432][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.823403][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.978294][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.849946][ T43] team0 (unregistering): Port device team_slave_1 removed [ 362.981141][ T43] team0 (unregistering): Port device team_slave_0 removed [ 363.696771][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.850666][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.078902][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.719677][ T7333] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 364.780938][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.875075][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.536361][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.622253][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.698196][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.724329][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.145692][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.195168][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.208679][ T7059] team0: Port device team_slave_0 added [ 366.473596][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.490656][ T7059] team0: Port device team_slave_1 added [ 366.933328][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.027481][ T7085] team0: Port device team_slave_0 added [ 367.253656][ T7085] team0: Port device team_slave_1 added [ 367.386635][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.386652][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.386676][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.518745][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.518756][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.518769][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.568485][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 367.674797][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.674808][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.674821][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.718447][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 367.730191][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.730210][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.730252][ T5925] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 367.730280][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.804505][ T5925] usb 1-1: config 0 descriptor?? [ 367.847014][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.847033][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.847057][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.274384][ T5925] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 368.274424][ T5925] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 368.274450][ T5925] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 368.274477][ T5925] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 368.274501][ T5925] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 368.274524][ T5925] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description [ 368.325844][ T5925] savu 0003:1E7D:2D5A.0001: parse failed [ 368.325890][ T5925] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 368.455683][ T5886] usb 1-1: USB disconnect, device number 4 [ 368.894073][ T7059] hsr_slave_0: entered promiscuous mode [ 368.896861][ T7059] hsr_slave_1: entered promiscuous mode [ 368.899107][ T7059] debugfs: 'hsr0' already exists in 'hsr' [ 368.899132][ T7059] Cannot create hsr debugfs directory [ 369.177698][ T7085] hsr_slave_0: entered promiscuous mode [ 369.199706][ T7085] hsr_slave_1: entered promiscuous mode [ 369.207406][ T7085] debugfs: 'hsr0' already exists in 'hsr' [ 369.207433][ T7085] Cannot create hsr debugfs directory [ 370.336428][ T7369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.691666][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.745668][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.756166][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.760299][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.764741][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.555617][ T7085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.858557][ T5843] Bluetooth: hci4: command tx timeout [ 377.874221][ T7085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.045668][ T1059] bridge_slave_1: left allmulticast mode [ 378.046230][ T1059] bridge_slave_1: left promiscuous mode [ 378.047586][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.390417][ T1059] bridge_slave_0: left allmulticast mode [ 378.390440][ T1059] bridge_slave_0: left promiscuous mode [ 378.390612][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.755227][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.755285][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.279149][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.505796][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.630227][ T1059] bond0 (unregistering): Released all slaves [ 379.729701][ T7085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 379.938672][ T5843] Bluetooth: hci4: command tx timeout [ 380.055111][ T7401] wlan0 speed is unknown, defaulting to 1000 [ 380.479099][ T1059] hsr_slave_0: left promiscuous mode [ 380.600302][ T1059] hsr_slave_1: left promiscuous mode [ 380.601241][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.699468][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.227554][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.251029][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.253142][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.255292][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.256508][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.586572][ T7444] netlink: 96 bytes leftover after parsing attributes in process `syz.0.305'. [ 381.595178][ T7444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.021954][ T5843] Bluetooth: hci4: command tx timeout [ 383.310055][ T7449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.877334][ T5843] Bluetooth: hci5: command tx timeout [ 384.077509][ T7448] syz.0.306 (7448) used greatest stack depth: 18296 bytes left [ 384.258307][ T5843] Bluetooth: hci4: command tx timeout [ 385.939307][ T5843] Bluetooth: hci5: command tx timeout [ 386.059734][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 386.181244][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 386.623427][ T7458] netlink: 96 bytes leftover after parsing attributes in process `syz.2.308'. [ 386.731400][ T7458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.842651][ T7454] team0: Device gtp1 is of different type [ 388.042487][ T5843] Bluetooth: hci5: command tx timeout [ 388.209038][ T7462] team0: Device gtp0 is of different type [ 389.828516][ T6667] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 390.098486][ T5843] Bluetooth: hci5: command tx timeout [ 390.124987][ T6667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.125049][ T6667] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 390.125061][ T6667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.100697][ T6667] usb 1-1: config 0 descriptor?? [ 391.275192][ T6667] pwc: Askey VC010 type 2 USB webcam detected. [ 391.725257][ T6667] pwc: recv_control_msg error -32 req 02 val 2b00 [ 391.784396][ T6667] pwc: recv_control_msg error -32 req 02 val 2700 [ 391.785248][ T6667] pwc: recv_control_msg error -32 req 02 val 2c00 [ 391.808559][ T6667] pwc: recv_control_msg error -32 req 04 val 1000 [ 391.812857][ T6667] pwc: recv_control_msg error -32 req 04 val 1300 [ 391.818801][ T6667] pwc: recv_control_msg error -32 req 04 val 1400 [ 391.841273][ T6667] pwc: recv_control_msg error -32 req 02 val 2000 [ 391.846452][ T6667] pwc: recv_control_msg error -32 req 02 val 2100 [ 392.007210][ T7439] wlan0 speed is unknown, defaulting to 1000 [ 392.057688][ T6667] pwc: recv_control_msg error -71 req 02 val 2500 [ 392.065357][ T6667] pwc: recv_control_msg error -71 req 02 val 2400 [ 392.065978][ T6667] pwc: recv_control_msg error -71 req 02 val 2600 [ 392.068283][ T6667] pwc: recv_control_msg error -71 req 02 val 2900 [ 392.090692][ T6667] pwc: recv_control_msg error -71 req 02 val 2800 [ 392.092259][ T6667] pwc: recv_control_msg error -71 req 04 val 1100 [ 392.093362][ T6667] pwc: recv_control_msg error -71 req 04 val 1200 [ 392.163922][ T6667] pwc: Registered as video103. [ 392.166205][ T6667] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 392.201539][ T6667] usb 1-1: USB disconnect, device number 5 [ 394.091846][ T7491] team0: Device gtp1 is of different type [ 394.613581][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 396.194301][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.194456][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.194708][ T7401] bridge_slave_0: entered allmulticast mode [ 396.228940][ T7401] bridge_slave_0: entered promiscuous mode [ 396.712876][ T7509] siw: device registration error -23 [ 397.542678][ T7511] netlink: 96 bytes leftover after parsing attributes in process `syz.3.317'. [ 397.557275][ T7511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.947311][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.947455][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.947692][ T7401] bridge_slave_1: entered allmulticast mode [ 399.973745][ T7401] bridge_slave_1: entered promiscuous mode [ 400.366747][ T7531] siw: device registration error -23 [ 406.152165][ T7554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.152194][ T7554] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 406.239364][ T7554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.239386][ T7554] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 406.326958][ T7554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.326980][ T7554] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 406.451511][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.477765][ T7554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.477786][ T7554] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 406.503853][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.504880][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 407.750421][ T7554] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 407.750443][ T7554] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 407.788984][ T7566] team0: Device gtp0 is of different type [ 408.803943][ T7401] team0: Port device team_slave_0 added [ 409.042619][ T7583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.817301][ T7401] team0: Port device team_slave_1 added [ 413.299352][ T7618] netlink: 220 bytes leftover after parsing attributes in process `syz.3.337'. [ 413.564053][ T7614] team0: Device gtp0 is of different type [ 415.046955][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.046970][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.046995][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.505397][ T7632] block device autoloading is deprecated and will be removed. [ 415.563352][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.563363][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.563377][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.871616][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.871768][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.872004][ T7439] bridge_slave_0: entered allmulticast mode [ 415.909133][ T7439] bridge_slave_0: entered promiscuous mode [ 416.032271][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.032416][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.032660][ T7439] bridge_slave_1: entered allmulticast mode [ 416.035761][ T7439] bridge_slave_1: entered promiscuous mode [ 419.062704][ T7655] syz.3.344 (7655) used greatest stack depth: 18008 bytes left [ 419.132757][ T7401] hsr_slave_0: entered promiscuous mode [ 419.145890][ T7401] hsr_slave_1: entered promiscuous mode [ 419.146807][ T7401] debugfs: 'hsr0' already exists in 'hsr' [ 419.146833][ T7401] Cannot create hsr debugfs directory [ 419.169405][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.370374][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.060929][ T7676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.765481][ T7439] team0: Port device team_slave_0 added [ 422.080554][ T7439] team0: Port device team_slave_1 added [ 422.364022][ T1059] bridge_slave_1: left allmulticast mode [ 422.364116][ T1059] bridge_slave_1: left promiscuous mode [ 422.364379][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.455384][ T1059] bridge_slave_0: left allmulticast mode [ 422.455417][ T1059] bridge_slave_0: left promiscuous mode [ 422.455697][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.579292][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.649513][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.692566][ T1059] bond0 (unregistering): Released all slaves [ 425.129137][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.129154][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.129178][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.242385][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.242401][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.242425][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.101825][ T1059] hsr_slave_0: left promiscuous mode [ 426.141007][ T1059] hsr_slave_1: left promiscuous mode [ 426.142096][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.181147][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.305394][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 428.429348][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 430.678518][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 430.838597][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 430.840969][ T5886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.841000][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.841024][ T5886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.841047][ T5886] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.841088][ T5886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.841110][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.276309][ T5886] usb 1-1: GET_CAPABILITIES returned 0 [ 431.276371][ T5886] usbtmc 1-1:16.0: can't read capabilities [ 431.896059][ T5886] usb 1-1: USB disconnect, device number 6 [ 432.220519][ T7439] hsr_slave_0: entered promiscuous mode [ 432.221880][ T7439] hsr_slave_1: entered promiscuous mode [ 432.222753][ T7439] debugfs: 'hsr0' already exists in 'hsr' [ 432.222775][ T7439] Cannot create hsr debugfs directory [ 435.117536][ T7802] binder: BINDER_SET_CONTEXT_MGR already set [ 435.117593][ T7802] binder: 7801:7802 ioctl 4018620d 2000000002c0 returned -16 [ 436.399908][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 436.560772][ T5886] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 436.560832][ T5886] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 436.560855][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 436.564176][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 436.564204][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 436.564224][ T5886] usb 3-1: Product: syz [ 436.564238][ T5886] usb 3-1: Manufacturer: syz [ 436.564252][ T5886] usb 3-1: SerialNumber: syz [ 436.678602][ T5886] usb 3-1: config 0 descriptor?? [ 436.693741][ T5886] hub 3-1:0.0: bad descriptor, ignoring hub [ 436.693780][ T5886] hub 3-1:0.0: probe with driver hub failed with error -5 [ 436.730647][ T5886] usb 3-1: selecting invalid altsetting 0 [ 436.949290][ T7836] netlink: 96 bytes leftover after parsing attributes in process `syz.0.381'. [ 437.087033][ T5886] usb 3-1: USB disconnect, device number 3 [ 437.278230][ T6575] udevd[6575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.390446][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.540016][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.577484][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.592939][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.613270][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.614333][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.664130][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.698974][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.699449][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.701617][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.702404][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.748643][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 438.901488][ T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 438.901544][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 438.901567][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.907532][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 438.907559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 438.907577][ T9] usb 4-1: Product: syz [ 438.907590][ T9] usb 4-1: Manufacturer: syz [ 438.907604][ T9] usb 4-1: SerialNumber: syz [ 439.089811][ T9] usb 4-1: config 0 descriptor?? [ 439.111705][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 439.111746][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 439.141371][ T9] usb 4-1: selecting invalid altsetting 0 [ 439.653707][ T9] usb 4-1: USB disconnect, device number 4 [ 440.005122][ T7849] wlan0 speed is unknown, defaulting to 1000 [ 440.185863][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.185935][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.831801][ T5843] Bluetooth: hci2: command tx timeout [ 441.380765][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.404529][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.405652][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.406748][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.407480][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.997523][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.864298][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.908531][ T5843] Bluetooth: hci2: command tx timeout [ 443.523323][ T7887] wlan0 speed is unknown, defaulting to 1000 [ 443.538599][ T5843] Bluetooth: hci4: command tx timeout [ 444.876209][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.935809][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.978607][ T5843] Bluetooth: hci2: command tx timeout [ 445.139256][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 445.327074][ T1059] bridge_slave_1: left allmulticast mode [ 445.327104][ T1059] bridge_slave_1: left promiscuous mode [ 445.327362][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.440653][ T1059] bridge_slave_0: left allmulticast mode [ 445.440685][ T1059] bridge_slave_0: left promiscuous mode [ 445.440998][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.548695][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 445.618559][ T5843] Bluetooth: hci4: command tx timeout [ 445.708488][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 445.711030][ T5886] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.711106][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.711133][ T5886] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.711157][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.711181][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.712688][ T5886] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.712738][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.712774][ T5886] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.712798][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.712822][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.714285][ T5886] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 445.714336][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 445.714362][ T5886] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.714386][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.714411][ T5886] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 445.721187][ T5886] usb 4-1: string descriptor 0 read error: -22 [ 445.721326][ T5886] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 445.721347][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.813617][ T5886] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 445.944578][ T5886] usb 4-1: USB disconnect, device number 5 [ 446.169307][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.279399][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.341628][ T1059] bond0 (unregistering): Released all slaves [ 446.518148][ T7937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.998740][ T1059] hsr_slave_0: left promiscuous mode [ 447.040487][ T1059] hsr_slave_1: left promiscuous mode [ 447.041649][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.058580][ T5843] Bluetooth: hci2: command tx timeout [ 447.080281][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.384187][ T37] audit: type=1326 audit(1756924587.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.384244][ T37] audit: type=1326 audit(1756924587.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.518448][ T37] audit: type=1326 audit(1756924587.580:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.519895][ T37] audit: type=1326 audit(1756924587.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.519942][ T37] audit: type=1326 audit(1756924587.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.519981][ T37] audit: type=1326 audit(1756924587.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.520019][ T37] audit: type=1326 audit(1756924587.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7953 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f895b9eebe9 code=0x7ffc0000 [ 447.698560][ T5843] Bluetooth: hci4: command tx timeout [ 447.847509][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.931730][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.172063][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.479474][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 449.643820][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 449.778456][ T5843] Bluetooth: hci4: command tx timeout [ 449.916023][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.220920][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.221049][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.221273][ T7849] bridge_slave_0: entered allmulticast mode [ 451.224013][ T7849] bridge_slave_0: entered promiscuous mode [ 451.346139][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.346267][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.346455][ T7849] bridge_slave_1: entered allmulticast mode [ 451.369097][ T7849] bridge_slave_1: entered promiscuous mode [ 452.711494][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.031304][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.102626][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.183208][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.944504][ T7849] team0: Port device team_slave_0 added [ 453.956619][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 454.035666][ T7849] team0: Port device team_slave_1 added [ 454.186823][ T7996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.943473][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.943489][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.943513][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.066138][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.066154][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.066179][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.639900][ T1059] bridge_slave_1: left allmulticast mode [ 455.639931][ T1059] bridge_slave_1: left promiscuous mode [ 455.640184][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.710064][ T1059] bridge_slave_0: left allmulticast mode [ 455.710094][ T1059] bridge_slave_0: left promiscuous mode [ 455.710368][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.282687][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.393442][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.502713][ T1059] bond0 (unregistering): Released all slaves [ 456.792055][ T8020] kvm: kvm [8019]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 456.810294][ T8020] kvm: kvm [8019]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 456.958673][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.958815][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.959069][ T7887] bridge_slave_0: entered allmulticast mode [ 456.961871][ T7887] bridge_slave_0: entered promiscuous mode [ 457.095890][ T7849] hsr_slave_0: entered promiscuous mode [ 457.103754][ T7849] hsr_slave_1: entered promiscuous mode [ 457.142309][ T7849] debugfs: 'hsr0' already exists in 'hsr' [ 457.142339][ T7849] Cannot create hsr debugfs directory [ 457.159776][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.159938][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.160171][ T7887] bridge_slave_1: entered allmulticast mode [ 457.163117][ T7887] bridge_slave_1: entered promiscuous mode [ 457.339053][ T1059] hsr_slave_0: left promiscuous mode [ 457.341272][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 457.388570][ T1059] hsr_slave_1: left promiscuous mode [ 457.394131][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.423319][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.538219][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.538302][ T5911] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 457.538460][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.565208][ T5911] usb 3-1: config 0 descriptor?? [ 457.588275][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 457.986655][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 457.990513][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 457.992873][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 458.001572][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 458.004247][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 458.008745][ T5911] pwc: recv_control_msg error -32 req 04 val 1400 [ 458.011733][ T5911] pwc: recv_control_msg error -32 req 02 val 2000 [ 458.019040][ T5911] pwc: recv_control_msg error -32 req 02 val 2100 [ 459.033644][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 459.047556][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 459.048190][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 459.068194][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 459.078498][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 459.079440][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 459.079938][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 459.114459][ T5911] pwc: Registered as video103. [ 459.130395][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 459.272529][ T5911] usb 3-1: USB disconnect, device number 4 [ 460.017635][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 460.179453][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 460.936908][ T8031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.426576][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.452453][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.182818][ T8055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.186342][ T7887] team0: Port device team_slave_0 added [ 463.291758][ T8056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.535130][ T7887] team0: Port device team_slave_1 added [ 463.585514][ T8064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.886335][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.886349][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.886371][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.018094][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.018112][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.018134][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.421378][ T8081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 464.423010][ T6666] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 464.592753][ T6666] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 464.592812][ T6666] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 464.592834][ T6666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 464.626827][ T6666] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.626855][ T6666] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 464.626874][ T6666] usb 3-1: Product: syz [ 464.626888][ T6666] usb 3-1: Manufacturer: syz [ 464.626901][ T6666] usb 3-1: SerialNumber: syz [ 464.686039][ T6666] usb 3-1: config 0 descriptor?? [ 464.707187][ T6666] hub 3-1:0.0: bad descriptor, ignoring hub [ 464.707227][ T6666] hub 3-1:0.0: probe with driver hub failed with error -5 [ 464.735863][ T6666] usb 3-1: selecting invalid altsetting 0 [ 464.742837][ T7887] hsr_slave_0: entered promiscuous mode [ 464.764077][ T7887] hsr_slave_1: entered promiscuous mode [ 464.777873][ T7887] debugfs: 'hsr0' already exists in 'hsr' [ 464.777899][ T7887] Cannot create hsr debugfs directory [ 465.071691][ T6666] usb 3-1: USB disconnect, device number 5 [ 465.282117][ T6575] udevd[6575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.610100][ T6666] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 465.773773][ T6666] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 465.773839][ T6666] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 465.773862][ T6666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 465.777262][ T6666] usb 3-1: string descriptor 0 read error: -22 [ 465.777409][ T6666] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 465.777432][ T6666] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 465.836923][ T6666] usb 3-1: config 0 descriptor?? [ 466.041362][ T6666] hub 3-1:0.0: bad descriptor, ignoring hub [ 466.041403][ T6666] hub 3-1:0.0: probe with driver hub failed with error -5 [ 466.046619][ T6666] usb 3-1: selecting invalid altsetting 0 [ 466.924784][ T6666] usb 3-1: USB disconnect, device number 6 [ 467.952169][ T8126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.426482][ T7887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.464699][ T7887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.528575][ T7887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.606067][ T7887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.284157][ T7849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.404880][ T7849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.503870][ T7849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.583864][ T7849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 470.237521][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.427244][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.475273][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.480934][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.851849][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.852005][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.964203][ T8176] kvm: kvm [8173]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 470.993697][ T8176] kvm: kvm [8173]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 471.065008][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.245410][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.345144][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.348624][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.441698][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.442662][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.256228][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.482400][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.566300][ T8224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.805955][ T7887] veth0_vlan: entered promiscuous mode [ 473.851292][ T7887] veth1_vlan: entered promiscuous mode [ 473.998213][ T7849] veth0_vlan: entered promiscuous mode [ 474.058072][ T7887] veth0_macvtap: entered promiscuous mode [ 474.068025][ T7849] veth1_vlan: entered promiscuous mode [ 474.077150][ T7887] veth1_macvtap: entered promiscuous mode [ 474.226304][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.292313][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.353098][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.353374][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.353584][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.353779][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.539466][ T7849] veth0_macvtap: entered promiscuous mode [ 475.706273][ T7849] veth1_macvtap: entered promiscuous mode [ 475.729867][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.729888][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.182387][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.527864][ T5925] wlan0 speed is unknown, defaulting to 1000 [ 476.549683][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.624772][ T6083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.629715][ T6083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.630612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.630628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.664794][ T6083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.678987][ T6083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.434795][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.434815][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.851427][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.851449][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.348674][ T8271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.483079][ T8291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.865843][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 484.431818][ T8326] netlink: 220 bytes leftover after parsing attributes in process `syz.3.493'. [ 489.888138][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.513'. [ 493.116216][ T8424] netlink: 220 bytes leftover after parsing attributes in process `syz.0.528'. [ 494.517517][ T8438] tipc: Enabling of bearer rejected, failed to enable media [ 497.737207][ T8477] fuse: Bad value for 'fd' [ 497.759133][ T8479] netlink: 220 bytes leftover after parsing attributes in process `syz.5.543'. [ 498.955830][ C0] ------------[ cut here ]------------ [ 498.955855][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 498.955896][ C0] Modules linked in: [ 498.955941][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.955964][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.955983][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 498.956006][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 498.956023][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 498.956040][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 498.956055][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 498.956067][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 498.956081][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 498.956095][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804caf9e68 [ 498.956108][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 498.956124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.956138][ C0] CR2: 000000110c328b9b CR3: 000000005de74000 CR4: 00000000003526f0 [ 498.956156][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.956167][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 498.956180][ C0] Call Trace: [ 498.956188][ C0] [ 498.956214][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.956250][ C0] call_timer_fn+0x17e/0x5f0 [ 498.956276][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.956295][ C0] ? call_timer_fn+0xbe/0x5f0 [ 498.956319][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 498.956355][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.956381][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.956404][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.956428][ C0] __run_timer_base+0x648/0x970 [ 498.956470][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 498.956514][ C0] run_timer_softirq+0xb7/0x180 [ 498.956549][ C0] handle_softirqs+0x22f/0x710 [ 498.956585][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 498.956622][ C0] run_ktimerd+0xcf/0x190 [ 498.956650][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 498.956674][ C0] ? schedule+0x91/0x360 [ 498.956707][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 498.956731][ C0] smpboot_thread_fn+0x53f/0xa60 [ 498.956756][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 498.956791][ C0] kthread+0x70e/0x8a0 [ 498.956824][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 498.956848][ C0] ? __pfx_kthread+0x10/0x10 [ 498.956882][ C0] ? __pfx_kthread+0x10/0x10 [ 498.956911][ C0] ret_from_fork+0x3f9/0x770 [ 498.956941][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.956973][ C0] ? __switch_to_asm+0x39/0x70 [ 498.956992][ C0] ? __switch_to_asm+0x33/0x70 [ 498.957010][ C0] ? __pfx_kthread+0x10/0x10 [ 498.957040][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.957078][ C0] [ 498.957092][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.957107][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.957130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.957141][ C0] Call Trace: [ 498.957149][ C0] [ 498.957157][ C0] dump_stack_lvl+0x99/0x250 [ 498.957186][ C0] ? __asan_memcpy+0x40/0x70 [ 498.957208][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.957236][ C0] ? __pfx__printk+0x10/0x10 [ 498.957274][ C0] vpanic+0x281/0x750 [ 498.957301][ C0] ? __pfx__printk+0x10/0x10 [ 498.957322][ C0] ? __pfx_vpanic+0x10/0x10 [ 498.957349][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 498.957388][ C0] panic+0xb9/0xc0 [ 498.957415][ C0] ? __pfx_panic+0x10/0x10 [ 498.957461][ C0] __warn+0x31b/0x4b0 [ 498.957487][ C0] ? est_timer+0x6dc/0x9f0 [ 498.957511][ C0] ? est_timer+0x6dc/0x9f0 [ 498.957539][ C0] report_bug+0x2be/0x4f0 [ 498.957562][ C0] ? est_timer+0x6dc/0x9f0 [ 498.957584][ C0] ? est_timer+0x6dc/0x9f0 [ 498.957605][ C0] ? est_timer+0x6de/0x9f0 [ 498.957626][ C0] handle_bug+0x84/0x160 [ 498.957656][ C0] exc_invalid_op+0x1a/0x50 [ 498.957685][ C0] asm_exc_invalid_op+0x1a/0x20 [ 498.957704][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 498.957726][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 ed 22 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 e7 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 498.957743][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 498.957760][ C0] RAX: ffffffff88dc772b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 498.957775][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 498.957787][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 498.957801][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 498.957815][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804caf9e68 [ 498.957839][ C0] ? est_timer+0x6db/0x9f0 [ 498.957885][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.957921][ C0] call_timer_fn+0x17e/0x5f0 [ 498.957946][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.957966][ C0] ? call_timer_fn+0xbe/0x5f0 [ 498.957990][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 498.958026][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.958051][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.958073][ C0] ? __pfx_est_timer+0x10/0x10 [ 498.958096][ C0] __run_timer_base+0x648/0x970 [ 498.958138][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 498.958181][ C0] run_timer_softirq+0xb7/0x180 [ 498.958206][ C0] handle_softirqs+0x22f/0x710 [ 498.958241][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 498.958277][ C0] run_ktimerd+0xcf/0x190 [ 498.958303][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 498.958326][ C0] ? schedule+0x91/0x360 [ 498.958357][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 498.958374][ C0] smpboot_thread_fn+0x53f/0xa60 [ 498.958395][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 498.958430][ C0] kthread+0x70e/0x8a0 [ 498.958462][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 498.958487][ C0] ? __pfx_kthread+0x10/0x10 [ 498.958523][ C0] ? __pfx_kthread+0x10/0x10 [ 498.958558][ C0] ret_from_fork+0x3f9/0x770 [ 498.958587][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.958619][ C0] ? __switch_to_asm+0x39/0x70 [ 498.958636][ C0] ? __switch_to_asm+0x33/0x70 [ 498.958654][ C0] ? __pfx_kthread+0x10/0x10 [ 498.958684][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.958723][ C0] [ 498.958969][ C0] Kernel Offset: disabled