last executing test programs: 4m13.68891658s ago: executing program 1 (id=139): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x84, @multicast2, 0x4e24, 0x3, 'lblcr\x00', 0x2, 0xfffffffa, 0x7d}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) 4m13.33985105s ago: executing program 1 (id=140): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 4m13.125659103s ago: executing program 1 (id=141): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m12.608996904s ago: executing program 1 (id=142): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8010) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) socket$inet_sctp(0x2, 0x1, 0x84) pipe(0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x107500) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4m12.245442553s ago: executing program 1 (id=143): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ff", 0xe, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 4m11.785069372s ago: executing program 1 (id=145): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) writev(r0, &(0x7f0000002c00)=[{&(0x7f0000002940)="59721f1223e8d1f8", 0x8}], 0x1) 4m8.804970633s ago: executing program 3 (id=160): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4m5.068908212s ago: executing program 3 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501fffffffffcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000180049000bac0f0005ac0f0005ac0f00bf"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 3m56.442975065s ago: executing program 32 (id=145): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) writev(r0, &(0x7f0000002c00)=[{&(0x7f0000002940)="59721f1223e8d1f8", 0x8}], 0x1) 3m55.27874967s ago: executing program 3 (id=173): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=r0], 0x24}}, 0x0) 3m54.939410551s ago: executing program 3 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "07ba560ee8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000) 3m54.728211878s ago: executing program 3 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3m53.717200108s ago: executing program 3 (id=182): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x10400}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3m38.076872589s ago: executing program 33 (id=182): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x10400}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 14.730907493s ago: executing program 0 (id=477): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) r6 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1004003, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b4060100000000003a73113c0000000000859500c200000000009500001200000022000000000000000000000000000000ae69b0bcd9f01d402ea42e6eaf89be15f6862d7f7b09f2e59574c5ebe71b508484b0e0bd3e775b9320b9d8376c4e75"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x18, 0x0, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') syz_pidfd_open(0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 13.604213415s ago: executing program 2 (id=479): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000001180)="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", 0x66a}], 0x1) close(r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r5, 0x400, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_FPU(r9, 0x81a0ae8c, &(0x7f0000000000)) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)) 13.12855596s ago: executing program 4 (id=480): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fsi_master_gpio_poll_response_busy\x00', r7}, 0x18) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r8 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 11.519868608s ago: executing program 4 (id=481): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, 0x0, 0x0) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000007000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 11.167225307s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) cachestat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 10.215662621s ago: executing program 4 (id=483): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x9, 0x800, 0x0, 0x2, 0x7, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7, 0x5, 0x0, 0x5, 0xb, 0x0, {0x8, 0x80}, 0x2, 0x6}}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 9.609618558s ago: executing program 0 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="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", 0x147}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 9.251338305s ago: executing program 0 (id=485): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x18081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getitimer(0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) fsopen(&(0x7f0000000540)='jfs\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 8.276792445s ago: executing program 2 (id=486): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f4, 0x0, 0x9}]}) r5 = dup3(r1, r0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r7}, @ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/73, 0x49, 0x2, 0x23}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) unshare(0x20040600) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00') 7.150759696s ago: executing program 4 (id=487): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) 7.140848496s ago: executing program 2 (id=488): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fsi_master_gpio_poll_response_busy\x00', r6}, 0x18) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.026482438s ago: executing program 2 (id=489): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='fsi_master_gpio_poll_response_busy\x00', r7}, 0x18) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r8 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.057028638s ago: executing program 4 (id=490): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500000082", @ANYRES32=0x77359400, @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.866299129s ago: executing program 2 (id=491): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e000000200000002000000"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 3.230238307s ago: executing program 0 (id=492): vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca0", 0x100}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x8, 0x4}) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f00000008c0)={0x3, 0x0, &(0x7f0000000840)=[{0xffff, 0x1000, 0x6, &(0x7f0000001400)=""/4096}, {0x0, 0x1f, 0x5a88, &(0x7f0000000640)=""/31}, {0x3, 0x9e, 0x9, &(0x7f0000000780)=""/158}]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 144.713439ms ago: executing program 0 (id=493): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 137.862055ms ago: executing program 4 (id=494): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xff, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0xfc, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x100, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0x20fff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x1d7b, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x10081, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x2, 0x8, 0x4}, {0x3, 0x6, 0x7f, 0x9, 0xfffffff9, 0xdbf}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0xfffffffd}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x6, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0xfffffffe, 0xd3, 0xff, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49404b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = inotify_init1(0x80800) socket$inet6(0xa, 0x3, 0x5) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x1e, 0x5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 0s ago: executing program 2 (id=495): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 87.080051][ T991] cfg80211: failed to load regulatory.db [ 89.473583][ T5820] cgroup: Unknown subsys name 'net' [ 89.691588][ T5820] cgroup: Unknown subsys name 'cpuset' [ 89.756634][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.709646][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.678399][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.684332][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.701131][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.702029][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.702729][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.704581][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.718496][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.723095][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.726047][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.727523][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.728376][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.731206][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.733005][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.738486][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.739992][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.742916][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.743396][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.744897][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.745121][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.753755][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.755502][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.799356][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.825919][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.827583][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.828377][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.829364][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.903283][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 95.942605][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.056401][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.062099][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 96.836536][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.837184][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.837511][ T5833] bridge_slave_0: entered allmulticast mode [ 96.839348][ T5833] bridge_slave_0: entered promiscuous mode [ 96.846727][ T5839] Bluetooth: hci0: command tx timeout [ 96.846837][ T5839] Bluetooth: hci3: command tx timeout [ 96.846904][ T5839] Bluetooth: hci2: command tx timeout [ 96.846968][ T5839] Bluetooth: hci4: command tx timeout [ 96.916104][ T59] Bluetooth: hci1: command tx timeout [ 97.027283][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.027474][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.027688][ T5833] bridge_slave_1: entered allmulticast mode [ 97.030988][ T5833] bridge_slave_1: entered promiscuous mode [ 97.034091][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.034215][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.034325][ T5840] bridge_slave_0: entered allmulticast mode [ 97.036434][ T5840] bridge_slave_0: entered promiscuous mode [ 97.377799][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.377949][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.378120][ T5840] bridge_slave_1: entered allmulticast mode [ 97.381580][ T5840] bridge_slave_1: entered promiscuous mode [ 97.383324][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.383559][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.383751][ T5834] bridge_slave_0: entered allmulticast mode [ 97.388095][ T5834] bridge_slave_0: entered promiscuous mode [ 97.707821][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.707957][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.708129][ T5834] bridge_slave_1: entered allmulticast mode [ 97.711135][ T5834] bridge_slave_1: entered promiscuous mode [ 97.712450][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.712603][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.712745][ T5831] bridge_slave_0: entered allmulticast mode [ 97.714459][ T5831] bridge_slave_0: entered promiscuous mode [ 97.728553][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.728692][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.728863][ T5832] bridge_slave_0: entered allmulticast mode [ 97.732210][ T5832] bridge_slave_0: entered promiscuous mode [ 97.750532][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.921206][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.921337][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.921455][ T5831] bridge_slave_1: entered allmulticast mode [ 97.923211][ T5831] bridge_slave_1: entered promiscuous mode [ 97.978093][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.978261][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.978497][ T5832] bridge_slave_1: entered allmulticast mode [ 97.980272][ T5832] bridge_slave_1: entered promiscuous mode [ 97.984322][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.998658][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.340321][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.343461][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.671690][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.677394][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.682319][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.687691][ T5833] team0: Port device team_slave_0 added [ 98.843011][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.847101][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.849621][ T5833] team0: Port device team_slave_1 added [ 98.852613][ T5840] team0: Port device team_slave_0 added [ 98.915987][ T59] Bluetooth: hci4: command tx timeout [ 98.916025][ T59] Bluetooth: hci2: command tx timeout [ 98.916049][ T59] Bluetooth: hci3: command tx timeout [ 98.916072][ T59] Bluetooth: hci0: command tx timeout [ 99.005852][ T5839] Bluetooth: hci1: command tx timeout [ 99.139608][ T5840] team0: Port device team_slave_1 added [ 99.141591][ T5834] team0: Port device team_slave_0 added [ 99.718427][ T5834] team0: Port device team_slave_1 added [ 99.720279][ T5831] team0: Port device team_slave_0 added [ 99.721967][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.721978][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.721994][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.725294][ T5832] team0: Port device team_slave_0 added [ 99.890216][ T5831] team0: Port device team_slave_1 added [ 99.891732][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.891746][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.891773][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.893885][ T5832] team0: Port device team_slave_1 added [ 99.894889][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.894899][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.894914][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.241578][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.241591][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.241608][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.242673][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.242683][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.242698][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.524050][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.524064][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.524080][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.525113][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.525123][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.525138][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.594399][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.594416][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.594449][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.718883][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.718896][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.718912][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.719997][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.720007][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.720023][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.918240][ T5833] hsr_slave_0: entered promiscuous mode [ 100.920054][ T5833] hsr_slave_1: entered promiscuous mode [ 100.995748][ T5839] Bluetooth: hci0: command tx timeout [ 100.995784][ T5839] Bluetooth: hci3: command tx timeout [ 100.995804][ T5839] Bluetooth: hci2: command tx timeout [ 100.995823][ T5839] Bluetooth: hci4: command tx timeout [ 101.077330][ T59] Bluetooth: hci1: command tx timeout [ 101.131685][ T5840] hsr_slave_0: entered promiscuous mode [ 101.132614][ T5840] hsr_slave_1: entered promiscuous mode [ 101.133373][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 101.133444][ T5840] Cannot create hsr debugfs directory [ 101.428941][ T5834] hsr_slave_0: entered promiscuous mode [ 101.430967][ T5834] hsr_slave_1: entered promiscuous mode [ 101.431652][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.431685][ T5834] Cannot create hsr debugfs directory [ 101.707921][ T5832] hsr_slave_0: entered promiscuous mode [ 101.709456][ T5832] hsr_slave_1: entered promiscuous mode [ 101.710518][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 101.710545][ T5832] Cannot create hsr debugfs directory [ 101.741289][ T5831] hsr_slave_0: entered promiscuous mode [ 101.742776][ T5831] hsr_slave_1: entered promiscuous mode [ 101.743791][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 101.743817][ T5831] Cannot create hsr debugfs directory [ 103.075869][ T59] Bluetooth: hci4: command tx timeout [ 103.076957][ T5839] Bluetooth: hci2: command tx timeout [ 103.076985][ T5152] Bluetooth: hci3: command tx timeout [ 103.077013][ T5152] Bluetooth: hci0: command tx timeout [ 103.155830][ T5839] Bluetooth: hci1: command tx timeout [ 103.548178][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.583918][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.623789][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.684279][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.835427][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.880977][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.904853][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.973561][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.138536][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.188347][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.234441][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.310080][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.492993][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.556396][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.595189][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.656965][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.790122][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.877596][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.937199][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.994460][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.033848][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.068145][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.133203][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.133619][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.162958][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.205012][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.205160][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.304945][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.365567][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.365886][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.407884][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.439071][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.439382][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.555517][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.619874][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.672455][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.672715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.742635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.743436][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.853025][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.925386][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.926534][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.999956][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.021480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.021669][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.204541][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.229370][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.303925][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.305515][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.385300][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.385523][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.649880][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.786089][ T5833] veth0_vlan: entered promiscuous mode [ 106.891596][ T5833] veth1_vlan: entered promiscuous mode [ 106.992631][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.258612][ T5833] veth0_macvtap: entered promiscuous mode [ 107.327596][ T5833] veth1_macvtap: entered promiscuous mode [ 107.463186][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.503609][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.528320][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.587227][ T5840] veth0_vlan: entered promiscuous mode [ 107.592050][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.592316][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.616959][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632080][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.654761][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.748342][ T5840] veth1_vlan: entered promiscuous mode [ 108.055153][ T5834] veth0_vlan: entered promiscuous mode [ 108.109589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.109614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.139315][ T5832] veth0_vlan: entered promiscuous mode [ 108.193598][ T5834] veth1_vlan: entered promiscuous mode [ 108.243870][ T5831] veth0_vlan: entered promiscuous mode [ 108.245108][ T5840] veth0_macvtap: entered promiscuous mode [ 108.273795][ T1375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.273816][ T1375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.281767][ T5832] veth1_vlan: entered promiscuous mode [ 108.297817][ T5840] veth1_macvtap: entered promiscuous mode [ 108.344902][ T5831] veth1_vlan: entered promiscuous mode [ 108.429053][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.470924][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.537120][ T5834] veth0_macvtap: entered promiscuous mode [ 108.557245][ T1440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.561215][ T1440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.567207][ T1440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.570813][ T5834] veth1_macvtap: entered promiscuous mode [ 108.572873][ T5832] veth0_macvtap: entered promiscuous mode [ 108.588301][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.634149][ T5832] veth1_macvtap: entered promiscuous mode [ 108.642956][ T5831] veth0_macvtap: entered promiscuous mode [ 108.744351][ T5831] veth1_macvtap: entered promiscuous mode [ 108.790307][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.904910][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.944455][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.973615][ T5954] process 'syz.1.2' launched './file2' with NULL argv: empty string added [ 109.033868][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.107096][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.109533][ T1375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.197492][ T1375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.220139][ T1375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.223956][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.224045][ T1375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.232521][ T1375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.234449][ T1375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.235452][ T1375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.300439][ T1375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.325141][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.325163][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.405559][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.429050][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.447466][ T5923] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.598334][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.605835][ T5923] usb 2-1: device descriptor read/64, error -71 [ 109.615964][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.724734][ T1375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.724756][ T1375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.856793][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.994461][ T5923] usb 2-1: device descriptor read/64, error -71 [ 110.101933][ T5923] usb usb2-port1: attempt power cycle [ 110.198129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.198943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.199044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.199135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 110.496428][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.518285][ T5923] usb 2-1: device descriptor read/8, error -71 [ 110.631156][ T1375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.631180][ T1375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.720660][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.720684][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.756191][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.776867][ T5923] usb 2-1: device descriptor read/8, error -71 [ 110.894413][ T5923] usb usb2-port1: unable to enumerate USB device [ 110.952092][ T5960] Zero length message leads to an empty skb [ 110.984864][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.984886][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.232517][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.232538][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.555445][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.555466][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.668163][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.668188][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.365964][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.526095][ T5934] usb 5-1: device descriptor read/64, error -71 [ 115.765741][ T5934] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.917200][ T5934] usb 5-1: device descriptor read/64, error -71 [ 116.042201][ T5934] usb usb5-port1: attempt power cycle [ 116.387536][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.419019][ T5934] usb 5-1: device descriptor read/8, error -71 [ 116.657103][ T5934] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.687515][ T5934] usb 5-1: device descriptor read/8, error -71 [ 116.797110][ T5934] usb usb5-port1: unable to enumerate USB device [ 120.660025][ T6090] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.917731][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.917768][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.020804][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.020934][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.715771][ T5839] Bluetooth: hci3: command tx timeout [ 132.221364][ T6246] lo speed is unknown, defaulting to 1000 [ 132.224850][ T6246] lo speed is unknown, defaulting to 1000 [ 132.301991][ T6246] lo speed is unknown, defaulting to 1000 [ 133.203979][ T6255] syz.2.103 uses obsolete (PF_INET,SOCK_PACKET) [ 133.670422][ T6246] infiniband syz0: set active [ 133.670448][ T6246] infiniband syz0: added lo [ 133.673517][ T6246] syz0: rxe_create_cq: returned err = -12 [ 133.673675][ T6246] infiniband syz0: Couldn't create ib_mad CQ [ 133.673898][ T6246] infiniband syz0: Couldn't open port 1 [ 133.732067][ T5922] lo speed is unknown, defaulting to 1000 [ 133.902210][ T6246] RDS/IB: syz0: added [ 133.903096][ T6246] smc: adding ib device syz0 with port count 1 [ 133.903391][ T6246] smc: ib device syz0 port 1 has pnetid [ 133.905477][ T6252] lo speed is unknown, defaulting to 1000 [ 133.931247][ T6246] lo speed is unknown, defaulting to 1000 [ 134.061599][ T6270] netlink: 'syz.0.107': attribute type 29 has an invalid length. [ 134.061690][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 134.465139][ T6281] netlink: zone id is out of range [ 134.468744][ T6281] netlink: del zone limit has 4 unknown bytes [ 134.575881][ T6277] veth0: renamed from veth1_vlan [ 135.009406][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 136.377089][ T6246] lo speed is unknown, defaulting to 1000 [ 137.615081][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.285535][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.295749][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.351700][ T6246] lo speed is unknown, defaulting to 1000 [ 138.650303][ T5498] veth0: left promiscuous mode [ 139.555886][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.789695][ T6342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.790535][ T6342] netlink: 'syz.2.126': attribute type 12 has an invalid length. [ 139.790554][ T6342] netlink: 'syz.2.126': attribute type 29 has an invalid length. [ 139.790567][ T6342] netlink: 148 bytes leftover after parsing attributes in process `syz.2.126'. [ 139.790596][ T6342] netlink: 'syz.2.126': attribute type 2 has an invalid length. [ 139.790610][ T6342] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 140.187023][ T6352] netlink: 64 bytes leftover after parsing attributes in process `syz.2.128'. [ 140.708342][ T6246] lo speed is unknown, defaulting to 1000 [ 141.244852][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 141.663619][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 143.032684][ T6246] lo speed is unknown, defaulting to 1000 [ 144.195322][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'. [ 145.160075][ T6416] lo speed is unknown, defaulting to 1000 [ 146.516182][ T6437] openvswitch: netlink: IP tunnel dst address not specified [ 147.156200][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 147.355278][ T6456] tipc: Started in network mode [ 147.355299][ T6456] tipc: Node identity 02344c773567, cluster identity 4711 [ 147.359248][ T6456] tipc: Enabled bearer , priority 0 [ 147.360287][ T6456] syzkaller0: entered promiscuous mode [ 147.360312][ T6456] syzkaller0: entered allmulticast mode [ 147.505440][ T6458] tipc: Resetting bearer [ 147.546685][ T6455] tipc: Resetting bearer [ 148.095687][ T6455] tipc: Disabling bearer [ 148.920954][ T6466] netlink: 'syz.0.162': attribute type 29 has an invalid length. [ 148.920979][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 149.620163][ T6477] tipc: Started in network mode [ 149.620176][ T6477] tipc: Node identity , cluster identity 4711 [ 149.620185][ T6477] tipc: Failed to obtain node identity [ 149.620203][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 149.915174][ T6477] syzkaller0: entered promiscuous mode [ 149.915198][ T6477] syzkaller0: entered allmulticast mode [ 160.236727][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.242988][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.244020][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.245336][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.277548][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.287514][ T6494] lo speed is unknown, defaulting to 1000 [ 162.355935][ T5839] Bluetooth: hci5: command tx timeout [ 162.909437][ T5922] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 163.099543][ T5922] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 164.287557][ T6542] fido_id[6542]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 164.437030][ T5839] Bluetooth: hci5: command tx timeout [ 165.386735][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.435167][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.265151][ T1375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.414501][ T6570] binder: BINDER_SET_CONTEXT_MGR already set [ 166.414518][ T6570] binder: 6565:6570 ioctl 4018620d 2000000000c0 returned -16 [ 166.525073][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 166.527097][ T5839] Bluetooth: hci5: command tx timeout [ 166.628599][ T6570] binder: BINDER_SET_CONTEXT_MGR already set [ 166.628615][ T6570] binder: 6565:6570 ioctl 4018620d 200000000040 returned -16 [ 168.018095][ T1375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.605908][ T5839] Bluetooth: hci5: command tx timeout [ 169.041813][ T1375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.293540][ T1375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.726715][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.726895][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.727134][ T6494] bridge_slave_0: entered allmulticast mode [ 170.753084][ T6494] bridge_slave_0: entered promiscuous mode [ 170.789781][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.813271][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.813538][ T6494] bridge_slave_1: entered allmulticast mode [ 170.850860][ T6494] bridge_slave_1: entered promiscuous mode [ 171.403439][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.772706][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.162733][ T6643] binder: BINDER_SET_CONTEXT_MGR already set [ 173.162750][ T6643] binder: 6639:6643 ioctl 4018620d 200000000040 returned -16 [ 173.657621][ T6494] team0: Port device team_slave_0 added [ 173.762019][ T6494] team0: Port device team_slave_1 added [ 174.234657][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.234676][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.234705][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.252033][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.252049][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.252075][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.343356][ T1375] bridge_slave_1: left allmulticast mode [ 174.343557][ T1375] bridge_slave_1: left promiscuous mode [ 174.347001][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.467923][ T1375] bridge_slave_0: left allmulticast mode [ 174.467959][ T1375] bridge_slave_0: left promiscuous mode [ 174.468280][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.484553][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.514748][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.542673][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.613373][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.304428][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.426615][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.491578][ T1375] bond0 (unregistering): Released all slaves [ 179.553555][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.571740][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.572606][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.573548][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.574473][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.697403][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 179.799040][ T6537] Set syz1 is full, maxelem 65536 reached [ 180.993176][ T6494] hsr_slave_0: entered promiscuous mode [ 181.007437][ T6494] hsr_slave_1: entered promiscuous mode [ 181.008443][ T6494] debugfs: 'hsr0' already exists in 'hsr' [ 181.008462][ T6494] Cannot create hsr debugfs directory [ 181.009500][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 181.426165][ T6730] binder: BINDER_SET_CONTEXT_MGR already set [ 181.426177][ T6730] binder: 6728:6730 ioctl 4018620d 2000000000c0 returned -16 [ 181.655715][ T5839] Bluetooth: hci2: command tx timeout [ 183.457277][ T6700] lo speed is unknown, defaulting to 1000 [ 183.724314][ T5839] Bluetooth: hci2: command tx timeout [ 183.871900][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 185.796070][ T5839] Bluetooth: hci2: command tx timeout [ 187.131714][ T1375] hsr_slave_0: left promiscuous mode [ 187.231349][ T1375] hsr_slave_1: left promiscuous mode [ 187.233366][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.233429][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.327604][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.327641][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.664000][ T1375] veth1_macvtap: left promiscuous mode [ 187.664294][ T1375] veth0_macvtap: left promiscuous mode [ 187.684346][ T1375] veth0_vlan: left promiscuous mode [ 187.887303][ T5839] Bluetooth: hci2: command tx timeout [ 188.241063][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.884677][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.912306][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.216428][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.681635][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 192.840717][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 193.933444][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.673022][ T6494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.782538][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.854543][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 194.867535][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.867562][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.912808][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.912834][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.379308][ T6494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.450722][ T6494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.595883][ T6494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.462766][ T6700] chnl_net:caif_netlink_parms(): no params data found [ 199.738415][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.738469][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.823657][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.758492][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.758660][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.758921][ T6700] bridge_slave_0: entered allmulticast mode [ 201.825315][ T6700] bridge_slave_0: entered promiscuous mode [ 201.900899][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.901017][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.901190][ T6700] bridge_slave_1: entered allmulticast mode [ 202.115318][ T6700] bridge_slave_1: entered promiscuous mode [ 204.492569][ T1375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.592877][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.593098][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.691319][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.691355][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.059880][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.143023][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.850245][ T1375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.249143][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.284877][ T6700] team0: Port device team_slave_0 added [ 206.500237][ T1375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.774467][ T6700] team0: Port device team_slave_1 added [ 207.386522][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.386688][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.791353][ T1375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.892389][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.892409][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.892438][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.004833][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.004850][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.004875][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.143453][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.143628][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.515765][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.274174][ T6700] hsr_slave_0: entered promiscuous mode [ 211.328194][ T6700] hsr_slave_1: entered promiscuous mode [ 213.303656][ T6969] binder: BINDER_SET_CONTEXT_MGR already set [ 213.303673][ T6969] binder: 6968:6969 ioctl 4018620d 2000000000c0 returned -16 [ 213.399023][ T6969] binder: BINDER_SET_CONTEXT_MGR already set [ 213.399041][ T6969] binder: 6968:6969 ioctl 4018620d 200000000040 returned -16 [ 213.525453][ T1375] bridge_slave_1: left allmulticast mode [ 213.525490][ T1375] bridge_slave_1: left promiscuous mode [ 213.527640][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.761532][ T1375] bridge_slave_0: left allmulticast mode [ 213.761572][ T1375] bridge_slave_0: left promiscuous mode [ 213.761900][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.169278][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 217.169322][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 217.169388][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 218.960993][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.099164][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.139380][ T1375] bond0 (unregistering): Released all slaves [ 219.633480][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 219.887708][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.170728][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.542844][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.261826][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.406272][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.939312][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.969120][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.976644][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.991941][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.007581][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.190340][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.256201][ T7040] binder: BINDER_SET_CONTEXT_MGR already set [ 223.256217][ T7040] binder: 7039:7040 ioctl 4018620d 2000000000c0 returned -16 [ 223.343346][ T7040] binder: BINDER_SET_CONTEXT_MGR already set [ 223.343364][ T7040] binder: 7039:7040 ioctl 4018620d 200000000040 returned -16 [ 225.169558][ T5839] Bluetooth: hci3: command tx timeout [ 227.236414][ T5839] Bluetooth: hci3: command tx timeout [ 227.877830][ T7035] lo speed is unknown, defaulting to 1000 [ 227.985695][ T6700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.208342][ T6700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.255934][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 228.361571][ T6700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.602199][ T6700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.265759][ T1375] hsr_slave_0: left promiscuous mode [ 229.315771][ T5839] Bluetooth: hci3: command tx timeout [ 229.872721][ T1375] hsr_slave_1: left promiscuous mode [ 229.873923][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.873954][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.946528][ T1375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.946554][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.238818][ T1375] veth1_macvtap: left promiscuous mode [ 230.238963][ T1375] veth0_macvtap: left promiscuous mode [ 230.263714][ T1375] veth1_vlan: left promiscuous mode [ 230.263976][ T1375] veth0_vlan: left promiscuous mode [ 230.357197][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 230.357214][ T7104] binder: 7103:7104 ioctl 4018620d 2000000000c0 returned -16 [ 230.508002][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 230.508019][ T7104] binder: 7103:7104 ioctl 4018620d 200000000040 returned -16 [ 232.068894][ T5839] Bluetooth: hci3: command tx timeout [ 234.827108][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 235.256240][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 236.396288][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 239.258114][ T7159] binder: BINDER_SET_CONTEXT_MGR already set [ 239.258131][ T7159] binder: 7158:7159 ioctl 4018620d 2000000000c0 returned -16 [ 239.528114][ T7163] binder: BINDER_SET_CONTEXT_MGR already set [ 239.528126][ T7163] binder: 7158:7163 ioctl 4018620d 200000000040 returned -16 [ 240.286848][ T7035] chnl_net:caif_netlink_parms(): no params data found [ 242.365091][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.375246][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.379248][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.402369][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.429977][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.621243][ T5846] Bluetooth: hci5: command tx timeout [ 244.653701][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.655301][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.148165][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 245.368510][ T7035] bridge_slave_0: entered allmulticast mode [ 246.396022][ T7035] bridge_slave_0: entered promiscuous mode [ 246.963529][ T5846] Bluetooth: hci5: command tx timeout [ 247.381654][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.381816][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.382075][ T7035] bridge_slave_1: entered allmulticast mode [ 247.416350][ T7035] bridge_slave_1: entered promiscuous mode [ 247.424820][ T7217] binder: BINDER_SET_CONTEXT_MGR already set [ 247.424835][ T7217] binder: 7216:7217 ioctl 4018620d 2000000000c0 returned -16 [ 247.428564][ T7179] lo speed is unknown, defaulting to 1000 [ 247.570112][ T7217] binder: BINDER_SET_CONTEXT_MGR already set [ 247.570129][ T7217] binder: 7216:7217 ioctl 4018620d 200000000040 returned -16 [ 247.963621][ T7035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.010056][ T7035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.995797][ T5846] Bluetooth: hci5: command tx timeout [ 251.077978][ T5846] Bluetooth: hci5: command tx timeout [ 253.219020][ T7035] team0: Port device team_slave_0 added [ 254.964761][ T7035] team0: Port device team_slave_1 added [ 255.593997][ T7282] binder: BINDER_SET_CONTEXT_MGR already set [ 255.594015][ T7282] binder: 7281:7282 ioctl 4018620d 2000000000c0 returned -16 [ 255.675781][ T7282] binder: BINDER_SET_CONTEXT_MGR already set [ 255.675797][ T7282] binder: 7281:7282 ioctl 4018620d 200000000040 returned -16 [ 255.922807][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.922825][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.922853][ T7035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.999313][ T7035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.999332][ T7035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.999361][ T7035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.131009][ T7285] blktrace: Concurrent blktraces are not allowed on loop1 [ 256.703480][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.912004][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.299170][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.196231][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.710379][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.100517][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.368002][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.155343][ T7035] hsr_slave_0: entered promiscuous mode [ 261.164448][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.164533][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.257669][ T7035] hsr_slave_1: entered promiscuous mode [ 261.258227][ T7035] debugfs: 'hsr0' already exists in 'hsr' [ 261.258243][ T7035] Cannot create hsr debugfs directory [ 262.814125][ T7350] binder: BINDER_SET_CONTEXT_MGR already set [ 262.814137][ T7350] binder: 7349:7350 ioctl 4018620d 2000000000c0 returned -16 [ 263.847642][ T7179] chnl_net:caif_netlink_parms(): no params data found [ 265.669610][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.507317][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 268.294316][ T7410] binder: BINDER_SET_CONTEXT_MGR already set [ 268.294333][ T7410] binder: 7407:7410 ioctl 4018620d 2000000000c0 returned -16 [ 268.455428][ T7410] binder: BINDER_SET_CONTEXT_MGR already set [ 268.455444][ T7410] binder: 7407:7410 ioctl 4018620d 200000000040 returned -16 [ 269.098873][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.098977][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.099151][ T7179] bridge_slave_0: entered allmulticast mode [ 269.100987][ T7179] bridge_slave_0: entered promiscuous mode [ 269.104872][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.105012][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.105139][ T7179] bridge_slave_1: entered allmulticast mode [ 269.124540][ T7179] bridge_slave_1: entered promiscuous mode [ 269.989278][ T7179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.818389][ T7179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.042239][ T7179] team0: Port device team_slave_0 added [ 274.080734][ T7179] team0: Port device team_slave_1 added [ 274.170205][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 274.771481][ T7179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.771495][ T7179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.771516][ T7179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.006895][ T7179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.006914][ T7179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.006942][ T7179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.458675][ T7465] binder: BINDER_SET_CONTEXT_MGR already set [ 275.458693][ T7465] binder: 7464:7465 ioctl 4018620d 2000000000c0 returned -16 [ 275.486629][ T7465] binder: BINDER_SET_CONTEXT_MGR already set [ 275.486640][ T7465] binder: 7464:7465 ioctl 4018620d 200000000040 returned -16 [ 275.969600][ T7179] hsr_slave_0: entered promiscuous mode [ 275.987964][ T7179] hsr_slave_1: entered promiscuous mode [ 276.002668][ T7179] debugfs: 'hsr0' already exists in 'hsr' [ 276.002699][ T7179] Cannot create hsr debugfs directory [ 276.537952][ T1375] bridge_slave_1: left allmulticast mode [ 276.537990][ T1375] bridge_slave_1: left promiscuous mode [ 276.538271][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.739340][ T1375] bridge_slave_0: left allmulticast mode [ 276.739363][ T1375] bridge_slave_0: left promiscuous mode [ 276.739559][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.953268][ T1375] bridge_slave_1: left allmulticast mode [ 276.953294][ T1375] bridge_slave_1: left promiscuous mode [ 276.953464][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.070864][ T1375] bridge_slave_0: left allmulticast mode [ 277.070901][ T1375] bridge_slave_0: left promiscuous mode [ 277.071186][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.139925][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.347977][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.516022][ T1375] bond0 (unregistering): Released all slaves [ 282.231621][ T7509] binder: BINDER_SET_CONTEXT_MGR already set [ 282.231638][ T7509] binder: 7508:7509 ioctl 4018620d 2000000000c0 returned -16 [ 282.331236][ T7509] binder: BINDER_SET_CONTEXT_MGR already set [ 282.331254][ T7509] binder: 7508:7509 ioctl 4018620d 200000000040 returned -16 [ 282.510233][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.524372][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.529498][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.542713][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.543992][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.925793][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 284.266195][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.336867][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.378781][ T1375] bond0 (unregistering): Released all slaves [ 284.675728][ T5846] Bluetooth: hci2: command tx timeout [ 286.755799][ T5846] Bluetooth: hci2: command tx timeout [ 287.464414][ T7511] lo speed is unknown, defaulting to 1000 [ 289.707610][ T5846] Bluetooth: hci2: command tx timeout [ 290.008409][ T7557] binder: BINDER_SET_CONTEXT_MGR already set [ 290.008421][ T7557] binder: 7555:7557 ioctl 4018620d 2000000000c0 returned -16 [ 290.070265][ T7559] binder: BINDER_SET_CONTEXT_MGR already set [ 290.070281][ T7559] binder: 7555:7559 ioctl 4018620d 200000000040 returned -16 [ 291.715853][ T5846] Bluetooth: hci2: command tx timeout [ 291.930590][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 298.318409][ T7614] binder: BINDER_SET_CONTEXT_MGR already set [ 298.318426][ T7614] binder: 7613:7614 ioctl 4018620d 2000000000c0 returned -16 [ 298.506365][ T7614] binder: BINDER_SET_CONTEXT_MGR already set [ 298.506377][ T7614] binder: 7613:7614 ioctl 4018620d 200000000040 returned -16 [ 300.360350][ T1375] hsr_slave_0: left promiscuous mode [ 300.494942][ T7627] blktrace: Concurrent blktraces are not allowed on loop1 [ 301.355912][ T1375] hsr_slave_1: left promiscuous mode [ 301.357047][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.390017][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 301.453802][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.870937][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.879786][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.881053][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.884537][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.890447][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.088422][ T1375] hsr_slave_0: left promiscuous mode [ 302.139290][ T1375] hsr_slave_1: left promiscuous mode [ 302.141943][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.193697][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.987448][ T5839] Bluetooth: hci3: command tx timeout [ 306.037666][ T5839] Bluetooth: hci3: command tx timeout [ 306.966765][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 307.139803][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 307.232536][ T7659] binder: BINDER_SET_CONTEXT_MGR already set [ 307.232554][ T7659] binder: 7658:7659 ioctl 4018620d 2000000000c0 returned -16 [ 307.264744][ T7659] binder: BINDER_SET_CONTEXT_MGR already set [ 307.264761][ T7659] binder: 7658:7659 ioctl 4018620d 200000000040 returned -16 [ 308.164206][ T5839] Bluetooth: hci3: command tx timeout [ 310.678573][ T5839] Bluetooth: hci3: command tx timeout [ 312.406608][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 312.659320][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 315.169922][ T7635] lo speed is unknown, defaulting to 1000 [ 319.238174][ T7709] binder: BINDER_SET_CONTEXT_MGR already set [ 319.238200][ T7709] binder: 7708:7709 ioctl 4018620d 2000000000c0 returned -16 [ 319.364246][ T7709] binder: BINDER_SET_CONTEXT_MGR already set [ 319.364263][ T7709] binder: 7708:7709 ioctl 4018620d 200000000040 returned -16 [ 319.571285][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 321.589466][ T7730] blktrace: Concurrent blktraces are not allowed on loop1 [ 322.747818][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.747870][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.609821][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.610080][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.610308][ T7511] bridge_slave_0: entered allmulticast mode [ 323.665969][ T7511] bridge_slave_0: entered promiscuous mode [ 323.701802][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.701989][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.702220][ T7511] bridge_slave_1: entered allmulticast mode [ 323.735887][ T7511] bridge_slave_1: entered promiscuous mode [ 324.095097][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 324.312741][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.392656][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.636860][ T7511] team0: Port device team_slave_0 added [ 327.031162][ T7511] team0: Port device team_slave_1 added [ 327.085059][ T7765] binder: BINDER_SET_CONTEXT_MGR already set [ 327.085077][ T7765] binder: 7763:7765 ioctl 4018620d 2000000000c0 returned -16 [ 327.166393][ T7765] binder: BINDER_SET_CONTEXT_MGR already set [ 327.166412][ T7765] binder: 7763:7765 ioctl 4018620d 200000000040 returned -16 [ 328.864607][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.864626][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.864653][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.281490][ T7784] blktrace: Concurrent blktraces are not allowed on loop5 [ 330.116173][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.116193][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.116222][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.698142][ T7511] hsr_slave_0: entered promiscuous mode [ 332.700772][ T7511] hsr_slave_1: entered promiscuous mode [ 332.751231][ T7635] chnl_net:caif_netlink_parms(): no params data found [ 334.748934][ T1375] bridge_slave_1: left allmulticast mode [ 334.748960][ T1375] bridge_slave_1: left promiscuous mode [ 334.751017][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.836662][ T1375] bridge_slave_0: left allmulticast mode [ 334.836686][ T1375] bridge_slave_0: left promiscuous mode [ 334.836925][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.929846][ T1375] bridge_slave_1: left allmulticast mode [ 334.929877][ T1375] bridge_slave_1: left promiscuous mode [ 334.942087][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.014119][ T1375] bridge_slave_0: left allmulticast mode [ 335.014146][ T1375] bridge_slave_0: left promiscuous mode [ 335.014320][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.302263][ T7833] binder: BINDER_SET_CONTEXT_MGR already set [ 337.302275][ T7833] binder: 7832:7833 ioctl 4018620d 2000000000c0 returned -16 [ 337.328647][ T7833] binder: BINDER_SET_CONTEXT_MGR already set [ 337.328662][ T7833] binder: 7832:7833 ioctl 4018620d 200000000040 returned -16 [ 337.406441][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.013889][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.460550][ T1375] bond0 (unregistering): Released all slaves [ 339.881252][ T7847] blktrace: Concurrent blktraces are not allowed on loop1 [ 340.986595][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.266540][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.367623][ T1375] bond0 (unregistering): Released all slaves [ 342.703739][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.721484][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.723119][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.724765][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.727174][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.566163][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.566354][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.566612][ T7635] bridge_slave_0: entered allmulticast mode [ 344.835779][ T5839] Bluetooth: hci5: command tx timeout [ 344.868986][ T7635] bridge_slave_0: entered promiscuous mode [ 344.962453][ T7882] binder: BINDER_SET_CONTEXT_MGR already set [ 344.962471][ T7882] binder: 7881:7882 ioctl 4018620d 2000000000c0 returned -16 [ 345.004034][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.004213][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.004467][ T7635] bridge_slave_1: entered allmulticast mode [ 345.016980][ T7882] binder: BINDER_SET_CONTEXT_MGR already set [ 345.016993][ T7882] binder: 7881:7882 ioctl 4018620d 200000000040 returned -16 [ 345.101194][ T7635] bridge_slave_1: entered promiscuous mode [ 346.891519][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.893747][ T7863] lo speed is unknown, defaulting to 1000 [ 346.915857][ T5839] Bluetooth: hci5: command tx timeout [ 346.951291][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.942938][ T7899] blktrace: Concurrent blktraces are not allowed on loop1 [ 348.995658][ T5839] Bluetooth: hci5: command tx timeout [ 349.452922][ T7635] team0: Port device team_slave_0 added [ 349.482186][ T7635] team0: Port device team_slave_1 added [ 349.976421][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.982435][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.982465][ T7635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.166177][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.166192][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.166209][ T7635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.076441][ T5839] Bluetooth: hci5: command tx timeout [ 353.185709][ T7924] binder: BINDER_SET_CONTEXT_MGR already set [ 353.188067][ T7924] binder: 7923:7924 ioctl 4018620d 2000000000c0 returned -16 [ 353.193608][ T7924] binder: BINDER_SET_CONTEXT_MGR already set [ 353.193621][ T7924] binder: 7923:7924 ioctl 4018620d 200000000040 returned -16 [ 355.419640][ T1375] hsr_slave_0: left promiscuous mode [ 355.466774][ T1375] hsr_slave_1: left promiscuous mode [ 355.467863][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.496532][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.018571][ T1375] hsr_slave_0: left promiscuous mode [ 356.075955][ T1375] hsr_slave_1: left promiscuous mode [ 356.076994][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.153801][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.880572][ T7950] netlink: 84 bytes leftover after parsing attributes in process `syz.0.453'. [ 358.586771][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 358.744296][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 359.567376][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.597496][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.598688][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.610391][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.611202][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.086243][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 360.206389][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 360.751465][ T7635] hsr_slave_0: entered promiscuous mode [ 360.752953][ T7635] hsr_slave_1: entered promiscuous mode [ 360.753974][ T7635] debugfs: 'hsr0' already exists in 'hsr' [ 360.754002][ T7635] Cannot create hsr debugfs directory [ 362.005770][ T5839] Bluetooth: hci2: command tx timeout [ 362.201731][ T7952] lo speed is unknown, defaulting to 1000 [ 362.515956][ T7963] binder: BINDER_SET_CONTEXT_MGR already set [ 362.515973][ T7963] binder: 7961:7963 ioctl 4018620d 2000000000c0 returned -16 [ 362.557938][ T7963] binder: BINDER_SET_CONTEXT_MGR already set [ 362.557954][ T7963] binder: 7961:7963 ioctl 4018620d 200000000040 returned -16 [ 363.089446][ T7970] blktrace: Concurrent blktraces are not allowed on loop1 [ 364.043256][ T5839] Bluetooth: hci2: command tx timeout [ 366.196782][ T5839] Bluetooth: hci2: command tx timeout [ 368.275753][ T5839] Bluetooth: hci2: command tx timeout [ 368.363623][ T7863] chnl_net:caif_netlink_parms(): no params data found [ 369.987232][ T8016] binder: BINDER_SET_CONTEXT_MGR already set [ 369.987248][ T8016] binder: 8015:8016 ioctl 4018620d 2000000000c0 returned -16 [ 371.104148][ T8016] binder: BINDER_SET_CONTEXT_MGR already set [ 371.104166][ T8016] binder: 8015:8016 ioctl 4018620d 200000000040 returned -16 [ 371.952993][ T8028] netlink: 84 bytes leftover after parsing attributes in process `syz.4.467'. [ 372.555786][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.581963][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.582232][ T7863] bridge_slave_0: entered allmulticast mode [ 372.588444][ T7863] bridge_slave_0: entered promiscuous mode [ 372.625003][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.625094][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.625223][ T7863] bridge_slave_1: entered allmulticast mode [ 372.665962][ T7863] bridge_slave_1: entered promiscuous mode [ 377.918281][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.163294][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.362374][ T8062] blktrace: Concurrent blktraces are not allowed on loop1 [ 379.205954][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 379.264252][ T7863] team0: Port device team_slave_0 added [ 379.266229][ T1375] bridge_slave_1: left allmulticast mode [ 379.266258][ T1375] bridge_slave_1: left promiscuous mode [ 379.266508][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.367796][ T1375] bridge_slave_0: left allmulticast mode [ 379.367822][ T1375] bridge_slave_0: left promiscuous mode [ 379.368098][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.486272][ T1375] bridge_slave_1: left allmulticast mode [ 379.486311][ T1375] bridge_slave_1: left promiscuous mode [ 379.486612][ T1375] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.579381][ T1375] bridge_slave_0: left allmulticast mode [ 379.579421][ T1375] bridge_slave_0: left promiscuous mode [ 379.579734][ T1375] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.373903][ T8077] binder: BINDER_SET_CONTEXT_MGR already set [ 380.373920][ T8077] binder: 8076:8077 ioctl 4018620d 2000000000c0 returned -16 [ 380.459226][ T8077] binder: BINDER_SET_CONTEXT_MGR already set [ 380.459242][ T8077] binder: 8076:8077 ioctl 4018620d 200000000040 returned -16 [ 381.557681][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.675901][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.954026][ T1375] bond0 (unregistering): Released all slaves [ 382.546782][ T1375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.766723][ T1375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.871700][ T1375] bond0 (unregistering): Released all slaves [ 382.966611][ T7863] team0: Port device team_slave_1 added [ 384.472207][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.472259][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.125064][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.125082][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.125109][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.232690][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.232709][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.232737][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.526720][ T8116] blktrace: Concurrent blktraces are not allowed on loop1 [ 387.618019][ T8129] netlink: 84 bytes leftover after parsing attributes in process `syz.0.485'. [ 388.435264][ T8132] binder: BINDER_SET_CONTEXT_MGR already set [ 388.435282][ T8132] binder: 8131:8132 ioctl 4018620d 2000000000c0 returned -16 [ 388.547391][ T8132] binder: BINDER_SET_CONTEXT_MGR already set [ 388.547409][ T8132] binder: 8131:8132 ioctl 4018620d 200000000040 returned -16 [ 388.745807][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.745904][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.746028][ T7952] bridge_slave_0: entered allmulticast mode [ 388.780397][ T7952] bridge_slave_0: entered promiscuous mode [ 388.875537][ T1375] hsr_slave_0: left promiscuous mode [ 388.960813][ T1375] hsr_slave_1: left promiscuous mode [ 388.966622][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.068832][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.293204][ T1375] hsr_slave_0: left promiscuous mode [ 389.626992][ T1375] hsr_slave_1: left promiscuous mode [ 389.628130][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.877840][ T1375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.922983][ T8161] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 393.498724][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 393.726220][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 395.086485][ T1375] team0 (unregistering): Port device team_slave_1 removed [ 395.217305][ T1375] team0 (unregistering): Port device team_slave_0 removed [ 395.957000][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.957179][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.957370][ T7952] bridge_slave_1: entered allmulticast mode [ 395.964045][ T7952] bridge_slave_1: entered promiscuous mode [ 396.065275][ T7863] hsr_slave_0: entered promiscuous mode [ 396.088713][ T7863] hsr_slave_1: entered promiscuous mode [ 445.485223][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.485317][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 493.102599][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 498.312558][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 502.424905][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 504.303288][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 507.343278][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.344730][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.125643][ T5908] usb 3-1: device descriptor read/64, error -32 [ 571.157721][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.157811][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.515662][ T38] INFO: task kworker/u8:4:67 blocked for more than 156 seconds. [ 580.515690][ T38] Not tainted syzkaller #0 [ 580.515701][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.515711][ T38] task:kworker/u8:4 state:D stack:20584 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 580.515776][ T38] Workqueue: events_unbound linkwatch_event [ 580.515804][ T38] Call Trace: [ 580.515812][ T38] [ 580.515829][ T38] __schedule+0x16f3/0x4c20 [ 580.515877][ T38] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 580.515927][ T38] ? __pfx___schedule+0x10/0x10 [ 580.515980][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.516016][ T38] rt_mutex_schedule+0x77/0xf0 [ 580.516039][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 580.516064][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 580.516111][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 580.516141][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 580.516168][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 580.516206][ T38] ? linkwatch_event+0xe/0x60 [ 580.516236][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 580.516269][ T38] ? linkwatch_event+0xe/0x60 [ 580.516289][ T38] mutex_lock_nested+0x16a/0x1d0 [ 580.516310][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.516341][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 580.516371][ T38] linkwatch_event+0xe/0x60 [ 580.516391][ T38] process_scheduled_works+0xade/0x17b0