last executing test programs: 5m5.131135933s ago: executing program 3 (id=883): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffe}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000200)={0x0, 0xfffffffd, 0x10100, 0x0, 0x3a5}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1206}}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="080200000200000005f8"], 0x239) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_enter(r2, 0x2002def, 0xac98, 0x4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYBLOB="2b000000000200001c0012800b00010067656e65766500000c0002800500090000000000"], 0x3c}}, 0x0) 5m3.86699533s ago: executing program 3 (id=888): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m3.375572322s ago: executing program 3 (id=893): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r0, &(0x7f0000000200)=""/182, 0xb6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x1000193, &(0x7f0000000300)={0x0, 0x84b9, 0x400, 0x4003, 0x399}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x8, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100), 0x12) listen(r5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) socket$xdp(0x2c, 0x3, 0x0) 5m1.216320714s ago: executing program 3 (id=896): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r0, &(0x7f0000000200)=""/182, 0xb6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x1000193, &(0x7f0000000300)={0x0, 0x84b9, 0x400, 0x4003, 0x399}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x8, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100), 0x12) listen(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) 4m24.331965384s ago: executing program 3 (id=896): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r0, &(0x7f0000000200)=""/182, 0xb6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x1000193, &(0x7f0000000300)={0x0, 0x84b9, 0x400, 0x4003, 0x399}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x8, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100), 0x12) listen(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) 3m41.889182654s ago: executing program 3 (id=896): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r0, &(0x7f0000000200)=""/182, 0xb6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x1000193, &(0x7f0000000300)={0x0, 0x84b9, 0x400, 0x4003, 0x399}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x8, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100), 0x12) listen(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) 1m31.184578089s ago: executing program 4 (id=1310): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x894a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000004000)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) syz_emit_vhci(&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x102) recvmsg(r1, 0x0, 0x700) ioperm(0x0, 0x3ff, 0x0) chmod(0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0xd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/50, 0x36, 0x32, 0x0, 0x29200001, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) 1m28.297083064s ago: executing program 4 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) tkill(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@multicast1, @remote}, &(0x7f0000000780)=0xc) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb", 0x1, r5) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000740)={'fscrypt:', @auto=[0x64, 0x35, 0x34, 0x66, 0x37, 0x63, 0x35, 0x36, 0x30, 0x38, 0x66, 0x63, 0x34, 0x64, 0x63]}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x1d}, 0x48, 0x0) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0) 1m25.123630211s ago: executing program 4 (id=1319): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1m23.19308184s ago: executing program 4 (id=1325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001000000026c000041000000110100", @ANYBLOB, @ANYBLOB], 0x48) 1m20.240696606s ago: executing program 4 (id=1327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000ffc000)) 1m18.618376144s ago: executing program 4 (id=1329): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000440)={0x71, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@default, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1m2.795635296s ago: executing program 32 (id=1329): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000440)={0x71, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@default, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 14.605949755s ago: executing program 1 (id=1421): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB, @ANYBLOB="64071f0e051b94922d9da8dbb39b28f237da90125b1b34788f0c55c6cbce0397cd1b384466846a6db89ca3028baaeb948b951d2258d211bde429abc7efcd136587c0bc20c68341cd9c238daf78f4a5bde735b6345d8b5d4d76b558cdf4dcc245c4ce3a443efb313f3a0aa3a676a44ff473e0715c6fe421f8e5ab881c66e1582c659e57ca915c9e2d8b7f2869936695e2a8f3f5a7ba57faed86514f41f07d33331f5ff0c566b2eda37846d66545326250cf84bc99635311b0b6398d2849a2101d1526802b879787ba1dc3fc", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f0000000040), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_MODULATOR(r4, 0x80085665, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 14.180446617s ago: executing program 2 (id=1422): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) connect$rose(r5, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) 10.228503428s ago: executing program 0 (id=1425): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad36"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 9.77801227s ago: executing program 2 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) tkill(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@multicast1, @remote}, &(0x7f0000000780)=0xc) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb", 0x1, r5) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000740)={'fscrypt:', @auto=[0x64, 0x35, 0x34, 0x66, 0x37, 0x63, 0x35, 0x36, 0x30, 0x38, 0x66, 0x63, 0x34, 0x64, 0x63]}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x1d}, 0x48, 0x0) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) 9.77727102s ago: executing program 1 (id=1435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000ffc000)) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @start={0x7, 0x1}}) 8.058579089s ago: executing program 0 (id=1427): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 8.057389779s ago: executing program 1 (id=1428): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'ipvlan0\x00'}) r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x0) connect$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) 8.014406119s ago: executing program 2 (id=1429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) tkill(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@multicast1, @remote}, &(0x7f0000000780)=0xc) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb", 0x1, r5) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000740)={'fscrypt:', @auto=[0x64, 0x35, 0x34, 0x66, 0x37, 0x63, 0x35, 0x36, 0x30, 0x38, 0x66, 0x63, 0x34, 0x64, 0x63]}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x1d}, 0x48, 0x0) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) 5.84688295s ago: executing program 2 (id=1430): r0 = socket(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qgroup_meta_convert\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) add_key(&(0x7f0000000380)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="e722751b6f9b1ab48c6bed665e326446148ed6158029d016ed30dc55600da9ee", 0x20, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681", 0x5a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6, r7}, &(0x7f0000000140)=""/245, 0xf5, 0x0) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 5.036640114s ago: executing program 1 (id=1431): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad36"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 4.864121385s ago: executing program 0 (id=1432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000ffc000)) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @start={0x7, 0x1}}) 4.742621976s ago: executing program 2 (id=1433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad36"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 3.85486641s ago: executing program 1 (id=1434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001000000026c000041000000110100", @ANYBLOB, @ANYBLOB], 0x48) 3.715730831s ago: executing program 0 (id=1436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x4) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000ffc000)) 3.699978861s ago: executing program 2 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) tkill(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@multicast1, @remote}, &(0x7f0000000780)=0xc) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb", 0x1, r4) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r5) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000740)={'fscrypt:', @auto=[0x64, 0x35, 0x34, 0x66, 0x37, 0x63, 0x35, 0x36, 0x30, 0x38, 0x66, 0x63, 0x34, 0x64, 0x63]}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x1d}, 0x48, 0x0) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6) keyctl$read(0xb, r7, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) 3.699682801s ago: executing program 5 (id=1347): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad36"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.04979049s ago: executing program 0 (id=1438): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000a9c300000861000000040000006200000000000000ff07000000000000000000c4a083bc61b6b220f8e589b4c843e57ea54a316378b51ae9cb68b997566b6ae7632d746a56df0aae557393a86d000afbc4ab74db026b5da12dc54a49c4421da9c60e84c568dd9b7f0ffb6c6aaa0598b295977df5ad36"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.666289552s ago: executing program 1 (id=1439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000008000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000001000000026c000041000000110100", @ANYBLOB, @ANYBLOB], 0x48) 1.061834295s ago: executing program 0 (id=1440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = syz_open_procfs(0x0, 0x0) fchdir(r5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x21}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000300)) 1.060776595s ago: executing program 5 (id=1441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000ffc000)) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x3, 0x1, @start={0x7, 0x1}}) 0s ago: executing program 5 (id=1442): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.682680][ T3622] loop4: p2 p3 p7 [ 460.687301][ T7559] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 460.697119][ T7559] NILFS (loop1): unrecognized mount option "./file0" [ 460.773353][ T7556] overlayfs: failed to resolve './file2': -2 [ 461.682131][ T7567] loop3: detected capacity change from 0 to 2048 [ 461.728294][ T4800] udevd[4800]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 461.731506][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 461.762752][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 461.776007][ T7567] Alternate GPT is invalid, using primary GPT. [ 461.782312][ T7567] loop3: p2 p3 p7 [ 461.938942][ T7567] sctp: [Deprecated]: syz.3.880 (pid 7567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.938942][ T7567] Use struct sctp_sack_info instead [ 462.040045][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 462.042184][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 462.091200][ T4271] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.093789][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 462.188424][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 462.209566][ T7574] loop2: detected capacity change from 0 to 2048 [ 462.311838][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.883'. [ 462.341724][ T7574] Alternate GPT is invalid, using primary GPT. [ 462.393293][ T7574] loop2: p2 p3 p7 [ 462.884359][ T7585] process 'syz.2.886' launched './file1' with NULL argv: empty string added [ 465.108491][ T7607] loop0: detected capacity change from 0 to 64 [ 466.454950][ T4345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.695421][ T4345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.814451][ T4345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.675551][ T4345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.063825][ T7650] loop2: detected capacity change from 0 to 2048 [ 472.105685][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.114931][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.124928][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.133359][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.142236][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 472.150204][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.207653][ T7656] loop0: detected capacity change from 0 to 2048 [ 472.223655][ T7650] Alternate GPT is invalid, using primary GPT. [ 472.233229][ T7650] loop2: p2 p3 p7 [ 472.311198][ T7656] Alternate GPT is invalid, using primary GPT. [ 472.322490][ T7656] loop0: p2 p3 p7 [ 472.357197][ T7656] sctp: [Deprecated]: syz.0.909 (pid 7656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.357197][ T7656] Use struct sctp_sack_info instead [ 472.376032][ T3622] Alternate GPT is invalid, using primary GPT. [ 472.558622][ T3622] loop0: p2 p3 p7 [ 474.213017][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 474.496604][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 474.518092][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 474.536588][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 474.550506][ T4634] udevd[4634]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 474.569876][ T4800] udevd[4800]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 474.585028][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 474.670517][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 474.672127][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 474.708161][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 475.991578][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 476.037025][ T7695] loop1: detected capacity change from 0 to 2048 [ 476.476040][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 476.554267][ T7699] sctp: [Deprecated]: syz.1.916 (pid 7699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.554267][ T7699] Use struct sctp_sack_info instead [ 476.601253][ T7695] Alternate GPT is invalid, using primary GPT. [ 476.666329][ T7695] loop1: p2 p3 p7 [ 476.751573][ T3622] Alternate GPT is invalid, using primary GPT. [ 476.775557][ T3622] loop1: p2 p3 p7 [ 476.845458][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.852579][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.874083][ T7648] device bridge_slave_0 entered promiscuous mode [ 476.942538][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 477.220859][ T7716] hub 2-0:1.0: USB hub found [ 477.226518][ T7716] hub 2-0:1.0: 1 port detected [ 478.537239][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 479.550913][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.570660][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.618876][ T7648] device bridge_slave_1 entered promiscuous mode [ 479.861127][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.880549][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.924021][ T7735] loop2: detected capacity change from 0 to 2048 [ 479.968575][ T4345] device hsr_slave_0 left promiscuous mode [ 479.977850][ T4345] device hsr_slave_1 left promiscuous mode [ 479.999394][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.007977][ T7735] Alternate GPT is invalid, using primary GPT. [ 480.013022][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.043123][ T7735] loop2: p2 p3 p7 [ 480.062323][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.090486][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.091792][ T7732] sctp: [Deprecated]: syz.2.925 (pid 7732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.091792][ T7732] Use struct sctp_sack_info instead [ 480.110834][ T3622] Alternate GPT is invalid, using primary GPT. [ 480.158997][ T3622] loop2: p2 p3 p7 [ 480.159514][ T4345] device bridge_slave_1 left promiscuous mode [ 480.183416][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.251201][ T4345] device bridge_slave_0 left promiscuous mode [ 480.265315][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.577405][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 480.589865][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 480.605178][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 480.616405][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 480.647807][ T4345] device veth1_macvtap left promiscuous mode [ 480.666353][ T4345] device veth0_macvtap left promiscuous mode [ 480.672586][ T4345] device veth1_vlan left promiscuous mode [ 480.679046][ T4345] device veth0_vlan left promiscuous mode [ 482.467975][ T7774] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 483.445664][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 483.628480][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 483.698664][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.760194][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.194171][ T7798] loop2: detected capacity change from 0 to 64 [ 485.237363][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 486.087612][ T7807] loop4: detected capacity change from 0 to 2048 [ 486.124449][ T4345] bond0 (unregistering): Released all slaves [ 486.170774][ T7807] Alternate GPT is invalid, using primary GPT. [ 486.180686][ T7807] loop4: p2 p3 p7 [ 486.284445][ T7807] sctp: [Deprecated]: syz.4.943 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.284445][ T7807] Use struct sctp_sack_info instead [ 486.360361][ T7648] team0: Port device team_slave_0 added [ 486.376700][ T7648] team0: Port device team_slave_1 added [ 486.383049][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 486.480960][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.515404][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.572321][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.611919][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.619682][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.651922][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.720517][ T7648] device hsr_slave_0 entered promiscuous mode [ 486.750683][ T7648] device hsr_slave_1 entered promiscuous mode [ 487.727749][ T7831] loop0: detected capacity change from 0 to 2048 [ 487.743644][ T7828] loop2: detected capacity change from 0 to 2048 [ 487.820318][ T7831] Alternate GPT is invalid, using primary GPT. [ 487.831532][ T7828] Alternate GPT is invalid, using primary GPT. [ 487.853322][ T7831] loop0: p2 p3 p7 [ 487.857357][ T7828] loop2: p2 p3 p7 [ 487.966339][ T7831] sctp: [Deprecated]: syz.0.949 (pid 7831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.966339][ T7831] Use struct sctp_sack_info instead [ 487.974364][ T7834] sctp: [Deprecated]: syz.2.948 (pid 7834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.974364][ T7834] Use struct sctp_sack_info instead [ 489.135171][ T3622] Alternate GPT is invalid, using primary GPT. [ 489.157924][ T3622] loop2: p2 p3 p7 [ 489.241195][ T7847] loop1: detected capacity change from 0 to 2048 [ 489.384352][ T7847] Alternate GPT is invalid, using primary GPT. [ 489.764572][ T7847] loop1: p2 p3 p7 [ 489.771524][ T7852] loop2: detected capacity change from 0 to 2048 [ 489.823839][ T7847] sctp: [Deprecated]: syz.1.951 (pid 7847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.823839][ T7847] Use struct sctp_sack_info instead [ 489.911050][ T7852] Alternate GPT is invalid, using primary GPT. [ 489.954383][ T7648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.959081][ T7852] loop2: p2 p3 p7 [ 489.987800][ T7858] sctp: [Deprecated]: syz.2.953 (pid 7858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.987800][ T7858] Use struct sctp_sack_info instead [ 490.022295][ T3622] Alternate GPT is invalid, using primary GPT. [ 490.030990][ T7648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 490.051389][ T3622] loop1: p2 p3 p7 [ 490.077872][ T7648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 490.125063][ T7648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 490.177433][ T3622] Alternate GPT is invalid, using primary GPT. [ 490.188768][ T3622] loop2: p2 p3 p7 [ 491.240172][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 491.259038][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 491.304125][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 491.372690][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 491.377003][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 491.404982][ T7876] loop0: detected capacity change from 0 to 64 [ 491.427654][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 491.531833][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.574036][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 491.575841][ T7840] udevd[7840]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 491.596253][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 491.664933][ T4243] udevd[4243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 491.700976][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.749438][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.809233][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.843088][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.856612][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.886373][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.893496][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.970138][ T7881] loop1: detected capacity change from 0 to 2048 [ 491.972275][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.004684][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.032307][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.047966][ T7881] Alternate GPT is invalid, using primary GPT. [ 492.057541][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.064711][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.073841][ T7881] loop1: p2 p3 p7 [ 492.089396][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.160282][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.180422][ T7881] sctp: [Deprecated]: syz.1.959 (pid 7881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.180422][ T7881] Use struct sctp_sack_info instead [ 492.211815][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.232428][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.397151][ T7886] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 492.419284][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.450336][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.573891][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.665478][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.733611][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.795081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.808842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.588792][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.664974][ T7908] loop4: detected capacity change from 0 to 2048 [ 494.787465][ T7914] netlink: 'syz.1.966': attribute type 3 has an invalid length. [ 494.891050][ T7917] sctp: [Deprecated]: syz.4.965 (pid 7917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.891050][ T7917] Use struct sctp_sack_info instead [ 494.923627][ T7908] Alternate GPT is invalid, using primary GPT. [ 494.928763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.938184][ T7908] loop4: p2 p3 p7 [ 494.948775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.981941][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.090255][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.120290][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.171568][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.215512][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.248296][ T7648] device veth0_vlan entered promiscuous mode [ 495.254592][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 495.275072][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.308158][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.331110][ T7648] device veth1_vlan entered promiscuous mode [ 495.391872][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 495.409315][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 495.430033][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.454481][ T22] usb 3-1: device descriptor read/64, error -71 [ 495.482561][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.495921][ T7648] device veth0_macvtap entered promiscuous mode [ 495.541278][ T7648] device veth1_macvtap entered promiscuous mode [ 495.616990][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.648833][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.692598][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.724034][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.742929][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 495.764746][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.845343][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.893284][ T22] usb 3-1: device descriptor read/64, error -71 [ 495.921454][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.989804][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.013841][ T22] usb usb3-port1: attempt power cycle [ 496.078214][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.159396][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.253767][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.310375][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.353239][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.376542][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.397699][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.419140][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.440006][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.452953][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 496.468312][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.482407][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.509504][ T22] usb 3-1: device descriptor read/8, error -71 [ 496.523114][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.586004][ T7944] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 496.586004][ T7944] program syz.1.970 not setting count and/or reply_len properly [ 496.621318][ T7944] loop1: detected capacity change from 0 to 2048 [ 496.713021][ T7944] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 496.722684][ T7944] NILFS (loop1): unrecognized mount option "./file0" [ 496.731371][ T7944] overlayfs: failed to resolve './file2': -2 [ 496.920713][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.219744][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 497.389992][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.398983][ T22] usb 3-1: device descriptor read/8, error -71 [ 497.543834][ T22] usb usb3-port1: unable to enumerate USB device [ 497.594200][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.665675][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.714106][ T7648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.833838][ T7648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.886775][ T7648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.932718][ T7648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.811088][ T7955] device bond0 entered promiscuous mode [ 498.817253][ T7955] device bond_slave_0 entered promiscuous mode [ 498.824386][ T7955] device bond_slave_1 entered promiscuous mode [ 498.830932][ T7955] device macvlan2 entered promiscuous mode [ 499.414052][ T7955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.558778][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.672423][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.393843][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.400288][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.419811][ T4628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.477809][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.490668][ T4628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.510901][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 502.989665][ T5001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.122548][ T5001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.318457][ T5001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.495050][ T5001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.633026][ T4304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 503.833192][ T4304] usb 1-1: device descriptor read/64, error -71 [ 504.253282][ T4304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 504.543007][ T4304] usb 1-1: device descriptor read/64, error -71 [ 504.675562][ T4304] usb usb1-port1: attempt power cycle [ 505.123067][ T4304] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 505.220705][ T8028] netlink: 'syz.4.991': attribute type 3 has an invalid length. [ 505.249620][ T4304] usb 1-1: device descriptor read/8, error -71 [ 505.553095][ T4304] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 505.613966][ T4304] usb 1-1: device descriptor read/8, error -71 [ 505.743635][ T4304] usb usb1-port1: unable to enumerate USB device [ 506.778813][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.792337][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.826942][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 507.057535][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 507.074059][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 507.086607][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 507.871362][ T8064] netlink: 'syz.4.998': attribute type 3 has an invalid length. [ 509.170565][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 509.178297][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 511.646925][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.655581][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.662929][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 511.725251][ T8045] device bridge_slave_0 entered promiscuous mode [ 511.812980][ T126] usb 1-1: device descriptor read/64, error -71 [ 511.867146][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.893192][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.961699][ T8045] device bridge_slave_1 entered promiscuous mode [ 512.163294][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 512.196147][ T8123] netlink: 'syz.2.1010': attribute type 3 has an invalid length. [ 512.283820][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.336911][ T126] usb 1-1: device descriptor read/64, error -71 [ 512.351955][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.475033][ T126] usb usb1-port1: attempt power cycle [ 512.486292][ T8045] team0: Port device team_slave_0 added [ 512.532067][ T5001] device hsr_slave_0 left promiscuous mode [ 512.543259][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 512.567860][ T5001] device hsr_slave_1 left promiscuous mode [ 512.610541][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.645561][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.660817][ T5001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.676739][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.694595][ T5001] device bridge_slave_1 left promiscuous mode [ 512.717826][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.745524][ T5001] device bridge_slave_0 left promiscuous mode [ 512.763389][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.912954][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 512.969274][ T126] usb 1-1: device descriptor read/8, error -71 [ 512.977435][ T5001] device veth1_macvtap left promiscuous mode [ 513.005735][ T5001] device veth0_macvtap left promiscuous mode [ 513.022039][ T5001] device veth1_vlan left promiscuous mode [ 513.052361][ T5001] device veth0_vlan left promiscuous mode [ 513.252954][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 513.293482][ T126] usb 1-1: device descriptor read/8, error -71 [ 513.443156][ T126] usb usb1-port1: unable to enumerate USB device [ 514.518523][ T8152] hub 2-0:1.0: USB hub found [ 514.528098][ T8152] hub 2-0:1.0: 1 port detected [ 514.945509][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 517.070654][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 518.658617][ T5001] team0 (unregistering): Port device team_slave_1 removed [ 519.536731][ T4341] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 519.745666][ T5001] team0 (unregistering): Port device team_slave_0 removed [ 519.792982][ T4341] usb 2-1: device descriptor read/64, error -71 [ 519.865002][ T5001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.979012][ T5001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.069689][ T4341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 521.313106][ T4341] usb 2-1: device descriptor read/64, error -71 [ 521.482753][ T4341] usb usb2-port1: attempt power cycle [ 526.771908][ T5001] bond0 (unregistering): Released all slaves [ 526.986762][ T8045] team0: Port device team_slave_1 added [ 527.108469][ T1520] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 527.121874][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.149935][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.248467][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.262966][ T1520] usb 1-1: device descriptor read/64, error -71 [ 527.294929][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.320675][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.407456][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.553060][ T1520] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 527.584347][ T8045] device hsr_slave_0 entered promiscuous mode [ 527.610642][ T8045] device hsr_slave_1 entered promiscuous mode [ 527.722916][ T1520] usb 1-1: device descriptor read/64, error -71 [ 527.843190][ T1520] usb usb1-port1: attempt power cycle [ 528.262926][ T1520] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 528.295058][ T1520] usb 1-1: device descriptor read/8, error -71 [ 528.572962][ T1520] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 528.615601][ T1520] usb 1-1: device descriptor read/8, error -71 [ 528.733168][ T1520] usb usb1-port1: unable to enumerate USB device [ 529.618420][ T8045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.774027][ T8045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.848523][ T8045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.089020][ T8045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.701316][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.752235][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.850764][ T8313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.857169][ T8313] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 531.863717][ T8313] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 531.871150][ T8313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.877283][ T8313] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 531.883278][ T8313] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 531.890466][ T8313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.896466][ T8313] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 532.934870][ T8313] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 532.943658][ T8313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.949881][ T8313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 532.956320][ T8313] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 532.964843][ T8313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.971043][ T8313] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 532.977477][ T8313] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 533.243803][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.252142][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.311734][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.328219][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.561541][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.568728][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.602941][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout [ 533.623836][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.632643][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.641245][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.648376][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.666021][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.674544][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.683970][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.579944][ T8045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.610213][ T8045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.638755][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.666296][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.679303][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.697185][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.717070][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.747517][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.771772][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.798669][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.834766][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.843256][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.252918][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 535.259308][ T4260] Bluetooth: hci4: command 0x0c1a tx timeout [ 535.267331][ T4260] Bluetooth: hci2: command 0x0c1a tx timeout [ 535.274731][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.155393][ T8359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 536.161453][ T8359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 536.167512][ T8359] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 536.174893][ T8359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 536.180827][ T8359] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 536.186890][ T8359] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 536.194131][ T8359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 536.200071][ T8359] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 536.207007][ T8359] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 536.214318][ T8359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 536.220246][ T8359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 536.226290][ T8359] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 536.234401][ T8359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 536.240762][ T8359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 536.246782][ T8359] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 536.597318][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.607645][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.838933][ T8378] netlink: 'syz.1.1066': attribute type 3 has an invalid length. [ 536.883103][ T4300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 536.919304][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.104256][ T4300] usb 5-1: device descriptor read/64, error -71 [ 537.155760][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.169944][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.178197][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.218823][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.255343][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.305627][ T8045] device veth0_vlan entered promiscuous mode [ 537.441304][ T4300] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 537.442104][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.533563][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.546378][ T8045] device veth1_vlan entered promiscuous mode [ 537.594506][ T4300] usb 5-1: device descriptor read/64, error -71 [ 537.609873][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 537.633797][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 537.665872][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 537.718759][ T4300] usb usb5-port1: attempt power cycle [ 537.733797][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.838764][ T8045] device veth0_macvtap entered promiscuous mode [ 538.921267][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 538.927540][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 538.934130][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 538.940774][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.535288][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 539.593149][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 539.635317][ T8045] device veth1_macvtap entered promiscuous mode [ 539.652779][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.663901][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.674508][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.685310][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.696503][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.707661][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.717867][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.729378][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.741288][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.749421][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 539.768176][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.795901][ T8397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.801925][ T8397] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 539.808064][ T8397] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 539.815342][ T8397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.821679][ T8397] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 539.827702][ T8397] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 539.834971][ T8397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.841166][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.841229][ T8397] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 539.858022][ T8397] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 539.858678][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.865277][ T8397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 539.865315][ T8397] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 539.865377][ T8397] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 539.894666][ T8397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.900686][ T8397] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 539.906877][ T8397] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 539.923532][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.934383][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.947116][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.967068][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.981029][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.010016][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.027930][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.064939][ T8045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.098809][ T8045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.410228][ T8045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.445893][ T8045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.601441][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.657461][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.813221][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 541.892953][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 541.893093][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.905943][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 541.973218][ T8360] Bluetooth: hci3: command 0x0c1a tx timeout [ 543.072973][ T8433] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 543.072973][ T8433] program syz.0.1079 not setting count and/or reply_len properly [ 543.101301][ T8433] loop0: detected capacity change from 0 to 2048 [ 543.108582][ T8433] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 543.118177][ T8433] NILFS (loop0): unrecognized mount option "./file0" [ 543.177030][ T4245] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 543.187368][ T8433] overlayfs: failed to resolve './file2': -2 [ 543.251473][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.275431][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.340484][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.365689][ T5279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.413961][ T5279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.466351][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.893084][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 543.972981][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 543.974302][ T8360] Bluetooth: hci2: command 0x0406 tx timeout [ 543.979008][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 544.245161][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 544.413300][ T26] usb 2-1: device descriptor read/64, error -71 [ 544.718224][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 544.883190][ T26] usb 2-1: device descriptor read/64, error -71 [ 545.026723][ T26] usb usb2-port1: attempt power cycle [ 545.271223][ T8045] syz-executor (8045) used greatest stack depth: 19992 bytes left [ 545.650612][ T4322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.777781][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 545.846420][ T26] usb 2-1: device descriptor read/8, error -71 [ 546.041763][ T4322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.156727][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 546.213520][ T26] usb 2-1: device descriptor read/8, error -71 [ 546.228118][ T4322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.434116][ T26] usb usb2-port1: unable to enumerate USB device [ 548.486945][ T4322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.872384][ T8473] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.878495][ T8473] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 548.884565][ T8473] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 548.891785][ T8473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.898546][ T8473] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 548.904552][ T8473] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 548.911764][ T8473] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.918041][ T8473] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 548.924091][ T8473] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 548.931290][ T8473] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.938109][ T8473] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 548.944394][ T8473] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 549.481152][ T8490] loop1: detected capacity change from 0 to 64 [ 549.631940][ T8360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.640501][ T8360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.648439][ T8360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.657544][ T8360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.665359][ T8360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 549.673171][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.533428][ T8360] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.284031][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 551.292031][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 551.298356][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.893136][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 554.611717][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 554.619421][ T8360] Bluetooth: hci2: command 0x0406 tx timeout [ 554.625630][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 554.631629][ T8360] Bluetooth: hci3: command 0x041b tx timeout [ 554.637650][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 554.982936][ T1520] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 555.104300][ T8525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 555.111860][ T8525] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 555.121574][ T8525] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 555.130722][ T8525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.137908][ T8525] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 555.147145][ T8525] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 555.156245][ T8525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.163245][ T8525] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 555.171367][ T8525] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 555.181979][ T8525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 555.189162][ T8525] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 555.197283][ T8525] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 555.206301][ T8525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 555.213470][ T8525] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 555.221469][ T8525] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 555.602944][ T1520] usb 5-1: device descriptor read/64, error -71 [ 556.852299][ T8541] kvm [8540]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 556.877645][ T8541] kvm [8540]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x44e00000090 [ 556.987344][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 557.013259][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.669298][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 557.676842][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 557.683745][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 557.691029][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.377214][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 559.733328][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 559.733371][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 559.733404][ T8360] Bluetooth: hci1: command 0x0406 tx timeout [ 559.752967][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 562.525008][ T8587] Bluetooth: hci3: command 0x0406 tx timeout [ 562.909245][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.915620][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.226933][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.269844][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.292923][ T4301] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 563.299393][ T8494] device bridge_slave_0 entered promiscuous mode [ 563.482994][ T4301] usb 1-1: device descriptor read/64, error -71 [ 563.753045][ T4301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 568.354889][ T8637] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 568.354889][ T8637] program syz.1.1130 not setting count and/or reply_len properly [ 568.389707][ T8637] loop1: detected capacity change from 0 to 2048 [ 568.528120][ T8637] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 568.537932][ T8637] NILFS (loop1): unrecognized mount option "./file0" [ 568.551969][ T8634] overlayfs: failed to resolve './file2': -2 [ 569.660869][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.707975][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.973216][ T8494] device bridge_slave_1 entered promiscuous mode [ 571.344372][ T8640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.350296][ T8640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 571.356247][ T8640] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 571.363410][ T8640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.369365][ T8640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 571.375293][ T8640] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 571.382415][ T8640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.388327][ T8640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 571.394247][ T8640] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 571.401369][ T8640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 571.407306][ T8640] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 571.413231][ T8640] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 571.420359][ T8640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.426271][ T8640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 571.432176][ T8640] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 572.583108][ T6110] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 573.233961][ T6110] usb 3-1: device descriptor read/64, error -71 [ 573.256617][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.289962][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.372299][ T4322] device hsr_slave_0 left promiscuous mode [ 573.450502][ T4322] device hsr_slave_1 left promiscuous mode [ 573.471278][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.503229][ T4260] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.509437][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.509474][ T8587] Bluetooth: hci4: command 0x0c1a tx timeout [ 573.522225][ T8587] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.618708][ T4260] Bluetooth: hci1: command 0x0c1a tx timeout [ 573.738220][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.896708][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.192928][ T6110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 574.419412][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.514352][ T6110] usb 3-1: device descriptor read/64, error -71 [ 574.930635][ T6110] usb usb3-port1: attempt power cycle [ 575.228177][ T4322] device bridge_slave_1 left promiscuous mode [ 575.236933][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.246609][ T4322] device bridge_slave_0 left promiscuous mode [ 575.253724][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.601520][ T8683] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 575.601520][ T8683] program syz.2.1142 not setting count and/or reply_len properly [ 575.637989][ T8683] loop2: detected capacity change from 0 to 2048 [ 575.659949][ T8683] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 575.670011][ T8683] NILFS (loop2): unrecognized mount option "./file0" [ 575.703281][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 575.717995][ T8683] overlayfs: failed to resolve './file2': -2 [ 575.765914][ T4260] Bluetooth: hci2: command 0x0406 tx timeout [ 575.771946][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 575.777967][ T8587] Bluetooth: hci3: command 0x0406 tx timeout [ 575.783984][ T8587] Bluetooth: hci4: command 0x0406 tx timeout [ 575.833695][ T4322] device veth1_macvtap left promiscuous mode [ 575.936601][ T4322] device veth0_macvtap left promiscuous mode [ 575.950095][ T4322] device veth1_vlan left promiscuous mode [ 575.960321][ T4322] device veth0_vlan left promiscuous mode [ 582.011670][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 582.071719][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 582.137600][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.209182][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.542725][ T4322] bond0 (unregistering): Released all slaves [ 583.654570][ T8724] device bond0 entered promiscuous mode [ 583.660150][ T8724] device bond_slave_0 entered promiscuous mode [ 583.666874][ T8724] device bond_slave_1 entered promiscuous mode [ 583.673351][ T8724] device macvlan2 entered promiscuous mode [ 583.679968][ T8724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 583.733115][ T8725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.736203][ T8494] team0: Port device team_slave_0 added [ 583.739121][ T8725] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 583.751567][ T8725] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 583.757475][ T8494] team0: Port device team_slave_1 added [ 583.758796][ T8725] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.770275][ T8725] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 583.777396][ T8725] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 583.785535][ T8725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.791600][ T8725] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.797636][ T8725] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 583.804871][ T8725] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.810864][ T8725] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 583.817011][ T8725] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 583.824258][ T8725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.825739][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.830208][ T8725] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 583.843084][ T8725] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 583.945476][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.025956][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.238218][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.267057][ T8747] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 584.267057][ T8747] program syz.0.1155 not setting count and/or reply_len properly [ 584.302321][ T8747] loop0: detected capacity change from 0 to 2048 [ 584.314744][ T8747] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 584.324561][ T8747] NILFS (loop0): unrecognized mount option "./file0" [ 585.021820][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.194219][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.322972][ T4245] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 585.383947][ T8494] device hsr_slave_0 entered promiscuous mode [ 585.411583][ T8747] overlayfs: failed to resolve './file2': -2 [ 585.444123][ T8494] device hsr_slave_1 entered promiscuous mode [ 586.488290][ T8360] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.494653][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.501271][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 586.507745][ T8360] Bluetooth: hci0: command 0x0c1a tx timeout [ 586.514337][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 586.553583][ T8761] device bond0 entered promiscuous mode [ 586.559238][ T8761] device bond_slave_0 entered promiscuous mode [ 586.566265][ T8761] device bond_slave_1 entered promiscuous mode [ 586.573726][ T8761] device macvlan2 entered promiscuous mode [ 586.582246][ T8761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.830379][ T8765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.836719][ T8765] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 587.843064][ T8765] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 587.850522][ T8765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 587.856698][ T8765] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 587.862997][ T8765] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 587.870546][ T8765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 587.876720][ T8765] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 587.883078][ T8765] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 587.891752][ T8765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.897908][ T8765] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 587.904218][ T8765] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 587.911653][ T8765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 587.917803][ T8765] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 587.924117][ T8765] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 589.391941][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 589.784237][ T8773] device bond0 entered promiscuous mode [ 589.789801][ T8773] device bond_slave_0 entered promiscuous mode [ 589.796384][ T8773] device bond_slave_1 entered promiscuous mode [ 589.802705][ T8773] device macvlan2 entered promiscuous mode [ 589.809083][ T8773] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.870656][ T8775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 589.877222][ T8775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 589.883276][ T8775] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 589.890521][ T8775] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.897215][ T8775] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 589.903224][ T8775] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 589.910412][ T8775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 589.916402][ T8775] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 589.922361][ T8775] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 589.929642][ T8775] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.935660][ T8775] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 589.941625][ T8775] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 589.948980][ T8775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.955399][ T8775] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 589.961370][ T8775] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 590.273037][ T8777] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.279005][ T8777] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 590.285060][ T8777] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 590.292255][ T8777] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 590.298258][ T8777] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 590.304889][ T8777] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 590.312095][ T8777] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 590.318071][ T8777] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 590.324068][ T8777] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 590.331251][ T8777] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 590.337326][ T8777] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 590.343402][ T8777] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 590.350597][ T8777] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 590.356609][ T8777] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 590.362580][ T8777] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 593.223159][ T8788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 593.229176][ T8788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 593.235316][ T8788] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 593.242549][ T8788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 593.248694][ T8788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 593.254710][ T8788] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 593.261884][ T8788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 593.267854][ T8788] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 593.274268][ T8788] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 593.281410][ T8788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 593.287325][ T8788] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 593.293263][ T8788] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 593.300394][ T8788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 593.306344][ T8788] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 593.312253][ T8788] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 593.929079][ T4257] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 594.083506][ T4257] usb 2-1: device descriptor read/64, error -71 [ 594.341358][ T8494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 594.357334][ T8494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 594.376705][ T8494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 594.383686][ T4257] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 594.432117][ T8494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 594.574328][ T4257] usb 2-1: device descriptor read/64, error -71 [ 595.022084][ T4257] usb usb2-port1: attempt power cycle [ 595.253293][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 595.259618][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout [ 595.265847][ T8829] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 595.265847][ T8829] program syz.4.1172 not setting count and/or reply_len properly [ 595.294734][ T8829] loop4: detected capacity change from 0 to 2048 [ 595.307516][ T8829] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 595.317715][ T8829] NILFS (loop4): unrecognized mount option "./file0" [ 595.327434][ T8829] overlayfs: failed to resolve './file2': -2 [ 595.352082][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.369508][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.392778][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.413222][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 595.419323][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 595.425890][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 595.446470][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.483210][ T4257] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 595.510912][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.520132][ T4257] usb 2-1: device descriptor read/8, error -71 [ 595.598579][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 596.738688][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.745858][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.783103][ T4257] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 596.833631][ T4257] usb 2-1: device descriptor read/8, error -71 [ 596.956822][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.032256][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.040966][ T4257] usb usb2-port1: unable to enumerate USB device [ 597.065303][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.137012][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.144198][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.151978][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.175075][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.187000][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.488323][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 597.494724][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 597.502906][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 597.509264][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 597.515700][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 599.574573][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 599.574614][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout [ 599.633533][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.647309][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.662430][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.691496][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.704985][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.716601][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.793142][ T8856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.799088][ T8856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 599.805074][ T8856] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 599.812210][ T8856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.818122][ T8856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 599.824048][ T8856] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 599.831181][ T8856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.837092][ T8856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 599.843018][ T8856] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 599.850143][ T8856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 599.856052][ T8856] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 599.861958][ T8856] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 599.869112][ T8856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 599.875021][ T8856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 599.880936][ T8856] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 600.045252][ T8494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.123959][ T8494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.170448][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.181561][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.193250][ T8864] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 600.869437][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 600.889823][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 600.928331][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.973693][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.987684][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.072409][ T8494] device veth0_vlan entered promiscuous mode [ 601.167512][ T8494] device veth1_vlan entered promiscuous mode [ 601.175230][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.206222][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.230579][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 601.280881][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.298019][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.336433][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 601.370308][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.389253][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.416375][ T8494] device veth0_macvtap entered promiscuous mode [ 601.466102][ T8494] device veth1_macvtap entered promiscuous mode [ 601.565005][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.582192][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.632974][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.693094][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.703324][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.713982][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.123500][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.136035][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.255104][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.339719][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 602.346005][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 602.352037][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 602.358118][ T8587] Bluetooth: hci4: command 0x0c1a tx timeout [ 602.364167][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 602.378065][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.551057][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.561132][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.571768][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.582445][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.593447][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.626776][ T8494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.093020][ T8494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.775071][ T8494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.881267][ T8494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.912890][ T8494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.946198][ T8494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.992955][ T8494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.027510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 604.058755][ T8917] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 604.074115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 604.095676][ T8919] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 604.095676][ T8919] program syz.2.1188 not setting count and/or reply_len properly [ 604.131453][ T8919] loop2: detected capacity change from 0 to 2048 [ 604.152770][ T8919] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 604.162728][ T8919] NILFS (loop2): unrecognized mount option "./file0" [ 604.171550][ T8919] overlayfs: failed to resolve './file2': -2 [ 604.204491][ T8917] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 604.215777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 604.232011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 604.260587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 604.269767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.123077][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.148021][ T8587] Bluetooth: hci4: command 0x0406 tx timeout [ 605.154432][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 605.161480][ T8360] Bluetooth: hci2: command 0x0406 tx timeout [ 605.168527][ T8360] Bluetooth: hci3: command 0x0406 tx timeout [ 605.243400][ T8911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.249409][ T8911] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 605.255440][ T8911] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 605.262656][ T8911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.268694][ T8911] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 605.274702][ T8911] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 605.281914][ T8911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.287924][ T8911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 605.294051][ T8911] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 605.301268][ T8911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.307280][ T8911] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 605.313286][ T8911] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 605.320489][ T8911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.326508][ T8911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 605.332471][ T8911] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 605.574193][ T5001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.584613][ T5001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.712981][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 605.769570][ T5001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.814180][ T5001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.825515][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 606.094054][ T8946] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 606.097277][ T1520] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 606.328724][ T1520] usb 2-1: device descriptor read/64, error -71 [ 606.672995][ T1520] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 606.853573][ T1520] usb 2-1: device descriptor read/64, error -71 [ 606.993153][ T1520] usb usb2-port1: attempt power cycle [ 608.221250][ T8927] Bluetooth: hci0: command 0x0c1a tx timeout [ 608.227966][ T8927] Bluetooth: hci4: command 0x0406 tx timeout [ 608.234048][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 608.240070][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 608.565218][ T8968] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 610.375984][ T8982] tty tty25: ldisc open failed (-12), clearing slot 24 [ 610.666665][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 610.667867][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 610.679844][ T8927] Bluetooth: hci2: command 0x0c1a tx timeout [ 610.691810][ T8927] Bluetooth: hci0: command 0x0406 tx timeout [ 610.726291][ T8927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 610.735002][ T8927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.742664][ T8927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.750878][ T8927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.758378][ T8927] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 610.796933][ T8927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 610.824162][ T8494] syz-executor (8494) used greatest stack depth: 19960 bytes left [ 610.911606][ T8977] netlink: 'syz.0.1202': attribute type 3 has an invalid length. [ 612.433464][ T4815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.446832][ T9005] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 612.446832][ T9005] program syz.1.1205 not setting count and/or reply_len properly [ 612.481155][ T9005] loop1: detected capacity change from 0 to 2048 [ 612.489541][ T9005] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 612.499169][ T9005] NILFS (loop1): unrecognized mount option "./file0" [ 612.540522][ T9005] overlayfs: failed to resolve './file2': -2 [ 612.656108][ T4815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.708198][ T9012] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 612.773054][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 612.853763][ T8927] Bluetooth: hci3: command 0x0409 tx timeout [ 612.860118][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 613.111779][ T4815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.726290][ T4815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.933020][ T8927] Bluetooth: hci3: command 0x041b tx timeout [ 615.143664][ T9021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.149717][ T9021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 615.156479][ T9021] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 615.163750][ T9021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.169690][ T9021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 615.175888][ T9021] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 615.183135][ T9021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.189909][ T9021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 615.196000][ T9021] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 615.203223][ T9021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.209190][ T9021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 615.215215][ T9021] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 615.222425][ T9021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.228554][ T9021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 615.234568][ T9021] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 615.607790][ T1520] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 616.796124][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 616.803329][ T1520] usb 3-1: device descriptor read/64, error -71 [ 617.272943][ T8927] Bluetooth: hci3: command 0x0419 tx timeout [ 617.274063][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.280422][ T8927] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.292938][ T8360] Bluetooth: hci1: command 0x0c1a tx timeout [ 618.414042][ T9061] hub 2-0:1.0: USB hub found [ 618.419099][ T9061] hub 2-0:1.0: 1 port detected [ 618.773004][ T9069] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 618.853051][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 619.383980][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 619.390494][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 619.402871][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.408905][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 619.436135][ T9081] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 619.436135][ T9081] program syz.2.1221 not setting count and/or reply_len properly [ 619.471465][ T9081] loop2: detected capacity change from 0 to 2048 [ 619.522473][ T9081] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 619.532143][ T9081] NILFS (loop2): unrecognized mount option "./file0" [ 619.540810][ T9081] overlayfs: failed to resolve './file2': -2 [ 620.827417][ T8991] chnl_net:caif_netlink_parms(): no params data found [ 621.583730][ T8360] Bluetooth: hci3: command 0x0406 tx timeout [ 621.752894][ T4301] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 622.003036][ T4301] usb 2-1: device descriptor read/64, error -71 [ 622.116257][ T9110] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 624.660098][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.673941][ T4301] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 624.689288][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.820378][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.849814][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.857728][ T4301] usb 2-1: device descriptor read/64, error -71 [ 624.880940][ T8991] device bridge_slave_0 entered promiscuous mode [ 624.984234][ T4301] usb usb2-port1: attempt power cycle [ 625.077995][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.088190][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.103873][ T8991] device bridge_slave_1 entered promiscuous mode [ 625.123438][ T9123] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 625.158081][ T9115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.164121][ T9115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 625.170236][ T9115] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 625.182878][ T9115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.191246][ T9115] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 625.202908][ T9115] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 625.212255][ T9115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.223018][ T9115] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 625.229679][ T9115] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 625.238216][ T9115] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.244483][ T9115] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 625.250601][ T9115] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 625.258062][ T9115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.264201][ T9115] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 625.270389][ T9115] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 625.642947][ T4301] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 625.700203][ T4301] usb 2-1: device descriptor read/8, error -71 [ 626.324273][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.665880][ T4815] device hsr_slave_0 left promiscuous mode [ 626.728665][ T4815] device hsr_slave_1 left promiscuous mode [ 626.735609][ T9141] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 626.735609][ T9141] program syz.4.1236 not setting count and/or reply_len properly [ 626.771275][ T9141] loop4: detected capacity change from 0 to 2048 [ 626.784125][ T9141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 626.793801][ T9141] NILFS (loop4): unrecognized mount option "./file0" [ 626.802372][ T9141] overlayfs: failed to resolve './file2': -2 [ 626.825939][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.852750][ T4815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.860219][ T8360] Bluetooth: hci0: command 0x0c1a tx timeout [ 626.898672][ T4815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.906588][ T4815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.914732][ T4815] device bridge_slave_1 left promiscuous mode [ 626.922586][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.933183][ T4815] device bridge_slave_0 left promiscuous mode [ 626.939457][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.991578][ T4815] device veth1_macvtap left promiscuous mode [ 626.998089][ T4815] device veth0_macvtap left promiscuous mode [ 627.005137][ T4815] device veth1_vlan left promiscuous mode [ 627.011037][ T4815] device veth0_vlan left promiscuous mode [ 627.262923][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 627.269004][ T8360] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.275737][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.543532][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 628.932997][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 630.310413][ T8927] Bluetooth: hci3: command 0x0406 tx timeout [ 630.316532][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 630.316580][ T8360] Bluetooth: hci2: command 0x0406 tx timeout [ 630.330082][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 633.899927][ T4815] team0 (unregistering): Port device team_slave_1 removed [ 633.939672][ T4815] team0 (unregistering): Port device team_slave_0 removed [ 633.978782][ T4815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.018795][ T4815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.511588][ T4815] bond0 (unregistering): Released all slaves [ 634.594524][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.753766][ T9170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 634.759731][ T9170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 634.765795][ T9170] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 634.773083][ T9170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 634.779071][ T9170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 634.785139][ T9170] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 634.792347][ T9170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 634.798388][ T9170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 634.804642][ T9170] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 634.811848][ T9170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 634.817869][ T9170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 634.823872][ T9170] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 634.826571][ T8991] team0: Port device team_slave_0 added [ 634.831050][ T9170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 634.842724][ T9170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 634.848732][ T9170] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 635.031380][ T8991] team0: Port device team_slave_1 added [ 635.075202][ T9214] loop1: detected capacity change from 0 to 8 [ 636.862944][ T8360] Bluetooth: hci3: command 0x0c1a tx timeout [ 636.868990][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.875057][ T8360] Bluetooth: hci2: command 0x0c1a tx timeout [ 636.881061][ T8360] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.892900][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 636.974411][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.981388][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.652600][ T8991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.668045][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.677080][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.302349][ T8927] Bluetooth: hci1: command 0x0406 tx timeout [ 640.310491][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 640.312966][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 640.316617][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 640.322460][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 640.362857][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.232588][ T9263] loop4: detected capacity change from 0 to 2048 [ 643.319579][ T9263] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 643.329416][ T9263] NILFS (loop4): unrecognized mount option "./file0" [ 643.444570][ T9263] overlayfs: failed to resolve './file2': -2 [ 643.682102][ T9259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 643.688397][ T9259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 643.695748][ T9259] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 643.703296][ T9259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 643.709415][ T9259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 643.715771][ T9259] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 643.723337][ T9259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.729377][ T9259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 643.735432][ T9259] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 643.742651][ T9259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 643.748679][ T9259] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 643.754718][ T9259] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 643.761679][ T8991] device hsr_slave_0 entered promiscuous mode [ 643.762347][ T9259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.773964][ T9259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 643.779928][ T9259] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 643.972221][ T8991] device hsr_slave_1 entered promiscuous mode [ 645.098190][ T4299] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 645.247598][ T9283] loop4: detected capacity change from 0 to 8 [ 645.254008][ T4299] usb 2-1: device descriptor read/64, error -71 [ 645.652977][ T8927] Bluetooth: hci0: command 0x0c1a tx timeout [ 645.948371][ T4299] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 645.975649][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 645.981812][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 645.988162][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.996039][ T8927] Bluetooth: hci1: command 0x0c1a tx timeout [ 646.962268][ T9302] netlink: 'syz.4.1268': attribute type 3 has an invalid length. [ 648.223136][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 648.229306][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 648.229342][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 648.229375][ T8927] Bluetooth: hci1: command 0x0406 tx timeout [ 648.229409][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 650.953212][ T9314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 650.959188][ T9314] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 650.965348][ T9314] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 650.972571][ T9314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 650.978610][ T9314] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 650.984657][ T9314] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 650.991848][ T9314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 650.997824][ T9314] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 651.005597][ T9314] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 651.012842][ T9314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 651.018774][ T9314] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 651.024772][ T9314] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 651.031975][ T9314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.037974][ T9314] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 651.043969][ T9314] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 652.674629][ T9341] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 652.949194][ T9332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 652.957281][ T9332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 653.201179][ T9332] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 653.442858][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.448926][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 653.455038][ T4267] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.461043][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.504834][ T9332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.538496][ T9332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 653.567690][ T8991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.623947][ T9332] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 653.671705][ T8991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 653.675324][ T9332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 653.693792][ T9332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 653.710272][ T9332] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 653.722712][ T9332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 653.767332][ T8991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 653.774330][ T9332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 653.863009][ T9332] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 653.875586][ T9332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 653.910745][ T9332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 653.926835][ T8991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.940188][ T9332] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 654.922844][ T4341] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 655.004412][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.216341][ T4341] usb 2-1: device descriptor read/64, error -71 [ 655.242051][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 656.181007][ T9358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 656.187209][ T9358] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 656.195266][ T9358] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 656.202585][ T9358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 656.208643][ T9358] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 656.214758][ T9358] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 656.222047][ T9358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 656.228106][ T9358] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 656.234239][ T9358] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 656.241526][ T9358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 656.247572][ T9358] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 656.254191][ T9358] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 656.261492][ T9358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 656.267566][ T9358] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 656.273655][ T9358] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 656.912070][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout [ 656.920171][ T4341] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 656.990224][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.040963][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.134915][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.149738][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 659.149811][ T8927] Bluetooth: hci4: command 0x0406 tx timeout [ 659.155829][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 659.155868][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 659.162005][ T8927] Bluetooth: hci0: command 0x0406 tx timeout [ 659.183547][ T9369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.189531][ T9369] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 659.195935][ T9369] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 659.203182][ T9369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.209164][ T9369] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 659.215173][ T9369] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 659.222379][ T9369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.228383][ T9369] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 659.234383][ T9369] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 659.241589][ T9369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 659.247589][ T9369] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 659.253577][ T9369] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 659.260792][ T9369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 659.262019][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.266782][ T9369] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 659.280705][ T9369] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 659.383200][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.390615][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.410347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.692095][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.703872][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.712560][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.719695][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.729560][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.773938][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.990880][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 660.402318][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 660.464300][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.537931][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.628980][ T8991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.662877][ T8991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.714622][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.727227][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.754664][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.798831][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.963957][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.986810][ T8927] Bluetooth: hci4: command 0x0406 tx timeout [ 662.987454][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 662.993191][ T8927] Bluetooth: hci1: command 0x0406 tx timeout [ 662.999031][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 663.006548][ T8927] Bluetooth: hci3: command 0x0406 tx timeout [ 663.023606][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.177887][ T4341] usb 2-1: device descriptor read/64, error -110 [ 663.302981][ T4341] usb usb2-port1: attempt power cycle [ 665.178673][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 665.178726][ T8927] Bluetooth: hci3: command 0x0c1a tx timeout [ 665.501267][ T4260] Bluetooth: hci1: command 0x0c1a tx timeout [ 665.507637][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 665.516959][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 666.342114][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.460613][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 668.466832][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 668.472876][ T8360] Bluetooth: hci2: command 0x0406 tx timeout [ 668.478889][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 668.484951][ T8927] Bluetooth: hci0: command 0x0406 tx timeout [ 668.587132][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.688703][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 672.699513][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 672.713198][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 672.819199][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 672.831282][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 672.841926][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 675.707569][ T8360] Bluetooth: hci3: command 0x0409 tx timeout [ 676.405819][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 678.868726][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 679.626057][ T9538] hub 2-0:1.0: USB hub found [ 679.635639][ T9538] hub 2-0:1.0: 1 port detected [ 680.324738][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.331916][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.340066][ T9479] device bridge_slave_0 entered promiscuous mode [ 681.930682][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 681.938026][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.970009][ T9541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 681.976141][ T9541] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 681.982117][ T9541] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 681.989356][ T9541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 681.995318][ T9541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 682.001296][ T9541] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 682.008522][ T9541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 682.014512][ T9541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 682.020474][ T9541] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 682.027696][ T9541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 682.033740][ T9541] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 682.039706][ T9541] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 682.048399][ T9541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 682.055046][ T9541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 682.061021][ T9541] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 682.102974][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.111197][ T9479] device bridge_slave_1 entered promiscuous mode [ 682.243957][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.295667][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.388241][ T9479] team0: Port device team_slave_0 added [ 682.414409][ T9479] team0: Port device team_slave_1 added [ 682.533127][ T8360] Bluetooth: hci0: command 0x0c1a tx timeout [ 682.568555][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.584610][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.846882][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.311606][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.362961][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.442487][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.259320][ T8360] Bluetooth: hci3: command 0x0c1a tx timeout [ 684.265553][ T8360] Bluetooth: hci4: command 0x0c1a tx timeout [ 684.271603][ T8360] Bluetooth: hci2: command 0x0c1a tx timeout [ 684.282805][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.417355][ T9479] device hsr_slave_0 entered promiscuous mode [ 684.441710][ T9479] device hsr_slave_1 entered promiscuous mode [ 684.479144][ T9479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.503655][ T9479] Cannot create hsr debugfs directory [ 684.740412][ T34] device hsr_slave_0 left promiscuous mode [ 684.755731][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 684.761992][ T34] device hsr_slave_1 left promiscuous mode [ 684.779344][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.524481][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.530838][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.604132][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 686.604185][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 686.604228][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 686.604271][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 686.656823][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.667597][ T34] device bridge_slave_1 left promiscuous mode [ 686.674313][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.689340][ T34] device bridge_slave_0 left promiscuous mode [ 686.695975][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.992658][ T9658] hub 2-0:1.0: USB hub found [ 696.999553][ T9658] hub 2-0:1.0: 1 port detected [ 702.660855][ T34] team0 (unregistering): Port device team_slave_1 removed [ 704.415047][ T34] team0 (unregistering): Port device team_slave_0 removed [ 704.535942][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.062444][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.802292][ T34] bond0 (unregistering): Released all slaves [ 710.153277][ T9683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 710.159522][ T9683] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 710.166032][ T9683] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 710.173625][ T9683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.179745][ T9683] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 710.186127][ T9683] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 710.193740][ T9683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 710.199857][ T9683] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 710.206267][ T9683] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 710.213743][ T9683] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 710.220233][ T9683] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 710.226670][ T9683] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 710.234166][ T9683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.240284][ T9683] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 710.246670][ T9683] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 710.656163][ T4260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.665779][ T4260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.699969][ T4260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.708368][ T4260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.717843][ T4260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 710.731227][ T4260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.779778][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 713.018424][ T4260] Bluetooth: hci3: command 0x0c1a tx timeout [ 713.024789][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 713.024885][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 713.030920][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 714.377131][ T9738] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 714.862959][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 715.109333][ T8360] Bluetooth: hci5: command 0x041b tx timeout [ 715.115577][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 715.115615][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 715.127982][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 717.321052][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 720.853427][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 720.907714][ T9782] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 722.881699][ T9696] chnl_net:caif_netlink_parms(): no params data found [ 724.665818][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.687651][ T9820] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 725.406990][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.804622][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.284474][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.418475][ T9479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 728.941903][ T9479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 729.200967][ T9479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 729.210369][ T9479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 729.283307][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.298919][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.352675][ T9696] device bridge_slave_0 entered promiscuous mode [ 729.379910][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.453136][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.462455][ T9696] device bridge_slave_1 entered promiscuous mode [ 729.487101][ T9854] loop1: detected capacity change from 0 to 64 [ 729.602640][ T9696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.665002][ T9696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.041516][ T9696] team0: Port device team_slave_0 added [ 730.291944][ T9696] team0: Port device team_slave_1 added [ 730.536735][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.683806][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.690791][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.783892][ T9696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.893790][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.907789][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.037415][ T9696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.511233][ T9696] device hsr_slave_0 entered promiscuous mode [ 731.518489][ T9696] device hsr_slave_1 entered promiscuous mode [ 734.353986][ T9895] hub 2-0:1.0: USB hub found [ 734.359937][ T9895] hub 2-0:1.0: 1 port detected [ 735.166444][ T9696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.176156][ T9696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.186183][ T9696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 735.199094][ T9696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.019887][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.044921][ T4267] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 736.063000][ T8360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 736.070782][ T8360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 736.079362][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 736.082612][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 736.094864][ T8360] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 736.102144][ T8360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 736.122401][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 736.139806][ T9696] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.506922][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 736.712651][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.313457][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.320570][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.564966][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.575054][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.587030][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.594167][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.039511][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 738.133605][ T8360] Bluetooth: hci1: command 0x0409 tx timeout [ 738.405200][ T9932] loop1: detected capacity change from 0 to 64 [ 739.891632][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 739.926058][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 739.970480][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 739.997993][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 740.007765][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 740.025196][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 740.039171][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.148253][ T9696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.215146][ T9696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.496290][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 741.077492][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 741.105256][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 741.143820][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 741.183193][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.382997][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 742.533122][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 742.549955][ T34] device hsr_slave_0 left promiscuous mode [ 742.561702][ T34] device hsr_slave_1 left promiscuous mode [ 742.753094][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.829425][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.967404][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.066472][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.181151][ T34] device bridge_slave_1 left promiscuous mode [ 743.268200][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.293770][ T34] device bridge_slave_0 left promiscuous mode [ 743.300008][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.336020][ T34] device bond0 left promiscuous mode [ 743.341411][ T34] device bond_slave_0 left promiscuous mode [ 743.347608][ T34] device bond_slave_1 left promiscuous mode [ 743.363174][ T34] device veth1_macvtap left promiscuous mode [ 743.371486][ T34] device veth0_macvtap left promiscuous mode [ 743.381971][ T34] device veth1_vlan left promiscuous mode [ 743.387835][ T34] device veth0_vlan left promiscuous mode [ 744.613197][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 747.213604][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.220352][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.318350][ T34] team0 (unregistering): Port device team_slave_1 removed [ 747.352676][ T34] team0 (unregistering): Port device team_slave_0 removed [ 747.436721][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.572969][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.728586][T10015] loop0: detected capacity change from 0 to 64 [ 750.059941][ T34] bond0 (unregistering): Released all slaves [ 750.144073][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 750.989834][T10024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 750.995916][T10024] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 751.001899][T10024] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 751.009136][T10024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 751.015357][T10024] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 751.021337][T10024] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 751.028854][T10024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 751.034953][T10024] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 751.040926][T10024] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 751.048206][T10024] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 751.054186][T10024] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 751.060157][T10024] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 751.067445][T10024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 751.073946][T10024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 751.079919][T10024] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 751.164425][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 751.216704][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 751.295678][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 751.380030][T10046] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 751.407517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.421967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.574748][ T9696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.666055][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.792886][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.821358][ T9908] device bridge_slave_0 entered promiscuous mode [ 751.888075][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.295944][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.362096][ T9908] device bridge_slave_1 entered promiscuous mode [ 752.615481][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.660585][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 752.665215][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.720835][ T9908] team0: Port device team_slave_0 added [ 752.740372][ T9908] team0: Port device team_slave_1 added [ 752.940088][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.982832][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.087774][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.092900][ T4260] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.172866][ T4260] Bluetooth: hci1: command 0x0c1a tx timeout [ 753.179031][ T8360] Bluetooth: hci5: command 0x0c1a tx timeout [ 753.179270][ T4267] Bluetooth: hci4: command 0x0c1a tx timeout [ 753.213148][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.220120][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.343405][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.379797][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 753.403558][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 753.479205][T10072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 753.485309][T10072] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 753.491317][T10072] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 753.498747][T10072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.504731][T10072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 753.510704][T10072] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 753.518036][T10072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.524003][T10072] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.530502][T10072] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 753.537725][T10072] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 753.543714][T10072] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 753.549676][T10072] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 753.556892][T10072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.562864][T10072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 753.568818][T10072] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 753.603378][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 753.624110][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 753.701367][ T9696] device veth0_vlan entered promiscuous mode [ 753.823983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 753.833449][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.888823][ T9696] device veth1_vlan entered promiscuous mode [ 753.912808][ T4299] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 754.005797][ T9908] device hsr_slave_0 entered promiscuous mode [ 754.024116][ T9908] device hsr_slave_1 entered promiscuous mode [ 754.046408][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.072606][ T9908] Cannot create hsr debugfs directory [ 754.083018][ T4299] usb 2-1: device descriptor read/64, error -71 [ 754.106473][ T9696] device veth0_macvtap entered promiscuous mode [ 754.136568][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.152629][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 754.181952][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.209454][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.325610][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.342862][ T9696] device veth1_macvtap entered promiscuous mode [ 754.369911][ T4299] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 754.438366][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.482793][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.492624][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.552772][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.552850][ T4299] usb 2-1: device descriptor read/64, error -71 [ 754.579265][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.610539][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.643970][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.666932][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.703049][ T4299] usb usb2-port1: attempt power cycle [ 754.711747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.749631][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.933138][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 755.014785][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.149807][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.402517][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.747398][ T4267] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.753622][ T4260] Bluetooth: hci5: command 0x0c1a tx timeout [ 755.759650][ T4260] Bluetooth: hci4: command 0x0c1a tx timeout [ 755.765736][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.835071][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.862947][ T4299] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 755.894036][ T9696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.904783][ T9696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.916542][ T9696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.935917][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 755.943533][ T4299] usb 2-1: device descriptor read/8, error -32 [ 755.963930][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 755.978765][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 756.074873][ T9696] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.099477][ T9696] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.128570][ T9696] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.156123][ T9696] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.012904][ T8360] Bluetooth: hci0: command 0x0c1a tx timeout [ 758.236052][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 758.243229][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 758.255846][ T8360] Bluetooth: hci1: command 0x0406 tx timeout [ 758.262053][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 759.134247][ T8360] Bluetooth: hci0: command 0x0406 tx timeout [ 761.440549][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.469151][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.593201][T10149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.599377][T10149] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 761.605714][T10149] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 761.613155][T10149] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.619772][T10149] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 761.626059][T10149] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 761.633486][T10149] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 761.639630][T10149] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 761.646019][T10149] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 761.653552][T10149] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 761.659779][T10149] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 761.666083][T10149] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 761.673471][T10149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.679640][T10149] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 761.686019][T10149] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 762.201009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 762.509292][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.517423][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.550696][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 762.942735][ C1] hrtimer: interrupt took 43051 ns [ 763.508558][ T34] device hsr_slave_0 left promiscuous mode [ 763.561835][ T34] device hsr_slave_1 left promiscuous mode [ 763.576273][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.594820][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.602603][ T34] device bridge_slave_1 left promiscuous mode [ 763.624350][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.728494][ T34] device bridge_slave_0 left promiscuous mode [ 763.746822][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.779279][ T4260] Bluetooth: hci2: command 0x0c1a tx timeout [ 764.779320][ T4268] Bluetooth: hci4: command 0x0c1a tx timeout [ 764.779352][ T4267] Bluetooth: hci5: command 0x0c1a tx timeout [ 764.797689][ T8360] Bluetooth: hci1: command 0x0c1a tx timeout [ 764.803972][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 766.378190][ T34] team0 (unregistering): Port device team_slave_1 removed [ 766.468701][ T34] team0 (unregistering): Port device team_slave_0 removed [ 766.872782][ T8927] Bluetooth: hci2: command 0x0406 tx timeout [ 766.879181][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 766.879218][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 766.891539][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 766.891577][ T8360] Bluetooth: hci4: command 0x0406 tx timeout [ 767.072173][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.297263][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.492753][ C0] ================================================================== [ 767.500851][ C0] BUG: KASAN: use-after-free in tcp_retransmit_timer+0x73d/0x2800 [ 767.508695][ C0] Read of size 8 at addr ffff88805b691f00 by task kworker/u4:2/34 [ 767.516506][ C0] [ 767.518846][ C0] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.1.119-syzkaller #0 [ 767.526921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 767.536983][ C0] Workqueue: netns cleanup_net [ 767.541768][ C0] Call Trace: [ 767.545060][ C0] [ 767.547914][ C0] dump_stack_lvl+0x1e3/0x2cb [ 767.552607][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 767.558080][ C0] ? panic+0x764/0x764 [ 767.562161][ C0] ? _printk+0xd1/0x111 [ 767.566325][ C0] ? __virt_addr_valid+0x17f/0x530 [ 767.571448][ C0] ? __virt_addr_valid+0x17f/0x530 [ 767.576587][ C0] print_report+0x15f/0x4f0 [ 767.581102][ C0] ? __virt_addr_valid+0x17f/0x530 [ 767.586226][ C0] ? __virt_addr_valid+0x17f/0x530 [ 767.591348][ C0] ? __virt_addr_valid+0x45b/0x530 [ 767.596472][ C0] ? __phys_addr+0xb6/0x170 [ 767.600983][ C0] ? tcp_retransmit_timer+0x73d/0x2800 [ 767.606471][ C0] kasan_report+0x136/0x160 [ 767.610982][ C0] ? seqcount_lockdep_reader_access+0x153/0x220 [ 767.617231][ C0] ? tcp_retransmit_timer+0x73d/0x2800 [ 767.622703][ C0] tcp_retransmit_timer+0x73d/0x2800 [ 767.628005][ C0] ? tcp_delack_timer_handler+0x440/0x440 [ 767.633734][ C0] ? tcp_write_timer_handler+0x14c/0x8e0 [ 767.639376][ C0] tcp_write_timer+0x12e/0x280 [ 767.644148][ C0] call_timer_fn+0x1ad/0x6b0 [ 767.648742][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 767.653948][ C0] ? call_timer_fn+0xc2/0x6b0 [ 767.658633][ C0] ? __run_timers+0x890/0x890 [ 767.663320][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 767.668529][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 767.673735][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 767.678941][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 767.684148][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 767.689352][ C0] __run_timers+0x67c/0x890 [ 767.693867][ C0] ? detach_timer+0x380/0x380 [ 767.698551][ C0] ? print_irqtrace_events+0x210/0x210 [ 767.704018][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 767.710270][ C0] run_timer_softirq+0x63/0xf0 [ 767.715042][ C0] handle_softirqs+0x2ee/0xa40 [ 767.719818][ C0] ? __irq_exit_rcu+0x157/0x240 [ 767.724680][ C0] ? do_softirq+0x240/0x240 [ 767.729195][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 767.734400][ C0] __irq_exit_rcu+0x157/0x240 [ 767.739100][ C0] ? irq_exit_rcu+0x20/0x20 [ 767.743616][ C0] irq_exit_rcu+0x5/0x20 [ 767.747867][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 767.753507][ C0] [ 767.756438][ C0] [ 767.759376][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.765371][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 767.770672][ C0] Code: 2b 00 74 08 4c 89 f7 e8 af 81 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 767.790297][ C0] RSP: 0018:ffffc90000ab7480 EFLAGS: 00000206 [ 767.796375][ C0] RAX: 0000000000000001 RBX: 1ffff92000156e9c RCX: ffffffff816b5e82 [ 767.804352][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1340 RDI: ffffffff8b5e6200 [ 767.812331][ C0] RBP: ffffc90000ab75c8 R08: dffffc0000000000 R09: fffffbfff224984e [ 767.820310][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000156e98 [ 767.828285][ C0] R13: dffffc0000000000 R14: ffffc90000ab74e0 R15: 0000000000000246 [ 767.836275][ C0] ? validate_chain+0x112/0x5950 [ 767.841226][ C0] ? read_lock_is_recursive+0x10/0x10 [ 767.846607][ C0] ? kernfs_drain+0x42a/0x6c0 [ 767.851294][ C0] ? kernfs_show+0x360/0x360 [ 767.855898][ C0] ? kernfs_put+0x45a/0x4a0 [ 767.860414][ C0] _raw_spin_lock+0x2a/0x40 [ 767.864929][ C0] ? kernfs_put+0x2c9/0x4a0 [ 767.869447][ C0] kernfs_put+0x2c9/0x4a0 [ 767.873786][ C0] ? __kernfs_remove+0x677/0x710 [ 767.878735][ C0] kernfs_remove_by_name_ns+0xdc/0x150 [ 767.884217][ C0] sysfs_remove_group+0xfa/0x2a0 [ 767.889170][ C0] sysfs_remove_groups+0x50/0xa0 [ 767.894119][ C0] device_remove_attrs+0x236/0x290 [ 767.899248][ C0] ? fw_devlink_unblock_consumers+0x270/0x270 [ 767.905337][ C0] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 767.911073][ C0] device_del+0x6da/0xbd0 [ 767.915426][ C0] ? kill_device+0x160/0x160 [ 767.920028][ C0] ? netdev_unregister_kobject+0x178/0x250 [ 767.925855][ C0] unregister_netdevice_many+0x12bf/0x17a0 [ 767.931673][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 767.936970][ C0] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 767.942005][ C0] ? unregister_netdevice_queue+0x258/0x350 [ 767.947920][ C0] ? list_netdevice+0x660/0x660 [ 767.952787][ C0] ? br_dev_delete+0xd0/0x100 [ 767.957475][ C0] default_device_exit_batch+0x956/0x9d0 [ 767.963126][ C0] ? __might_sleep+0xb0/0xb0 [ 767.967724][ C0] ? net_rps_action_and_irq_enable+0x220/0x220 [ 767.973892][ C0] ? rdma_dev_init_net+0x280/0x280 [ 767.979015][ C0] ? net_rps_action_and_irq_enable+0x220/0x220 [ 767.985191][ C0] cleanup_net+0x763/0xb60 [ 767.989624][ C0] ? ops_free_list+0x3b0/0x3b0 [ 767.994416][ C0] ? process_one_work+0x7a9/0x11d0 [ 767.999539][ C0] process_one_work+0x8a9/0x11d0 [ 768.004499][ C0] ? worker_detach_from_pool+0x260/0x260 [ 768.010145][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 768.015702][ C0] ? kthread_data+0x4e/0xc0 [ 768.020219][ C0] ? wq_worker_running+0x97/0x190 [ 768.025248][ C0] worker_thread+0xa47/0x1200 [ 768.029943][ C0] kthread+0x28d/0x320 [ 768.034012][ C0] ? worker_clr_flags+0x190/0x190 [ 768.039043][ C0] ? kthread_blkcg+0xd0/0xd0 [ 768.043639][ C0] ret_from_fork+0x1f/0x30 [ 768.048069][ C0] [ 768.051089][ C0] [ 768.053421][ C0] Allocated by task 4252: [ 768.057750][ C0] kasan_set_track+0x4b/0x70 [ 768.062352][ C0] __kasan_slab_alloc+0x65/0x70 [ 768.067207][ C0] slab_post_alloc_hook+0x52/0x3a0 [ 768.072330][ C0] kmem_cache_alloc+0x10c/0x2d0 [ 768.077189][ C0] copy_net_ns+0x140/0x5d0 [ 768.081612][ C0] create_new_namespaces+0x425/0x7a0 [ 768.086899][ C0] unshare_nsproxy_namespaces+0x11e/0x170 [ 768.092632][ C0] ksys_unshare+0x531/0xa40 [ 768.097145][ C0] __x64_sys_unshare+0x34/0x40 [ 768.101910][ C0] do_syscall_64+0x3b/0xb0 [ 768.106335][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.112237][ C0] [ 768.114559][ C0] Freed by task 34: [ 768.118361][ C0] kasan_set_track+0x4b/0x70 [ 768.122959][ C0] kasan_save_free_info+0x27/0x40 [ 768.127987][ C0] ____kasan_slab_free+0xd6/0x120 [ 768.133014][ C0] kmem_cache_free+0x292/0x510 [ 768.137783][ C0] cleanup_net+0xab5/0xb60 [ 768.142215][ C0] process_one_work+0x8a9/0x11d0 [ 768.147166][ C0] worker_thread+0xa47/0x1200 [ 768.151847][ C0] kthread+0x28d/0x320 [ 768.155923][ C0] ret_from_fork+0x1f/0x30 [ 768.160345][ C0] [ 768.162667][ C0] Last potentially related work creation: [ 768.168381][ C0] kasan_save_stack+0x3b/0x60 [ 768.173066][ C0] __kasan_record_aux_stack+0xb0/0xc0 [ 768.178445][ C0] insert_work+0x54/0x3d0 [ 768.182783][ C0] __queue_work+0xb4b/0xf90 [ 768.187289][ C0] call_timer_fn+0x1ad/0x6b0 [ 768.191879][ C0] __run_timers+0x6a8/0x890 [ 768.196382][ C0] handle_softirqs+0x2ee/0xa40 [ 768.201160][ C0] run_ksoftirqd+0xc6/0x120 [ 768.205666][ C0] smpboot_thread_fn+0x52c/0xa30 [ 768.210609][ C0] kthread+0x28d/0x320 [ 768.214678][ C0] ret_from_fork+0x1f/0x30 [ 768.219097][ C0] [ 768.221425][ C0] Second to last potentially related work creation: [ 768.228006][ C0] kasan_save_stack+0x3b/0x60 [ 768.232689][ C0] __kasan_record_aux_stack+0xb0/0xc0 [ 768.238076][ C0] insert_work+0x54/0x3d0 [ 768.242416][ C0] __queue_work+0xb4b/0xf90 [ 768.246924][ C0] call_timer_fn+0x1ad/0x6b0 [ 768.251515][ C0] __run_timers+0x6a8/0x890 [ 768.256024][ C0] handle_softirqs+0x2ee/0xa40 [ 768.260798][ C0] run_ksoftirqd+0xc6/0x120 [ 768.265302][ C0] smpboot_thread_fn+0x52c/0xa30 [ 768.270256][ C0] kthread+0x28d/0x320 [ 768.274331][ C0] ret_from_fork+0x1f/0x30 [ 768.278758][ C0] [ 768.281082][ C0] The buggy address belongs to the object at ffff88805b691c40 [ 768.281082][ C0] which belongs to the cache net_namespace of size 6976 [ 768.295405][ C0] The buggy address is located 704 bytes inside of [ 768.295405][ C0] 6976-byte region [ffff88805b691c40, ffff88805b693780) [ 768.308780][ C0] [ 768.311104][ C0] The buggy address belongs to the physical page: [ 768.317534][ C0] page:ffffea00016da400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b690 [ 768.327783][ C0] head:ffffea00016da400 order:3 compound_mapcount:0 compound_pincount:0 [ 768.336112][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 768.344115][ C0] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888140009500 [ 768.352700][ C0] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 768.361280][ C0] page dumped because: kasan: bad access detected [ 768.367710][ C0] page_owner tracks the page as allocated [ 768.373430][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4251, tgid 4251 (syz-executor), ts 59032329131, free_ts 59031287513 [ 768.394805][ C0] post_alloc_hook+0x18d/0x1b0 [ 768.399577][ C0] get_page_from_freelist+0x3731/0x38d0 [ 768.405129][ C0] __alloc_pages+0x28d/0x770 [ 768.409729][ C0] alloc_slab_page+0x6a/0x150 [ 768.414409][ C0] new_slab+0x84/0x2d0 [ 768.418479][ C0] ___slab_alloc+0xc20/0x1270 [ 768.423162][ C0] kmem_cache_alloc+0x1a5/0x2d0 [ 768.428025][ C0] copy_net_ns+0x140/0x5d0 [ 768.432459][ C0] create_new_namespaces+0x425/0x7a0 [ 768.437755][ C0] unshare_nsproxy_namespaces+0x11e/0x170 [ 768.443486][ C0] ksys_unshare+0x531/0xa40 [ 768.447994][ C0] __x64_sys_unshare+0x34/0x40 [ 768.452756][ C0] do_syscall_64+0x3b/0xb0 [ 768.457175][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.463079][ C0] page last free stack trace: [ 768.467747][ C0] free_unref_page_prepare+0xf63/0x1120 [ 768.473302][ C0] free_unref_page+0x33/0x3e0 [ 768.477978][ C0] free_large_kmalloc+0xfb/0x190 [ 768.482921][ C0] skb_release_data+0x5de/0x7a0 [ 768.487781][ C0] consume_skb+0xa3/0x140 [ 768.492117][ C0] netlink_recvmsg+0x61a/0x1180 [ 768.496974][ C0] ____sys_recvmsg+0x285/0x530 [ 768.501744][ C0] __sys_recvmsg+0x2e9/0x3d0 [ 768.506342][ C0] do_syscall_64+0x3b/0xb0 [ 768.510769][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.516668][ C0] [ 768.518997][ C0] Memory state around the buggy address: [ 768.524618][ C0] ffff88805b691e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.532668][ C0] ffff88805b691e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.540711][ C0] >ffff88805b691f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.548753][ C0] ^ [ 768.552804][ C0] ffff88805b691f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.560849][ C0] ffff88805b692000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 768.568889][ C0] ================================================================== [ 768.577078][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 768.584272][ C0] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.1.119-syzkaller #0 [ 768.592344][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 768.602409][ C0] Workqueue: netns cleanup_net [ 768.607192][ C0] Call Trace: [ 768.610481][ C0] [ 768.613326][ C0] dump_stack_lvl+0x1e3/0x2cb [ 768.618017][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 768.623482][ C0] ? panic+0x764/0x764 [ 768.627555][ C0] ? vscnprintf+0x59/0x80 [ 768.631888][ C0] panic+0x318/0x764 [ 768.635787][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 768.640908][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 768.646303][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 768.652214][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 768.658121][ C0] ? _raw_spin_unlock+0x40/0x40 [ 768.662987][ C0] ? print_report+0x4a3/0x4f0 [ 768.667673][ C0] check_panic_on_warn+0x7e/0xa0 [ 768.672633][ C0] ? tcp_retransmit_timer+0x73d/0x2800 [ 768.678104][ C0] end_report+0x66/0x110 [ 768.682362][ C0] kasan_report+0x143/0x160 [ 768.686871][ C0] ? seqcount_lockdep_reader_access+0x153/0x220 [ 768.693124][ C0] ? tcp_retransmit_timer+0x73d/0x2800 [ 768.698595][ C0] tcp_retransmit_timer+0x73d/0x2800 [ 768.703896][ C0] ? tcp_delack_timer_handler+0x440/0x440 [ 768.709629][ C0] ? tcp_write_timer_handler+0x14c/0x8e0 [ 768.715269][ C0] tcp_write_timer+0x12e/0x280 [ 768.720041][ C0] call_timer_fn+0x1ad/0x6b0 [ 768.724642][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 768.729846][ C0] ? call_timer_fn+0xc2/0x6b0 [ 768.734527][ C0] ? __run_timers+0x890/0x890 [ 768.739213][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 768.744412][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 768.749619][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 768.754823][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 768.760024][ C0] ? tcp_init_xmit_timers+0xb0/0xb0 [ 768.765227][ C0] __run_timers+0x67c/0x890 [ 768.769737][ C0] ? detach_timer+0x380/0x380 [ 768.774416][ C0] ? print_irqtrace_events+0x210/0x210 [ 768.779878][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 768.786133][ C0] run_timer_softirq+0x63/0xf0 [ 768.790908][ C0] handle_softirqs+0x2ee/0xa40 [ 768.795686][ C0] ? __irq_exit_rcu+0x157/0x240 [ 768.800548][ C0] ? do_softirq+0x240/0x240 [ 768.805067][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 768.810269][ C0] __irq_exit_rcu+0x157/0x240 [ 768.814949][ C0] ? irq_exit_rcu+0x20/0x20 [ 768.819463][ C0] irq_exit_rcu+0x5/0x20 [ 768.823709][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 768.829349][ C0] [ 768.832281][ C0] [ 768.835213][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 768.841202][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 768.846498][ C0] Code: 2b 00 74 08 4c 89 f7 e8 af 81 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 768.866109][ C0] RSP: 0018:ffffc90000ab7480 EFLAGS: 00000206 [ 768.872181][ C0] RAX: 0000000000000001 RBX: 1ffff92000156e9c RCX: ffffffff816b5e82 [ 768.880134][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1340 RDI: ffffffff8b5e6200 [ 768.888084][ C0] RBP: ffffc90000ab75c8 R08: dffffc0000000000 R09: fffffbfff224984e [ 768.896040][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000156e98 [ 768.903993][ C0] R13: dffffc0000000000 R14: ffffc90000ab74e0 R15: 0000000000000246 [ 768.911958][ C0] ? validate_chain+0x112/0x5950 [ 768.916880][ C0] ? read_lock_is_recursive+0x10/0x10 [ 768.922248][ C0] ? kernfs_drain+0x42a/0x6c0 [ 768.926940][ C0] ? kernfs_show+0x360/0x360 [ 768.931540][ C0] ? kernfs_put+0x45a/0x4a0 [ 768.936051][ C0] _raw_spin_lock+0x2a/0x40 [ 768.940557][ C0] ? kernfs_put+0x2c9/0x4a0 [ 768.945065][ C0] kernfs_put+0x2c9/0x4a0 [ 768.949399][ C0] ? __kernfs_remove+0x677/0x710 [ 768.954349][ C0] kernfs_remove_by_name_ns+0xdc/0x150 [ 768.959817][ C0] sysfs_remove_group+0xfa/0x2a0 [ 768.964757][ C0] sysfs_remove_groups+0x50/0xa0 [ 768.969701][ C0] device_remove_attrs+0x236/0x290 [ 768.974819][ C0] ? fw_devlink_unblock_consumers+0x270/0x270 [ 768.980892][ C0] ? kernfs_remove_by_name_ns+0x10f/0x150 [ 768.986631][ C0] device_del+0x6da/0xbd0 [ 768.990971][ C0] ? kill_device+0x160/0x160 [ 768.995565][ C0] ? netdev_unregister_kobject+0x178/0x250 [ 769.001380][ C0] unregister_netdevice_many+0x12bf/0x17a0 [ 769.007192][ C0] ? kasan_quarantine_put+0xd4/0x220 [ 769.012490][ C0] ? alloc_netdev_mqs+0xeb0/0xeb0 [ 769.017527][ C0] ? unregister_netdevice_queue+0x258/0x350 [ 769.023431][ C0] ? list_netdevice+0x660/0x660 [ 769.028285][ C0] ? br_dev_delete+0xd0/0x100 [ 769.032970][ C0] default_device_exit_batch+0x956/0x9d0 [ 769.038616][ C0] ? __might_sleep+0xb0/0xb0 [ 769.043208][ C0] ? net_rps_action_and_irq_enable+0x220/0x220 [ 769.049366][ C0] ? rdma_dev_init_net+0x280/0x280 [ 769.054476][ C0] ? net_rps_action_and_irq_enable+0x220/0x220 [ 769.060632][ C0] cleanup_net+0x763/0xb60 [ 769.065052][ C0] ? ops_free_list+0x3b0/0x3b0 [ 769.069819][ C0] ? process_one_work+0x7a9/0x11d0 [ 769.074931][ C0] process_one_work+0x8a9/0x11d0 [ 769.079875][ C0] ? worker_detach_from_pool+0x260/0x260 [ 769.085509][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 769.091055][ C0] ? kthread_data+0x4e/0xc0 [ 769.095565][ C0] ? wq_worker_running+0x97/0x190 [ 769.100602][ C0] worker_thread+0xa47/0x1200 [ 769.105301][ C0] kthread+0x28d/0x320 [ 769.109372][ C0] ? worker_clr_flags+0x190/0x190 [ 769.114403][ C0] ? kthread_blkcg+0xd0/0xd0 [ 769.119002][ C0] ret_from_fork+0x1f/0x30 [ 769.123437][ C0] [ 769.126723][ C0] Kernel Offset: disabled [ 769.131035][ C0] Rebooting in 86400 seconds..