last executing test programs: 22m16.0921479s ago: executing program 32 (id=1294): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 20m45.571016267s ago: executing program 5 (id=1611): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r0, &(0x7f0000000440)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 20m45.384950238s ago: executing program 5 (id=1613): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2) close(0x4) close(0x3) 20m44.210854165s ago: executing program 5 (id=1615): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000d40)={{r0}, "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"}) 20m42.836637337s ago: executing program 5 (id=1619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 20m41.727022155s ago: executing program 5 (id=1624): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000014000180050002"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 20m38.688026165s ago: executing program 5 (id=1632): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 20m38.073511045s ago: executing program 33 (id=1632): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 20m26.705679855s ago: executing program 1 (id=1669): socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file4\x00', &(0x7f0000000040), 0x4, 0x0) 20m23.529219983s ago: executing program 1 (id=1674): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff3, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0x40000000000002}], 0x9}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m22.964185883s ago: executing program 1 (id=1678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaacd9, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m21.97386429s ago: executing program 1 (id=1680): socket(0x1e, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) socket$kcm(0x2, 0xa, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r1], 0xc4}}, 0x0) 20m21.441253684s ago: executing program 1 (id=1685): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x41) chown(&(0x7f0000000000)='./file0\x00', 0x0, r4) 20m19.577503814s ago: executing program 1 (id=1687): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 20m4.277818789s ago: executing program 34 (id=1687): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 19m18.88476451s ago: executing program 0 (id=1809): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) accept(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19m17.292112013s ago: executing program 0 (id=1814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$userio(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) 19m13.351164947s ago: executing program 0 (id=1821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, 0x0) 19m11.811687803s ago: executing program 0 (id=1823): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x3c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x108000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) writev(r4, &(0x7f0000002d00)=[{&(0x7f0000000ac0)="1a3e", 0x2}], 0x1) 19m9.992493287s ago: executing program 0 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xb7b56000) times(&(0x7f0000002280)) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m8.721891239s ago: executing program 0 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000021002a082bbd70d282d36f9b5f06ed9e8b0561718d00fbff7f250a140004ee000005000001001400020000000000000000000000ffff0a01010009b36b210e3922c9311b172005de8eef6b0ce3d8ff59"], 0x30}}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x345}) fcntl$lock(r1, 0x25, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="9a2e8f8801"], 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 18m53.557267295s ago: executing program 35 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000021002a082bbd70d282d36f9b5f06ed9e8b0561718d00fbff7f250a140004ee000005000001001400020000000000000000000000ffff0a01010009b36b210e3922c9311b172005de8eef6b0ce3d8ff59"], 0x30}}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x345}) fcntl$lock(r1, 0x25, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="9a2e8f8801"], 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 17m10.675029434s ago: executing program 3 (id=1986): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x0, 0x40, 0xfffff02c}]}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x89, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17m10.280464405s ago: executing program 3 (id=1987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="300000000d0635358245ca6e8fda3530010200000000000000000000000005"], 0x30}}, 0x0) 17m9.020180159s ago: executing program 3 (id=1988): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r1, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17m8.17502772s ago: executing program 3 (id=1989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 17m7.702388741s ago: executing program 3 (id=1991): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 17m6.311247986s ago: executing program 3 (id=1992): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16m49.764424679s ago: executing program 36 (id=1992): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12m11.592430629s ago: executing program 8 (id=2190): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x20000003}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r1, r1, r1, r1, r1, r1, r5, r5], &(0x7f0000000540)=[{0x2, 0x4, 0x8, 0xa}, {0x5, 0x2, 0x5, 0x5}, {0x2, 0x5, 0x6, 0x8}, {0x7, 0x1, 0xc, 0x5}, {0x0, 0x1, 0xfffffffd, 0xc}, {0x2, 0x4, 0x8, 0x5}, {0x1, 0x3, 0x3, 0x2}, {0x3, 0x1, 0xf, 0x1}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000002000000001800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x48) 12m7.471308019s ago: executing program 8 (id=2195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 12m1.20395955s ago: executing program 8 (id=2199): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x31dfb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4000000, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x4005, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x10000, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x9, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x20005, 0xfffffffe, 0x100, 0x3, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x1000a2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x102, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xfffffffa, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) 11m58.703970523s ago: executing program 8 (id=2203): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 11m56.53935864s ago: executing program 8 (id=2206): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 11m53.587824048s ago: executing program 8 (id=2210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44010) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), 0x0) 11m36.786581103s ago: executing program 37 (id=2210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44010) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), 0x0) 10m54.330029467s ago: executing program 6 (id=2299): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x3a, 0x0, 0x0) rename(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x4, 0x1, 0x1, 0x0, 0x7}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 10m52.353136642s ago: executing program 6 (id=2301): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x17a28000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000140)}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10m49.365589728s ago: executing program 6 (id=2303): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0xabcabb8ac9451b86}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can={0x1d, r5}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@ax25={{0x1d, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, 0x0}}], 0x2, 0x8084) 10m41.117492487s ago: executing program 6 (id=2308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioprio_get$pid(0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) r0 = getpid() prlimit64(r0, 0x7, 0x0, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) 10m40.621864217s ago: executing program 6 (id=2311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) 10m37.132271247s ago: executing program 6 (id=2315): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m20.419591697s ago: executing program 38 (id=2315): pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m32.734741104s ago: executing program 2 (id=2392): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c00018006000600894f0000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @private1, 0x5}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) wait4(r3, 0x0, 0x8, 0x0) wait4(r0, 0x0, 0x20000008, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) 9m30.887949517s ago: executing program 2 (id=2396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002280)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4404c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x200000000000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname(r1, &(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x80) r2 = socket(0x21, 0x800, 0x8001) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) getsockname$packet(r2, 0x0, &(0x7f0000000200)) 9m30.852130047s ago: executing program 2 (id=2397): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) 9m29.483280793s ago: executing program 2 (id=2399): userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) 9m26.23519841s ago: executing program 2 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_LABELS_MASK={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x20}}, 0x8000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x8, 0xfffffbf9, 0x80000003, 0x40000000, 0x800000, 0x100, 0x2, 0x1, 0x1, 0xfffffffe, 0x4, 0xf, 0x0, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xfff, 0x3c, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 9m23.293528267s ago: executing program 2 (id=2408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 9m6.90196158s ago: executing program 39 (id=2408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x7a6f938d2aadffed, 0x300) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 6m59.185014543s ago: executing program 9 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) 6m57.922042187s ago: executing program 9 (id=2556): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x7041, 0x0) 6m56.092567982s ago: executing program 9 (id=2557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) close_range(r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000019200), 0x0, r4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 6m54.860290582s ago: executing program 9 (id=2558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r4 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)) 6m53.172299026s ago: executing program 9 (id=2559): socket(0x10, 0x803, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xffffff7ffffffeb6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x41101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x4, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000340)={0x8, r4}) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) 6m52.088121965s ago: executing program 9 (id=2560): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xb, 0x5}, {0xb, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000105, 0x0, 0x0, 0xfffffe63, 0x3d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r7 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="8750783eac000000280012800b000100697036746e6c000018000280060011004e240000040013"], 0x48}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094) 6m35.051992081s ago: executing program 40 (id=2560): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xb, 0x5}, {0xb, 0xc}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x40000105, 0x0, 0x0, 0xfffffe63, 0x3d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r7 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="8750783eac000000280012800b000100697036746e6c000018000280060011004e240000040013"], 0x48}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094) 29.472100549s ago: executing program 4 (id=2886): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "941f6721e757691d02"}, {0x18, 0x84, 0x0, 'b'}], 0x38}, 0x41) 29.23982157s ago: executing program 7 (id=2887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) 29.098064765s ago: executing program 4 (id=2888): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) 28.121424677s ago: executing program 4 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) accept4(r4, 0x0, 0x0, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 28.121020296s ago: executing program 7 (id=2890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 24.132026876s ago: executing program 4 (id=2891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 24.130734784s ago: executing program 7 (id=2892): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 23.783335318s ago: executing program 7 (id=2893): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDFONTOP_SET(r1, 0x4b6a, &(0x7f0000000000)={0x20, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) 23.730283811s ago: executing program 4 (id=2894): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, 0x0) 23.602992819s ago: executing program 7 (id=2895): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x4008001) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x1000000, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.536157832s ago: executing program 7 (id=2896): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1c, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x26, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket(0x1e, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1006, 0x2, {0x0}, 0x10000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='so\f\x85urc\x10\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000004c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UT\x13i?\xbe\xcd\xe8>}\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8) 18.534975082s ago: executing program 4 (id=2903): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 103.905944ms ago: executing program 41 (id=2903): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 0s ago: executing program 42 (id=2896): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1c, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x26, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) socket(0x1e, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1006, 0x2, {0x0}, 0x10000003}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='so\f\x85urc\x10\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000004c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UT\x13i?\xbe\xcd\xe8>}\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8) kernel console output (not intermixed with test programs): [ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.889626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.418041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.805062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.547254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.240869][ T1460] hsr_slave_0: left promiscuous mode [ 1203.283801][ T1460] hsr_slave_1: left promiscuous mode [ 1203.932217][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.932253][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.125913][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.125944][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.376035][ T1460] veth1_macvtap: left promiscuous mode [ 1204.376178][ T1460] veth0_macvtap: left promiscuous mode [ 1204.376524][ T1460] veth1_vlan: left promiscuous mode [ 1204.376732][ T1460] veth0_vlan: left promiscuous mode [ 1204.721657][T10745] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1207.945989][T14225] vivid-000: disconnect [ 1208.661326][T14219] vivid-000: reconnect [ 1210.832713][T14260] overlayfs: failed to clone upperpath [ 1213.873667][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.874995][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1219.889420][ T37] audit: type=1326 audit(1758501993.516:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889478][ T37] audit: type=1326 audit(1758501993.516:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889519][ T37] audit: type=1326 audit(1758501993.516:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889559][ T37] audit: type=1326 audit(1758501993.516:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889601][ T37] audit: type=1326 audit(1758501993.516:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889642][ T37] audit: type=1326 audit(1758501993.516:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889683][ T37] audit: type=1326 audit(1758501993.516:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889724][ T37] audit: type=1326 audit(1758501993.516:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889764][ T37] audit: type=1326 audit(1758501993.516:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.889807][ T37] audit: type=1326 audit(1758501993.516:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14299 comm="syz.9.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036353ec29 code=0x7ffc0000 [ 1219.891790][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1219.921737][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1219.923463][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1219.926047][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1219.926948][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1221.911126][ T5160] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1221.911386][ T5160] Bluetooth: hci3: Injecting HCI hardware error event [ 1221.920118][T10745] Bluetooth: hci3: hardware error 0x00 [ 1222.433637][ T5160] Bluetooth: hci5: command tx timeout [ 1225.131259][T14330] Bluetooth: hci5: command tx timeout [ 1225.450008][T10745] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1227.334999][T14330] Bluetooth: hci5: command tx timeout [ 1229.565635][T14330] Bluetooth: hci5: command tx timeout [ 1230.169133][T10745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1230.187700][T10745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1230.189399][T10745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1230.191461][T10745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1230.232025][T10745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1230.986154][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1230.986173][ T37] audit: type=1326 audit(1758502004.386:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986221][ T37] audit: type=1326 audit(1758502004.386:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986262][ T37] audit: type=1326 audit(1758502004.386:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986302][ T37] audit: type=1326 audit(1758502004.386:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986342][ T37] audit: type=1326 audit(1758502004.386:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986382][ T37] audit: type=1326 audit(1758502004.386:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986422][ T37] audit: type=1326 audit(1758502004.386:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986462][ T37] audit: type=1326 audit(1758502004.404:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986502][ T37] audit: type=1326 audit(1758502004.423:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1230.986547][ T37] audit: type=1326 audit(1758502004.432:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14352 comm="syz.7.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d5546ec29 code=0x7ffc0000 [ 1232.909620][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1234.335943][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1234.596336][T14330] Bluetooth: hci6: command tx timeout [ 1235.520017][T14380] random: crng reseeded on system resumption [ 1237.110933][T14330] Bluetooth: hci6: command tx timeout [ 1239.143683][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2428'. [ 1239.144112][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2428'. [ 1239.303239][T10745] Bluetooth: hci6: command tx timeout [ 1239.314974][T10745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1239.339995][T10745] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1239.390581][T10745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1239.424368][T10745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1239.427929][T10745] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1241.702420][T10745] Bluetooth: hci7: command tx timeout [ 1241.764021][T10745] Bluetooth: hci6: command tx timeout [ 1244.316027][T10745] Bluetooth: hci7: command tx timeout [ 1246.506504][T14330] Bluetooth: hci7: command tx timeout [ 1248.718791][T14330] Bluetooth: hci7: command tx timeout [ 1252.914547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.012146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.477657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.879342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1253.927843][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.085419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.143849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.255490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.303896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.326703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.363212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.948626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.203426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.270487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.650552][T14302] chnl_net:caif_netlink_parms(): no params data found [ 1255.819000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.643365][T14356] chnl_net:caif_netlink_parms(): no params data found [ 1257.084336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.262603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.996726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.123053][T14395] chnl_net:caif_netlink_parms(): no params data found [ 1259.445530][ T1230] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1259.601679][ T1230] usb 8-1: Using ep0 maxpacket: 32 [ 1259.625946][ T1230] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1259.625973][ T1230] usb 8-1: config 0 has no interface number 0 [ 1259.630799][ T1230] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1259.630891][ T1230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.630911][ T1230] usb 8-1: Product: syz [ 1259.630925][ T1230] usb 8-1: Manufacturer: syz [ 1259.630939][ T1230] usb 8-1: SerialNumber: syz [ 1259.637081][ T1230] usb 8-1: config 0 descriptor?? [ 1259.697657][ T1230] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1259.710655][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.710966][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.711326][T14302] bridge_slave_0: entered allmulticast mode [ 1259.716150][T14302] bridge_slave_0: entered promiscuous mode [ 1260.141013][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.141094][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.141368][T14302] bridge_slave_1: entered allmulticast mode [ 1260.143555][T14302] bridge_slave_1: entered promiscuous mode [ 1260.269661][T14515] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1260.270526][T14515] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1260.270566][T14515] netlink: 640 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1261.599448][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.599870][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.600309][T14356] bridge_slave_0: entered allmulticast mode [ 1261.605075][T14356] bridge_slave_0: entered promiscuous mode [ 1262.093980][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.094060][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.094231][T14356] bridge_slave_1: entered allmulticast mode [ 1262.097955][T14356] bridge_slave_1: entered promiscuous mode [ 1262.187668][T14302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.404582][ T1230] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1262.404862][ T1230] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1262.416366][ T1230] usb 8-1: USB disconnect, device number 3 [ 1262.898954][T14302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.478137][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.478798][T14395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.479006][T14395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.479203][T14395] bridge_slave_0: entered allmulticast mode [ 1263.483676][T14395] bridge_slave_0: entered promiscuous mode [ 1267.659934][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.660811][T14395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.660969][T14395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.661172][T14395] bridge_slave_1: entered allmulticast mode [ 1267.675123][T14395] bridge_slave_1: entered promiscuous mode [ 1267.678127][T14302] team0: Port device team_slave_0 added [ 1268.594952][T14302] team0: Port device team_slave_1 added [ 1270.291433][T14356] team0: Port device team_slave_0 added [ 1270.346062][T14395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.760375][T14356] team0: Port device team_slave_1 added [ 1270.765822][T14395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.778773][T14302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.778788][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.778814][T14302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.435173][T14302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.435191][T14302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.435217][T14302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.357759][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.357776][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.357801][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.404956][T14395] team0: Port device team_slave_0 added [ 1277.430574][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.430591][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.430617][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.958638][T14591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1277.958703][T14591] IPv6: NLM_F_CREATE should be set when creating new route [ 1278.921894][T14395] team0: Port device team_slave_1 added [ 1280.342142][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1280.342218][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1280.670408][T10745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1280.699827][T10745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1280.720298][T10745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1280.723511][T10745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1280.725063][T10745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1280.867608][T14395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.867623][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.867649][T14395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.149559][T14395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.149574][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.149599][T14395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.149407][T10745] Bluetooth: hci1: command tx timeout [ 1283.441951][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1284.471663][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.471697][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.471720][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1284.471762][ T9] usb 10-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1284.471785][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.477402][ T9] usb 10-1: config 0 descriptor?? [ 1284.767752][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 1284.767884][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1284.771956][ T9] usb 10-1: USB disconnect, device number 6 [ 1284.840569][T14356] hsr_slave_0: entered promiscuous mode [ 1285.151603][T14356] hsr_slave_1: entered promiscuous mode [ 1285.153846][T14356] debugfs: 'hsr0' already exists in 'hsr' [ 1285.153871][T14356] Cannot create hsr debugfs directory [ 1285.939191][T10745] Bluetooth: hci1: command tx timeout [ 1288.135011][T10745] Bluetooth: hci1: command tx timeout [ 1288.261466][T14395] hsr_slave_0: entered promiscuous mode [ 1288.265802][T14395] hsr_slave_1: entered promiscuous mode [ 1288.268170][T14395] debugfs: 'hsr0' already exists in 'hsr' [ 1288.268201][T14395] Cannot create hsr debugfs directory [ 1288.796946][ T1460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.721661][ T1460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.496072][T10745] Bluetooth: hci1: command tx timeout [ 1292.789935][ T1460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.161559][T14330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.192747][T14330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.195464][T14330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1293.197156][T14330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1293.197864][T14330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1295.690224][ T1460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.345449][T14330] Bluetooth: hci2: command tx timeout [ 1296.725541][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.206987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1297.427817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.569398][T14330] Bluetooth: hci2: command tx timeout [ 1299.081196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.053522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.607664][T10745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1300.629819][T10745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1300.654555][T10745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1300.659051][T10745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1300.659948][T10745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1300.792827][T14330] Bluetooth: hci2: command tx timeout [ 1301.304694][ T1460] bridge_slave_1: left allmulticast mode [ 1301.304726][ T1460] bridge_slave_1: left promiscuous mode [ 1301.331994][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.371870][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.479438][ T1460] bridge_slave_0: left allmulticast mode [ 1301.479471][ T1460] bridge_slave_0: left promiscuous mode [ 1301.479789][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.696859][ T1460] bridge_slave_1: left allmulticast mode [ 1301.696892][ T1460] bridge_slave_1: left promiscuous mode [ 1301.697186][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.603701][T14704] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1302.868607][ T1460] bridge_slave_0: left allmulticast mode [ 1302.868639][ T1460] bridge_slave_0: left promiscuous mode [ 1302.868895][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.931262][T14330] Bluetooth: hci4: command tx timeout [ 1303.016451][T14330] Bluetooth: hci2: command tx timeout [ 1305.154862][T14330] Bluetooth: hci4: command tx timeout [ 1307.378227][T14330] Bluetooth: hci4: command tx timeout [ 1308.118976][ C0] vkms_vblank_simulate: vblank timer overrun [ 1308.223354][T14721] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1309.315866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.602213][T14330] Bluetooth: hci4: command tx timeout [ 1321.098045][ T1460] bond0 (unregistering): Released all slaves [ 1321.715121][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.825377][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.959968][ T1460] bond0 (unregistering): Released all slaves [ 1323.067137][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 1323.067172][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 1323.067244][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 1323.067268][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1323.067292][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1323.067317][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1323.067341][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1323.067366][T13308] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1323.212789][T13308] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 1325.559531][T14799] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1325.559694][T14799] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1330.558072][T14818] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2519'. [ 1335.249681][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.313413][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.371934][ T1460] bond0 (unregistering): Released all slaves [ 1335.639348][T14600] chnl_net:caif_netlink_parms(): no params data found [ 1340.987884][T14878] (syz.9.2530,14878,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1345.184533][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1345.184579][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1345.354063][T14895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.071168][T10745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1347.143839][T10745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1347.174682][T10745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1347.232874][T10745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1347.236815][T10745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1348.198807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.343358][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.605883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.694351][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.718523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.777675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.879071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1348.957322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.494741][T14330] Bluetooth: hci5: command tx timeout [ 1350.705001][T14941] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1350.718557][T14941] block device autoloading is deprecated and will be removed. [ 1351.483304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.732785][T14330] Bluetooth: hci5: command tx timeout [ 1351.871272][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.344172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.835219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.944613][T14659] chnl_net:caif_netlink_parms(): no params data found [ 1353.481926][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2544'. [ 1353.926828][T14330] Bluetooth: hci5: command tx timeout [ 1353.997842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.278278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.342398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.491756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.415935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.130821][T14330] Bluetooth: hci5: command tx timeout [ 1356.150622][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.722955][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.962091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.994697][T10745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1357.012295][T10745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1357.031619][T10745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1357.040286][T10745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1357.058574][T10745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1357.489278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.312770][T10745] Bluetooth: hci1: command tx timeout [ 1360.241243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.496136][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.320895][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.427446][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.689465][T10745] Bluetooth: hci1: command tx timeout [ 1361.866820][ T1460] hsr_slave_0: left promiscuous mode [ 1361.900401][ T1460] hsr_slave_1: left promiscuous mode [ 1361.901622][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1361.901651][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.688565][ C1] vkms_vblank_simulate: vblank timer overrun [ 1362.742474][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1362.742499][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.083252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.227064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.690682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.119095][T10745] Bluetooth: hci1: command tx timeout [ 1364.349035][ T1460] veth1_macvtap: left promiscuous mode [ 1364.349162][ T1460] veth0_macvtap: left promiscuous mode [ 1364.349475][ T1460] veth1_vlan: left promiscuous mode [ 1364.349670][ T1460] veth0_vlan: left promiscuous mode [ 1364.566722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1364.961426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.106811][T15024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1365.152274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.693070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1365.836652][T14330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1365.868321][T14330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1365.871062][T14330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1365.891957][T14330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1365.893601][T14330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1366.194585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.304729][T10745] Bluetooth: hci1: command tx timeout [ 1366.414457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1366.997763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1367.442089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1368.190811][T10745] Bluetooth: hci2: command tx timeout [ 1368.944436][T15037] (syz.9.2560,15037,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1369.005394][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2560'. [ 1370.589564][T10745] Bluetooth: hci2: command tx timeout [ 1372.804761][T10745] Bluetooth: hci2: command tx timeout [ 1375.031448][T10745] Bluetooth: hci2: command tx timeout [ 1383.457818][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2572'. [ 1388.429831][T14330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1388.449166][T14330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1388.451330][T14330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1388.452646][T14330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1388.453494][T14330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1388.830605][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1389.205099][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.267600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.303379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.383529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.580873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.841053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.098059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.213230][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1390.727107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.749411][T10745] Bluetooth: hci6: command tx timeout [ 1391.115341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.226338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.350980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.414269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.530224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.228671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.489072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.625564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.855350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1392.913893][T14330] Bluetooth: hci6: command tx timeout [ 1393.430293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.531937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.008987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.319015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.871004][T15126] block device autoloading is deprecated and will be removed. [ 1395.127317][T14330] Bluetooth: hci6: command tx timeout [ 1397.362145][T14330] Bluetooth: hci6: command tx timeout [ 1398.397952][T13865] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1398.558344][T13865] usb 8-1: Using ep0 maxpacket: 8 [ 1398.560562][T13865] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1398.560587][T13865] usb 8-1: config 179 has no interface number 0 [ 1398.560630][T13865] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1398.560656][T13865] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1398.560681][T13865] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.560713][T13865] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1398.560738][T13865] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1398.560776][T13865] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1398.560797][T13865] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.569738][T15138] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1399.351530][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1399.581837][ T1823] usb 8-1: USB disconnect, device number 4 [ 1399.582041][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1399.582113][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1400.846717][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1405.924852][ T1460] lo (unregistering): left allmulticast mode [ 1410.116337][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2593'. [ 1410.870182][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1410.870257][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1411.425854][T10745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1411.444639][T10745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1412.043210][T10745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1412.136057][T10745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1412.136940][T10745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1414.415934][T10745] Bluetooth: hci3: command tx timeout [ 1416.032981][T15023] chnl_net:caif_netlink_parms(): no params data found [ 1416.191181][T14983] chnl_net:caif_netlink_parms(): no params data found [ 1416.593443][T10745] Bluetooth: hci3: command tx timeout [ 1416.742625][T15099] chnl_net:caif_netlink_parms(): no params data found [ 1416.899397][T15205] fuse: Unknown parameter 'group_id00000000000000000000' [ 1418.817130][T10745] Bluetooth: hci3: command tx timeout [ 1420.283504][T14983] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1420.324457][T15023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.324615][T15023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.324938][T15023] bridge_slave_0: entered allmulticast mode [ 1420.335279][T15023] bridge_slave_0: entered promiscuous mode [ 1420.444065][T15023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.444299][T15023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.467053][T15023] bridge_slave_1: entered allmulticast mode [ 1420.468790][T15023] bridge_slave_1: entered promiscuous mode [ 1421.040562][T10745] Bluetooth: hci3: command tx timeout [ 1423.010353][T14330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1423.015992][T14330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1423.018082][T14330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1423.045794][T14330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1423.046618][T14330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1423.111078][T15023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.531423][T14330] Bluetooth: hci1: command tx timeout [ 1425.577926][T15176] chnl_net:caif_netlink_parms(): no params data found [ 1425.631157][T15023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.634307][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.634475][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.634731][T15099] bridge_slave_0: entered allmulticast mode [ 1425.691398][T15099] bridge_slave_0: entered promiscuous mode [ 1425.959805][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.960029][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.960652][T15099] bridge_slave_1: entered allmulticast mode [ 1425.963524][T15099] bridge_slave_1: entered promiscuous mode [ 1426.814802][ T1460] IPVS: stop unused estimator thread 0... [ 1427.138277][T15255] binder: 15252:15255 ioctl c00c620f 200000000200 returned -22 [ 1427.443041][T15023] team0: Port device team_slave_0 added [ 1427.692064][T15023] team0: Port device team_slave_1 added [ 1427.754406][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.797595][T14330] Bluetooth: hci1: command tx timeout [ 1428.068054][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.428475][T15023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.428492][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.428517][T15023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.696922][T15023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.696934][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1428.696948][T15023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.838262][T15099] team0: Port device team_slave_0 added [ 1428.838923][T15176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.839105][T15176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.839305][T15176] bridge_slave_0: entered allmulticast mode [ 1428.841092][T15176] bridge_slave_0: entered promiscuous mode [ 1428.943621][T15099] team0: Port device team_slave_1 added [ 1428.944325][T15176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.944484][T15176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.944704][T15176] bridge_slave_1: entered allmulticast mode [ 1428.947415][T15176] bridge_slave_1: entered promiscuous mode [ 1429.947754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.985602][T10745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1429.999913][T10745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1430.006220][T10745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1430.025187][T10745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1430.031481][T10745] Bluetooth: hci1: command tx timeout [ 1430.039229][T10745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1430.646279][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.646296][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.646318][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.801447][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.801464][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.801489][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.827461][T15176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.062849][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.409276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.789321][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.249071][T10745] Bluetooth: hci1: command tx timeout [ 1432.337446][T10745] Bluetooth: hci4: command tx timeout [ 1432.760046][T15176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.091639][T15283] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1434.091698][T15283] CIFS mount error: No usable UNC path provided in device string! [ 1434.091698][T15283] [ 1434.092017][T15283] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1434.641082][T10745] Bluetooth: hci4: command tx timeout [ 1435.147854][T15286] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1435.374350][T15176] team0: Port device team_slave_0 added [ 1435.994836][T15286] orangefs_mount: mount request failed with -4 [ 1436.863300][T10745] Bluetooth: hci4: command tx timeout [ 1437.053757][ T1460] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.344336][T15176] team0: Port device team_slave_1 added [ 1437.391677][T15099] hsr_slave_0: entered promiscuous mode [ 1437.393122][T15099] hsr_slave_1: entered promiscuous mode [ 1437.394292][T15099] debugfs: 'hsr0' already exists in 'hsr' [ 1437.394317][T15099] Cannot create hsr debugfs directory [ 1439.037846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.086473][T10745] Bluetooth: hci4: command tx timeout [ 1439.169090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.977166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.182534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.228862][ T1460] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.531464][T15176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.531481][T15176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.531507][T15176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.493091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.661123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.984575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.987501][T15176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.987515][T15176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.987540][T15176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.574675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.060719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.399996][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.462419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.477202][ T1460] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.574970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.746657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.997766][ T1460] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.386792][T15176] hsr_slave_0: entered promiscuous mode [ 1447.387699][T15176] hsr_slave_1: entered promiscuous mode [ 1447.388213][T15176] debugfs: 'hsr0' already exists in 'hsr' [ 1447.388228][T15176] Cannot create hsr debugfs directory [ 1447.442668][T15237] chnl_net:caif_netlink_parms(): no params data found [ 1450.655841][T14330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1450.679414][T14330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1450.702418][T14330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1450.705185][T14330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1450.706289][T14330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1452.529752][T15099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.760560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.972198][T14330] Bluetooth: hci2: command tx timeout [ 1453.012141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.173997][T15360] random: crng reseeded on system resumption [ 1453.813490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.023801][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.093639][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.093866][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.094125][T15237] bridge_slave_0: entered allmulticast mode [ 1454.119309][T15237] bridge_slave_0: entered promiscuous mode [ 1454.281891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.338128][T15099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.404426][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.404799][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.405037][T15237] bridge_slave_1: entered allmulticast mode [ 1454.410919][T15237] bridge_slave_1: entered promiscuous mode [ 1454.569097][ T1460] bridge_slave_1: left allmulticast mode [ 1454.569130][ T1460] bridge_slave_1: left promiscuous mode [ 1454.569397][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.632315][ T1460] bridge_slave_0: left allmulticast mode [ 1454.632348][ T1460] bridge_slave_0: left promiscuous mode [ 1454.632641][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.717623][ T1460] bridge_slave_1: left allmulticast mode [ 1454.717656][ T1460] bridge_slave_1: left promiscuous mode [ 1454.717922][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.771018][ T1460] bridge_slave_0: left allmulticast mode [ 1454.771053][ T1460] bridge_slave_0: left promiscuous mode [ 1454.771323][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.880966][ T1460] bridge_slave_1: left allmulticast mode [ 1454.881001][ T1460] bridge_slave_1: left promiscuous mode [ 1454.881256][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.952672][ T1460] bridge_slave_0: left allmulticast mode [ 1454.952706][ T1460] bridge_slave_0: left promiscuous mode [ 1454.952971][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.019914][ T1460] bridge_slave_1: left allmulticast mode [ 1455.019947][ T1460] bridge_slave_1: left promiscuous mode [ 1455.021118][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.081305][ T1460] bridge_slave_0: left allmulticast mode [ 1455.081339][ T1460] bridge_slave_0: left promiscuous mode [ 1455.081594][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.174360][T14330] Bluetooth: hci2: command tx timeout [ 1455.638019][ T1460] bond0 (unregistering): Released all slaves [ 1455.837113][ T1460] bond0 (unregistering): Released all slaves [ 1455.976157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.157874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.241506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.874487][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.949892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.147228][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.213662][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.399728][T14330] Bluetooth: hci2: command tx timeout [ 1457.636825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.770043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.830927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1457.904227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.288024][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.351631][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.409513][ T1460] bond0 (unregistering): Released all slaves [ 1458.605069][ T1460] bond0 (unregistering): Released all slaves [ 1458.812794][ T1460] bond0 (unregistering): Released all slaves [ 1458.990461][ T1460] bond0 (unregistering): Released all slaves [ 1459.324671][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.474478][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.553381][ T1460] bond0 (unregistering): Released all slaves [ 1459.612321][T14330] Bluetooth: hci2: command tx timeout [ 1459.827038][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.912388][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.992902][ T1460] bond0 (unregistering): Released all slaves [ 1460.318628][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.436254][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.503844][ T1460] bond0 (unregistering): Released all slaves [ 1461.053292][T15099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.169567][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.184744][T15264] chnl_net:caif_netlink_parms(): no params data found [ 1461.201650][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.870148][T15099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.013913][T15237] team0: Port device team_slave_0 added [ 1462.194158][T15237] team0: Port device team_slave_1 added [ 1463.334744][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.334761][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.334782][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1463.726199][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1463.726212][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.726233][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.482002][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.485072][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.485360][T15264] bridge_slave_0: entered allmulticast mode [ 1464.508862][T15264] bridge_slave_0: entered promiscuous mode [ 1464.638673][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.654823][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.655114][T15264] bridge_slave_1: entered allmulticast mode [ 1464.657731][T15264] bridge_slave_1: entered promiscuous mode [ 1465.135139][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1465.156460][T15237] hsr_slave_0: entered promiscuous mode [ 1465.158002][T15237] hsr_slave_1: entered promiscuous mode [ 1465.158975][T15237] debugfs: 'hsr0' already exists in 'hsr' [ 1465.158999][T15237] Cannot create hsr debugfs directory [ 1465.174246][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.497756][T15264] team0: Port device team_slave_0 added [ 1465.659147][T15264] team0: Port device team_slave_1 added [ 1466.188914][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.188924][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.188939][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.232724][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.232740][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.232765][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.282663][T15350] chnl_net:caif_netlink_parms(): no params data found [ 1466.539830][ T1460] hsr_slave_0: left promiscuous mode [ 1466.561178][ T1460] hsr_slave_1: left promiscuous mode [ 1466.562135][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.562162][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.617939][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1466.617972][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.774952][ T1460] hsr_slave_0: left promiscuous mode [ 1466.796605][ T1460] hsr_slave_1: left promiscuous mode [ 1466.797630][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.862120][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.946374][ T1460] hsr_slave_0: left promiscuous mode [ 1466.988940][ T1460] hsr_slave_1: left promiscuous mode [ 1466.991345][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.013163][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.054592][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.074975][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.232446][ T1460] veth1_macvtap: left promiscuous mode [ 1467.232574][ T1460] veth0_macvtap: left promiscuous mode [ 1467.232868][ T1460] veth1_vlan: left promiscuous mode [ 1467.233076][ T1460] veth0_vlan: left promiscuous mode [ 1470.838168][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1471.223340][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1474.916614][T10745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1474.983655][T10745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1474.992713][T10745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1474.995065][T10745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.016811][T10745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1476.245591][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1476.472558][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1476.553747][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1476.553825][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1477.231058][T10745] Bluetooth: hci5: command tx timeout [ 1478.075948][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1478.268361][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1479.284439][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1479.456376][T10745] Bluetooth: hci5: command tx timeout [ 1479.477390][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1480.892672][T15264] hsr_slave_0: entered promiscuous mode [ 1480.893913][T15264] hsr_slave_1: entered promiscuous mode [ 1480.894722][T15264] debugfs: 'hsr0' already exists in 'hsr' [ 1480.894744][T15264] Cannot create hsr debugfs directory [ 1481.441957][T15350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.442109][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.446297][T15350] bridge_slave_0: entered allmulticast mode [ 1481.449590][T15350] bridge_slave_0: entered promiscuous mode [ 1481.678876][T10745] Bluetooth: hci5: command tx timeout [ 1481.744150][T15350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.744346][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.744608][T15350] bridge_slave_1: entered allmulticast mode [ 1481.746981][T15350] bridge_slave_1: entered promiscuous mode [ 1482.451739][T15350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1482.519615][T15350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.104241][T15350] team0: Port device team_slave_0 added [ 1483.246221][T15350] team0: Port device team_slave_1 added [ 1483.712927][T15350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.712945][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.712971][T15350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.787799][T15350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.787816][T15350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1483.787841][T15350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.901892][T10745] Bluetooth: hci5: command tx timeout [ 1484.235053][T15350] hsr_slave_0: entered promiscuous mode [ 1484.236563][T15350] hsr_slave_1: entered promiscuous mode [ 1484.237517][T15350] debugfs: 'hsr0' already exists in 'hsr' [ 1484.237540][T15350] Cannot create hsr debugfs directory [ 1484.740044][T15237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1484.828302][T15237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1485.097028][T15374] chnl_net:caif_netlink_parms(): no params data found [ 1485.119069][T15237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1485.946896][T14330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1485.966865][T14330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1485.978605][T14330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1485.992874][T14330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1485.997798][T14330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1486.809562][T15374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.809839][T15374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.810063][T15374] bridge_slave_0: entered allmulticast mode [ 1486.815268][T15374] bridge_slave_0: entered promiscuous mode [ 1486.855362][T15374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.855579][T15374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.855838][T15374] bridge_slave_1: entered allmulticast mode [ 1486.858726][T15374] bridge_slave_1: entered promiscuous mode [ 1487.179494][T15374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.208201][T15374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.658965][T15374] team0: Port device team_slave_0 added [ 1487.769255][T15374] team0: Port device team_slave_1 added [ 1488.043915][T15374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.043931][T15374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.043956][T15374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.096919][T15374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.096936][T15374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.096961][T15374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.105625][T15350] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1488.177571][T14330] Bluetooth: hci1: command tx timeout [ 1488.209825][T15350] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1488.299339][T15350] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1488.425367][T15350] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1488.783612][T15374] hsr_slave_0: entered promiscuous mode [ 1488.785607][T15374] hsr_slave_1: entered promiscuous mode [ 1488.786660][T15374] debugfs: 'hsr0' already exists in 'hsr' [ 1488.786685][T15374] Cannot create hsr debugfs directory [ 1489.160474][T15264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1489.257578][T15264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1489.279488][ T1460] IPVS: stop unused estimator thread 0... [ 1489.423516][T15264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1489.495707][T15264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1489.570590][T15384] chnl_net:caif_netlink_parms(): no params data found [ 1490.253919][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.254143][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.254415][T15384] bridge_slave_0: entered allmulticast mode [ 1490.257364][T15384] bridge_slave_0: entered promiscuous mode [ 1490.412367][T14330] Bluetooth: hci1: command tx timeout [ 1490.414053][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.414193][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.414459][T15384] bridge_slave_1: entered allmulticast mode [ 1490.417235][T15384] bridge_slave_1: entered promiscuous mode [ 1491.133916][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.284385][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.806561][T15384] team0: Port device team_slave_0 added [ 1491.890317][T15384] team0: Port device team_slave_1 added [ 1492.291829][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.291842][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.291856][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.575800][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.575818][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.575844][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.636178][T14330] Bluetooth: hci1: command tx timeout [ 1492.986805][T15384] hsr_slave_0: entered promiscuous mode [ 1492.988580][T15384] hsr_slave_1: entered promiscuous mode [ 1492.991153][T15384] debugfs: 'hsr0' already exists in 'hsr' [ 1492.991176][T15384] Cannot create hsr debugfs directory [ 1493.099558][T15350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.367025][T15374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1493.424939][T15374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1493.471501][T15374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1493.591788][T15374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1493.772575][ T1460] bridge_slave_1: left allmulticast mode [ 1493.772608][ T1460] bridge_slave_1: left promiscuous mode [ 1493.772872][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.869578][ T1460] bridge_slave_0: left allmulticast mode [ 1493.869610][ T1460] bridge_slave_0: left promiscuous mode [ 1493.871353][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.955492][ T1460] bridge_slave_1: left allmulticast mode [ 1493.955525][ T1460] bridge_slave_1: left promiscuous mode [ 1493.955764][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.101892][ T1460] bridge_slave_0: left allmulticast mode [ 1494.101924][ T1460] bridge_slave_0: left promiscuous mode [ 1494.102179][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.262521][ T1460] bridge_slave_1: left allmulticast mode [ 1494.262556][ T1460] bridge_slave_1: left promiscuous mode [ 1494.262814][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.264890][T10745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1494.318850][T10745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1494.328423][T10745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1494.336682][T10745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1494.340991][T10745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1494.366700][ T1460] bridge_slave_0: left allmulticast mode [ 1494.366733][ T1460] bridge_slave_0: left promiscuous mode [ 1494.366962][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.468406][ T1460] bridge_slave_1: left allmulticast mode [ 1494.468439][ T1460] bridge_slave_1: left promiscuous mode [ 1494.468696][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.542350][ T1460] bridge_slave_0: left allmulticast mode [ 1494.542385][ T1460] bridge_slave_0: left promiscuous mode [ 1494.542642][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.852954][T10745] Bluetooth: hci1: command tx timeout [ 1494.946953][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.033131][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.105289][ T1460] bond0 (unregistering): Released all slaves [ 1495.405072][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.490944][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.558222][ T1460] bond0 (unregistering): Released all slaves [ 1495.883994][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.981911][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.043674][ T1460] bond0 (unregistering): Released all slaves [ 1496.292645][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.437822][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.520873][ T1460] bond0 (unregistering): Released all slaves [ 1496.560733][T10745] Bluetooth: hci3: command tx timeout [ 1497.038415][T15350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.241103][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.241341][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.304842][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.304997][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.051506][ T1460] hsr_slave_0: left promiscuous mode [ 1498.087973][ T1460] hsr_slave_1: left promiscuous mode [ 1498.088950][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.120545][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.333753][ T1460] hsr_slave_0: left promiscuous mode [ 1498.355938][ T1460] hsr_slave_1: left promiscuous mode [ 1498.357027][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.400017][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.558301][ T1460] hsr_slave_0: left promiscuous mode [ 1498.600984][ T1460] hsr_slave_1: left promiscuous mode [ 1498.601656][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.626360][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.666270][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.687450][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.782814][T10745] Bluetooth: hci3: command tx timeout [ 1499.617562][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1499.841843][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1501.006359][T10745] Bluetooth: hci3: command tx timeout [ 1501.439850][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1501.573724][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1503.081156][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1503.230038][T14330] Bluetooth: hci3: command tx timeout [ 1503.274411][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1504.278351][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1504.471177][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1505.678386][T15409] chnl_net:caif_netlink_parms(): no params data found [ 1506.156131][T15374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.660615][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.660827][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.661073][T15409] bridge_slave_0: entered allmulticast mode [ 1506.685381][T15409] bridge_slave_0: entered promiscuous mode [ 1506.691147][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.691268][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.691481][T15409] bridge_slave_1: entered allmulticast mode [ 1506.719660][T15409] bridge_slave_1: entered promiscuous mode [ 1507.044693][T15384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1507.073187][T15409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.077157][T15374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.079203][T15384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1507.113284][T15409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.114777][T15384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1507.338714][T15384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1507.387106][T15350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.662315][T15409] team0: Port device team_slave_0 added [ 1507.664470][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.664605][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.700634][T15409] team0: Port device team_slave_1 added [ 1508.054739][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.054963][T12947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.061038][T15409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.061049][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.061063][T15409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.095296][T15409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.095313][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.095338][T15409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.410043][T15409] hsr_slave_0: entered promiscuous mode [ 1508.413225][T15409] hsr_slave_1: entered promiscuous mode [ 1508.414231][T15409] debugfs: 'hsr0' already exists in 'hsr' [ 1508.414255][T15409] Cannot create hsr debugfs directory [ 1509.022358][T15350] veth0_vlan: entered promiscuous mode [ 1509.240543][T15350] veth1_vlan: entered promiscuous mode [ 1509.875845][T15374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.120143][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.121043][T15350] veth0_macvtap: entered promiscuous mode [ 1510.171268][T15350] veth1_macvtap: entered promiscuous mode [ 1510.277343][T15384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.655807][T15350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.658121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.658339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.699386][T15350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.715310][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.715474][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.987838][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.989496][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.991043][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.019559][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.275316][T15374] veth0_vlan: entered promiscuous mode [ 1511.422691][ T1460] bridge_slave_1: left allmulticast mode [ 1511.422719][ T1460] bridge_slave_1: left promiscuous mode [ 1511.422942][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.509519][ T1460] bridge_slave_0: left allmulticast mode [ 1511.509551][ T1460] bridge_slave_0: left promiscuous mode [ 1511.509940][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.531968][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.628120][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.699629][ T1460] bond0 (unregistering): Released all slaves [ 1512.884467][T15374] veth1_vlan: entered promiscuous mode [ 1512.975633][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.975654][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.305431][ T1460] hsr_slave_0: left promiscuous mode [ 1513.321873][ T1460] hsr_slave_1: left promiscuous mode [ 1513.322557][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.365771][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.162206][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1514.372128][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1515.002722][T10745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1515.070387][T10745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1515.078835][T10745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1515.081497][T10745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1515.083693][T10745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1515.525095][T15409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1515.584029][T15409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1515.645972][T15409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1515.702851][T15409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1516.022000][T15374] veth0_macvtap: entered promiscuous mode [ 1516.069619][T15374] veth1_macvtap: entered promiscuous mode [ 1516.089796][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1516.616680][T15374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.760032][T15374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.918127][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.936021][ T1495] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.940976][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.027437][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.125781][T15446] chnl_net:caif_netlink_parms(): no params data found [ 1517.342267][T14330] Bluetooth: hci4: command tx timeout [ 1518.382138][ T1460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.483384][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.485166][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.487454][T15446] bridge_slave_0: entered allmulticast mode [ 1518.490217][T15446] bridge_slave_0: entered promiscuous mode [ 1518.521985][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.522132][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.522387][T15446] bridge_slave_1: entered allmulticast mode [ 1518.525155][T15446] bridge_slave_1: entered promiscuous mode [ 1518.619736][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.619757][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.879732][ T1460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.930823][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.957350][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.072067][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.392745][ T1460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.442505][T15446] team0: Port device team_slave_0 added [ 1519.471025][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.471046][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.474755][T15446] team0: Port device team_slave_1 added [ 1519.475840][T15384] veth0_vlan: entered promiscuous mode [ 1519.567180][T14330] Bluetooth: hci4: command tx timeout [ 1521.561904][ T1460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.330618][T14330] Bluetooth: hci4: command tx timeout [ 1522.509623][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.509639][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.509665][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.605272][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.605288][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.605312][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.906018][T15384] veth1_vlan: entered promiscuous mode [ 1522.925057][T15409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.245055][T14330] Bluetooth: hci4: command tx timeout [ 1531.082018][T15446] hsr_slave_0: entered promiscuous mode [ 1531.114191][T15446] hsr_slave_1: entered promiscuous mode [ 1531.135855][T15446] debugfs: 'hsr0' already exists in 'hsr' [ 1531.135890][T15446] Cannot create hsr debugfs directory [ 1531.172625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.172782][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.027175][T15508] ubi31: attaching mtd0 [ 1535.313598][T15519] syz.7.2637 (15519) used greatest stack depth: 16304 bytes left [ 1537.725637][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.725788][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.207558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.263540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.332465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.360033][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.686961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.785356][T15384] veth0_macvtap: entered promiscuous mode [ 1542.005101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.291858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.463658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.565516][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1542.565591][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1542.726047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.109144][ T1460] bridge_slave_1: left allmulticast mode [ 1543.109176][ T1460] bridge_slave_1: left promiscuous mode [ 1543.109435][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.985279][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.198067][ T1460] bridge_slave_0: left allmulticast mode [ 1544.198099][ T1460] bridge_slave_0: left promiscuous mode [ 1544.198383][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.957152][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1552.957193][ T37] audit: type=1107 audit(1758502305.959:76): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='¯' [ 1554.054693][ T37] audit: type=1326 audit(1758502307.034:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15585 comm="syz.4.2652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa72d3ec29 code=0x0 [ 1555.484914][T14330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1555.490358][T15598] slcan: can't register candev [ 1555.491047][T15598] Falling back ldisc for ptm0. [ 1555.528158][T14330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1555.539172][T14330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1555.541507][T14330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1555.543253][T14330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1558.565083][T14330] Bluetooth: hci2: command tx timeout [ 1560.798978][T10745] Bluetooth: hci2: command tx timeout [ 1560.906696][ T5926] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1561.582888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1561.954021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.076839][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.131188][T14330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1562.153460][ T5926] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1562.153488][ T5926] usb 5-1: config 0 has no interface number 0 [ 1562.153534][ T5926] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1562.156077][ T5926] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1562.156104][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.156124][ T5926] usb 5-1: Product: syz [ 1562.156138][ T5926] usb 5-1: Manufacturer: syz [ 1562.156153][ T5926] usb 5-1: SerialNumber: syz [ 1562.163740][ T5926] usb 5-1: config 0 descriptor?? [ 1562.290405][T14330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1562.293897][T14330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1562.336570][T14330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1562.354139][T14330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1562.441038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.449355][ T5926] yurex 5-1:0.50: Could not find endpoints [ 1562.525321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.165032][T10745] Bluetooth: hci2: command tx timeout [ 1563.337966][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.408787][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.549342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1563.584188][ T1823] usb 5-1: USB disconnect, device number 21 [ 1563.914515][ T37] audit: type=1326 audit(1758502316.257:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15639 comm="syz.7.2662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d5546ec29 code=0x0 [ 1564.017646][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.071542][ T1460] bond0 (unregistering): Released all slaves [ 1564.273020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.653321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.192621][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.334933][ T59] Bluetooth: hci2: command tx timeout [ 1565.335019][T14330] Bluetooth: hci6: command tx timeout [ 1565.468067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1565.572594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.499950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.543249][T15652] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1566.643992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1567.524415][ T37] audit: type=1400 audit(1758502319.569:79): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=15657 comm="syz.7.2666" name="/" dev="mqueue" ino=48224 [ 1567.524472][ T37] audit: type=1400 audit(1758502319.578:80): lsm=SMACK fn=smack_task_setioprio action=denied subject="w" object="_" requested=w pid=15657 comm="syz.7.2666" opid=13068 ocomm="syz-executor" [ 1567.562919][T14330] Bluetooth: hci6: command tx timeout [ 1571.895603][T14330] Bluetooth: hci6: command tx timeout [ 1571.966328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.355481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1572.978306][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.010126][T15667] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1573.046232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.522928][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.969932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.335216][T15675] binder_alloc: 15669: binder_alloc_buf, no vma [ 1574.450493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.597523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.386002][ T59] Bluetooth: hci6: command tx timeout [ 1575.508162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.716845][ T1823] IPVS: starting estimator thread 0... [ 1575.782835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.819230][T15679] IPVS: using max 8 ests per chain, 19200 per kthread [ 1575.859538][T15683] Bluetooth: MGMT ver 1.23 [ 1575.971643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.119304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.310258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.767164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.018144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.064115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.267075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.293516][T14330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1583.231556][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2678'. [ 1583.254902][T14330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1583.267392][T14330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1583.279418][T14330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1583.320967][T14330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1588.174085][ T59] Bluetooth: hci1: command tx timeout [ 1590.403407][T14330] Bluetooth: hci1: command tx timeout [ 1593.148642][T14330] Bluetooth: hci1: command tx timeout [ 1595.340333][ T59] Bluetooth: hci1: command tx timeout [ 1597.979820][ T1460] hsr_slave_0: left promiscuous mode [ 1598.364061][ T1460] hsr_slave_1: left promiscuous mode [ 1598.365021][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.365067][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.436044][ T1460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1598.436087][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1598.464693][T15786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.171214][ T1460] veth1_macvtap: left promiscuous mode [ 1599.171333][ T1460] veth0_macvtap: left promiscuous mode [ 1599.171660][ T1460] veth1_vlan: left promiscuous mode [ 1599.171873][ T1460] veth0_vlan: left promiscuous mode [ 1609.601412][T10745] Bluetooth: hci1: command 0x0405 tx timeout [ 1609.653396][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.653539][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.816129][T10745] Bluetooth: hci5: command 0x0406 tx timeout [ 1613.257903][ T37] audit: type=1804 audit(1758502362.403:81): pid=15845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.2706" name="file0" dev="ramfs" ino=63220 res=1 errno=0 [ 1618.861648][T15864] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1619.088842][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1619.130163][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1619.133917][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1619.136735][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1619.153747][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1619.358440][T15877] usb usb8: usbfs: process 15877 (syz.4.2712) did not claim interface 0 before use [ 1620.997844][T14330] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1621.775392][T14330] Bluetooth: hci7: command tx timeout [ 1624.578986][T14330] Bluetooth: hci7: command tx timeout [ 1625.135807][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1626.737216][T14330] Bluetooth: hci7: command tx timeout [ 1626.780064][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1626.809047][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1626.810822][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1626.847122][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1626.864460][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1626.924920][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1631.194367][ T59] Bluetooth: hci3: command tx timeout [ 1631.196314][T14330] Bluetooth: hci7: command tx timeout [ 1633.398966][T14330] Bluetooth: hci3: command tx timeout [ 1635.731849][T14330] Bluetooth: hci3: command tx timeout [ 1639.184887][T14330] Bluetooth: hci3: command tx timeout [ 1641.906722][T15955] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 1642.854200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1642.995854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.127631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.050874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.115004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.477323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.596844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.725381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.792236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.136694][T14330] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1646.167499][T14330] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1646.170034][T14330] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1646.171252][T14330] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1646.172039][T14330] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1647.154285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.377834][ T59] Bluetooth: hci8: command tx timeout [ 1648.461215][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 1652.093899][ T59] Bluetooth: hci8: command tx timeout [ 1652.877614][T16007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2739'. [ 1654.776329][T14330] Bluetooth: hci8: command tx timeout [ 1657.742964][T14330] Bluetooth: hci8: command tx timeout [ 1658.232189][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1658.815311][T13281] IPVS: starting estimator thread 0... [ 1658.939122][T16041] IPVS: using max 8 ests per chain, 19200 per kthread [ 1660.457443][T16052] net_ratelimit: 178 callbacks suppressed [ 1660.457467][T16052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1661.415164][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1662.432929][T16064] overlayfs: failed to clone upperpath [ 1663.487436][T16067] 9pnet_fd: Insufficient options for proto=fd [ 1664.815536][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 1665.615559][T15873] chnl_net:caif_netlink_parms(): no params data found [ 1665.885345][T15976] chnl_net:caif_netlink_parms(): no params data found [ 1667.783075][T15909] chnl_net:caif_netlink_parms(): no params data found [ 1674.124341][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.124454][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.637533][T16130] tipc: Started in network mode [ 1674.637569][T16130] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1674.644350][T16130] tipc: Enabled bearer , priority 10 [ 1674.646630][T16132] lo speed is unknown, defaulting to 1000 [ 1674.646773][T16132] lo speed is unknown, defaulting to 1000 [ 1674.653593][T16132] lo speed is unknown, defaulting to 1000 [ 1674.663759][T16132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1675.121577][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2763'. [ 1675.485550][T16132] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1675.740424][ T5926] tipc: Node number set to 10005162 [ 1675.761646][T16132] lo speed is unknown, defaulting to 1000 [ 1675.764693][T16132] lo speed is unknown, defaulting to 1000 [ 1675.767503][T16132] lo speed is unknown, defaulting to 1000 [ 1675.770269][T16132] lo speed is unknown, defaulting to 1000 [ 1675.772900][T16132] lo speed is unknown, defaulting to 1000 [ 1675.775854][T16132] lo speed is unknown, defaulting to 1000 [ 1675.778698][T16132] lo speed is unknown, defaulting to 1000 [ 1675.781424][T16132] lo speed is unknown, defaulting to 1000 [ 1675.784098][T16132] lo speed is unknown, defaulting to 1000 [ 1675.838236][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.838469][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.838756][T15873] bridge_slave_0: entered allmulticast mode [ 1675.870867][T15873] bridge_slave_0: entered promiscuous mode [ 1676.292743][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.292900][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.293146][T15873] bridge_slave_1: entered allmulticast mode [ 1676.296233][T15873] bridge_slave_1: entered promiscuous mode [ 1677.876284][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1678.486735][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.486831][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.486966][T15976] bridge_slave_0: entered allmulticast mode [ 1678.492168][T15976] bridge_slave_0: entered promiscuous mode [ 1678.665199][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.665344][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.665587][T15976] bridge_slave_1: entered allmulticast mode [ 1678.668341][T15976] bridge_slave_1: entered promiscuous mode [ 1680.466287][T15873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.071685][T15873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.276339][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.276493][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.276761][T15909] bridge_slave_0: entered allmulticast mode [ 1684.313816][T15909] bridge_slave_0: entered promiscuous mode [ 1685.907873][T16190] Malformed UNC in devname [ 1685.907873][T16190] [ 1685.908255][T16190] CIFS: VFS: Malformed UNC in devname [ 1686.632749][T10745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1686.664510][T10745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1686.672503][T10745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1686.746733][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.756001][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.756159][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.756426][T15909] bridge_slave_1: entered allmulticast mode [ 1686.759060][T15909] bridge_slave_1: entered promiscuous mode [ 1686.778584][T10745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1686.791131][T10745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1688.120151][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.996442][T14330] Bluetooth: hci1: command tx timeout [ 1691.213799][T14330] Bluetooth: hci1: command tx timeout [ 1691.274257][T15976] team0: Port device team_slave_0 added [ 1691.309357][T15976] team0: Port device team_slave_1 added [ 1691.457435][T10745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1691.484359][T10745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1691.486206][T10745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1691.497928][T10745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1691.500072][T10745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1692.023354][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.023372][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.023398][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.076402][T16191] lo speed is unknown, defaulting to 1000 [ 1692.166029][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.166047][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.166071][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.437501][T14330] Bluetooth: hci1: command tx timeout [ 1693.457545][T16222] lo speed is unknown, defaulting to 1000 [ 1693.779656][T14330] Bluetooth: hci2: command tx timeout [ 1693.816556][T15976] hsr_slave_0: entered promiscuous mode [ 1693.824626][T15976] hsr_slave_1: entered promiscuous mode [ 1693.825581][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 1693.825606][T15976] Cannot create hsr debugfs directory [ 1695.661023][T14330] Bluetooth: hci1: command tx timeout [ 1696.119783][T14330] Bluetooth: hci2: command tx timeout [ 1700.630552][T14330] Bluetooth: hci2: command tx timeout [ 1702.850659][T14330] Bluetooth: hci2: command tx timeout [ 1702.899375][T16280] vivid-004: disconnect [ 1703.368214][T16280] Bluetooth: MGMT ver 1.23 [ 1703.425151][T16265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.204055][T16276] vivid-004: reconnect [ 1704.403494][T16191] chnl_net:caif_netlink_parms(): no params data found [ 1708.659986][T16222] chnl_net:caif_netlink_parms(): no params data found [ 1708.759672][T16311] nbd: must specify an index to disconnect [ 1709.278402][ T1460] bridge_slave_1: left allmulticast mode [ 1709.278566][ T1460] bridge_slave_1: left promiscuous mode [ 1709.281443][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.383772][ T1460] bridge_slave_0: left allmulticast mode [ 1709.383804][ T1460] bridge_slave_0: left promiscuous mode [ 1709.384097][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.456921][ T1460] bridge_slave_1: left allmulticast mode [ 1709.456955][ T1460] bridge_slave_1: left promiscuous mode [ 1709.457203][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.656768][ T1460] bridge_slave_0: left allmulticast mode [ 1709.656792][ T1460] bridge_slave_0: left promiscuous mode [ 1709.656985][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.744946][ T1460] bridge_slave_1: left allmulticast mode [ 1709.744970][ T1460] bridge_slave_1: left promiscuous mode [ 1709.745134][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.891298][ T1460] bridge_slave_0: left allmulticast mode [ 1709.891321][ T1460] bridge_slave_0: left promiscuous mode [ 1709.891530][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.025317][T10745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1712.078187][T10745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1712.089668][T10745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1712.091373][T10745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1712.091906][T10745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1713.717844][T10745] Bluetooth: min 6 > max 0 [ 1713.826504][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.103263][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.390915][T10745] Bluetooth: hci3: command tx timeout [ 1716.114122][T10745] Bluetooth: hci5: command 0x0406 tx timeout [ 1716.649688][T10745] Bluetooth: hci3: command tx timeout [ 1716.673497][ T1460] bond0 (unregistering): Released all slaves [ 1718.855892][T10745] Bluetooth: hci3: command tx timeout [ 1721.116052][T14330] Bluetooth: hci3: command tx timeout [ 1723.242886][T14330] Bluetooth: hci5: unexpected event for opcode 0x0c5b [ 1723.246405][T14330] Bluetooth: hci5: unexpected event for opcode 0x1002 [ 1725.232293][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1725.338796][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1725.385581][ T1460] bond0 (unregistering): Released all slaves [ 1729.005926][ T1460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.070438][ T1460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.130415][ T1460] bond0 (unregistering): Released all slaves [ 1729.639991][T16191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.640176][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.640386][T16191] bridge_slave_0: entered allmulticast mode [ 1729.643211][T16191] bridge_slave_0: entered promiscuous mode [ 1729.769475][T16191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.769620][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.769893][T16191] bridge_slave_1: entered allmulticast mode [ 1729.772801][T16191] bridge_slave_1: entered promiscuous mode [ 1729.774975][T16431] smk_cipso_doi:679 remove rc = -2 [ 1730.820986][T16191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.376945][T16457] netlink: 'syz.4.2847': attribute type 21 has an invalid length. [ 1731.376969][T16457] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1731.403224][T16318] lo speed is unknown, defaulting to 1000 [ 1731.408225][T16191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.408766][T16457] netlink: 'syz.4.2847': attribute type 5 has an invalid length. [ 1731.408785][T16457] netlink: 'syz.4.2847': attribute type 6 has an invalid length. [ 1731.408799][T16457] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2847'. [ 1731.413886][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.414017][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.414288][T16222] bridge_slave_0: entered allmulticast mode [ 1731.416931][T16222] bridge_slave_0: entered promiscuous mode [ 1731.844603][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.844742][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.845017][T16222] bridge_slave_1: entered allmulticast mode [ 1731.855521][T16222] bridge_slave_1: entered promiscuous mode [ 1732.291490][T16191] team0: Port device team_slave_0 added [ 1733.379731][T16478] netlink: 'syz.4.2855': attribute type 11 has an invalid length. [ 1733.548643][ T1460] hsr_slave_0: left promiscuous mode [ 1733.591358][ T1460] hsr_slave_1: left promiscuous mode [ 1733.592332][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.052011][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.275532][ T1460] hsr_slave_0: left promiscuous mode [ 1734.320012][ T1460] hsr_slave_1: left promiscuous mode [ 1734.321182][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.362546][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.586208][ T1460] hsr_slave_0: left promiscuous mode [ 1734.651911][ T1460] hsr_slave_1: left promiscuous mode [ 1734.652979][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1734.698664][ T1460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1734.877690][ T1460] veth0_macvtap: left promiscuous mode [ 1734.877855][ T1460] veth1_vlan: left promiscuous mode [ 1734.877987][ T1460] veth0_vlan: left promiscuous mode [ 1736.115690][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1736.328809][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1737.975026][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1738.298390][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1739.284581][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.284695][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1743.845913][ T1460] team0 (unregistering): Port device team_slave_1 removed [ 1744.208066][ T1460] team0 (unregistering): Port device team_slave_0 removed [ 1747.687885][T16191] team0: Port device team_slave_1 added [ 1747.708062][T16222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.911572][T16222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.261821][T16222] team0: Port device team_slave_0 added [ 1748.294578][T16222] team0: Port device team_slave_1 added [ 1748.595907][T16222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.595924][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.595950][T16222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.609632][T16222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.609647][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.609672][T16222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.970226][T16524] comedi: valid board names for 8255 driver are: [ 1748.970242][T16524] 8255 [ 1748.970250][T16524] comedi: valid board names for vmk80xx driver are: [ 1748.970258][T16524] vmk80xx [ 1748.970266][T16524] comedi: valid board names for usbduxsigma driver are: [ 1748.970277][T16524] usbduxsigma [ 1748.970285][T16524] comedi: valid board names for usbduxfast driver are: [ 1748.970295][T16524] usbduxfast [ 1748.970303][T16524] comedi: valid board names for usbdux driver are: [ 1748.970313][T16524] usbdux [ 1748.970320][T16524] comedi: valid board names for ni6501 driver are: [ 1748.970336][T16524] ni6501 [ 1748.970344][T16524] comedi: valid board names for dt9812 driver are: [ 1748.970354][T16524] dt9812 [ 1748.970362][T16524] comedi: valid board names for ni_labpc_cs driver are: [ 1748.970372][T16524] ni_labpc_cs [ 1748.970380][T16524] comedi: valid board names for ni_daq_700 driver are: [ 1748.970390][T16524] ni_daq_700 [ 1748.970398][T16524] comedi: valid board names for labpc_pci driver are: [ 1748.970408][T16524] labpc_pci [ 1748.970415][T16524] comedi: valid board names for adl_pci9118 driver are: [ 1748.970426][T16524] pci9118dg [ 1748.970433][T16524] pci9118hg [ 1748.970441][T16524] pci9118hr [ 1748.970448][T16524] comedi: valid board names for 8255_pci driver are: [ 1748.970458][T16524] 8255_pci [ 1748.970465][T16524] comedi: valid board names for s526 driver are: [ 1748.970476][T16524] s526 [ 1748.970482][T16524] comedi: valid board names for multiq3 driver are: [ 1748.970493][T16524] multiq3 [ 1748.970500][T16524] comedi: valid board names for pcmuio driver are: [ 1748.970510][T16524] pcmuio48 [ 1748.970517][T16524] pcmuio96 [ 1748.970525][T16524] comedi: valid board names for pcmmio driver are: [ 1748.970541][T16524] pcmmio [ 1748.970548][T16524] comedi: valid board names for pcmda12 driver are: [ 1748.970558][T16524] pcmda12 [ 1748.970566][T16524] comedi: valid board names for pcmad driver are: [ 1748.970575][T16524] pcmad12 [ 1748.970582][T16524] pcmad16 [ 1748.970590][T16524] comedi: valid board names for ni_labpc driver are: [ 1748.970600][T16524] lab-pc-1200 [ 1748.970608][T16524] lab-pc-1200ai [ 1748.970616][T16524] lab-pc+ [ 1748.970623][T16524] comedi: valid board names for atmio16 driver are: [ 1748.970633][T16524] atmio16 [ 1748.970640][T16524] atmio16d [ 1748.970648][T16524] comedi: valid board names for ni_at_ao driver are: [ 1748.970658][T16524] at-ao-6 [ 1748.970665][T16524] at-ao-10 [ 1748.970673][T16524] comedi: valid board names for ni_at_a2150 driver are: [ 1748.970682][T16524] ni_at_a2150 [ 1748.970690][T16524] comedi: valid board names for adq12b driver are: [ 1748.970700][T16524] adq12b [ 1748.970706][T16524] comedi: valid board names for mpc624 driver are: [ 1748.970716][T16524] mpc624 [ 1748.970723][T16524] comedi: valid board names for c6xdigio driver are: [ 1748.970733][T16524] c6xdigio [ 1748.970739][T16524] comedi: valid board names for aio_iiro_16 driver are: [ 1748.970749][T16524] aio_iiro_16 [ 1748.970757][T16524] comedi: valid board names for aio_aio12_8 driver are: [ 1748.970766][T16524] aio_aio12_8 [ 1748.970774][T16524] aio_ai12_8 [ 1748.970781][T16524] aio_ao12_4 [ 1748.970787][T16524] comedi: valid board names for fl512 driver are: [ 1748.970797][T16524] fl512 [ 1748.970803][T16524] comedi: valid board names for dmm32at driver are: [ 1748.970813][T16524] dmm32at [ 1748.970820][T16524] comedi: valid board names for dt282x driver are: [ 1748.970830][T16524] dt2821 [ 1748.970837][T16524] dt2821-f [ 1748.970844][T16524] dt2821-g [ 1748.970851][T16524] dt2823 [ 1748.970858][T16524] dt2824-pgh [ 1748.970865][T16524] dt2824-pgl [ 1748.970872][T16524] dt2825 [ 1748.970879][T16524] dt2827 [ 1748.970886][T16524] dt2828 [ 1748.970893][T16524] dt2829 [ 1748.970900][T16524] dt21-ez [ 1748.970907][T16524] dt23-ez [ 1748.970914][T16524] dt24-ez [ 1748.970921][T16524] dt24-ez-pgl [ 1748.970929][T16524] comedi: valid board names for dt2817 driver are: [ 1748.970938][T16524] dt2817 [ 1748.970945][T16524] comedi: valid board names for dt2815 driver are: [ 1748.970955][T16524] dt2815 [ 1748.970962][T16524] comedi: valid board names for dt2814 driver are: [ 1748.970971][T16524] dt2814 [ 1748.970978][T16524] comedi: valid board names for dt2811 driver are: [ 1748.970988][T16524] dt2811-pgh [ 1748.970995][T16524] dt2811-pgl [ 1748.971002][T16524] comedi: valid board names for dt2801 driver are: [ 1748.971011][T16524] dt2801 [ 1748.971019][T16524] comedi: valid board names for das6402 driver are: [ 1748.971028][T16524] das6402-12 [ 1748.971035][T16524] das6402-16 [ 1748.971042][T16524] comedi: valid board names for das1800 driver are: [ 1748.971052][T16524] das-1701st [ 1748.971060][T16524] das-1701st-da [ 1748.971078][T16524] das-1702st [ 1748.971086][T16524] das-1702st-da [ 1748.971093][T16524] das-1702hr [ 1748.971100][T16524] das-1702hr-da [ 1748.971108][T16524] das-1701ao [ 1748.971115][T16524] das-1702ao [ 1748.971122][T16524] das-1801st [ 1748.971129][T16524] das-1801st-da [ 1748.971228][T16524] das-1802st [ 1748.971237][T16524] das-1802st-da [ 1748.971244][T16524] das-1802hr [ 1748.971251][T16524] das-1802hr-da [ 1748.971259][T16524] das-1801hc [ 1748.971266][T16524] das-1802hc [ 1748.971273][T16524] das-1801ao [ 1748.971280][T16524] das-1802ao [ 1748.971287][T16524] comedi: valid board names for das800 driver are: [ 1748.971297][T16524] das-800 [ 1748.971305][T16524] cio-das800 [ 1748.971315][T16524] das-801 [ 1748.971415][T16524] cio-das801 [ 1748.971423][T16524] das-802 [ 1748.971429][T16524] cio-das802 [ 1748.971437][T16524] cio-das802/16 [ 1748.971444][T16524] comedi: valid board names for isa-das08 driver are: [ 1748.971454][T16524] isa-das08 [ 1748.971461][T16524] das08-pgm [ 1748.971468][T16524] das08-pgh [ 1748.971476][T16524] das08-pgl [ 1748.971483][T16524] das08-aoh [ 1748.971491][T16524] das08-aol [ 1748.971498][T16524] das08-aom [ 1748.971505][T16524] das08/jr-ao [ 1748.971513][T16524] das08jr-16-ao [ 1748.971520][T16524] pc104-das08 [ 1748.971528][T16524] das08jr/16 [ 1748.971542][T16524] comedi: valid board names for das16m1 driver are: [ 1748.971552][T16524] das16m1 [ 1748.971559][T16524] comedi: valid board names for dac02 driver are: [ 1748.971569][T16524] dac02 [ 1748.971576][T16524] comedi: valid board names for rti802 driver are: [ 1748.971586][T16524] rti802 [ 1748.971593][T16524] comedi: valid board names for rti800 driver are: [ 1748.971603][T16524] rti800 [ 1748.971610][T16524] rti815 [ 1748.971617][T16524] comedi: valid board names for pcm3724 driver are: [ 1748.971627][T16524] pcm3724 [ 1748.971635][T16524] comedi: valid board names for pcl818 driver are: [ 1748.971644][T16524] pcl818l [ 1748.971651][T16524] pcl818h [ 1748.971658][T16524] pcl818hd [ 1748.971666][T16524] pcl818hg [ 1748.971672][T16524] pcl818 [ 1748.971680][T16524] pcl718 [ 1748.971686][T16524] pcm3718 [ 1748.971694][T16524] comedi: valid board names for pcl816 driver are: [ 1748.971703][T16524] pcl816 [ 1748.971710][T16524] pcl814b [ 1748.971718][T16524] comedi: valid board names for pcl812 driver are: [ 1748.971728][T16524] pcl812 [ 1748.971735][T16524] pcl812pg [ 1748.971742][T16524] acl8112pg [ 1748.971750][T16524] acl8112dg [ 1748.971757][T16524] acl8112hg [ 1748.971764][T16524] a821pgl [ 1748.971771][T16524] a821pglnda [ 1748.971778][T16524] a821pgh [ 1748.971784][T16524] a822pgl [ 1748.971791][T16524] a822pgh [ 1748.971799][T16524] a823pgl [ 1748.971805][T16524] a823pgh [ 1748.971812][T16524] pcl813 [ 1748.971819][T16524] pcl813b [ 1748.971826][T16524] acl8113 [ 1748.971833][T16524] iso813 [ 1748.971840][T16524] acl8216 [ 1748.971847][T16524] a826pg [ 1748.971854][T16524] comedi: valid board names for pcl730 driver are: [ 1748.971864][T16524] pcl730 [ 1748.971871][T16524] iso730 [ 1748.971878][T16524] acl7130 [ 1748.971885][T16524] pcm3730 [ 1748.971892][T16524] pcl725 [ 1748.971899][T16524] p8r8dio [ 1748.971906][T16524] acl7225b [ 1748.971913][T16524] p16r16dio [ 1748.971920][T16524] pcl733 [ 1748.971927][T16524] pcl734 [ 1748.971934][T16524] opmm-1616-xt [ 1748.971941][T16524] pearl-mm-p [ 1748.971948][T16524] ir104-pbf [ 1748.971956][T16524] comedi: valid board names for pcl726 driver are: [ 1748.971965][T16524] pcl726 [ 1748.971972][T16524] pcl727 [ 1748.971980][T16524] pcl728 [ 1748.971986][T16524] acl6126 [ 1748.971993][T16524] acl6128 [ 1748.972001][T16524] comedi: valid board names for pcl724 driver are: [ 1748.972010][T16524] pcl724 [ 1748.972017][T16524] pcl722 [ 1748.972024][T16524] pcl731 [ 1748.972031][T16524] acl7122 [ 1748.972037][T16524] acl7124 [ 1748.972045][T16524] pet48dio [ 1748.972052][T16524] pcmio48 [ 1748.972059][T16524] onyx-mm-dio [ 1748.972067][T16524] comedi: valid board names for pcl711 driver are: [ 1748.972076][T16524] pcl711 [ 1748.972083][T16524] pcl711b [ 1748.972090][T16524] acl8112hg [ 1748.972097][T16524] acl8112dg [ 1748.972104][T16524] comedi: valid board names for amplc_pc263 driver are: [ 1748.972114][T16524] pc263 [ 1748.972122][T16524] comedi: valid board names for amplc_pc236 driver are: [ 1748.972131][T16524] pc36at [ 1748.972138][T16524] comedi: valid board names for amplc_dio200 driver are: [ 1748.972148][T16524] pc212e [ 1748.972155][T16524] pc214e [ 1748.972162][T16524] pc215e [ 1748.972169][T16524] pc218e [ 1748.972176][T16524] pc272e [ 1748.972183][T16524] comedi: valid board names for comedi_parport driver are: [ 1748.972193][T16524] comedi_parport [ 1748.972201][T16524] comedi: valid board names for comedi_test driver are: [ 1748.972210][T16524] comedi_test [ 1748.972218][T16524] comedi: valid board names for comedi_bond driver are: [ 1748.972228][T16524] comedi_bond [ 1750.050385][T10745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1750.056443][T10745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1750.093925][T10745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1750.095345][T10745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1750.096250][T10745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1750.520723][T16534] pim6reg: entered allmulticast mode [ 1750.525069][T16535] pim6reg: left allmulticast mode [ 1750.762441][T16222] hsr_slave_0: entered promiscuous mode [ 1750.763786][T16222] hsr_slave_1: entered promiscuous mode [ 1750.764667][T16222] debugfs: 'hsr0' already exists in 'hsr' [ 1750.764701][T16222] Cannot create hsr debugfs directory [ 1751.236593][T16318] chnl_net:caif_netlink_parms(): no params data found [ 1751.381651][T16538] lo speed is unknown, defaulting to 1000 [ 1752.366297][T14330] Bluetooth: hci1: command tx timeout [ 1755.518662][T14330] Bluetooth: hci1: command tx timeout [ 1755.751179][T16318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.751334][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.751556][T16318] bridge_slave_0: entered allmulticast mode [ 1755.785038][T16318] bridge_slave_0: entered promiscuous mode [ 1755.824975][T16318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.825119][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.825385][T16318] bridge_slave_1: entered allmulticast mode [ 1755.909507][T16318] bridge_slave_1: entered promiscuous mode [ 1756.246187][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1756.323061][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.739410][T14330] Bluetooth: hci1: command tx timeout [ 1759.647690][T10745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1759.706753][T10745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1759.716492][T10745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1759.717766][T10745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1759.718702][T10745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1759.892425][T14330] Bluetooth: hci1: command tx timeout [ 1761.985366][T14330] Bluetooth: hci2: command tx timeout [ 1764.251762][T14330] Bluetooth: hci2: command tx timeout [ 1767.899596][T14330] Bluetooth: hci2: command tx timeout [ 1769.880064][ C1] sched: DL replenish lagged too much [ 1776.873463][T14330] Bluetooth: hci2: command tx timeout [ 1781.403721][T10745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1781.434083][T10745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1781.436617][T10745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1781.438058][T10745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1781.439736][T10745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1781.585301][T14330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1781.611717][T14330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1781.624839][T14330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1781.627320][T14330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1781.628358][T14330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1782.037489][T14330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1782.057856][T14330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1782.078724][T14330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1782.080045][T14330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1782.081264][T14330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1783.666074][T14330] Bluetooth: hci4: command tx timeout [ 1783.837127][T14330] Bluetooth: hci6: command tx timeout [ 1784.265150][T14330] Bluetooth: hci7: command tx timeout [ 1785.889670][T14330] Bluetooth: hci4: command tx timeout [ 1786.060732][T14330] Bluetooth: hci6: command tx timeout [ 1786.489803][T14330] Bluetooth: hci7: command tx timeout [ 1788.114862][T14330] Bluetooth: hci4: command tx timeout [ 1788.284950][T14330] Bluetooth: hci6: command tx timeout [ 1788.711972][T14330] Bluetooth: hci7: command tx timeout [ 1790.348283][T14330] Bluetooth: hci4: command tx timeout [ 1790.507940][T14330] Bluetooth: hci6: command tx timeout [ 1790.937448][T14330] Bluetooth: hci7: command tx timeout [ 1804.966258][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1804.966363][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1820.872655][T10745] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1820.901100][T10745] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1820.918297][T10745] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1820.948900][T10745] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1820.949826][T10745] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1824.913082][T10745] Bluetooth: hci8: command tx timeout [ 1829.949984][T10745] Bluetooth: hci8: command tx timeout [ 1833.516722][T10745] Bluetooth: hci8: command tx timeout [ 1834.470199][T14330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1834.510659][T14330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1834.513206][T14330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1834.514355][T14330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1834.515122][T14330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1834.598593][T16318] team0: Port device team_slave_0 added [ 1835.665352][T14330] Bluetooth: hci8: command tx timeout [ 1836.777435][T14330] Bluetooth: hci0: command tx timeout [ 1839.001681][T14330] Bluetooth: hci0: command tx timeout [ 1841.224334][T14330] Bluetooth: hci0: command tx timeout [ 1843.447955][T14330] Bluetooth: hci0: command tx timeout [ 1846.297205][T10745] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1846.326019][T10745] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1846.328975][T10745] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1846.331839][T10745] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1846.332653][T10745] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1846.468316][T14330] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1846.505663][T14330] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1846.508211][T14330] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1846.510218][T14330] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1846.512067][T14330] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1847.431547][T14330] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1847.450046][T14330] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1847.467175][T14330] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1847.477634][T14330] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1847.486049][T14330] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1848.579983][T14330] Bluetooth: hci9: command tx timeout [ 1848.750597][T14330] Bluetooth: hci10: command tx timeout [ 1849.692438][T14330] Bluetooth: hci11: command tx timeout [ 1850.803609][T14330] Bluetooth: hci9: command tx timeout [ 1850.974210][T14330] Bluetooth: hci10: command tx timeout [ 1851.916285][T14330] Bluetooth: hci11: command tx timeout [ 1853.027274][T14330] Bluetooth: hci9: command tx timeout [ 1853.197747][T14330] Bluetooth: hci10: command tx timeout [ 1854.138837][T14330] Bluetooth: hci11: command tx timeout [ 1855.251144][T14330] Bluetooth: hci9: command tx timeout [ 1855.421479][T14330] Bluetooth: hci10: command tx timeout [ 1856.821691][T14330] Bluetooth: hci11: command tx timeout [ 1870.663788][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1870.663881][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1886.517797][T10745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1886.557552][T10745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1886.561488][T10745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1886.579060][T10745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1886.579872][T10745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1888.330621][T10745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1888.360700][T10745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1888.367074][T10745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1888.368356][T10745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1888.369209][T10745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1888.776776][T14330] Bluetooth: hci1: command tx timeout [ 1890.661794][T14330] Bluetooth: hci2: command tx timeout [ 1890.999760][T14330] Bluetooth: hci1: command tx timeout [ 1892.881376][T14330] Bluetooth: hci2: command tx timeout [ 1893.256117][T14330] Bluetooth: hci1: command tx timeout [ 1895.105355][T14330] Bluetooth: hci2: command tx timeout [ 1895.447630][T14330] Bluetooth: hci1: command tx timeout [ 1897.328755][T14330] Bluetooth: hci2: command tx timeout [ 1910.769631][T10745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1910.812329][T10745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1910.814102][T10745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1910.815352][T10745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1910.816223][T10745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1911.058140][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1911.087644][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1911.098489][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1911.114786][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1911.115695][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1912.610084][T15830] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1912.634643][T15830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1912.636646][T15830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1912.652811][T15830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1912.658581][T15830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1930.170901][ T38] INFO: task kworker/u8:9:1460 blocked for more than 143 seconds. [ 1930.170927][ T38] Not tainted syzkaller #0 [ 1930.170937][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1930.170947][ T38] task:kworker/u8:9 state:D stack:20408 pid:1460 tgid:1460 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1930.170993][ T38] Workqueue: netns cleanup_net [ 1930.171027][ T38] Call Trace: [ 1930.171035][ T38] [ 1930.171050][ T38] __schedule+0x16f3/0x4c20 [ 1930.171100][ T38] ? __lock_acquire+0xab9/0xd20 [ 1930.171126][ T38] ? __pfx___schedule+0x10/0x10 [ 1930.171168][ T38] ? schedule+0x91/0x360 [ 1930.171195][ T38] schedule+0x165/0x360 [ 1930.171229][ T38] schedule_timeout+0x9a/0x270 [ 1930.171253][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1930.171290][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1930.171315][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1930.171338][ T38] ? wait_for_completion+0x267/0x5d0 [ 1930.171365][ T38] wait_for_completion+0x2bf/0x5d0 [ 1930.171403][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1930.171430][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 1930.171454][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 1930.171479][ T38] rcu_barrier+0x463/0x570 [ 1930.171510][ T38] wg_destruct+0x21e/0x2f0 [ 1930.171533][ T38] ? __pfx_wg_destruct+0x10/0x10 [ 1930.171554][ T38] netdev_run_todo+0xcd4/0xea0 [ 1930.171582][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1930.171599][ T38] ? unregister_netdevice_queue+0x1b3/0x380 [ 1930.171622][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1930.171653][ T38] ? batadv_meshif_vlan_put+0x131/0x1e0 [ 1930.171677][ T38] ? batadv_meshif_destroy_netlink+0x125/0x160 [ 1930.171702][ T38] default_device_exit_batch+0x81e/0x890 [ 1930.171734][ T38] ? __pfx___might_resched+0x10/0x10 [ 1930.172870][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1930.172900][ T38] ? cfg802154_pernet_exit+0x19/0xe0 [ 1930.172921][ T38] ? mutex_lock_nested+0x16a/0x1d0 [ 1930.172952][ T38] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1930.172976][ T38] ops_undo_list+0x525/0x990 [ 1930.173007][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1930.173042][ T38] cleanup_net+0x4cb/0x800 [ 1930.173069][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1930.173095][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1930.173118][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1930.173141][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1930.173165][ T38] process_scheduled_works+0xade/0x17b0 [ 1930.173226][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1930.173266][ T38] worker_thread+0x8a0/0xda0 [ 1930.173316][ T38] kthread+0x70e/0x8a0 [ 1930.173345][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1930.173366][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.173396][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.173422][ T38] ret_from_fork+0x436/0x7d0 [ 1930.173448][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1930.173478][ T38] ? __switch_to_asm+0x39/0x70 [ 1930.173495][ T38] ? __switch_to_asm+0x33/0x70 [ 1930.173512][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.173537][ T38] ret_from_fork_asm+0x1a/0x30 [ 1930.173573][ T38] [ 1930.173697][ T38] [ 1930.173697][ T38] Showing all locks held in the system: [ 1930.173708][ T38] 8 locks held by ktimers/0/16: [ 1930.173723][ T38] 1 lock held by khungtaskd/38: [ 1930.173734][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1930.173783][ T38] 4 locks held by kworker/u9:0/59: [ 1930.173794][ T38] #0: ffff888027d0d938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.173845][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.173890][ T38] #2: ffff8880522440a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1930.173939][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1930.173995][ T38] 3 locks held by kworker/u8:6/1342: [ 1930.174007][ T38] #0: ffff88814d1e6938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.174053][ T38] #1: ffffc90005257bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.174099][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1930.174141][ T38] 3 locks held by kworker/u8:8/1362: [ 1930.174153][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.174198][ T38] #1: ffffc90005497bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.174249][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1930.174291][ T38] 5 locks held by kworker/u8:9/1460: [ 1930.174302][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.174347][ T38] #1: ffffc90005887bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.174392][ T38] #2: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1930.174438][ T38] #3: ffff88805b4c17b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 1930.174482][ T38] #4: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1930.174537][ T38] 2 locks held by kworker/u8:14/3611: [ 1930.174550][ T38] 2 locks held by getty/5607: [ 1930.174560][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1930.174610][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1930.174656][ T38] 2 locks held by kworker/0:6/5944: [ 1930.174668][ T38] 2 locks held by kworker/0:7/6023: [ 1930.174679][ T38] 4 locks held by kworker/u9:2/10745: [ 1930.174691][ T38] #0: ffff888031a19138 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.174741][ T38] #1: ffffc90003aafbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.174786][ T38] #2: ffff8880516d40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1930.174833][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1930.174881][ T38] 4 locks held by kworker/u9:3/14330: [ 1930.174893][ T38] #0: ffff88803b25c938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1930.174943][ T38] #1: ffffc900047d7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1930.174988][ T38] #2: ffff8880768c40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1930.175035][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1930.175085][ T38] 1 lock held by syz-executor/16222: [ 1930.175096][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1930.175140][ T38] 1 lock held by syz-executor/16318: [ 1930.175151][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1930.175199][ T38] 1 lock held by syz-executor/16538: [ 1930.175217][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1930.175264][ T38] 1 lock held by syz.7.2896/16584: [ 1930.175275][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1930.175319][ T38] 1 lock held by syz.4.2903/16588: [ 1930.175330][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1930.175376][ T38] 4 locks held by syz-executor/16593: [ 1930.175387][ T38] #0: ffff888027418e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1930.175432][ T38] #1: ffff8880274180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1930.175479][ T38] #2: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1930.175522][ T38] #3: ffff88802345b358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1930.175568][ T38] 3 locks held by syz-executor/16596: [ 1930.175579][ T38] #0: ffff888060f8ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1930.175624][ T38] #1: ffff888060f8c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1930.175671][ T38] #2: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1930.175714][ T38] 3 locks held by syz-executor/16598: [ 1930.175725][ T38] #0: ffff888057d4ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1930.175770][ T38] #1: ffff888057d4c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1930.175816][ T38] #2: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1930.175858][ T38] 1 lock held by syz-executor/16606: [ 1930.175870][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.175913][ T38] 1 lock held by syz-executor/16609: [ 1930.175924][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1930.175970][ T38] 1 lock held by syz-executor/16613: [ 1930.175981][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1930.176026][ T38] 1 lock held by syz-executor/16615: [ 1930.176038][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1930.176083][ T38] 1 lock held by syz-executor/16618: [ 1930.176094][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1930.176139][ T38] 1 lock held by syz-executor/16625: [ 1930.176150][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.176194][ T38] 1 lock held by syz-executor/16628: [ 1930.176205][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.176254][ T38] 1 lock held by syz-executor/16632: [ 1930.176265][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.176307][ T38] 1 lock held by syz-executor/16634: [ 1930.176318][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.176366][ T38] 1 lock held by syz-executor/16637: [ 1930.176377][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1930.176420][ T38] [ 1930.176425][ T38] ============================================= [ 1930.176425][ T38] [ 1930.176441][ T38] NMI backtrace for cpu 1 [ 1930.176464][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1930.176489][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1930.176501][ T38] Call Trace: [ 1930.176509][ T38] [ 1930.176517][ T38] dump_stack_lvl+0x189/0x250 [ 1930.176544][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1930.176569][ T38] ? __pfx__printk+0x10/0x10 [ 1930.176600][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1930.176625][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1930.176650][ T38] ? __pfx__printk+0x10/0x10 [ 1930.176673][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1930.176697][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1930.176722][ T38] watchdog+0xf93/0xfe0 [ 1930.176749][ T38] ? watchdog+0x1de/0xfe0 [ 1930.176776][ T38] kthread+0x70e/0x8a0 [ 1930.176803][ T38] ? __pfx_watchdog+0x10/0x10 [ 1930.176824][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.176853][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.176878][ T38] ret_from_fork+0x436/0x7d0 [ 1930.176902][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1930.176930][ T38] ? __switch_to_asm+0x39/0x70 [ 1930.176946][ T38] ? __switch_to_asm+0x33/0x70 [ 1930.176962][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.176987][ T38] ret_from_fork_asm+0x1a/0x30 [ 1930.177019][ T38] [ 1930.177027][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1930.177053][ C0] NMI backtrace for cpu 0 [ 1930.177067][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1930.177085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1930.177101][ C0] RIP: 0010:__lock_acquire+0x587/0xd20 [ 1930.177122][ C0] Code: 24 0f b6 81 c4 00 00 00 84 c0 0f 84 68 ff ff ff 41 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 b9 c6 00 00 00 02 0f 84 51 ff ff ff <89> d0 e9 4a ff ff ff 48 c7 c7 50 95 87 8d 48 89 de e8 93 4c 53 03 [ 1930.177136][ C0] RSP: 0018:ffffc90000156408 EFLAGS: 00000093 [ 1930.177151][ C0] RAX: 0000000000000003 RBX: 0000000000000004 RCX: ffffffff929efb88 [ 1930.177162][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801c2a5940 [ 1930.177172][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 1930.177183][ C0] R10: ffffc90000156658 R11: ffffffff81aaf310 R12: 0000000000000003 [ 1930.177195][ C0] R13: 0000000000000001 R14: ffff88801c2a6578 R15: ffff88801c2a6520 [ 1930.177206][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1930.177220][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1930.177231][ C0] CR2: 00007fc9cc95c3f0 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1930.177246][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1930.177255][ C0] DR3: 0000000000d7000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1930.177267][ C0] Call Trace: [ 1930.177273][ C0] [ 1930.177283][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177302][ C0] lock_acquire+0x120/0x360 [ 1930.177319][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177341][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177358][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 1930.177378][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177395][ C0] unwind_next_frame+0xc2/0x2390 [ 1930.177413][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177433][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1930.177451][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 1930.177476][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1930.177493][ C0] arch_stack_walk+0x11c/0x150 [ 1930.177514][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 1930.177535][ C0] stack_trace_save+0x9c/0xe0 [ 1930.177550][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1930.177564][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1930.177585][ C0] kasan_save_track+0x3e/0x80 [ 1930.177601][ C0] ? kasan_save_track+0x3e/0x80 [ 1930.177616][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1930.177632][ C0] ? kmem_cache_alloc_noprof+0x143/0x310 [ 1930.177649][ C0] ? dst_alloc+0x105/0x170 [ 1930.177663][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 1930.177680][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 1930.177695][ C0] ? ip_route_output_flow+0x2a/0x150 [ 1930.177709][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 1930.177724][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 1930.177759][ C0] ? dst_alloc+0x105/0x170 [ 1930.177774][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1930.177791][ C0] ? dst_alloc+0x105/0x170 [ 1930.177805][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 1930.177826][ C0] dst_alloc+0x105/0x170 [ 1930.177842][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 1930.177862][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 1930.177879][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 1930.177895][ C0] ? __lock_acquire+0xab9/0xd20 [ 1930.177912][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1930.177931][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 1930.177950][ C0] ip_route_output_flow+0x2a/0x150 [ 1930.177964][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 1930.177981][ C0] ip_route_me_harder+0x6d2/0x1030 [ 1930.178003][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1930.178031][ C0] synproxy_send_tcp+0x359/0x6c0 [ 1930.178053][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 1930.178078][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1930.178097][ C0] ? nft_synproxy_eval_v6+0x1b8/0x560 [ 1930.178113][ C0] ? synproxy_pernet+0x45/0x270 [ 1930.178131][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1930.178149][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1930.178165][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1930.178187][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1930.178205][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1930.178219][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1930.178242][ C0] nft_do_chain+0x409/0x1920 [ 1930.178263][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1930.178281][ C0] ? __lock_acquire+0xab9/0xd20 [ 1930.178309][ C0] nft_do_chain_inet+0x25d/0x340 [ 1930.178325][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1930.178340][ C0] ? __lock_acquire+0xab9/0xd20 [ 1930.178362][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1930.178380][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1930.178395][ C0] nf_hook_slow+0xc2/0x220 [ 1930.178416][ C0] NF_HOOK+0x206/0x3a0 [ 1930.178434][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1930.178451][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1930.178473][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1930.178490][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1930.178510][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1930.178528][ C0] ? skb_dst+0x4f/0xd0 [ 1930.178547][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1930.178566][ C0] NF_HOOK+0x30c/0x3a0 [ 1930.178584][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1930.178601][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1930.178618][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1930.178637][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1930.178659][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1930.178675][ C0] __netif_receive_skb+0x143/0x380 [ 1930.178693][ C0] ? rt_spin_unlock+0x65/0x80 [ 1930.178712][ C0] ? process_backlog+0x27b/0x900 [ 1930.178729][ C0] process_backlog+0x31e/0x900 [ 1930.178752][ C0] __napi_poll+0xb6/0x540 [ 1930.178770][ C0] net_rx_action+0x707/0xe00 [ 1930.178787][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1930.178813][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1930.178844][ C0] handle_softirqs+0x22f/0x710 [ 1930.178866][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1930.178887][ C0] run_ktimerd+0xcf/0x190 [ 1930.178905][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1930.178923][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1930.178940][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 1930.178957][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1930.178974][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1930.178997][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1930.179018][ C0] kthread+0x70e/0x8a0 [ 1930.179037][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1930.179054][ C0] ? __pfx_kthread+0x10/0x10 [ 1930.179075][ C0] ? __pfx_kthread+0x10/0x10 [ 1930.179094][ C0] ret_from_fork+0x436/0x7d0 [ 1930.179112][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1930.179132][ C0] ? __switch_to_asm+0x39/0x70 [ 1930.179146][ C0] ? __switch_to_asm+0x33/0x70 [ 1930.179159][ C0] ? __pfx_kthread+0x10/0x10 [ 1930.179179][ C0] ret_from_fork_asm+0x1a/0x30 [ 1930.179199][ C0] [ 1930.180057][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1930.180072][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1930.180093][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1930.180104][ T38] Call Trace: [ 1930.180112][ T38] [ 1930.180121][ T38] dump_stack_lvl+0x99/0x250 [ 1930.180146][ T38] ? __asan_memcpy+0x40/0x70 [ 1930.180161][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1930.180184][ T38] ? __pfx__printk+0x10/0x10 [ 1930.180221][ T38] vpanic+0x281/0x750 [ 1930.180247][ T38] ? __pfx_vpanic+0x10/0x10 [ 1930.180268][ T38] ? irqentry_exit+0x74/0x90 [ 1930.180292][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1930.180325][ T38] panic+0xb9/0xc0 [ 1930.180348][ T38] ? __pfx_panic+0x10/0x10 [ 1930.180374][ T38] ? irq_work_queue+0xc3/0x140 [ 1930.180400][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1930.180424][ T38] watchdog+0xfd2/0xfe0 [ 1930.180451][ T38] ? watchdog+0x1de/0xfe0 [ 1930.180478][ T38] kthread+0x70e/0x8a0 [ 1930.180506][ T38] ? __pfx_watchdog+0x10/0x10 [ 1930.180526][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.180559][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.180583][ T38] ret_from_fork+0x436/0x7d0 [ 1930.180604][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1930.180628][ T38] ? __switch_to_asm+0x39/0x70 [ 1930.180645][ T38] ? __switch_to_asm+0x33/0x70 [ 1930.180662][ T38] ? __pfx_kthread+0x10/0x10 [ 1930.180686][ T38] ret_from_fork_asm+0x1a/0x30 [ 1930.180719][ T38] [ 1930.180866][ T38] Kernel Offset: disabled