last executing test programs: 24m1.745330515s ago: executing program 4 (id=383): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m59.596970902s ago: executing program 4 (id=384): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 23m59.276578629s ago: executing program 4 (id=385): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) syz_open_dev$usbfs(0x0, 0x76, 0x101301) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=alw']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000026b4080f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m58.05685753s ago: executing program 4 (id=388): sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0xbd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) 23m52.216157547s ago: executing program 4 (id=401): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m50.927463587s ago: executing program 4 (id=404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1d, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 23m35.354709454s ago: executing program 32 (id=404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1d, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 21m46.320427168s ago: executing program 2 (id=582): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 21m44.051419729s ago: executing program 3 (id=585): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}}}, 0x30) socket$nl_route(0x10, 0x3, 0x0) 21m42.504806043s ago: executing program 3 (id=587): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) socket$xdp(0x2c, 0x3, 0x0) 21m41.892332894s ago: executing program 2 (id=588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000edb77e1cb3358bb00000000000000000", @ANYRES16=r0, @ANYBLOB="34f25f77e04959c23dc01e93e1d69a5432fc81dc1767c16df7ee0817b1e75b4da3f38962e594c6dec520ff5008a645e0a5e66f82e89ab95089633b14c20f72b2a2eb71818f047b547b7c4cb8e6274788d355845733c89b3a2919563bf2de79f6ca950b5539894e94867ea8056195"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 21m40.0602859s ago: executing program 2 (id=593): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r3, 0x2000009) creat(&(0x7f0000000000)='./bus\x00', 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 21m34.361910053s ago: executing program 2 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) 21m34.16386584s ago: executing program 3 (id=599): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000edb77e1cb3358bb00000000000000000", @ANYRES16=r0, @ANYBLOB="34f25f77e04959c23dc01e93e1d69a5432fc81dc1767c16df7ee0817b1e75b4da3f38962e594c6dec520ff5008a645e0a5e66f82e89ab95089633b14c20f72b2a2eb71818f047b547b7c4cb8e6274788d355845733c89b3a2919563bf2de79f6ca950b5539894e94867ea8056195"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x10fe83, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 21m32.691540819s ago: executing program 3 (id=600): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r2, 0x2000009) creat(&(0x7f0000000000)='./bus\x00', 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 21m31.391458277s ago: executing program 3 (id=602): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x45) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00000000edb77e1cb3358bb00000000000000000", @ANYRES16=r0, @ANYBLOB="34f25f77e04959c23dc01e93e1d69a5432fc81dc1767c16df7ee0817b1e75b4da3f38962e594c6dec520ff5008a645e0a5e66f82e89ab95089633b14c20f72b2a2eb71818f047b547b7c4cb8e6274788d355845733c89b3a2919563bf2de79f6ca950b5539894e94867ea8056195"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 21m30.001722844s ago: executing program 3 (id=605): syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) socket(0x14, 0x80000, 0x9) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x7, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x2}}) syz_io_uring_submit(r6, r7, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd, 0x3, 0x20, 0x1, 0xf0a462ef7147f6e5, 0x1, {0x2}}) 21m29.730215484s ago: executing program 2 (id=608): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) 21m27.624120049s ago: executing program 2 (id=609): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) socket$xdp(0x2c, 0x3, 0x0) 21m14.219403525s ago: executing program 33 (id=605): syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) socket(0x14, 0x80000, 0x9) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r5}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x2}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x7, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x0, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x2}}) syz_io_uring_submit(r6, r7, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x4004, @fd, 0x3, 0x20, 0x1, 0xf0a462ef7147f6e5, 0x1, {0x2}}) 21m12.316657769s ago: executing program 34 (id=609): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) socket$xdp(0x2c, 0x3, 0x0) 18m2.978203538s ago: executing program 5 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000001240)=[{0x0, 0x0, 0x2000}], 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 18m1.84807574s ago: executing program 5 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10010, r0, 0xffff) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000000)=0x4) syz_usbip_server_init(0x3) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0xfffffffd, 0x1, 0x5, 0x2, 0x41, 0x6, 0xa}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r4, 0x0, 0x0, 0x0) 17m59.902547429s ago: executing program 5 (id=841): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 17m55.089122724s ago: executing program 5 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4048941) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17m53.645286934s ago: executing program 5 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) write$binfmt_elf32(r2, 0x0, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 17m50.317089344s ago: executing program 5 (id=850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 17m34.186015156s ago: executing program 35 (id=850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 16m59.120643901s ago: executing program 1 (id=898): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) r0 = msgget$private(0x0, 0x506eddf4a8b99d3f) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000003c0)=""/198) r1 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000044c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 16m56.91838186s ago: executing program 1 (id=900): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m55.644560803s ago: executing program 1 (id=901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) write$binfmt_elf32(r2, 0x0, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a854a7a4124a91520800000000000000030000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044010) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 16m52.449925426s ago: executing program 1 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x2d265528) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4048941) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) close_range(r5, 0xffffffffffffffff, 0x0) 16m51.068372937s ago: executing program 1 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000003c0)) 16m47.405709203s ago: executing program 1 (id=906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 16m32.119405567s ago: executing program 36 (id=906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000006, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x6d, 0xffffffff, 0x3, 0xf3, 0x80, 0xffffffffffffffff}) sched_getattr(r5, &(0x7f0000000180)={0x38}, 0x38, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 4.008663204s ago: executing program 0 (id=1624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x200100) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000240)=ANY=[], 0x20, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x101) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 3.045405902s ago: executing program 0 (id=1625): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.448962565s ago: executing program 0 (id=1626): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0xfff, 0x1, 0x3, 0x69444d41, 0x3, 0x4}]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0:,:\x00', 0x0) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x400caed0, &(0x7f0000000080)={[{0x1005, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x800000000}, {0x0, 0xb7f, 0x0, 0x3, 0x4, 0x7, 0x20, 0x0, 0x8, 0x0, 0x7f}, {0x0, 0x0, 0x10, 0x2, 0x0, 0x1, 0xf}], 0x2}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x28b4, 0x4) sendto$inet(r4, &(0x7f0000000280)="12f0dda7f1be9db7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x8}}}}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r9, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r9, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 1.185643175s ago: executing program 0 (id=1627): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) 144.708055ms ago: executing program 0 (id=1628): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000209}) pread64(r0, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 0s ago: executing program 0 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x64}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$NFT_BATCH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ate [ 1388.830561][T12938] bridge_slave_0: entered allmulticast mode [ 1388.851535][T12938] bridge_slave_0: entered promiscuous mode [ 1388.881413][T12938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.881654][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.881880][T12938] bridge_slave_1: entered allmulticast mode [ 1388.905392][T12938] bridge_slave_1: entered promiscuous mode [ 1391.188600][T12938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.237225][T12938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.693500][T12938] team0: Port device team_slave_0 added [ 1391.701138][T12972] chnl_net:caif_netlink_parms(): no params data found [ 1391.738341][T12938] team0: Port device team_slave_1 added [ 1391.977350][T12803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.214875][T12938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.214887][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.214901][T12938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.364310][T12938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.364326][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.364352][T12938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.874438][T12972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.874653][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.874854][T12972] bridge_slave_0: entered allmulticast mode [ 1392.876570][T12972] bridge_slave_0: entered promiscuous mode [ 1392.882906][T12803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.009526][T12972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.013118][T12972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.014318][T12972] bridge_slave_1: entered allmulticast mode [ 1393.018098][T12972] bridge_slave_1: entered promiscuous mode [ 1393.039883][T12938] hsr_slave_0: entered promiscuous mode [ 1393.041147][T12938] hsr_slave_1: entered promiscuous mode [ 1393.076590][T12817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.370438][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.371572][T11575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.378160][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.535058][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.847816][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.847905][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.079037][T12972] team0: Port device team_slave_0 added [ 1394.129202][T12972] team0: Port device team_slave_1 added [ 1395.738185][T13049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1377'. [ 1395.779207][T12817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.080181][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.080199][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.080223][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.135246][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.135262][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.135286][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.295838][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.296104][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.636710][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.638641][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.969927][T12972] hsr_slave_0: entered promiscuous mode [ 1396.972150][T12972] hsr_slave_1: entered promiscuous mode [ 1396.974465][T12972] debugfs: 'hsr0' already exists in 'hsr' [ 1396.974489][T12972] Cannot create hsr debugfs directory [ 1401.111229][ T13] bridge_slave_1: left allmulticast mode [ 1401.111261][ T13] bridge_slave_1: left promiscuous mode [ 1401.111582][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.184882][ T13] bridge_slave_0: left allmulticast mode [ 1401.184915][ T13] bridge_slave_0: left promiscuous mode [ 1401.185174][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.257326][ T13] bridge_slave_1: left allmulticast mode [ 1401.257348][ T13] bridge_slave_1: left promiscuous mode [ 1401.257492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.367827][ T13] bridge_slave_0: left allmulticast mode [ 1401.367859][ T13] bridge_slave_0: left promiscuous mode [ 1401.368106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.113980][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.213953][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.277317][ T13] bond0 (unregistering): Released all slaves [ 1404.784460][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.864122][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.927866][ T13] bond0 (unregistering): Released all slaves [ 1405.516731][T12938] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1405.585459][T12938] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1405.970024][T12938] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1406.030509][T12938] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1407.620358][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1407.632393][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1407.646719][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1407.648601][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1407.649715][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1407.913515][ T13] hsr_slave_0: left promiscuous mode [ 1407.946135][ T13] hsr_slave_1: left promiscuous mode [ 1407.947014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.995393][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.045234][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.049346][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.050859][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.100445][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.101557][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1408.763208][ T13] hsr_slave_0: left promiscuous mode [ 1408.793375][ T13] hsr_slave_1: left promiscuous mode [ 1408.794288][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.923413][T13117] hub 9-0:1.0: USB hub found [ 1408.925335][T13117] hub 9-0:1.0: 1 port detected [ 1409.206898][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.805364][T12391] Bluetooth: hci2: command tx timeout [ 1410.213208][T12391] Bluetooth: hci3: command tx timeout [ 1411.124911][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1411.393145][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1411.883294][T12391] Bluetooth: hci2: command tx timeout [ 1412.304927][T12391] Bluetooth: hci3: command tx timeout [ 1414.009335][T12391] Bluetooth: hci2: command tx timeout [ 1414.375282][T12391] Bluetooth: hci3: command tx timeout [ 1416.043347][T12391] Bluetooth: hci2: command tx timeout [ 1416.064211][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1416.183911][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1416.443175][T12391] Bluetooth: hci3: command tx timeout [ 1417.119936][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 1417.119965][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 1417.330685][T13110] lo speed is unknown, defaulting to 1000 [ 1418.064872][T13108] lo speed is unknown, defaulting to 1000 [ 1418.359548][T12972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1418.532474][T12972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1418.641754][T12972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1418.716848][T12972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1419.110575][T12938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.421880][T12938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.559914][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.560077][ T8071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.667595][T13110] chnl_net:caif_netlink_parms(): no params data found [ 1419.764792][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.764940][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.321329][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.321552][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.321769][T13110] bridge_slave_0: entered allmulticast mode [ 1420.330643][T13110] bridge_slave_0: entered promiscuous mode [ 1420.344281][T13108] chnl_net:caif_netlink_parms(): no params data found [ 1420.371873][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.372009][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.372235][T13110] bridge_slave_1: entered allmulticast mode [ 1420.381702][T13110] bridge_slave_1: entered promiscuous mode [ 1420.733268][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.858365][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.560440][T13110] team0: Port device team_slave_0 added [ 1421.705229][T13110] team0: Port device team_slave_1 added [ 1421.717764][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.717993][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.718200][T13108] bridge_slave_0: entered allmulticast mode [ 1421.724050][T13108] bridge_slave_0: entered promiscuous mode [ 1422.103641][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.103805][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.104051][T13108] bridge_slave_1: entered allmulticast mode [ 1422.107248][T13108] bridge_slave_1: entered promiscuous mode [ 1422.882658][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.882669][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.882684][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.170350][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.170426][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.305026][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.305038][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.305053][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.366981][T12972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.371095][T13108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.759514][T13108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.968574][T13108] team0: Port device team_slave_0 added [ 1425.040593][T13110] hsr_slave_0: entered promiscuous mode [ 1425.041953][T13110] hsr_slave_1: entered promiscuous mode [ 1425.042824][T13110] debugfs: 'hsr0' already exists in 'hsr' [ 1425.042851][T13110] Cannot create hsr debugfs directory [ 1425.071686][T13108] team0: Port device team_slave_1 added [ 1426.342603][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.312895][T13108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.312912][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.312936][T13108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.484331][T13108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.484349][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.484375][T13108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.762375][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.762682][T11575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.449415][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.449685][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.607141][T13108] hsr_slave_0: entered promiscuous mode [ 1428.608544][T13108] hsr_slave_1: entered promiscuous mode [ 1428.610562][T13108] debugfs: 'hsr0' already exists in 'hsr' [ 1428.610589][T13108] Cannot create hsr debugfs directory [ 1428.747080][T12938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.777207][T13207] hub 9-0:1.0: USB hub found [ 1430.777759][T13207] hub 9-0:1.0: 1 port detected [ 1431.445993][T12938] veth0_vlan: entered promiscuous mode [ 1431.615578][T12938] veth1_vlan: entered promiscuous mode [ 1432.509684][T12938] veth0_macvtap: entered promiscuous mode [ 1432.527981][ T8071] bridge_slave_1: left allmulticast mode [ 1432.528013][ T8071] bridge_slave_1: left promiscuous mode [ 1432.528292][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.599974][ T8071] bridge_slave_0: left allmulticast mode [ 1432.599998][ T8071] bridge_slave_0: left promiscuous mode [ 1432.600185][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.684589][ T8071] bridge_slave_1: left allmulticast mode [ 1432.684624][ T8071] bridge_slave_1: left promiscuous mode [ 1432.684882][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.774921][ T8071] bridge_slave_0: left allmulticast mode [ 1432.774953][ T8071] bridge_slave_0: left promiscuous mode [ 1432.775265][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.481260][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1435.496767][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1435.499365][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1435.533316][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1435.546855][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1436.404757][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.736580][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.791282][ T8071] bond0 (unregistering): Released all slaves [ 1437.643556][T12391] Bluetooth: hci5: command tx timeout [ 1439.723240][T12391] Bluetooth: hci5: command tx timeout [ 1439.870154][T13235] hub 9-0:1.0: USB hub found [ 1439.872413][T13235] hub 9-0:1.0: 1 port detected [ 1440.890461][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1440.906851][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1440.908193][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1440.909900][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1440.910839][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1441.096191][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.155297][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.187912][ T8071] bond0 (unregistering): Released all slaves [ 1441.238887][T12972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.805633][ T59] Bluetooth: hci5: command tx timeout [ 1442.814080][T13239] lo speed is unknown, defaulting to 1000 [ 1443.004223][ T59] Bluetooth: hci6: command tx timeout [ 1443.918399][ T59] Bluetooth: hci5: command tx timeout [ 1444.557361][T13222] lo speed is unknown, defaulting to 1000 [ 1445.113302][ T59] Bluetooth: hci6: command tx timeout [ 1447.000685][T13110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1447.265483][ T59] Bluetooth: hci6: command tx timeout [ 1447.314367][T13110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1447.613437][ T8071] hsr_slave_0: left promiscuous mode [ 1447.633233][ T8071] hsr_slave_1: left promiscuous mode [ 1447.634300][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.693677][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.857398][ T8071] hsr_slave_0: left promiscuous mode [ 1447.878009][ T8071] hsr_slave_1: left promiscuous mode [ 1447.879419][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.914934][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.333383][ T59] Bluetooth: hci6: command tx timeout [ 1450.755479][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 1451.189344][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 1453.731452][T13283] overlayfs: missing 'lowerdir' [ 1453.867044][T13284] sz1: rxe_newlink: already configured on lo [ 1460.056225][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 1460.610644][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 1465.287420][T13314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1424'. [ 1466.707222][T13110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1466.827833][T13110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1466.921248][T13239] chnl_net:caif_netlink_parms(): no params data found [ 1467.687103][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.687318][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.687538][T13239] bridge_slave_0: entered allmulticast mode [ 1467.690287][T13239] bridge_slave_0: entered promiscuous mode [ 1467.818958][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.819135][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.819374][T13239] bridge_slave_1: entered allmulticast mode [ 1467.887728][T13239] bridge_slave_1: entered promiscuous mode [ 1468.023169][T13334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1468.023196][T13334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1468.023278][T13334] vhci_hcd vhci_hcd.0: Device attached [ 1468.028883][T13337] vhci_hcd: connection closed [ 1468.031095][ T1104] vhci_hcd: stop threads [ 1468.031117][ T1104] vhci_hcd: release socket [ 1468.031159][ T1104] vhci_hcd: disconnect device [ 1468.640057][T12391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1468.645432][T12391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1468.648384][T12391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1468.654797][T12391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1468.655742][T12391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1468.784136][T13239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.793565][T13222] chnl_net:caif_netlink_parms(): no params data found [ 1468.817113][T13239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.223160][ T7180] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1469.397021][ T7180] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1469.397051][ T7180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.397071][ T7180] usb 1-1: Product: syz [ 1469.397085][ T7180] usb 1-1: Manufacturer: syz [ 1469.397098][ T7180] usb 1-1: SerialNumber: syz [ 1469.454703][T12391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1469.468627][T12391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1469.472018][T12391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1469.479470][T12391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1469.480218][T12391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1469.760676][T13239] team0: Port device team_slave_0 added [ 1469.918089][T13239] team0: Port device team_slave_1 added [ 1470.280114][T13339] lo speed is unknown, defaulting to 1000 [ 1470.350967][T13239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.350984][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.351008][T13239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.645732][T13239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.645750][T13239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.645777][T13239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.764035][ T59] Bluetooth: hci0: command tx timeout [ 1470.921311][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.931695][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.936000][T13222] bridge_slave_0: entered allmulticast mode [ 1470.941297][ T7180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1470.943593][ T7180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1470.950023][ T7180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1470.950097][ T7180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1470.951581][ T7180] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1470.958274][T13222] bridge_slave_0: entered promiscuous mode [ 1471.016242][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.016385][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.016626][T13222] bridge_slave_1: entered allmulticast mode [ 1471.039009][T13222] bridge_slave_1: entered promiscuous mode [ 1471.067711][ T7180] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1471.089787][ T7180] usb 1-1: USB disconnect, device number 17 [ 1471.289485][T13344] lo speed is unknown, defaulting to 1000 [ 1471.564058][ T59] Bluetooth: hci1: command tx timeout [ 1471.587944][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.646701][T13239] hsr_slave_0: entered promiscuous mode [ 1471.652189][T13239] hsr_slave_1: entered promiscuous mode [ 1471.654215][T13239] debugfs: 'hsr0' already exists in 'hsr' [ 1471.654240][T13239] Cannot create hsr debugfs directory [ 1471.688797][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.663228][T13222] team0: Port device team_slave_0 added [ 1472.843218][ T59] Bluetooth: hci0: command tx timeout [ 1472.907377][T13222] team0: Port device team_slave_1 added [ 1473.613883][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.613899][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.613924][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.643461][ T59] Bluetooth: hci1: command tx timeout [ 1473.757019][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.757037][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.757063][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.923617][ T59] Bluetooth: hci0: command tx timeout [ 1475.331840][T13222] hsr_slave_0: entered promiscuous mode [ 1475.340064][T13222] hsr_slave_1: entered promiscuous mode [ 1475.341205][T13222] debugfs: 'hsr0' already exists in 'hsr' [ 1475.341222][T13222] Cannot create hsr debugfs directory [ 1475.733350][ T59] Bluetooth: hci1: command tx timeout [ 1477.149215][ T59] Bluetooth: hci0: command tx timeout [ 1477.854385][T12391] Bluetooth: hci1: command tx timeout [ 1478.984808][T13339] chnl_net:caif_netlink_parms(): no params data found [ 1480.197663][T13382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1480.197803][T13382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1480.197912][T13382] vhci_hcd vhci_hcd.0: Device attached [ 1480.242187][T13383] vhci_hcd: connection closed [ 1480.254362][ T12] vhci_hcd: stop threads [ 1480.254382][ T12] vhci_hcd: release socket [ 1480.254431][ T12] vhci_hcd: disconnect device [ 1482.035974][T13344] chnl_net:caif_netlink_parms(): no params data found [ 1483.086946][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.087092][T13339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.087700][T13339] bridge_slave_0: entered allmulticast mode [ 1483.116353][T13339] bridge_slave_0: entered promiscuous mode [ 1483.354301][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.354499][T13339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.354774][T13339] bridge_slave_1: entered allmulticast mode [ 1483.357903][T13339] bridge_slave_1: entered promiscuous mode [ 1483.905248][T13339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.402334][T13339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.649967][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.650043][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.900599][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.900820][T13344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.901334][T13344] bridge_slave_0: entered allmulticast mode [ 1484.951159][T13344] bridge_slave_0: entered promiscuous mode [ 1485.089420][T13344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.089577][T13344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.089815][T13344] bridge_slave_1: entered allmulticast mode [ 1485.131008][T13344] bridge_slave_1: entered promiscuous mode [ 1485.528236][T13339] team0: Port device team_slave_0 added [ 1485.635697][T13339] team0: Port device team_slave_1 added [ 1485.650444][T13344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.292367][T13344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.850845][T13239] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1489.087525][T13339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.087541][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.087566][T13339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.088380][T13239] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1489.980155][T13339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.980174][T13339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.980201][T13339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.985513][T13239] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1490.080249][T13344] team0: Port device team_slave_0 added [ 1490.127918][T13239] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1490.543643][T13344] team0: Port device team_slave_1 added [ 1491.387180][T13344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.387197][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.387223][T13344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.129472][T13344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.129490][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.129515][T13344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.150291][T13339] hsr_slave_0: entered promiscuous mode [ 1492.155170][T13339] hsr_slave_1: entered promiscuous mode [ 1492.160068][T13339] debugfs: 'hsr0' already exists in 'hsr' [ 1492.160096][T13339] Cannot create hsr debugfs directory [ 1493.067117][ T5990] bridge_slave_1: left allmulticast mode [ 1493.067151][ T5990] bridge_slave_1: left promiscuous mode [ 1493.067869][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.125069][ T5990] bridge_slave_0: left allmulticast mode [ 1493.125102][ T5990] bridge_slave_0: left promiscuous mode [ 1493.128691][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.210428][ T5990] bridge_slave_1: left allmulticast mode [ 1493.210464][ T5990] bridge_slave_1: left promiscuous mode [ 1493.210730][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.285733][ T5990] bridge_slave_0: left allmulticast mode [ 1493.285774][ T5990] bridge_slave_0: left promiscuous mode [ 1493.286045][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.359224][ T5990] bridge_slave_1: left allmulticast mode [ 1493.359258][ T5990] bridge_slave_1: left promiscuous mode [ 1493.359517][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.454901][ T5990] bridge_slave_0: left allmulticast mode [ 1493.454933][ T5990] bridge_slave_0: left promiscuous mode [ 1493.455198][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.551502][ T5990] bridge_slave_1: left allmulticast mode [ 1493.551537][ T5990] bridge_slave_1: left promiscuous mode [ 1493.551814][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.615547][ T5990] bridge_slave_0: left allmulticast mode [ 1493.615582][ T5990] bridge_slave_0: left promiscuous mode [ 1493.615896][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.314796][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.403709][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.477223][ T5990] bond0 (unregistering): Released all slaves [ 1494.764284][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.894363][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.970757][ T5990] bond0 (unregistering): Released all slaves [ 1498.642661][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1498.667836][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1498.691841][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1498.765896][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1498.808797][T13454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1498.809139][T13454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1498.816205][T13454] vhci_hcd vhci_hcd.0: Device attached [ 1498.857022][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1499.136771][T12102] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 1499.477298][T13455] vhci_hcd: connection reset by peer [ 1499.498192][ T6082] vhci_hcd: stop threads [ 1499.498255][ T6082] vhci_hcd: release socket [ 1499.498423][ T6082] vhci_hcd: disconnect device [ 1500.165228][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.260989][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.312306][ T5990] bond0 (unregistering): Released all slaves [ 1501.003404][T12391] Bluetooth: hci2: command tx timeout [ 1501.318197][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1501.366053][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1501.377807][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1501.396255][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1501.400679][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1503.083154][ T59] Bluetooth: hci2: command tx timeout [ 1503.503021][ T59] Bluetooth: hci3: command tx timeout [ 1503.773910][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.895525][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.956934][ T5990] bond0 (unregistering): Released all slaves [ 1504.040713][T13344] hsr_slave_0: entered promiscuous mode [ 1504.042108][T13344] hsr_slave_1: entered promiscuous mode [ 1504.060650][T13344] debugfs: 'hsr0' already exists in 'hsr' [ 1504.060678][T13344] Cannot create hsr debugfs directory [ 1504.283364][T12102] vhci_hcd: vhci_device speed not set [ 1505.163436][ T59] Bluetooth: hci2: command tx timeout [ 1505.569262][ T59] Bluetooth: hci3: command tx timeout [ 1505.979861][T13466] lo speed is unknown, defaulting to 1000 [ 1506.599343][T13451] lo speed is unknown, defaulting to 1000 [ 1507.243083][ T59] Bluetooth: hci2: command tx timeout [ 1507.654066][ T59] Bluetooth: hci3: command tx timeout [ 1508.590155][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 1508.590179][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 1509.143747][T13495] hub 9-0:1.0: USB hub found [ 1509.153065][T13495] hub 9-0:1.0: 1 port detected [ 1509.733420][ T59] Bluetooth: hci3: command tx timeout [ 1510.025834][ T5990] hsr_slave_0: left promiscuous mode [ 1510.073378][ T5990] hsr_slave_1: left promiscuous mode [ 1510.074363][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.144671][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.313454][ T5990] hsr_slave_0: left promiscuous mode [ 1510.360161][ T5990] hsr_slave_1: left promiscuous mode [ 1510.360811][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.377364][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.824307][ T5990] hsr_slave_0: left promiscuous mode [ 1511.913585][ T5990] hsr_slave_1: left promiscuous mode [ 1511.914520][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.974251][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.173241][ T5990] hsr_slave_0: left promiscuous mode [ 1512.193539][ T5990] hsr_slave_1: left promiscuous mode [ 1512.194221][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.233760][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.380853][ T5990] veth0_macvtap: left promiscuous mode [ 1512.381093][ T5990] veth1_vlan: left promiscuous mode [ 1512.385006][ T5990] veth0_vlan: left promiscuous mode [ 1515.304805][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1515.444306][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1517.003889][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1517.174063][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1517.707921][T13516] hub 9-0:1.0: USB hub found [ 1517.710540][T13516] hub 9-0:1.0: 1 port detected [ 1521.402012][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 1521.402036][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 1521.481448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.782104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.725826][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1523.961901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.046275][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.176462][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1524.978285][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.219247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.352740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.544768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.871942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.999266][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.826202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.878945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.203237][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1527.261482][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.353354][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 1527.355779][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1527.355836][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1527.355858][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1527.355881][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.355905][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.355946][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1527.355976][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.464128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1527.684327][ T31] usb 1-1: usb_control_msg returned -32 [ 1527.684376][ T31] usbtmc 1-1:16.0: can't read capabilities [ 1528.213024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.521491][T13544] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1528.753973][ T31] usb 1-1: USB disconnect, device number 18 [ 1529.795620][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1530.276809][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1530.605540][T12391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1530.623387][T12391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1530.632725][T12391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1530.676047][T12391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1530.681801][T12391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1531.477859][T12391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1531.485550][T12391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1531.503196][T12391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1531.524314][T12391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1531.539269][T12391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1532.774164][ T59] Bluetooth: hci5: command tx timeout [ 1533.259282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.331393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.339916][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 1533.339940][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 1533.479089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.655091][ T59] Bluetooth: hci6: command tx timeout [ 1533.802547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1533.942681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.011774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.083898][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.325628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1534.850966][ T59] Bluetooth: hci5: command tx timeout [ 1535.063862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.361214][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 1535.361241][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 1535.733721][ T59] Bluetooth: hci6: command tx timeout [ 1535.898887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.640250][T13466] chnl_net:caif_netlink_parms(): no params data found [ 1536.909465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.933530][ T59] Bluetooth: hci5: command tx timeout [ 1537.276650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.321636][T13549] lo speed is unknown, defaulting to 1000 [ 1537.555118][T13451] chnl_net:caif_netlink_parms(): no params data found [ 1537.803650][ T59] Bluetooth: hci6: command tx timeout [ 1538.102242][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.675679][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.675900][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.676168][T13466] bridge_slave_0: entered allmulticast mode [ 1538.680205][T13466] bridge_slave_0: entered promiscuous mode [ 1538.738784][T13556] lo speed is unknown, defaulting to 1000 [ 1538.835404][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.835498][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.835677][T13466] bridge_slave_1: entered allmulticast mode [ 1538.839100][T13466] bridge_slave_1: entered promiscuous mode [ 1539.003386][ T59] Bluetooth: hci5: command tx timeout [ 1539.181214][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.882963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1539.896196][ T59] Bluetooth: hci6: command tx timeout [ 1540.337858][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.343874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.566795][T13593] 9pnet_virtio: no channels available for device syz [ 1541.206360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.232523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.610588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.619726][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.671169][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.671671][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.671928][T13451] bridge_slave_0: entered allmulticast mode [ 1541.676271][T13451] bridge_slave_0: entered promiscuous mode [ 1541.858453][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.858597][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.858859][T13451] bridge_slave_1: entered allmulticast mode [ 1541.873827][T13451] bridge_slave_1: entered promiscuous mode [ 1542.238506][T13466] team0: Port device team_slave_0 added [ 1543.647048][T13466] team0: Port device team_slave_1 added [ 1543.695064][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 1543.695090][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 1543.810613][ C1] vkms_vblank_simulate: vblank timer overrun [ 1543.821348][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.912103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.127963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.189960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.329714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.114762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.169070][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.048901][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.049002][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.377626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.458631][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.481415][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.481427][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.481442][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.579346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1546.738941][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.738953][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.738968][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.137518][T13451] team0: Port device team_slave_0 added [ 1547.157940][T13451] team0: Port device team_slave_1 added [ 1547.374602][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 1547.374628][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 1547.426769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1547.982282][T13466] hsr_slave_0: entered promiscuous mode [ 1547.984784][T13466] hsr_slave_1: entered promiscuous mode [ 1547.998265][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.998347][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.998373][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.134986][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.135003][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.135027][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.771559][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 1549.771584][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 1549.887679][T13549] chnl_net:caif_netlink_parms(): no params data found [ 1549.905912][T13640] libceph: resolve '0' (ret=-3): failed [ 1550.082152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.533013][T13451] hsr_slave_0: entered promiscuous mode [ 1550.534667][T13451] hsr_slave_1: entered promiscuous mode [ 1550.535705][T13451] debugfs: 'hsr0' already exists in 'hsr' [ 1550.535732][T13451] Cannot create hsr debugfs directory [ 1550.889048][T13556] chnl_net:caif_netlink_parms(): no params data found [ 1551.344945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1552.109166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1552.756416][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.756496][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.756741][T13549] bridge_slave_0: entered allmulticast mode [ 1552.799838][T13549] bridge_slave_0: entered promiscuous mode [ 1552.872841][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.874617][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.874970][T13549] bridge_slave_1: entered allmulticast mode [ 1552.882005][T13549] bridge_slave_1: entered promiscuous mode [ 1553.567931][T13662] 9pnet_fd: Insufficient options for proto=fd [ 1554.182614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.672450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.770739][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.847717][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.848989][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.849247][T13556] bridge_slave_0: entered allmulticast mode [ 1554.874974][T13556] bridge_slave_0: entered promiscuous mode [ 1554.969176][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.055092][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.055239][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.055527][T13556] bridge_slave_1: entered allmulticast mode [ 1555.072746][T13556] bridge_slave_1: entered promiscuous mode [ 1555.221101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1555.516132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.350726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1557.249279][T13549] team0: Port device team_slave_0 added [ 1557.568279][T13549] team0: Port device team_slave_1 added [ 1557.581938][T13556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.979325][T13556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.696254][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.696277][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.696304][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.057142][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.063278][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.063312][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1559.298470][T13556] team0: Port device team_slave_0 added [ 1559.389374][T13556] team0: Port device team_slave_1 added [ 1559.638443][T12391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1559.650227][T12391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1559.660737][T12391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1559.661856][T12391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1559.667524][T12391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1560.046147][T13556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.046162][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.046183][T13556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.425496][T13556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.425513][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.425548][T13556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.445528][T13549] hsr_slave_0: entered promiscuous mode [ 1560.446372][T13549] hsr_slave_1: entered promiscuous mode [ 1560.504408][T13549] debugfs: 'hsr0' already exists in 'hsr' [ 1560.504437][T13549] Cannot create hsr debugfs directory [ 1561.267761][T13682] lo speed is unknown, defaulting to 1000 [ 1561.646904][T13556] hsr_slave_0: entered promiscuous mode [ 1561.648345][T13556] hsr_slave_1: entered promiscuous mode [ 1561.649320][T13556] debugfs: 'hsr0' already exists in 'hsr' [ 1561.649344][T13556] Cannot create hsr debugfs directory [ 1561.803485][ T59] Bluetooth: hci0: command tx timeout [ 1562.946302][T12391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1562.952398][T12391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1562.970853][T12391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1562.990797][T12391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1562.992018][T12391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1563.883100][T12391] Bluetooth: hci0: command tx timeout [ 1564.783713][T13689] lo speed is unknown, defaulting to 1000 [ 1565.005195][T12391] Bluetooth: hci1: command tx timeout [ 1565.879532][T13682] chnl_net:caif_netlink_parms(): no params data found [ 1565.963466][T12391] Bluetooth: hci0: command tx timeout [ 1566.037997][ T5990] bridge_slave_1: left allmulticast mode [ 1566.038030][ T5990] bridge_slave_1: left promiscuous mode [ 1566.038384][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.148150][ T5990] bridge_slave_0: left allmulticast mode [ 1566.148184][ T5990] bridge_slave_0: left promiscuous mode [ 1566.148455][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.218680][ T5990] bridge_slave_1: left allmulticast mode [ 1566.218727][ T5990] bridge_slave_1: left promiscuous mode [ 1566.219029][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.307299][ T5990] bridge_slave_0: left allmulticast mode [ 1566.307345][ T5990] bridge_slave_0: left promiscuous mode [ 1566.307664][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.378495][ T5990] bridge_slave_1: left allmulticast mode [ 1566.378527][ T5990] bridge_slave_1: left promiscuous mode [ 1566.378782][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.455079][ T5990] bridge_slave_0: left allmulticast mode [ 1566.455113][ T5990] bridge_slave_0: left promiscuous mode [ 1566.455365][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.549638][ T5990] bridge_slave_1: left allmulticast mode [ 1566.549671][ T5990] bridge_slave_1: left promiscuous mode [ 1566.550042][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.605328][ T5990] bridge_slave_0: left allmulticast mode [ 1566.605360][ T5990] bridge_slave_0: left promiscuous mode [ 1566.605631][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.014421][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.083608][T12391] Bluetooth: hci1: command tx timeout [ 1567.109760][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.207640][ T5990] bond0 (unregistering): Released all slaves [ 1567.683791][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.763865][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.828594][ T5990] bond0 (unregistering): Released all slaves [ 1568.162667][T12391] Bluetooth: hci0: command tx timeout [ 1569.271568][T12391] Bluetooth: hci1: command tx timeout [ 1569.425148][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1569.916125][T13713] 9pnet_virtio: no channels available for device syz [ 1570.654826][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.900963][ T5990] bond0 (unregistering): Released all slaves [ 1572.030940][T12391] Bluetooth: hci1: command tx timeout [ 1572.454683][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.515354][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.578130][ T5990] bond0 (unregistering): Released all slaves [ 1573.384888][T13682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.384972][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.385167][T13682] bridge_slave_0: entered allmulticast mode [ 1573.387105][T13682] bridge_slave_0: entered promiscuous mode [ 1573.727341][T13682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.727626][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.727846][T13682] bridge_slave_1: entered allmulticast mode [ 1573.785276][T13682] bridge_slave_1: entered promiscuous mode [ 1574.201478][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.404603][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.073968][T13556] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1575.589924][T13556] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1575.864534][T13682] team0: Port device team_slave_0 added [ 1576.159168][T13556] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1576.269748][T13682] team0: Port device team_slave_1 added [ 1576.273402][T13556] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1577.673912][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.673929][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.673954][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.674970][T13689] chnl_net:caif_netlink_parms(): no params data found [ 1577.757381][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.757398][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.757423][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.074956][ T5990] hsr_slave_0: left promiscuous mode [ 1578.089525][ T5990] hsr_slave_1: left promiscuous mode [ 1578.090515][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.148836][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.150586][T13751] hub 9-0:1.0: USB hub found [ 1578.151054][T13751] hub 9-0:1.0: 1 port detected [ 1578.313326][ T5990] hsr_slave_0: left promiscuous mode [ 1578.333440][ T5990] hsr_slave_1: left promiscuous mode [ 1578.334407][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.384129][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.873119][ T5990] hsr_slave_0: left promiscuous mode [ 1578.915072][ T5990] hsr_slave_1: left promiscuous mode [ 1578.916091][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.964235][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.104073][ T5990] hsr_slave_0: left promiscuous mode [ 1579.128002][ T5990] hsr_slave_1: left promiscuous mode [ 1579.130447][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.164260][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.620854][T13755] overlayfs: missing 'lowerdir' [ 1580.883422][ T7179] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1581.043228][ T7179] usb 1-1: Using ep0 maxpacket: 8 [ 1581.045963][ T7179] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1581.046278][ T7179] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1581.046296][ T7179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1581.046309][ T7179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1581.046322][ T7179] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1581.046346][ T7179] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1581.046358][ T7179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.384652][ T7179] usb 1-1: usb_control_msg returned -32 [ 1581.384945][ T7179] usbtmc 1-1:16.0: can't read capabilities [ 1581.453879][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1581.633949][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1583.624136][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1583.819035][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1586.014864][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1586.227748][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1586.785750][T13760] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 1586.833049][ T5920] usb 1-1: USB disconnect, device number 19 [ 1588.754586][T13770] 9pnet_fd: Insufficient options for proto=fd [ 1589.920891][T13774] 9pnet_virtio: no channels available for device syz [ 1590.994456][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1591.173972][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1593.945805][T13786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1593.945833][T13786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1593.945923][T13786] vhci_hcd vhci_hcd.0: Device attached [ 1594.663859][T13787] vhci_hcd: connection closed [ 1594.679332][ T1104] vhci_hcd: stop threads [ 1594.679395][ T1104] vhci_hcd: release socket [ 1594.679684][ T1104] vhci_hcd: disconnect device [ 1594.743762][ T7182] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 1594.744083][ T7182] usb 33-1: enqueue for inactive port 0 [ 1594.906005][ T7182] vhci_hcd: vhci_device speed not set [ 1595.679755][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1595.715499][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1595.768528][T13797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1595.881989][T13799] overlayfs: missing 'lowerdir' [ 1596.460681][T13797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1596.470855][T13797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1596.483817][T13797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1596.484693][T13797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1596.500408][T13797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1596.518094][T13797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1596.531473][T13797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.809482][T13682] hsr_slave_0: entered promiscuous mode [ 1596.811053][T13682] hsr_slave_1: entered promiscuous mode [ 1596.812084][T13682] debugfs: 'hsr0' already exists in 'hsr' [ 1596.812108][T13682] Cannot create hsr debugfs directory [ 1597.673948][T13689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.674142][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.674395][T13689] bridge_slave_0: entered allmulticast mode [ 1597.677936][T13689] bridge_slave_0: entered promiscuous mode [ 1597.924555][T13689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.924707][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.925645][T13689] bridge_slave_1: entered allmulticast mode [ 1597.930457][T13689] bridge_slave_1: entered promiscuous mode [ 1598.214066][T13794] lo speed is unknown, defaulting to 1000 [ 1598.241677][T13689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.296288][T13689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.726437][T13689] team0: Port device team_slave_0 added [ 1598.850509][T13689] team0: Port device team_slave_1 added [ 1598.851031][T13790] lo speed is unknown, defaulting to 1000 [ 1598.861041][ T59] Bluetooth: hci2: command tx timeout [ 1598.861403][ T59] Bluetooth: hci3: command tx timeout [ 1599.525478][T13689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.525495][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.525521][T13689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.626205][T13689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.626222][T13689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1599.626248][T13689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.520268][T13689] hsr_slave_0: entered promiscuous mode [ 1600.521087][T13689] hsr_slave_1: entered promiscuous mode [ 1600.521620][T13689] debugfs: 'hsr0' already exists in 'hsr' [ 1600.521636][T13689] Cannot create hsr debugfs directory [ 1600.923282][T12391] Bluetooth: hci3: command tx timeout [ 1600.923313][T12391] Bluetooth: hci2: command tx timeout [ 1602.359211][T13794] chnl_net:caif_netlink_parms(): no params data found [ 1602.382575][T13816] hub 9-0:1.0: USB hub found [ 1602.382973][T13816] hub 9-0:1.0: 1 port detected [ 1603.003520][ T59] Bluetooth: hci2: command tx timeout [ 1603.003552][ T59] Bluetooth: hci3: command tx timeout [ 1603.065662][T13682] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1603.089281][T13790] chnl_net:caif_netlink_parms(): no params data found [ 1603.196351][T13682] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1605.763169][T12391] Bluetooth: hci3: command tx timeout [ 1605.763206][T12391] Bluetooth: hci2: command tx timeout [ 1605.883407][T13682] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1606.065874][T13831] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1606.065952][T13831] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1606.068364][T13831] vhci_hcd vhci_hcd.0: Device attached [ 1606.403702][ T7182] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 1606.772213][T13832] vhci_hcd: connection reset by peer [ 1606.807756][ T8071] vhci_hcd: stop threads [ 1606.807809][ T8071] vhci_hcd: release socket [ 1606.808316][ T8071] vhci_hcd: disconnect device [ 1607.675919][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.676037][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.704357][T13682] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1611.293596][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.293747][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.294001][T13794] bridge_slave_0: entered allmulticast mode [ 1611.296802][T13794] bridge_slave_0: entered promiscuous mode [ 1611.434545][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.434721][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.434981][T13794] bridge_slave_1: entered allmulticast mode [ 1611.437919][T13794] bridge_slave_1: entered promiscuous mode [ 1611.554816][ T7182] vhci_hcd: vhci_device speed not set [ 1614.879189][T13870] hub 9-0:1.0: USB hub found [ 1614.879513][T13870] hub 9-0:1.0: 1 port detected [ 1615.314608][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.555904][T13790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.556115][T13790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.556381][T13790] bridge_slave_0: entered allmulticast mode [ 1616.603408][T13790] bridge_slave_0: entered promiscuous mode [ 1616.619483][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1616.622848][T13790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.651118][T13790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.651390][T13790] bridge_slave_1: entered allmulticast mode [ 1616.670851][T13790] bridge_slave_1: entered promiscuous mode [ 1618.615056][T13794] team0: Port device team_slave_0 added [ 1618.622196][T13790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.706578][T13790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.716052][T13794] team0: Port device team_slave_1 added [ 1619.666543][T13790] team0: Port device team_slave_0 added [ 1619.680324][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.680343][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.680368][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.801951][T13790] team0: Port device team_slave_1 added [ 1619.839504][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.839516][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.839530][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.605633][T13790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.605649][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.605675][T13790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.776265][T13790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.776281][T13790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.776307][T13790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.271558][T13689] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1621.373894][T13902] overlayfs: missing 'lowerdir' [ 1621.514489][T13903] sz1: rxe_newlink: already configured on lo [ 1622.183358][T12391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1622.245588][T12391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1622.269751][T12391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1622.271066][T12391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1622.288319][T12391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1622.535188][T13794] hsr_slave_0: entered promiscuous mode [ 1622.550093][T13794] hsr_slave_1: entered promiscuous mode [ 1622.551168][T13794] debugfs: 'hsr0' already exists in 'hsr' [ 1622.551192][T13794] Cannot create hsr debugfs directory [ 1623.470321][T13790] hsr_slave_0: entered promiscuous mode [ 1623.471220][T13790] hsr_slave_1: entered promiscuous mode [ 1623.471796][T13790] debugfs: 'hsr0' already exists in 'hsr' [ 1623.471822][T13790] Cannot create hsr debugfs directory [ 1623.631173][T13900] lo speed is unknown, defaulting to 1000 [ 1624.363069][ T59] Bluetooth: hci0: command tx timeout [ 1625.278342][T12391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1625.311636][T12391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1625.320870][T12391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1625.322150][T12391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1625.339155][T12391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1626.420050][T13917] 9pnet_virtio: no channels available for device syz [ 1627.222998][T12391] Bluetooth: hci0: command tx timeout [ 1627.403270][T12391] Bluetooth: hci1: command tx timeout [ 1627.733894][T13909] lo speed is unknown, defaulting to 1000 [ 1628.814012][ T5990] bridge_slave_1: left allmulticast mode [ 1628.814047][ T5990] bridge_slave_1: left promiscuous mode [ 1628.814351][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.918799][ T5990] bridge_slave_0: left allmulticast mode [ 1628.918832][ T5990] bridge_slave_0: left promiscuous mode [ 1628.919125][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.026189][ T5990] bridge_slave_1: left allmulticast mode [ 1629.026214][ T5990] bridge_slave_1: left promiscuous mode [ 1629.026378][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.124606][ T5990] bridge_slave_0: left allmulticast mode [ 1629.124629][ T5990] bridge_slave_0: left promiscuous mode [ 1629.124794][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.209503][ T5990] bridge_slave_1: left allmulticast mode [ 1629.209537][ T5990] bridge_slave_1: left promiscuous mode [ 1629.209784][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.253209][T12391] Bluetooth: hci0: command tx timeout [ 1629.274892][ T5990] bridge_slave_0: left allmulticast mode [ 1629.274925][ T5990] bridge_slave_0: left promiscuous mode [ 1629.275192][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.323279][ T7179] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1629.372535][ T5990] bridge_slave_1: left allmulticast mode [ 1629.372570][ T5990] bridge_slave_1: left promiscuous mode [ 1629.372839][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.435136][ T5990] bridge_slave_0: left allmulticast mode [ 1629.435170][ T5990] bridge_slave_0: left promiscuous mode [ 1629.435445][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.476100][ T7179] usb 1-1: Using ep0 maxpacket: 8 [ 1629.478524][ T7179] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1629.478584][ T7179] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1629.478606][ T7179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1629.478629][ T7179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1629.478650][ T7179] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1629.478690][ T7179] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1629.478711][ T7179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.484251][T12391] Bluetooth: hci1: command tx timeout [ 1630.014090][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.104131][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.186045][ T5990] bond0 (unregistering): Released all slaves [ 1630.280426][T13930] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 1630.301496][ T7179] usb 1-1: USB disconnect, device number 20 [ 1630.555093][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1630.664187][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.740226][ T5990] bond0 (unregistering): Released all slaves [ 1631.116302][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.199477][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.323110][T12391] Bluetooth: hci0: command tx timeout [ 1631.395182][ T5990] bond0 (unregistering): Released all slaves [ 1631.601570][T12391] Bluetooth: hci1: command tx timeout [ 1631.715437][ C1] vkms_vblank_simulate: vblank timer overrun [ 1632.155942][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1632.244212][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1632.307445][ T5990] bond0 (unregistering): Released all slaves [ 1632.687802][T13900] chnl_net:caif_netlink_parms(): no params data found [ 1633.319599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1633.573298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1633.643467][T12391] Bluetooth: hci1: command tx timeout [ 1635.925275][T13900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.925434][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.925698][T13900] bridge_slave_0: entered allmulticast mode [ 1635.975268][T13900] bridge_slave_0: entered promiscuous mode [ 1636.128249][T13900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.128399][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.128804][T13900] bridge_slave_1: entered allmulticast mode [ 1636.196431][T13900] bridge_slave_1: entered promiscuous mode [ 1637.264454][T13900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.265408][T13909] chnl_net:caif_netlink_parms(): no params data found [ 1637.637095][T13900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.972686][T13956] libceph: resolve '0' (ret=-3): failed [ 1638.227251][T13900] team0: Port device team_slave_0 added [ 1638.266408][T13900] team0: Port device team_slave_1 added [ 1638.806984][ T5990] hsr_slave_0: left promiscuous mode [ 1638.843292][ T5990] hsr_slave_1: left promiscuous mode [ 1638.844310][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.887288][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.066405][ T5990] hsr_slave_0: left promiscuous mode [ 1639.108306][ T5990] hsr_slave_1: left promiscuous mode [ 1639.110275][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.355596][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.671495][T13966] overlayfs: missing 'lowerdir' [ 1640.811560][T13967] sz1: rxe_newlink: already configured on lo [ 1641.547578][ T5990] hsr_slave_0: left promiscuous mode [ 1641.713405][ T5990] hsr_slave_1: left promiscuous mode [ 1641.714414][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.754251][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.913593][ T5990] hsr_slave_0: left promiscuous mode [ 1641.933137][ T5990] hsr_slave_1: left promiscuous mode [ 1641.934133][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.000201][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.402954][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 1643.994113][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1644.143836][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1645.464202][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1645.604291][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1646.849127][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1647.003851][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1648.303820][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1648.456324][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1649.567238][T13900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.567254][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.567278][T13900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.837806][T13900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.837825][T13900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.837851][T13900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.839925][T13794] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1650.037876][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 1650.357746][T13794] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1650.918390][T13909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.918474][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.918672][T13909] bridge_slave_0: entered allmulticast mode [ 1650.920229][T13909] bridge_slave_0: entered promiscuous mode [ 1650.946268][T13794] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1651.085201][T13909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.085337][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.085516][T13909] bridge_slave_1: entered allmulticast mode [ 1651.087121][T13909] bridge_slave_1: entered promiscuous mode [ 1651.093788][T13794] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1652.962066][T13900] hsr_slave_0: entered promiscuous mode [ 1652.971804][T13900] hsr_slave_1: entered promiscuous mode [ 1652.982187][T13909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.218262][T13909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.861296][T13909] team0: Port device team_slave_0 added [ 1653.895971][T13909] team0: Port device team_slave_1 added [ 1654.381551][T13909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.381567][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.381590][T13909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.812292][T14005] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1654.812333][T14005] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1654.812816][T14005] vhci_hcd vhci_hcd.0: Device attached [ 1655.308536][T11781] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 1655.418081][T14008] vhci_hcd: connection reset by peer [ 1655.436660][ T1893] vhci_hcd: stop threads [ 1655.436714][ T1893] vhci_hcd: release socket [ 1655.436940][ T1893] vhci_hcd: disconnect device [ 1655.763900][T13909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.764402][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1655.764938][T13909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.189776][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1656.225849][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1656.254667][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1656.256648][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1656.261173][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.519338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.915651][T13909] hsr_slave_0: entered promiscuous mode [ 1656.917033][T13909] hsr_slave_1: entered promiscuous mode [ 1656.917997][T13909] debugfs: 'hsr0' already exists in 'hsr' [ 1656.918020][T13909] Cannot create hsr debugfs directory [ 1656.998790][T12391] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1657.018257][T12391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1657.019527][T12391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1657.046603][T12391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1657.047445][T12391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1657.448555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1657.474484][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 1657.474508][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 1657.828477][T14012] lo speed is unknown, defaulting to 1000 [ 1658.363765][T12391] Bluetooth: hci2: command tx timeout [ 1659.086492][T12391] Bluetooth: hci5: command tx timeout [ 1659.482986][T14019] lo speed is unknown, defaulting to 1000 [ 1660.433542][T11781] vhci_hcd: vhci_device speed not set [ 1660.444695][T12391] Bluetooth: hci2: command tx timeout [ 1661.176394][T12391] Bluetooth: hci5: command tx timeout [ 1661.393591][T13900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1661.559165][T13900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1661.876804][T13900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1661.920632][T13900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1662.358636][T14012] chnl_net:caif_netlink_parms(): no params data found [ 1662.523004][T12391] Bluetooth: hci2: command tx timeout [ 1663.259589][T12391] Bluetooth: hci5: command tx timeout [ 1664.152821][T14054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1562'. [ 1664.603315][T12391] Bluetooth: hci2: command tx timeout [ 1665.337140][T12391] Bluetooth: hci5: command tx timeout [ 1665.900582][T14019] chnl_net:caif_netlink_parms(): no params data found [ 1666.118904][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.118986][T14012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.119163][T14012] bridge_slave_0: entered allmulticast mode [ 1666.122792][T14012] bridge_slave_0: entered promiscuous mode [ 1666.280321][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.280470][T14012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.280724][T14012] bridge_slave_1: entered allmulticast mode [ 1666.296685][T14012] bridge_slave_1: entered promiscuous mode [ 1667.777591][T14012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.913962][T14012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.929967][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.930067][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.181550][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.182617][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.632713][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.641780][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.553357][T14076] vlan2: left promiscuous mode [ 1670.553380][T14076] macvtap0: left promiscuous mode [ 1671.160471][ T7179] lo speed is unknown, defaulting to 1000 [ 1671.160515][ T7179] sz1: Port: 1 Link DOWN [ 1671.185050][ T1104] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.349797][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.349886][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.350055][T14019] bridge_slave_0: entered allmulticast mode [ 1671.382092][T14019] bridge_slave_0: entered promiscuous mode [ 1671.415588][ T7179] lo speed is unknown, defaulting to 1000 [ 1671.459283][ T1104] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.461527][T14012] team0: Port device team_slave_0 added [ 1671.506535][T13909] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1671.552401][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.552485][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.552610][T14019] bridge_slave_1: entered allmulticast mode [ 1671.556352][T14019] bridge_slave_1: entered promiscuous mode [ 1671.557774][ T1104] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.598790][T14012] team0: Port device team_slave_1 added [ 1671.617635][T13909] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1671.915226][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.921618][T13909] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1672.257598][T13909] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1672.336335][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.343888][T14012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.343905][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.343929][T14012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.595889][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.601712][T14012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.601723][T14012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.601743][T14012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.082149][T14019] team0: Port device team_slave_0 added [ 1673.120095][T14019] team0: Port device team_slave_1 added [ 1676.588101][T14012] hsr_slave_0: entered promiscuous mode [ 1676.589671][T14012] hsr_slave_1: entered promiscuous mode [ 1676.590692][T14012] debugfs: 'hsr0' already exists in 'hsr' [ 1676.590716][T14012] Cannot create hsr debugfs directory [ 1676.637417][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.637441][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.637465][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.766669][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.766686][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.766721][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.355423][T14019] hsr_slave_0: entered promiscuous mode [ 1677.360502][T14019] hsr_slave_1: entered promiscuous mode [ 1677.362661][T14019] debugfs: 'hsr0' already exists in 'hsr' [ 1677.362689][T14019] Cannot create hsr debugfs directory [ 1677.431938][T14111] hub 9-0:1.0: USB hub found [ 1677.432294][T14111] hub 9-0:1.0: 1 port detected [ 1678.156893][T13900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.627746][T13900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.628288][ T5990] bridge_slave_1: left allmulticast mode [ 1679.628317][ T5990] bridge_slave_1: left promiscuous mode [ 1679.628655][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.897996][ T5990] bridge_slave_0: left allmulticast mode [ 1679.898033][ T5990] bridge_slave_0: left promiscuous mode [ 1679.898329][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.034811][ T5990] bridge_slave_1: left allmulticast mode [ 1680.034845][ T5990] bridge_slave_1: left promiscuous mode [ 1680.035127][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.155121][ T5990] bridge_slave_0: left allmulticast mode [ 1680.155145][ T5990] bridge_slave_0: left promiscuous mode [ 1680.155324][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.306171][ T5990] bridge_slave_1: left allmulticast mode [ 1680.306770][ T5990] bridge_slave_1: left promiscuous mode [ 1680.338777][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.416371][ T5990] bridge_slave_0: left allmulticast mode [ 1680.416411][ T5990] bridge_slave_0: left promiscuous mode [ 1680.416704][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.547478][ T5990] bridge_slave_1: left allmulticast mode [ 1680.547513][ T5990] bridge_slave_1: left promiscuous mode [ 1680.548784][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.628319][ T5990] bridge_slave_0: left allmulticast mode [ 1680.628354][ T5990] bridge_slave_0: left promiscuous mode [ 1680.632415][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.184999][T12391] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1685.830290][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1685.854008][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1685.857619][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1685.861531][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1685.863999][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1685.944320][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.034379][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.109873][ T5990] bond0 (unregistering): Released all slaves [ 1686.403946][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.813992][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1687.717214][ T5990] bond0 (unregistering): Released all slaves [ 1687.963352][T12391] Bluetooth: hci3: command tx timeout [ 1688.127409][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1688.135121][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1688.149900][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1688.150947][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1688.152420][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1690.210062][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.283154][T12391] Bluetooth: hci3: command tx timeout [ 1690.520945][T14156] hub 9-0:1.0: USB hub found [ 1690.522187][T14156] hub 9-0:1.0: 1 port detected [ 1690.524577][T12391] Bluetooth: hci6: command tx timeout [ 1690.533693][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.587914][ T5990] bond0 (unregistering): Released all slaves [ 1691.054007][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.134033][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.222686][ T5990] bond0 (unregistering): Released all slaves [ 1692.166248][T14144] lo speed is unknown, defaulting to 1000 [ 1692.363442][T12391] Bluetooth: hci3: command tx timeout [ 1692.626953][T12391] Bluetooth: hci6: command tx timeout [ 1693.952993][T14134] lo speed is unknown, defaulting to 1000 [ 1694.443156][T12391] Bluetooth: hci3: command tx timeout [ 1694.717844][T12391] Bluetooth: hci6: command tx timeout [ 1696.763161][T12391] Bluetooth: hci6: command tx timeout [ 1699.963151][ T5990] hsr_slave_0: left promiscuous mode [ 1699.993154][ T5990] hsr_slave_1: left promiscuous mode [ 1699.993801][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.033681][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.263722][ T5990] hsr_slave_0: left promiscuous mode [ 1700.303247][ T5990] hsr_slave_1: left promiscuous mode [ 1700.304080][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.343912][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.483219][ T5990] hsr_slave_0: left promiscuous mode [ 1700.503220][ T5990] hsr_slave_1: left promiscuous mode [ 1700.506431][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.547000][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.713098][ T5990] hsr_slave_0: left promiscuous mode [ 1700.736274][ T5990] hsr_slave_1: left promiscuous mode [ 1700.737358][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.798199][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.794072][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1701.967833][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1703.606069][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1703.764414][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1705.205127][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1705.359780][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1706.861365][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 1707.034283][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 1708.323666][T14144] chnl_net:caif_netlink_parms(): no params data found [ 1708.672088][T14134] chnl_net:caif_netlink_parms(): no params data found [ 1710.420794][T14012] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1710.557895][T14012] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1710.665921][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.666075][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.666300][T14144] bridge_slave_0: entered allmulticast mode [ 1710.669169][T14144] bridge_slave_0: entered promiscuous mode [ 1710.990036][T14012] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1711.032406][T14144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.032568][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.043277][T14144] bridge_slave_1: entered allmulticast mode [ 1711.046498][T14144] bridge_slave_1: entered promiscuous mode [ 1711.057514][T14012] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1711.745426][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.745614][T14134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.745870][T14134] bridge_slave_0: entered allmulticast mode [ 1711.749576][T14134] bridge_slave_0: entered promiscuous mode [ 1711.755412][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.795884][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.796861][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.797013][T14134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.797221][T14134] bridge_slave_1: entered allmulticast mode [ 1711.800358][T14134] bridge_slave_1: entered promiscuous mode [ 1712.208056][T14234] hub 9-0:1.0: USB hub found [ 1712.208750][T14234] hub 9-0:1.0: 1 port detected [ 1712.822719][T14144] team0: Port device team_slave_0 added [ 1712.841027][T14134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.943495][T14144] team0: Port device team_slave_1 added [ 1712.956871][T14134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1713.135724][T14019] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1716.164961][T14019] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1717.373182][T12391] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 1717.488081][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.488101][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.488126][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.508737][T14019] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1717.895463][T14134] team0: Port device team_slave_0 added [ 1717.904718][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.904735][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.904761][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.908704][T14134] team0: Port device team_slave_1 added [ 1718.514358][T14134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.514375][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.514399][T14134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.624517][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1718.632476][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1718.651459][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1718.672449][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1718.679584][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1718.708095][T14134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.708112][T14134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.708138][T14134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1720.152706][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1720.188314][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1720.199324][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1720.213443][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1720.215424][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1720.569993][T14144] hsr_slave_0: entered promiscuous mode [ 1720.571352][T14144] hsr_slave_1: entered promiscuous mode [ 1720.593302][T14144] debugfs: 'hsr0' already exists in 'hsr' [ 1720.593334][T14144] Cannot create hsr debugfs directory [ 1720.763977][T12391] Bluetooth: hci0: command tx timeout [ 1721.418237][T14134] hsr_slave_0: entered promiscuous mode [ 1721.419790][T14134] hsr_slave_1: entered promiscuous mode [ 1721.421064][T14134] debugfs: 'hsr0' already exists in 'hsr' [ 1721.421225][T14134] Cannot create hsr debugfs directory [ 1721.600244][T14243] lo speed is unknown, defaulting to 1000 [ 1722.373119][T12391] Bluetooth: hci1: command tx timeout [ 1722.660851][T14253] lo speed is unknown, defaulting to 1000 [ 1722.843012][T12391] Bluetooth: hci0: command tx timeout [ 1724.445581][T12391] Bluetooth: hci1: command tx timeout [ 1724.943388][T12391] Bluetooth: hci0: command tx timeout [ 1726.728721][T12391] Bluetooth: hci1: command tx timeout [ 1727.028197][T12391] Bluetooth: hci0: command tx timeout [ 1728.630283][T14278] libceph: resolve '0' (ret=-3): failed [ 1728.763111][T12391] Bluetooth: hci1: command tx timeout [ 1729.514176][T14243] chnl_net:caif_netlink_parms(): no params data found [ 1729.803406][T14253] chnl_net:caif_netlink_parms(): no params data found [ 1730.439936][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.440018][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.121166][T14289] libceph: resolve '0' (ret=-3): failed [ 1732.835243][T14243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.835478][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.835721][T14243] bridge_slave_0: entered allmulticast mode [ 1732.842799][T14243] bridge_slave_0: entered promiscuous mode [ 1734.280491][T14243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.280704][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.281024][T14243] bridge_slave_1: entered allmulticast mode [ 1734.294710][T14243] bridge_slave_1: entered promiscuous mode [ 1734.456245][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.456688][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.456963][T14253] bridge_slave_0: entered allmulticast mode [ 1734.487749][T14253] bridge_slave_0: entered promiscuous mode [ 1734.864166][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.864266][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.864445][T14253] bridge_slave_1: entered allmulticast mode [ 1734.866121][T14253] bridge_slave_1: entered promiscuous mode [ 1735.134027][T14243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.582703][T14243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.697012][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.799479][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.094924][T14144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1736.155045][T14243] team0: Port device team_slave_0 added [ 1736.288121][T14144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1736.321307][T14243] team0: Port device team_slave_1 added [ 1736.349236][T14253] team0: Port device team_slave_0 added [ 1736.352217][T14144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1736.671896][T14253] team0: Port device team_slave_1 added [ 1736.982933][T14144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1738.493584][T14243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.493601][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1738.493627][T14243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.713941][T14243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.713959][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.713987][T14243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.772960][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.772977][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.773004][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.968313][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.968331][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1739.968358][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.756004][T14134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1741.793437][ T57] bridge_slave_1: left allmulticast mode [ 1741.793460][ T57] bridge_slave_1: left promiscuous mode [ 1741.793651][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.914273][ T57] bridge_slave_0: left allmulticast mode [ 1741.914297][ T57] bridge_slave_0: left promiscuous mode [ 1741.914525][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.047454][ T57] bridge_slave_1: left allmulticast mode [ 1742.047480][ T57] bridge_slave_1: left promiscuous mode [ 1742.047653][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.113907][ T57] bridge_slave_0: left allmulticast mode [ 1742.113930][ T57] bridge_slave_0: left promiscuous mode [ 1742.114163][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.185521][ T57] bridge_slave_1: left allmulticast mode [ 1742.185545][ T57] bridge_slave_1: left promiscuous mode [ 1742.185702][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.255077][ T57] bridge_slave_0: left allmulticast mode [ 1742.255111][ T57] bridge_slave_0: left promiscuous mode [ 1742.255429][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.337877][ T57] bridge_slave_1: left allmulticast mode [ 1742.337911][ T57] bridge_slave_1: left promiscuous mode [ 1742.338166][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.415562][ T57] bridge_slave_0: left allmulticast mode [ 1742.415597][ T57] bridge_slave_0: left promiscuous mode [ 1742.415897][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.306931][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.395766][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.457957][ T57] bond0 (unregistering): Released all slaves [ 1743.849771][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.934354][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.997748][ T57] bond0 (unregistering): Released all slaves [ 1744.704064][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.804264][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.875721][ T57] bond0 (unregistering): Released all slaves [ 1746.555456][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1746.579285][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1746.581617][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1746.586418][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1746.594558][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1746.874299][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.984643][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.065412][ T57] bond0 (unregistering): Released all slaves [ 1747.241782][T14243] hsr_slave_0: entered promiscuous mode [ 1747.250657][T14243] hsr_slave_1: entered promiscuous mode [ 1747.251649][T14243] debugfs: 'hsr0' already exists in 'hsr' [ 1747.251670][T14243] Cannot create hsr debugfs directory [ 1747.273802][T14134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1747.547132][T14253] hsr_slave_0: entered promiscuous mode [ 1747.548538][T14253] hsr_slave_1: entered promiscuous mode [ 1747.549503][T14253] debugfs: 'hsr0' already exists in 'hsr' [ 1747.549526][T14253] Cannot create hsr debugfs directory [ 1748.763116][ T59] Bluetooth: hci2: command tx timeout [ 1748.904981][T14340] lo speed is unknown, defaulting to 1000 [ 1750.993285][T13797] Bluetooth: hci2: command tx timeout [ 1751.020677][T12391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1751.032790][T12391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1751.036744][T12391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1751.075664][T12391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1751.137574][T12391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1753.003382][T12391] Bluetooth: hci2: command tx timeout [ 1753.003418][ T57] hsr_slave_0: left promiscuous mode [ 1753.073173][ T57] hsr_slave_1: left promiscuous mode [ 1753.079387][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.103748][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.508631][T12391] Bluetooth: hci3: command tx timeout [ 1753.543262][ T57] hsr_slave_0: left promiscuous mode [ 1754.374949][T14364] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1754.383085][ T57] hsr_slave_1: left promiscuous mode [ 1754.384051][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.413912][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.565493][ T57] hsr_slave_0: left promiscuous mode [ 1754.601192][ T57] hsr_slave_1: left promiscuous mode [ 1754.603260][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.634173][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.753283][ T57] hsr_slave_0: left promiscuous mode [ 1754.781004][ T57] hsr_slave_1: left promiscuous mode [ 1754.781934][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.825165][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1755.083049][T12391] Bluetooth: hci2: command tx timeout [ 1755.563235][T12391] Bluetooth: hci3: command tx timeout [ 1755.586144][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1755.703870][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1756.914628][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1757.053826][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1757.747994][T12391] Bluetooth: hci3: command tx timeout [ 1758.454118][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1758.595409][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1759.812134][T12391] Bluetooth: hci3: command tx timeout [ 1759.895363][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1760.023939][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1762.011948][T14349] lo speed is unknown, defaulting to 1000 [ 1763.478952][T14340] chnl_net:caif_netlink_parms(): no params data found [ 1764.796447][T14340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.798149][T14340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.798408][T14340] bridge_slave_0: entered allmulticast mode [ 1764.801379][T14340] bridge_slave_0: entered promiscuous mode [ 1764.889510][T14340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.889647][T14340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.891531][T14340] bridge_slave_1: entered allmulticast mode [ 1764.896863][T14340] bridge_slave_1: entered promiscuous mode [ 1766.658878][T14340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.765712][T14340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.007017][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 1767.155786][T14340] team0: Port device team_slave_0 added [ 1767.302922][T14340] team0: Port device team_slave_1 added [ 1768.089990][T14340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1768.090008][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.090032][T14340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1768.224293][T14340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1768.224306][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1768.224320][T14340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.225352][T14349] chnl_net:caif_netlink_parms(): no params data found [ 1769.147878][T14243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1769.318500][T14340] hsr_slave_0: entered promiscuous mode [ 1769.338335][T14340] hsr_slave_1: entered promiscuous mode [ 1769.380142][T14243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1770.576948][T14243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1770.945405][T14243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1771.285588][T14349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.285818][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.286072][T14349] bridge_slave_0: entered allmulticast mode [ 1771.289908][T14349] bridge_slave_0: entered promiscuous mode [ 1772.153573][T14415] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1772.186301][T14349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.186567][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.186801][T14349] bridge_slave_1: entered allmulticast mode [ 1772.189685][T14349] bridge_slave_1: entered promiscuous mode [ 1773.007051][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 1774.993637][T14349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.272189][T14349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.284022][T14438] 9pnet_virtio: no channels available for device syz [ 1775.300125][T14253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1775.442256][T14253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1775.570440][T14253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1775.611311][T14349] team0: Port device team_slave_0 added [ 1775.694123][T14253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1775.756485][T14349] team0: Port device team_slave_1 added [ 1777.507699][T14349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.507716][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.507749][T14349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.567457][T14349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.567475][T14349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.567501][T14349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.752270][T14349] hsr_slave_0: entered promiscuous mode [ 1778.764853][T14349] hsr_slave_1: entered promiscuous mode [ 1778.766082][T14349] debugfs: 'hsr0' already exists in 'hsr' [ 1778.766117][T14349] Cannot create hsr debugfs directory [ 1779.323674][ T7179] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1779.524696][ T7179] usb 1-1: Using ep0 maxpacket: 8 [ 1779.528981][ T7179] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1779.529009][ T7179] usb 1-1: config 0 has no interface number 0 [ 1779.529060][ T7179] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1779.529084][ T7179] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1779.529109][ T7179] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1779.529136][ T7179] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1779.529159][ T7179] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1779.529208][ T7179] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1779.529230][ T7179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.574492][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1779.580235][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1779.582120][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1779.584189][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1779.585483][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1779.600957][ T7179] usb 1-1: config 0 descriptor?? [ 1779.686055][ T7179] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1779.859138][T14465] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1779.868520][T14080] usb 1-1: USB disconnect, device number 21 [ 1779.890442][T14080] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1781.643387][ T59] Bluetooth: hci0: command tx timeout [ 1781.911028][T12391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1781.942891][T12391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1781.944217][T12391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1781.945794][T12391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1781.986062][T12391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1782.002480][T14466] lo speed is unknown, defaulting to 1000 [ 1783.672879][T14480] lo speed is unknown, defaulting to 1000 [ 1783.697383][T14340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1783.723620][ T59] Bluetooth: hci0: command tx timeout [ 1783.811321][T14340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1783.918793][T14340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1784.023184][T11781] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1784.044274][ T59] Bluetooth: hci1: command tx timeout [ 1784.079491][T14340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1784.173130][T11781] usb 1-1: Using ep0 maxpacket: 16 [ 1784.175468][T11781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.175507][T11781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.175545][T11781] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1784.175569][T11781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.194467][T11781] usb 1-1: config 0 descriptor?? [ 1784.656617][T11781] hid (null): unknown global tag 0x9c [ 1784.656640][T11781] hid (null): unknown global tag 0xd [ 1784.656655][T11781] hid (null): unknown global tag 0x51 [ 1784.656670][T11781] hid (null): unknown global tag 0xc [ 1784.658768][T11781] hid (null): unknown global tag 0xc [ 1784.662143][T11781] hid (null): invalid report_size 39531 [ 1784.662198][T11781] hid (null): invalid report_count 16579 [ 1784.662237][T11781] hid (null): unknown global tag 0xe [ 1784.662265][T11781] hid (null): unknown global tag 0xe [ 1784.662304][T11781] hid (null): unknown global tag 0x4c [ 1784.788141][ T57] bridge_slave_1: left allmulticast mode [ 1784.788194][ T57] bridge_slave_1: left promiscuous mode [ 1784.788531][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.836739][ T57] bridge_slave_0: left allmulticast mode [ 1784.836773][ T57] bridge_slave_0: left promiscuous mode [ 1784.837238][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.873646][T11781] usb 1-1: string descriptor 0 read error: -71 [ 1784.902413][T11781] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 1784.902466][T11781] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -32 [ 1784.917421][T11781] usb 1-1: USB disconnect, device number 22 [ 1784.976866][ T57] bridge_slave_1: left allmulticast mode [ 1784.976901][ T57] bridge_slave_1: left promiscuous mode [ 1784.977159][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.094827][ T57] bridge_slave_0: left allmulticast mode [ 1785.094863][ T57] bridge_slave_0: left promiscuous mode [ 1785.095144][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.683941][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.692387][T14499] 9pnet_virtio: no channels available for device syz [ 1785.783687][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.803030][ T59] Bluetooth: hci0: command tx timeout [ 1785.837545][ T57] bond0 (unregistering): Released all slaves [ 1786.123043][ T59] Bluetooth: hci1: command tx timeout [ 1786.174173][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1786.255781][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1786.379624][ T57] bond0 (unregistering): Released all slaves [ 1787.161835][T14504] libceph: resolve '0' (ret=-3): failed [ 1787.306662][T14466] chnl_net:caif_netlink_parms(): no params data found [ 1787.883899][ T59] Bluetooth: hci0: command tx timeout [ 1788.203296][ T59] Bluetooth: hci1: command tx timeout [ 1788.436628][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1788.436801][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.437074][T14466] bridge_slave_0: entered allmulticast mode [ 1788.477323][T14466] bridge_slave_0: entered promiscuous mode [ 1788.613578][ T57] hsr_slave_0: left promiscuous mode [ 1788.656996][ T57] hsr_slave_1: left promiscuous mode [ 1788.657613][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.683918][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.869578][ T57] hsr_slave_0: left promiscuous mode [ 1788.885706][ T57] hsr_slave_1: left promiscuous mode [ 1788.886369][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.925165][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.400557][T14515] [ 1789.400571][T14515] ====================================================== [ 1789.400581][T14515] WARNING: possible circular locking dependency detected [ 1789.400599][T14515] syzkaller #0 Not tainted [ 1789.400611][T14515] ------------------------------------------------------ [ 1789.400621][T14515] syz.0.1628/14515 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1789.400633][T14515] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1789.400696][T14515] [ 1789.400696][T14515] but task is already holding lock: [ 1789.400704][T14515] ffff8881427ec3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 1789.400749][T14515] [ 1789.400749][T14515] which lock already depends on the new lock. [ 1789.400749][T14515] [ 1789.400757][T14515] [ 1789.400757][T14515] the existing dependency chain (in reverse order) is: [ 1789.400766][T14515] [ 1789.400766][T14515] -> #4 (&dev->vblank_time_lock){+.+.}-{3:3}: [ 1789.400802][T14515] lock_acquire+0x120/0x360 [ 1789.400826][T14515] rt_spin_lock+0x88/0x2c0 [ 1789.400845][T14515] drm_crtc_vblank_on_config+0x2cd/0x860 [ 1789.400866][T14515] drm_crtc_vblank_on+0x88/0xc0 [ 1789.400887][T14515] drm_atomic_helper_commit_modeset_enables+0x602/0xe10 [ 1789.400910][T14515] vkms_atomic_commit_tail+0x69/0x210 [ 1789.400932][T14515] commit_tail+0x281/0x3a0 [ 1789.400952][T14515] drm_atomic_helper_commit+0xa6b/0xb10 [ 1789.400974][T14515] drm_atomic_commit+0x262/0x2c0 [ 1789.400992][T14515] drm_client_modeset_commit_atomic+0x620/0x760 [ 1789.401019][T14515] drm_client_modeset_commit_locked+0xce/0x4d0 [ 1789.401046][T14515] drm_client_modeset_commit+0x4a/0x70 [ 1789.401072][T14515] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 1789.401093][T14515] drm_fb_helper_set_par+0xaf/0x100 [ 1789.401113][T14515] fbcon_init+0x1255/0x2370 [ 1789.401136][T14515] visual_init+0x2ef/0x650 [ 1789.401157][T14515] do_bind_con_driver+0x890/0xf70 [ 1789.401179][T14515] do_take_over_console+0x899/0xa10 [ 1789.401202][T14515] do_fbcon_takeover+0x118/0x200 [ 1789.401225][T14515] fbcon_fb_registered+0x35e/0x610 [ 1789.401247][T14515] register_framebuffer+0x70f/0x890 [ 1789.401271][T14515] __drm_fb_helper_initial_config_and_unlock+0x130a/0x18a0 [ 1789.401294][T14515] drm_fbdev_client_hotplug+0x16f/0x230 [ 1789.401316][T14515] drm_client_register+0x16f/0x210 [ 1789.401340][T14515] drm_fbdev_client_setup+0x19f/0x3f0 [ 1789.401361][T14515] drm_client_setup+0x10a/0x230 [ 1789.401380][T14515] vkms_init+0x3e0/0x4b0 [ 1789.401403][T14515] do_one_initcall+0x233/0x820 [ 1789.401419][T14515] do_initcall_level+0x104/0x190 [ 1789.401446][T14515] do_initcalls+0x59/0xa0 [ 1789.401471][T14515] kernel_init_freeable+0x334/0x4b0 [ 1789.401497][T14515] kernel_init+0x1d/0x1d0 [ 1789.401512][T14515] ret_from_fork+0x3fc/0x770 [ 1789.401534][T14515] ret_from_fork_asm+0x1a/0x30 [ 1789.401551][T14515] [ 1789.401551][T14515] -> #3 (&dev->vbl_lock){+.+.}-{3:3}: [ 1789.401578][T14515] lock_acquire+0x120/0x360 [ 1789.401599][T14515] rt_spin_lock+0x88/0x2c0 [ 1789.401616][T14515] vblank_disable_fn+0x72/0x190 [ 1789.401633][T14515] call_timer_fn+0x17e/0x5f0 [ 1789.401656][T14515] __run_timer_base+0x648/0x970 [ 1789.401676][T14515] run_timer_softirq+0xb7/0x180 [ 1789.401697][T14515] handle_softirqs+0x22c/0x710 [ 1789.401719][T14515] run_ktimerd+0xcf/0x190 [ 1789.401742][T14515] smpboot_thread_fn+0x53f/0xa60 [ 1789.401765][T14515] kthread+0x70e/0x8a0 [ 1789.401795][T14515] ret_from_fork+0x3fc/0x770 [ 1789.401818][T14515] ret_from_fork_asm+0x1a/0x30 [ 1789.401835][T14515] [ 1789.401835][T14515] -> #2 ((&vblank->disable_timer)){+...}-{0:0}: [ 1789.401864][T14515] lock_acquire+0x120/0x360 [ 1789.401886][T14515] call_timer_fn+0xdb/0x5f0 [ 1789.401909][T14515] __run_timer_base+0x648/0x970 [ 1789.401929][T14515] run_timer_softirq+0xb7/0x180 [ 1789.401951][T14515] handle_softirqs+0x22c/0x710 [ 1789.401974][T14515] run_ktimerd+0xcf/0x190 [ 1789.401997][T14515] smpboot_thread_fn+0x53f/0xa60 [ 1789.402018][T14515] kthread+0x70e/0x8a0 [ 1789.402042][T14515] ret_from_fork+0x3fc/0x770 [ 1789.402064][T14515] ret_from_fork_asm+0x1a/0x30 [ 1789.402081][T14515] [ 1789.402081][T14515] -> #1 (&base->expiry_lock){+...}-{3:3}: [ 1789.402107][T14515] lock_acquire+0x120/0x360 [ 1789.402129][T14515] rt_spin_lock+0x88/0x2c0 [ 1789.402145][T14515] __run_timer_base+0x114/0x970 [ 1789.402165][T14515] run_timer_softirq+0x67/0x180 [ 1789.402186][T14515] handle_softirqs+0x22c/0x710 [ 1789.402207][T14515] run_ktimerd+0xcf/0x190 [ 1789.402230][T14515] smpboot_thread_fn+0x53f/0xa60 [ 1789.402251][T14515] kthread+0x70e/0x8a0 [ 1789.402275][T14515] ret_from_fork+0x3fc/0x770 [ 1789.402292][T14515] ret_from_fork_asm+0x1a/0x30 [ 1789.402305][T14515] [ 1789.402305][T14515] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 1789.402325][T14515] validate_chain+0xb9b/0x2140 [ 1789.402347][T14515] __lock_acquire+0xab9/0xd20 [ 1789.402366][T14515] reacquire_held_locks+0x127/0x1d0 [ 1789.402388][T14515] lock_release+0x1b4/0x3e0 [ 1789.402404][T14515] __local_bh_enable_ip+0x10c/0x270 [ 1789.402421][T14515] hrtimer_cancel+0x39/0x60 [ 1789.402445][T14515] drm_vblank_disable_and_save+0x1bc/0x380 [ 1789.402465][T14515] drm_crtc_vblank_off+0x22e/0x820 [ 1789.402483][T14515] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 1789.402501][T14515] vkms_atomic_commit_tail+0x51/0x210 [ 1789.402518][T14515] commit_tail+0x281/0x3a0 [ 1789.402532][T14515] drm_atomic_helper_commit+0xa6b/0xb10 [ 1789.402542][T14515] drm_atomic_commit+0x262/0x2c0 [ 1789.402550][T14515] drm_atomic_helper_set_config+0xe2/0x160 [ 1789.402562][T14515] drm_mode_setcrtc+0x9a4/0x1c50 [ 1789.402574][T14515] drm_ioctl_kernel+0x2d2/0x3a0 [ 1789.402585][T14515] drm_ioctl+0x685/0xb20 [ 1789.402596][T14515] __se_sys_ioctl+0xfc/0x170 [ 1789.402606][T14515] do_syscall_64+0xfa/0x3b0 [ 1789.402617][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.402627][T14515] [ 1789.402627][T14515] other info that might help us debug this: [ 1789.402627][T14515] [ 1789.402631][T14515] Chain exists of: [ 1789.402631][T14515] (softirq_ctrl.lock) --> &dev->vbl_lock --> &dev->vblank_time_lock [ 1789.402631][T14515] [ 1789.402649][T14515] Possible unsafe locking scenario: [ 1789.402649][T14515] [ 1789.402653][T14515] CPU0 CPU1 [ 1789.402656][T14515] ---- ---- [ 1789.402659][T14515] lock(&dev->vblank_time_lock); [ 1789.402666][T14515] lock(&dev->vbl_lock); [ 1789.402674][T14515] lock(&dev->vblank_time_lock); [ 1789.402681][T14515] lock((softirq_ctrl.lock)); [ 1789.402688][T14515] [ 1789.402688][T14515] *** DEADLOCK *** [ 1789.402688][T14515] [ 1789.402692][T14515] 8 locks held by syz.0.1628/14515: [ 1789.402698][T14515] #0: ffffc9000c4e7b20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_setcrtc+0x555/0x1c50 [ 1789.402725][T14515] #1: ffffc9000c4e7b48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_mode_setcrtc+0x555/0x1c50 [ 1789.402751][T14515] #2: ffff8881427ec4b8 (&dev->event_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xe4/0x820 [ 1789.402789][T14515] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1789.402834][T14515] #4: ffff8881427ec420 (&dev->vbl_lock){+.+.}-{3:3}, at: drm_crtc_vblank_off+0xf5/0x820 [ 1789.402877][T14515] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1789.402919][T14515] #6: ffff8881427ec3a0 (&dev->vblank_time_lock){+.+.}-{3:3}, at: drm_vblank_disable_and_save+0x7f/0x380 [ 1789.402963][T14515] #7: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1789.403000][T14515] [ 1789.403000][T14515] stack backtrace: [ 1789.403033][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1789.403057][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1789.403078][T14515] Call Trace: [ 1789.403087][T14515] [ 1789.403096][T14515] dump_stack_lvl+0x189/0x250 [ 1789.403128][T14515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.403155][T14515] ? __pfx__printk+0x10/0x10 [ 1789.403174][T14515] ? print_lock_name+0xde/0x100 [ 1789.403193][T14515] print_circular_bug+0x2ee/0x310 [ 1789.403211][T14515] check_noncircular+0x134/0x160 [ 1789.403242][T14515] validate_chain+0xb9b/0x2140 [ 1789.403272][T14515] ? __lock_acquire+0xab9/0xd20 [ 1789.403300][T14515] ? do_raw_spin_lock+0x121/0x290 [ 1789.403326][T14515] __lock_acquire+0xab9/0xd20 [ 1789.403354][T14515] reacquire_held_locks+0x127/0x1d0 [ 1789.403381][T14515] ? __local_bh_disable_ip+0x264/0x400 [ 1789.403407][T14515] lock_release+0x1b4/0x3e0 [ 1789.403431][T14515] ? __local_bh_enable_ip+0x100/0x270 [ 1789.403456][T14515] __local_bh_enable_ip+0x10c/0x270 [ 1789.403480][T14515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1789.403505][T14515] ? rt_spin_unlock+0x65/0x80 [ 1789.403526][T14515] ? hrtimer_cancel_wait_running+0xe5/0x180 [ 1789.403554][T14515] ? hrtimer_cancel_wait_running+0x142/0x180 [ 1789.403582][T14515] ? __pfx_vkms_disable_vblank+0x10/0x10 [ 1789.403606][T14515] hrtimer_cancel+0x39/0x60 [ 1789.403632][T14515] drm_vblank_disable_and_save+0x1bc/0x380 [ 1789.403655][T14515] drm_crtc_vblank_off+0x22e/0x820 [ 1789.403679][T14515] ? drm_atomic_bridge_chain_disable+0x157/0x180 [ 1789.403707][T14515] ? __pfx_vkms_crtc_atomic_disable+0x10/0x10 [ 1789.403732][T14515] drm_atomic_helper_commit_modeset_disables+0xc89/0x2010 [ 1789.403762][T14515] vkms_atomic_commit_tail+0x51/0x210 [ 1789.403806][T14515] ? read_tsc+0x9/0x20 [ 1789.403829][T14515] ? __pfx_vkms_atomic_commit_tail+0x10/0x10 [ 1789.403850][T14515] commit_tail+0x281/0x3a0 [ 1789.403877][T14515] drm_atomic_helper_commit+0xa6b/0xb10 [ 1789.403902][T14515] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1789.403925][T14515] drm_atomic_commit+0x262/0x2c0 [ 1789.403946][T14515] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1789.403965][T14515] ? __pfx___drm_printfn_info+0x10/0x10 [ 1789.403997][T14515] ? drm_atomic_state_init+0x231/0x310 [ 1789.404027][T14515] drm_atomic_helper_set_config+0xe2/0x160 [ 1789.404053][T14515] drm_mode_setcrtc+0x9a4/0x1c50 [ 1789.404090][T14515] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1789.404115][T14515] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.404142][T14515] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1789.404178][T14515] ? rt_spin_unlock+0x65/0x80 [ 1789.404200][T14515] ? drm_is_current_master+0x1a2/0x210 [ 1789.404223][T14515] drm_ioctl_kernel+0x2d2/0x3a0 [ 1789.404248][T14515] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1789.404273][T14515] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1789.404303][T14515] drm_ioctl+0x685/0xb20 [ 1789.404325][T14515] ? smk_tskacc+0x2fc/0x370 [ 1789.404354][T14515] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1789.404381][T14515] ? __pfx_drm_ioctl+0x10/0x10 [ 1789.404411][T14515] ? __fget_files+0x2a/0x420 [ 1789.404439][T14515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1789.404462][T14515] ? __pfx_drm_ioctl+0x10/0x10 [ 1789.404485][T14515] __se_sys_ioctl+0xfc/0x170 [ 1789.404508][T14515] do_syscall_64+0xfa/0x3b0 [ 1789.404533][T14515] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.404557][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.404576][T14515] ? clear_bhb_loop+0x60/0xb0 [ 1789.404598][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.404623][T14515] RIP: 0033:0x7f9db7c3ebe9 [ 1789.404646][T14515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1789.404664][T14515] RSP: 002b:00007f9db5e85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.404685][T14515] RAX: ffffffffffffffda RBX: 00007f9db7e66090 RCX: 00007f9db7c3ebe9 [ 1789.404702][T14515] RDX: 0000200000000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 1789.404717][T14515] RBP: 00007f9db7cc1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1789.404730][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1789.404743][T14515] R13: 00007f9db7e66128 R14: 00007f9db7e66090 R15: 00007ffffbb550c8 [ 1789.404766][T14515] [ 1790.374871][ T59] Bluetooth: hci1: command tx timeout [ 1791.004826][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1791.198942][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1791.643134][T14521] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1791.804755][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.804814][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.114105][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1792.243450][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1792.849280][T14480] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1792.857104][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.857183][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.857352][T14466] bridge_slave_1: entered allmulticast mode [ 1792.858717][T14466] bridge_slave_1: entered promiscuous mode