last executing test programs: 21m19.451401674s ago: executing program 3 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 21m18.936373256s ago: executing program 3 (id=1563): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008"], 0x40}}, 0x0) syz_socket_connect_nvme_tcp() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x60000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x20000880) 21m17.708182238s ago: executing program 3 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c00010003080108020000000600150002000000db1f98379ee743bce405e34adb49fbf4882956384975ca543c50abc866a7f2b2fbe56bea523ad42af8aee7d18450c9cf847cbabecc41147229a037fe8c9114b9f0a492449a1b08ece68ae135dd35fbfb2f9fe4ae2749", @ANYRES32=r1, @ANYRES64=r2, @ANYRES8=r2], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16=0xffffffffffffffff, @ANYRESHEX, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setresuid(0x0, 0xee00, 0x0) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x19, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRES16=r5, @ANYRESDEC=r3, @ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x400, 0x0, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r6, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r7, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 21m14.736990096s ago: executing program 3 (id=1579): r0 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x6ec8, 0x80, 0x2000007, 0x3ce}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x20, 0x0, 0x0) 21m14.157064169s ago: executing program 3 (id=1584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x4000001) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 21m11.54030463s ago: executing program 3 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe33, 0xffff, 0x1, 0x38, 0x6}, 0x55}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 20m56.503817826s ago: executing program 32 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe33, 0xffff, 0x1, 0x38, 0x6}, 0x55}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 20m0.210921994s ago: executing program 4 (id=1851): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x178, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x55, 0x6, "27f9011c8136b51399ce40585e575f22375f3a390dac9996b327d8a740323a18484a51cfb08d04b86ca08917dbb638d840c7a6daefe2dff52bbabced7e0da9fc93ff20939277eb077995e24331f88feda5"}, @NFTA_TABLE_USERDATA={0x85, 0x6, "5c8dc3febbbf30ddaa4940e4d581ee45f90e23d8770a37c4a9e89db1449ff39bd1fd7fcd5b22b7fc41f91ce5ece5239f638e5f0da771ec239cdd7a9ea0098814137c6000b99e3796b2de212f4828c4a7149e290a736a968dac61f6ee535ffedb62d9fb61ac69b6614dd8f51ff01daa7425de2ad11e16a2c1459d2d22c5525dc780"}, @NFTA_TABLE_USERDATA={0x76, 0x6, "b7144ea6c498569f833dbdb9cbd3a725437a458de416fb3a266387561425207d8f3d23eba8e4dbb30c26fadf57fe619d432f54b6ae4c680b7e60dd4989438e7e1b2617f1d1e4747639e776e2fade7e5e46d128212c0b0a1990e2496393d54fd4502ab53cb940c85e58a313c9f2054b3d3060"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)="ba", 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 19m59.811457734s ago: executing program 4 (id=1853): r0 = openat$kvm(0xffffff9c, 0x0, 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) 19m59.531466731s ago: executing program 4 (id=1856): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=@newchain={0x201c, 0x64, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0x2}, {0x0, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x1fe4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_ROUTE4_ACT={0x4dc, 0x6, [@m_skbedit={0x80, 0xf, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffe}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x60, 0xfffffe5e, 0x10000001, 0x9, 0x6}}]}, {0x29, 0x6, "4b49c458a9b31e2bd282e958dd1219a15edfee853b4b85e7a2d4b4c7b6e02de0ca9ca0b447"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x11c, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaeb0c}]}, {0xe5, 0x6, "ad95711bde824105f87f33b150891c20d4394d5777d1e4aa2370847c35666c048cee0c84bfd916df99c78672969c0bf69634b31f30b3163c11898b3c738d54579f72a758b5e04caedcf2a515551a15eaa01f67c6cc13e9dda6317de7181d3cb40361b06119c72ece145f6b7ad6f53e8c298751428515a5d5a2bb74dfb17fdf7d1634dbf182edc580b25939dbfd605d580319180f30ec608239dab2137023f24cec966c86203b97737c02a32c6b3e93a120261c37b43d92f52242841e767bee148881a196b5a79433be3109eb6b3ee96f4e07651e92db152a88f2459b40d50ee1c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_connmark={0x128, 0xf, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x8, 0xec}, 0x4cdf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xa1, 0x0, 0x0, 0xf0}, 0x9}}]}, {0xbd, 0x6, "fec9f81054adb9ea2378b5f78cb821b6703bafc474a03df269b20158a7886685e143bdc47d00a24439476d183973c053673c7dac08422466bb23551b3c1482ed5213dcc3171dde168bc32ffd2f403050050fdb104947a41f95870be7f80ca6e63d44e7c627abe7d56af017134156caeb743c3716b638fde528fea971abe5cee0e225e7bd931fb7320f342d0cc74e81a510be4a2bfa0e2439d7fa80ad56bf80a2936f377b7c1b03474599805d464972f839876988e54101da83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x214, 0x1a, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x3, 0xfffffd2f, 0xc0}, @multicast2, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x616af3ed, 0xe, 0x1, 0x7ff}, @multicast2, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x8, 0x4, 0x6}, @loopback, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9ce6, 0x20000000, 0x10001, 0x1}, @remote, @private=0x5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xb, 0x7, 0x3, 0x1000}, @loopback, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x3, 0x9, 0x5}, @multicast1, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x80000001, 0x5, 0x5, 0xe13}, @empty, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xf1, 0x2, 0x5, 0x4}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0xff, 0x2, 0x81, 0x8000}, @empty, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xcbe6, 0x2, 0xd}, @empty, @rand_addr=0x64010100, 0xffffff00}}]}, {0x59, 0x6, "8af13a577f7cd96781c801e273e15b77bde66443620f6fab7236a8e9f3430bbee94d86facb83e0bb80192b03fad046ed99a14b0f48fa5f9288c82d08f09431583d7b5df1fb38ddcbba86fc48c9b9dc086e9a2adb97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xfff3}}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_ACT={0x1adc, 0x6, [@m_bpf={0x58, 0x14, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}]}, {0x25, 0x6, "b392471b820865e61fba4d538bd9d3012443cd74d401b4c4e79017b0a3fa6554e4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x1030, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xa50, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xa21, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x201c}, 0x1, 0x0, 0x0, 0x4004845}, 0x408c4) 19m59.271680087s ago: executing program 4 (id=1858): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) 19m58.722647089s ago: executing program 4 (id=1864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 19m57.878962445s ago: executing program 4 (id=1869): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x598f, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x4004800) 19m57.233724832s ago: executing program 33 (id=1869): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x598f, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0), 0x0, 0x4004800) 15m41.60974482s ago: executing program 0 (id=2581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) ptrace(0x4208, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 15m38.019783556s ago: executing program 0 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_io_uring_setup(0x114, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15m37.427764698s ago: executing program 0 (id=2587): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 15m34.927892086s ago: executing program 0 (id=2592): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 15m33.143469133s ago: executing program 0 (id=2600): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 15m30.266029422s ago: executing program 0 (id=2603): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m25.251466223s ago: executing program 2 (id=2613): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 15m22.729102839s ago: executing program 2 (id=2617): r0 = socket$can_j1939(0x1d, 0x2, 0x7) fcntl$notify(r0, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000000), 0x12) 15m21.14758113s ago: executing program 2 (id=2618): r0 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r0, 0x0) 15m17.903262224s ago: executing program 2 (id=2624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 15m14.141506872s ago: executing program 34 (id=2603): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m3.540021608s ago: executing program 2 (id=2644): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 15m0.508499724s ago: executing program 2 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14m45.248468078s ago: executing program 35 (id=2647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.080923118s ago: executing program 6 (id=4075): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, 0x0, 0x0, 0x0) 10.080745528s ago: executing program 6 (id=4077): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r0, r0, 0x5, r3, r2) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00002e3000/0x3000)=nil, &(0x7f00007fe000/0x800000)=nil, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x28, 0x20}) 8.939415259s ago: executing program 1 (id=4079): mkdir(&(0x7f0000000840)='./file0\x00', 0x145) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lchown(&(0x7f0000000340)='./file0\x00', r0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x4}], {}, [{0x8, 0x1, r1}], {0x10, 0x5}, {0x20, 0x3}}, 0x34, 0x0) 8.855092932s ago: executing program 5 (id=4080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.702784219s ago: executing program 1 (id=4081): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r5, 0x0) 7.271440921s ago: executing program 1 (id=4082): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd300", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}]}}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa00100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0xfa11, 0xffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet(0x2, 0x3, 0x9) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) unshare(0x20060400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73", 0xc0}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0x3}, @generic={0x0, 0x3, "96"}, @generic={0x0, 0xf, "206a77bdd1a004129054e7704a"}]}}}], 0xa0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0x2f, 0x0, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000}) 7.023347088s ago: executing program 5 (id=4083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xc9b, &(0x7f0000000ec0)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0xc65, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@dstopts={0xb6}, @routing={0x32, 0x2, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x3b, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x67}, @hopopts={0x6, 0x162, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x2, 0x1}}, @generic={0x81, 0xafb, "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"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x7, 0x1}}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private0={0xfc, 0x0, '\x00', 0x1}, [{0xe, 0x3, "47fd8fe81dde3b6935bed364de9e624f253d89f659cfc7d13973"}, {0x6, 0x4, "8d62245e22546fa4b484781d321f31412edd2365b02c8cac76cc1d1ac7d5410bd694"}, {0x1, 0x9, "2e69679f0b5da4e6f4c907dbfafc74033ad1f5f49d371259d5c768de3120da1c642652599aeb1a333e22bf93fa875b81c4957b3e212fdb5f0367b0b8f0d5023192e44667f4b994fea7"}, {0x26}, {0x22, 0xb, "321fce0068c01fd8e4e9319c5b723887e1717814efee46bcb105c211097440ed36b37a3d2b5942c73f03ddd32bdcb817e4d9b41b20df80cee8698009685b7a20c2f768810b97fda5ad0ed779973ef233e215abe3395ac238"}, {0x19, 0x1, "333c09341bb86a7df0956824"}]}}}}}}, 0x0) 6.608112938s ago: executing program 6 (id=4084): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x0) 5.332287274s ago: executing program 6 (id=4085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r7, 0xffffffffffffffff, 0x0) 4.199082094s ago: executing program 6 (id=4086): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3.497486557s ago: executing program 1 (id=4087): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x7, 0x4, 0x0}) 3.492519389s ago: executing program 5 (id=4088): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r2], 0x15) 3.220715611s ago: executing program 1 (id=4089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x4}], {}, [{0x8, 0x1}], {0x10, 0x5}, {0x20, 0x3}}, 0x34, 0x0) 3.17241499s ago: executing program 5 (id=4090): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x8000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.028447523s ago: executing program 1 (id=4091): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.448380692s ago: executing program 6 (id=4092): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0x6c9, 0xffffffffffffffff, 0x31) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) 1.399265076s ago: executing program 5 (id=4093): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4094): dup(0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) kernel console output (not intermixed with test programs): e will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.764015][T15300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.993581][T15300] hsr_slave_0: entered promiscuous mode [ 973.997958][T15300] hsr_slave_1: entered promiscuous mode [ 973.998607][T15300] debugfs: 'hsr0' already exists in 'hsr' [ 973.998625][T15300] Cannot create hsr debugfs directory [ 974.943323][ T13] hsr_slave_0: left promiscuous mode [ 974.985466][ T13] hsr_slave_1: left promiscuous mode [ 974.986685][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.992433][ T5118] Bluetooth: hci5: command tx timeout [ 975.049794][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.972079][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 976.180120][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 976.199261][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 976.286553][ T10] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 976.286616][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 976.286647][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 976.286670][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 976.286698][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 976.286722][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 976.286743][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 976.292153][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 976.292184][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.292203][ T10] usb 7-1: Product: syz [ 976.292216][ T10] usb 7-1: Manufacturer: syz [ 976.292229][ T10] usb 7-1: SerialNumber: syz [ 976.323351][ T10] usb 7-1: config 0 descriptor?? [ 976.325711][T15564] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 976.356417][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 977.072583][ T5118] Bluetooth: hci5: command tx timeout [ 977.187374][ T10] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 977.252189][ T10] usb 7-1: USB disconnect, device number 4 [ 977.363572][T15583] udevd[15583]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.116644][T15593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3090'. [ 978.338108][ T13] team0 (unregistering): Port device team_slave_1 removed [ 978.901041][ T13] team0 (unregistering): Port device team_slave_0 removed [ 979.152021][ T5118] Bluetooth: hci5: command tx timeout [ 981.702419][ T5118] Bluetooth: hci5: command tx timeout [ 987.523266][T15538] chnl_net:caif_netlink_parms(): no params data found [ 988.438224][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'. [ 992.294802][T15680] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3113'. [ 993.274409][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.274556][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.274852][T15538] bridge_slave_0: entered allmulticast mode [ 993.279948][T15538] bridge_slave_0: entered promiscuous mode [ 993.456861][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.537200][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.537345][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.537609][T15538] bridge_slave_1: entered allmulticast mode [ 993.583276][T15538] bridge_slave_1: entered promiscuous mode [ 993.929513][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.577639][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'. [ 996.957307][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.607364][T15719] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3123'. [ 1000.900550][T15538] team0: Port device team_slave_0 added [ 1000.918147][T15538] team0: Port device team_slave_1 added [ 1001.533143][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.533163][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.533192][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.641402][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.641422][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.641449][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.407968][T15538] hsr_slave_0: entered promiscuous mode [ 1002.422897][T15538] hsr_slave_1: entered promiscuous mode [ 1002.431152][T15538] debugfs: 'hsr0' already exists in 'hsr' [ 1002.431182][T15538] Cannot create hsr debugfs directory [ 1004.316319][T14975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1004.320256][T14975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1004.321640][T14975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1004.324094][T14975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1004.330935][T14975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1004.612168][ T13] bridge_slave_1: left allmulticast mode [ 1004.612205][ T13] bridge_slave_1: left promiscuous mode [ 1004.612604][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.772262][ T5961] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1004.820213][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3129'. [ 1004.965714][ T13] bridge_slave_0: left allmulticast mode [ 1004.965748][ T13] bridge_slave_0: left promiscuous mode [ 1004.966036][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.061966][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 1005.065283][ T5961] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1005.066886][ T5961] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1005.066969][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1005.066999][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1005.067023][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1005.067051][ T5961] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1005.067075][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1005.067097][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1005.070175][ T5961] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1005.070204][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.070224][ T5961] usb 2-1: Product: syz [ 1005.070239][ T5961] usb 2-1: Manufacturer: syz [ 1005.070253][ T5961] usb 2-1: SerialNumber: syz [ 1005.200027][ T5961] usb 2-1: config 0 descriptor?? [ 1005.201149][T15746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1005.230037][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.345434][ T5961] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1005.460183][ T807] usb 2-1: USB disconnect, device number 47 [ 1005.545191][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.352187][ T5118] Bluetooth: hci4: command tx timeout [ 1008.438651][ T5118] Bluetooth: hci4: command tx timeout [ 1009.642951][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.860256][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.885750][T15787] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3137'. [ 1010.009349][ T13] bond0 (unregistering): Released all slaves [ 1011.815698][ T5118] Bluetooth: hci4: command tx timeout [ 1012.552050][ T13] hsr_slave_0: left promiscuous mode [ 1012.602036][ T13] hsr_slave_1: left promiscuous mode [ 1012.603230][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.301036][ T5118] Bluetooth: hci4: command tx timeout [ 1014.324618][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.092857][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1017.547723][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1025.369412][T15742] chnl_net:caif_netlink_parms(): no params data found [ 1027.371655][T15742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.380815][T15742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.381098][T15742] bridge_slave_0: entered allmulticast mode [ 1027.392890][T15742] bridge_slave_0: entered promiscuous mode [ 1027.408023][T15742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.452431][T15742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.452651][T15742] bridge_slave_1: entered allmulticast mode [ 1027.454576][T15742] bridge_slave_1: entered promiscuous mode [ 1028.934109][T15742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.001530][T15742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.365014][T15742] team0: Port device team_slave_0 added [ 1031.444519][T15742] team0: Port device team_slave_1 added [ 1032.043606][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1032.060228][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1032.063075][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1032.068391][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1032.069637][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1032.528617][T15742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.528638][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.528667][T15742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.605796][T15742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.605815][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.605844][T15742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.191970][T14975] Bluetooth: hci2: command tx timeout [ 1034.388224][T15742] hsr_slave_0: entered promiscuous mode [ 1034.390109][T15742] hsr_slave_1: entered promiscuous mode [ 1034.391196][T15742] debugfs: 'hsr0' already exists in 'hsr' [ 1034.391221][T15742] Cannot create hsr debugfs directory [ 1037.625715][T14975] Bluetooth: hci2: command tx timeout [ 1039.113358][T15929] chnl_net:caif_netlink_parms(): no params data found [ 1040.138896][T14975] Bluetooth: hci2: command tx timeout [ 1042.097465][T15929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.112072][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.112361][T15929] bridge_slave_0: entered allmulticast mode [ 1042.117865][T15929] bridge_slave_0: entered promiscuous mode [ 1042.146423][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.150007][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.150291][T15929] bridge_slave_1: entered allmulticast mode [ 1042.180062][T15929] bridge_slave_1: entered promiscuous mode [ 1042.207846][T14975] Bluetooth: hci2: command tx timeout [ 1042.871821][T16018] overlayfs: failed to resolve './file1': -2 [ 1043.870697][ T13] bridge_slave_1: left allmulticast mode [ 1043.870730][ T13] bridge_slave_1: left promiscuous mode [ 1043.871000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.073814][ T13] bridge_slave_0: left allmulticast mode [ 1044.073849][ T13] bridge_slave_0: left promiscuous mode [ 1044.074136][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.657333][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.782943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.051094][ T13] bond0 (unregistering): Released all slaves [ 1049.677535][T16054] overlayfs: failed to resolve './file1': -2 [ 1050.672562][T15929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.123370][T15929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.533618][ T13] hsr_slave_0: left promiscuous mode [ 1051.652101][ T13] hsr_slave_1: left promiscuous mode [ 1051.653250][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.702976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.788432][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.356915][T16107] NILFS (nullb0): couldn't find nilfs on the device [ 1056.652826][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1056.913698][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1061.168115][T15929] team0: Port device team_slave_0 added [ 1061.177808][T15929] team0: Port device team_slave_1 added [ 1061.353563][T15929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.353582][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.353610][T15929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.363086][T15929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.363099][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.363115][T15929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.834587][T15929] hsr_slave_0: entered promiscuous mode [ 1062.843209][T15929] hsr_slave_1: entered promiscuous mode [ 1062.844267][T15929] debugfs: 'hsr0' already exists in 'hsr' [ 1062.844294][T15929] Cannot create hsr debugfs directory [ 1063.965770][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1063.981710][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1064.017978][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1064.125368][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1064.152746][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1066.368894][T14975] Bluetooth: hci5: command tx timeout [ 1067.014328][T16170] kAFS: unable to lookup cell 'ÿ' [ 1067.242607][T16174] kAFS: unable to lookup cell '(,c¾Ì' [ 1069.652088][T14975] Bluetooth: hci5: command tx timeout [ 1070.596788][ T13] bridge_slave_1: left allmulticast mode [ 1070.596821][ T13] bridge_slave_1: left promiscuous mode [ 1070.597090][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.743003][ T13] bridge_slave_0: left allmulticast mode [ 1070.744124][ T13] bridge_slave_0: left promiscuous mode [ 1070.744533][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.711862][T14975] Bluetooth: hci5: command tx timeout [ 1073.200506][T16227] kAFS: unable to lookup cell 'ÿ' [ 1073.200720][T16227] kAFS: unable to lookup cell '(,c¾Ì' [ 1073.218955][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.533002][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.616259][ T13] bond0 (unregistering): Released all slaves [ 1073.659338][T16149] chnl_net:caif_netlink_parms(): no params data found [ 1073.764584][T16233] mmap: syz.1.3233 (16233) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1073.842387][T14975] Bluetooth: hci5: command tx timeout [ 1074.581959][ T13] hsr_slave_0: left promiscuous mode [ 1074.622001][ T13] hsr_slave_1: left promiscuous mode [ 1074.622749][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.655307][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.873907][T16246] kAFS: unable to lookup cell 'ÿ' [ 1075.880402][T16246] kAFS: unable to lookup cell '(,c¾Ì' [ 1077.092828][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1078.682843][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1079.290382][T16268] kAFS: unable to lookup cell 'ÿ' [ 1079.291535][T16268] kAFS: unable to lookup cell '(,c¾Ì' [ 1080.066416][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.066563][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.066821][T16149] bridge_slave_0: entered allmulticast mode [ 1080.069913][T16149] bridge_slave_0: entered promiscuous mode [ 1080.108181][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.108347][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.108572][T16149] bridge_slave_1: entered allmulticast mode [ 1080.110230][T16149] bridge_slave_1: entered promiscuous mode [ 1080.141918][T15929] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1080.282911][T15929] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1080.395760][T15929] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1081.742801][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.797730][T15929] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1081.877359][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.078609][T16149] team0: Port device team_slave_0 added [ 1082.082193][T16149] team0: Port device team_slave_1 added [ 1082.325299][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.325320][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.325346][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.397471][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.397484][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.397499][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.933049][T16149] hsr_slave_0: entered promiscuous mode [ 1082.934678][T16149] hsr_slave_1: entered promiscuous mode [ 1082.935731][T16149] debugfs: 'hsr0' already exists in 'hsr' [ 1082.935757][T16149] Cannot create hsr debugfs directory [ 1085.688234][ T13] bridge_slave_1: left allmulticast mode [ 1085.688266][ T13] bridge_slave_1: left promiscuous mode [ 1085.688536][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.782909][ T13] bridge_slave_0: left allmulticast mode [ 1085.782933][ T13] bridge_slave_0: left promiscuous mode [ 1085.783115][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.987249][T16308] kAFS: unable to lookup cell 'ÿ' [ 1085.987396][T16308] kAFS: unable to lookup cell '(,c¾Ì' [ 1086.463849][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.562875][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.654648][ T13] bond0 (unregistering): Released all slaves [ 1086.877612][T15929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.407054][ T13] hsr_slave_0: left promiscuous mode [ 1088.222175][ T13] hsr_slave_1: left promiscuous mode [ 1088.223302][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.293020][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.719670][T16343] kAFS: unable to lookup cell 'ÿ' [ 1089.727369][T16343] kAFS: unable to lookup cell '(,c¾Ì' [ 1089.982171][ T5961] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1090.156065][ T5961] usb 6-1: device descriptor read/64, error -71 [ 1090.390599][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1090.401897][ T5961] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1090.704901][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1091.047437][ T5961] usb 6-1: device descriptor read/64, error -71 [ 1091.152437][ T5961] usb usb6-port1: attempt power cycle [ 1091.321082][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1092.061877][ T5961] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1092.082965][ T5961] usb 6-1: device descriptor read/8, error -71 [ 1092.349192][ T5961] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1092.372655][ T5961] usb 6-1: device descriptor read/8, error -71 [ 1092.492636][ T5961] usb usb6-port1: unable to enumerate USB device [ 1093.227844][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1093.248137][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.250211][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1093.273206][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1093.283817][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1096.030515][ T5118] Bluetooth: hci4: command tx timeout [ 1097.941787][T16149] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1098.124767][ T5118] Bluetooth: hci4: command tx timeout [ 1098.174281][T16149] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1099.146341][T16149] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1099.432932][T16149] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1100.211900][ T5118] Bluetooth: hci4: command tx timeout [ 1100.461928][ T5961] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1100.721923][ T5961] usb 7-1: device descriptor read/64, error -71 [ 1101.516938][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.574792][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.598234][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.600763][T10672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.634405][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.635280][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.731999][ T5961] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1101.862367][ T5961] usb 7-1: device descriptor read/64, error -71 [ 1101.978275][ T5961] usb usb7-port1: attempt power cycle [ 1102.271944][ T5118] Bluetooth: hci4: command tx timeout [ 1102.322211][ T5961] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1102.329251][T16369] chnl_net:caif_netlink_parms(): no params data found [ 1102.404696][ T5961] usb 7-1: device descriptor read/8, error -71 [ 1103.911310][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1104.654736][T16443] NILFS (nullb0): couldn't find nilfs on the device [ 1108.485384][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.485611][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.485892][T16369] bridge_slave_0: entered allmulticast mode [ 1108.489071][T16369] bridge_slave_0: entered promiscuous mode [ 1108.533784][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.533936][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.534220][T16369] bridge_slave_1: entered allmulticast mode [ 1108.537383][T16369] bridge_slave_1: entered promiscuous mode [ 1108.667845][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.715400][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.741945][T15486] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1108.907629][T16369] team0: Port device team_slave_0 added [ 1108.918411][T15486] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.918450][T15486] usb 6-1: can't read configurations, error -61 [ 1108.942680][T16369] team0: Port device team_slave_1 added [ 1109.042257][T15486] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1109.214910][T15486] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.214937][T15486] usb 6-1: can't read configurations, error -61 [ 1109.215204][T15486] usb usb6-port1: attempt power cycle [ 1109.415894][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.415913][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.415939][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.432467][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.432485][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.432510][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.581989][T15486] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1109.611337][T15486] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.611379][T15486] usb 6-1: can't read configurations, error -61 [ 1109.742213][T15486] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1109.767779][T15486] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.767824][T15486] usb 6-1: can't read configurations, error -61 [ 1109.768292][T15486] usb usb6-port1: unable to enumerate USB device [ 1110.153032][T16369] hsr_slave_0: entered promiscuous mode [ 1110.154675][T16369] hsr_slave_1: entered promiscuous mode [ 1110.155807][T16369] debugfs: 'hsr0' already exists in 'hsr' [ 1110.155834][T16369] Cannot create hsr debugfs directory [ 1110.480543][ T13] bridge_slave_1: left allmulticast mode [ 1110.480577][ T13] bridge_slave_1: left promiscuous mode [ 1110.480835][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.555007][ T13] bridge_slave_0: left allmulticast mode [ 1110.555039][ T13] bridge_slave_0: left promiscuous mode [ 1110.571066][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.438606][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 1113.525769][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.588529][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.635666][ T13] bond0 (unregistering): Released all slaves [ 1115.352021][ T13] hsr_slave_0: left promiscuous mode [ 1115.412282][ T13] hsr_slave_1: left promiscuous mode [ 1115.413376][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.722905][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.332793][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.096372][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1120.624290][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1121.549418][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1121.882805][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 1123.578224][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.154621][T16567] kAFS: unable to lookup cell 'ÿ' [ 1126.187078][T16571] kAFS: unable to lookup cell '(,c¾Ì' [ 1126.380359][T14975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1126.409034][T14975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1126.419506][T14975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1126.454289][T14975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1126.470158][T14975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1128.601984][T14975] Bluetooth: hci2: command tx timeout [ 1130.672202][T14975] Bluetooth: hci2: command tx timeout [ 1132.142556][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1132.775791][T14975] Bluetooth: hci2: command tx timeout [ 1134.255831][T16616] kAFS: unable to lookup cell 'ÿ' [ 1134.256262][T16616] kAFS: unable to lookup cell '(,c¾Ì' [ 1134.938301][T14975] Bluetooth: hci2: command tx timeout [ 1136.851342][T16369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1136.901473][T16369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1137.098198][T16369] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1137.146782][T16570] chnl_net:caif_netlink_parms(): no params data found [ 1137.188561][T16369] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1137.789695][ T13] bridge_slave_1: left allmulticast mode [ 1137.789727][ T13] bridge_slave_1: left promiscuous mode [ 1137.789972][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.866751][ T13] bridge_slave_0: left allmulticast mode [ 1137.866774][ T13] bridge_slave_0: left promiscuous mode [ 1137.866962][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.720635][T16673] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3345'. [ 1144.912985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.502911][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.570508][ T13] bond0 (unregistering): Released all slaves [ 1145.843025][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.843176][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.843432][T16570] bridge_slave_0: entered allmulticast mode [ 1145.845766][T16570] bridge_slave_0: entered promiscuous mode [ 1145.902994][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.903144][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.903393][T16570] bridge_slave_1: entered allmulticast mode [ 1145.906167][T16570] bridge_slave_1: entered promiscuous mode [ 1147.288651][ T13] hsr_slave_0: left promiscuous mode [ 1147.323620][ T13] hsr_slave_1: left promiscuous mode [ 1147.324737][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.362947][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.262751][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1150.537022][T16725] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3359'. [ 1154.246704][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1155.557134][T16746] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'. [ 1155.668274][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1155.683133][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1155.684931][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1155.686331][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1155.687610][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1156.376821][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1156.651603][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3370'. [ 1158.102414][T14975] Bluetooth: hci5: command tx timeout [ 1160.125991][ T5118] Bluetooth: hci5: command tx timeout [ 1161.290892][T16788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'. [ 1162.211015][ T5118] Bluetooth: hci5: command tx timeout [ 1164.271866][ T5118] Bluetooth: hci5: command tx timeout [ 1165.217595][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.316523][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.949388][T16807] overlayfs: missing 'lowerdir' [ 1167.072977][T16570] team0: Port device team_slave_0 added [ 1168.339447][T16570] team0: Port device team_slave_1 added [ 1169.024169][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.024183][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.024199][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.036385][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.036402][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.036427][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.304993][T16570] hsr_slave_0: entered promiscuous mode [ 1169.318407][T16570] hsr_slave_1: entered promiscuous mode [ 1169.319365][T16570] debugfs: 'hsr0' already exists in 'hsr' [ 1169.319384][T16570] Cannot create hsr debugfs directory [ 1171.990904][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3387'. [ 1173.628473][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3392'. [ 1173.975489][T16747] chnl_net:caif_netlink_parms(): no params data found [ 1177.411249][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.772762][T16904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1178.599826][T16907] random: crng reseeded on system resumption [ 1180.754354][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.754573][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.754832][T16747] bridge_slave_0: entered allmulticast mode [ 1180.761622][T16747] bridge_slave_0: entered promiscuous mode [ 1180.796861][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.797027][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.797358][T16747] bridge_slave_1: entered allmulticast mode [ 1180.810420][T16747] bridge_slave_1: entered promiscuous mode [ 1181.026575][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.063594][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.784927][T16747] team0: Port device team_slave_0 added [ 1183.198869][T16747] team0: Port device team_slave_1 added [ 1184.648152][T10672] bridge_slave_1: left allmulticast mode [ 1184.648176][T10672] bridge_slave_1: left promiscuous mode [ 1184.648350][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.713826][T10672] bridge_slave_0: left allmulticast mode [ 1184.713859][T10672] bridge_slave_0: left promiscuous mode [ 1184.721217][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.682622][T10672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.782938][T10672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.854931][T10672] bond0 (unregistering): Released all slaves [ 1185.915368][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.915389][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.915417][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.967231][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.967250][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.967281][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.268828][T16957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1186.310992][T14975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1186.336521][T14975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1186.338867][T14975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1186.342627][T14975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1186.349125][T14975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.504989][T16747] hsr_slave_0: entered promiscuous mode [ 1187.506560][T16747] hsr_slave_1: entered promiscuous mode [ 1187.522409][T16747] debugfs: 'hsr0' already exists in 'hsr' [ 1187.522441][T16747] Cannot create hsr debugfs directory [ 1188.802252][T10672] hsr_slave_0: left promiscuous mode [ 1188.868496][T10672] hsr_slave_1: left promiscuous mode [ 1188.869178][T10672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.928916][T10672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.991908][ T5118] Bluetooth: hci4: command tx timeout [ 1191.887866][ T5118] Bluetooth: hci4: command tx timeout [ 1192.497121][T10672] team0 (unregistering): Port device team_slave_1 removed [ 1192.722885][T10672] team0 (unregistering): Port device team_slave_0 removed [ 1193.136493][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1193.992270][ T5118] Bluetooth: hci4: command tx timeout [ 1194.492229][T15486] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1194.897272][T17014] kAFS: unable to lookup cell 'ÿ' [ 1194.907910][T17014] kAFS: unable to lookup cell '(,c¾Ì' [ 1194.976333][T15486] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.976459][T15486] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1194.976507][T15486] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1194.976526][T15486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.006401][T15486] usb 7-1: config 0 descriptor?? [ 1195.039931][T15486] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1196.031871][ T5118] Bluetooth: hci4: command tx timeout [ 1197.252621][ T5962] usb 7-1: USB disconnect, device number 9 [ 1198.296691][T17051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3432'. [ 1199.253651][T17065] kAFS: unable to lookup cell '(,c¾Ì' [ 1201.811586][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1201.927743][T17095] gtp0: entered promiscuous mode [ 1201.927762][T17095] gtp0: entered allmulticast mode [ 1202.849850][T16958] chnl_net:caif_netlink_parms(): no params data found [ 1203.188646][T17109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3443'. [ 1203.801215][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.801458][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.802812][T16958] bridge_slave_0: entered allmulticast mode [ 1203.806185][T16958] bridge_slave_0: entered promiscuous mode [ 1203.816175][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.816412][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.816637][T16958] bridge_slave_1: entered allmulticast mode [ 1203.820152][T16958] bridge_slave_1: entered promiscuous mode [ 1204.955803][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.178516][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.990415][T16747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1206.357004][T16747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1206.521121][T16747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1206.584705][T16958] team0: Port device team_slave_0 added [ 1206.681735][T16747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1206.789090][T16958] team0: Port device team_slave_1 added [ 1207.260341][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.260364][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.260389][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.352089][T10672] bridge_slave_1: left allmulticast mode [ 1207.352121][T10672] bridge_slave_1: left promiscuous mode [ 1207.352409][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.488568][T10672] bridge_slave_0: left allmulticast mode [ 1207.488592][T10672] bridge_slave_0: left promiscuous mode [ 1207.488770][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.601363][T10672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.223109][T10672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.325948][T10672] bond0 (unregistering): Released all slaves [ 1211.379058][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.379076][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.379106][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.052948][T16958] hsr_slave_0: entered promiscuous mode [ 1213.055050][T16958] hsr_slave_1: entered promiscuous mode [ 1213.055708][T16958] debugfs: 'hsr0' already exists in 'hsr' [ 1213.055735][T16958] Cannot create hsr debugfs directory [ 1213.271962][T10672] hsr_slave_0: left promiscuous mode [ 1213.315672][T10672] hsr_slave_1: left promiscuous mode [ 1213.316920][T10672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.367671][T10672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.625224][T17193] kAFS: unable to lookup cell '(,c¾Ì' [ 1213.737771][T17194] NILFS (nullb0): couldn't find nilfs on the device [ 1215.496535][T10672] team0 (unregistering): Port device team_slave_1 removed [ 1215.665054][T10672] team0 (unregistering): Port device team_slave_0 removed [ 1216.255501][T17209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1216.289407][T17209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1216.305473][T17209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1216.320858][T17209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1216.329286][T17209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1217.061479][T17215] kAFS: unable to lookup cell 'ÿ' [ 1217.061621][T17215] kAFS: unable to lookup cell '(,c¾Ì' [ 1218.511812][T17209] Bluetooth: hci2: command tx timeout [ 1220.591851][T17209] Bluetooth: hci2: command tx timeout [ 1222.831915][T17209] Bluetooth: hci2: command tx timeout [ 1223.869321][T17208] chnl_net:caif_netlink_parms(): no params data found [ 1223.885156][T17285] kAFS: unable to lookup cell 'ÿ' [ 1223.885265][T17285] kAFS: unable to lookup cell '(,c¾Ì' [ 1224.994294][T17209] Bluetooth: hci2: command tx timeout [ 1226.323884][T17208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.324118][T17208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.324384][T17208] bridge_slave_0: entered allmulticast mode [ 1226.327450][T17208] bridge_slave_0: entered promiscuous mode [ 1226.630497][T17315] random: crng reseeded on system resumption [ 1227.113133][T17208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.113277][T17208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.113535][T17208] bridge_slave_1: entered allmulticast mode [ 1227.115676][T17208] bridge_slave_1: entered promiscuous mode [ 1227.411122][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.440755][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.683920][T16958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1227.815943][T17208] team0: Port device team_slave_0 added [ 1227.817131][T16958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1227.868854][T17208] team0: Port device team_slave_1 added [ 1227.872446][T16958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1228.006619][T10672] bridge_slave_1: left allmulticast mode [ 1228.006649][T10672] bridge_slave_1: left promiscuous mode [ 1228.006910][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.117765][T10672] bridge_slave_0: left allmulticast mode [ 1228.117798][T10672] bridge_slave_0: left promiscuous mode [ 1228.118095][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.338587][T10672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.483097][T10672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.588209][T10672] bond0 (unregistering): Released all slaves [ 1229.786411][T16958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1230.414588][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.414608][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.414636][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.681808][T10672] hsr_slave_0: left promiscuous mode [ 1230.700498][T17364] kAFS: unable to lookup cell 'ÿ' [ 1230.700628][T17364] kAFS: unable to lookup cell '(,c¾Ì' [ 1230.730341][T10672] hsr_slave_1: left promiscuous mode [ 1230.731179][T10672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.762513][T10672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.813190][T10672] team0 (unregistering): Port device team_slave_1 removed [ 1233.082678][T10672] team0 (unregistering): Port device team_slave_0 removed [ 1233.417850][T17387] random: crng reseeded on system resumption [ 1234.403312][T17396] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3490'. [ 1235.606043][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.606172][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.606396][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.686062][T17410] NILFS (nullb0): couldn't find nilfs on the device [ 1236.512325][T17411] kAFS: unable to lookup cell 'ÿ' [ 1237.063012][T17419] kAFS: unable to lookup cell '(,c¾Ì' [ 1237.285093][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 1237.334413][T17208] hsr_slave_0: entered promiscuous mode [ 1237.335991][T17208] hsr_slave_1: entered promiscuous mode [ 1237.337080][T17208] debugfs: 'hsr0' already exists in 'hsr' [ 1237.337103][T17208] Cannot create hsr debugfs directory [ 1238.101912][T16424] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1238.228977][T16958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.260767][T16424] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1238.260797][T16424] usb 7-1: config 1 has no interface number 0 [ 1238.260842][T16424] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1238.260870][T16424] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1238.260906][T16424] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.309544][T16424] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1238.309576][T16424] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.309594][T16424] usb 7-1: Product: syz [ 1238.309606][T16424] usb 7-1: Manufacturer: syz [ 1238.309619][T16424] usb 7-1: SerialNumber: syz [ 1238.354501][T17433] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1238.546170][T16958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.620547][T16958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1239.620565][T16958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.654898][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.658429][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.906353][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.975269][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.975429][ T4560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.367668][T17456] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1242.223672][T16424] usb 7-1: Error in usbnet_get_endpoints (-71) [ 1242.839436][T17471] io-wq is not configured for unbound workers [ 1243.002244][T16424] usb 7-1: USB disconnect, device number 10 [ 1243.189817][T17477] kAFS: unable to lookup cell 'ÿ' [ 1243.189966][T17477] kAFS: unable to lookup cell '(,c¾Ì' [ 1244.520624][T16958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.635176][T17208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1248.720848][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1248.725197][T17208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1248.762596][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1248.766738][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1248.774183][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1248.779650][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.869541][T17208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1248.949289][T17208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1249.385332][T17533] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3509'. [ 1250.829197][T17540] kAFS: unable to lookup cell 'ÿ' [ 1250.829396][T17540] kAFS: unable to lookup cell '(,c¾Ì' [ 1250.941254][ T5118] Bluetooth: hci5: command tx timeout [ 1251.473020][T17542] kAFS: unable to lookup cell 'ÿ' [ 1251.473176][T17542] kAFS: unable to lookup cell '(,c¾Ì' [ 1253.123231][ T5118] Bluetooth: hci5: command tx timeout [ 1255.230376][ T5118] Bluetooth: hci5: command tx timeout [ 1257.160315][T17522] chnl_net:caif_netlink_parms(): no params data found [ 1257.232025][ T5118] Bluetooth: hci5: command tx timeout [ 1257.272837][T17581] kAFS: unable to lookup cell 'ÿ' [ 1257.280644][T17581] kAFS: unable to lookup cell '(,c¾Ì' [ 1257.916153][T17208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.144267][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.144414][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.144682][T17522] bridge_slave_0: entered allmulticast mode [ 1258.151257][T17522] bridge_slave_0: entered promiscuous mode [ 1258.184068][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.184222][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.184878][T17522] bridge_slave_1: entered allmulticast mode [ 1258.220394][T17522] bridge_slave_1: entered promiscuous mode [ 1258.230070][ T3970] bridge_slave_1: left allmulticast mode [ 1258.230101][ T3970] bridge_slave_1: left promiscuous mode [ 1258.230357][ T3970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.318121][ T3970] bridge_slave_0: left allmulticast mode [ 1258.318155][ T3970] bridge_slave_0: left promiscuous mode [ 1258.318459][ T3970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.720000][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1258.720055][T17591] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1260.572569][T17603] kAFS: unable to lookup cell 'ÿ' [ 1260.572839][T17603] kAFS: unable to lookup cell '(,c¾Ì' [ 1260.860991][T16424] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1261.034551][T16424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.034605][T16424] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1261.034629][T16424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.038713][T16424] usb 7-1: config 0 descriptor?? [ 1261.052840][T16424] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1261.822944][ T3970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.883485][ T3970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.925179][ T3970] bond0 (unregistering): Released all slaves [ 1262.185745][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.253770][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.339854][T17208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.494792][ T3970] hsr_slave_0: left promiscuous mode [ 1262.552180][ T3970] hsr_slave_1: left promiscuous mode [ 1262.553190][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.602641][ T3970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.576017][ T5962] usb 7-1: USB disconnect, device number 11 [ 1264.774377][ T3970] team0 (unregistering): Port device team_slave_1 removed [ 1265.343538][ T3970] team0 (unregistering): Port device team_slave_0 removed [ 1267.140039][T17639] kAFS: unable to lookup cell 'ÿ' [ 1267.140178][T17639] kAFS: unable to lookup cell '(,c¾Ì' [ 1268.497629][T17647] overlayfs: missing 'lowerdir' [ 1271.200257][T17655] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3539'. [ 1273.497397][T17522] team0: Port device team_slave_0 added [ 1273.658409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.668141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.673952][T17522] team0: Port device team_slave_1 added [ 1273.710817][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.710903][ T4560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.806868][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.806882][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.806898][T17522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.811118][T17522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.811135][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.811161][T17522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.120052][T17522] hsr_slave_0: entered promiscuous mode [ 1274.124104][T17522] hsr_slave_1: entered promiscuous mode [ 1274.125035][T17522] debugfs: 'hsr0' already exists in 'hsr' [ 1274.125058][T17522] Cannot create hsr debugfs directory [ 1275.203887][T17675] kAFS: unable to lookup cell 'ÿ' [ 1275.203995][T17675] kAFS: unable to lookup cell '(,c¾Ì' [ 1276.739947][T17688] overlayfs: missing 'lowerdir' [ 1278.965769][T17209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1278.986334][T17209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1278.988699][T17209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1278.990321][T17209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1278.994141][T17209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1281.221803][ T5118] Bluetooth: hci4: command tx timeout [ 1281.512624][T17715] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3549'. [ 1283.997770][ T5118] Bluetooth: hci4: command tx timeout [ 1286.588511][T17732] overlayfs: missing 'workdir' [ 1287.479419][T17209] Bluetooth: hci4: command tx timeout [ 1288.416700][T17522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1288.532916][T17744] kAFS: unable to lookup cell 'ÿ' [ 1288.533028][T17744] kAFS: unable to lookup cell '(,c¾Ì' [ 1288.911937][T17522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1288.966950][T17522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1289.063456][T17522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1289.552978][T17209] Bluetooth: hci4: command tx timeout [ 1289.560188][T17697] chnl_net:caif_netlink_parms(): no params data found [ 1289.948158][ T58] bridge_slave_1: left allmulticast mode [ 1289.948180][ T58] bridge_slave_1: left promiscuous mode [ 1289.948354][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.023825][ T58] bridge_slave_0: left allmulticast mode [ 1290.023850][ T58] bridge_slave_0: left promiscuous mode [ 1290.024029][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.173052][T17777] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3562'. [ 1292.926416][T17788] NILFS (nullb0): couldn't find nilfs on the device [ 1296.654353][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.932177][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.964745][ T58] bond0 (unregistering): Released all slaves [ 1297.422150][T17697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.422302][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.422570][T17697] bridge_slave_0: entered allmulticast mode [ 1297.425472][T17697] bridge_slave_0: entered promiscuous mode [ 1297.466335][T17697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.466422][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.466576][T17697] bridge_slave_1: entered allmulticast mode [ 1297.468228][T17697] bridge_slave_1: entered promiscuous mode [ 1297.687643][T17697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.821807][ T58] hsr_slave_0: left promiscuous mode [ 1297.863599][ T58] hsr_slave_1: left promiscuous mode [ 1297.865143][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.896790][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.977833][T17814] overlayfs: failed to resolve './file1': -2 [ 1300.385145][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.533003][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1302.944510][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1304.520688][T17848] random: crng reseeded on system resumption [ 1309.392616][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1309.400765][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1309.410157][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1309.418032][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1309.418850][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1309.558231][T17697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.912416][T17881] kAFS: unable to lookup cell 'ÿ' [ 1309.981356][T17883] kAFS: unable to lookup cell '(,c¾Ì' [ 1310.190015][T17697] team0: Port device team_slave_0 added [ 1310.212128][T17697] team0: Port device team_slave_1 added [ 1311.422042][T17697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.422061][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.422089][T17697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.554472][ T5118] Bluetooth: hci2: command tx timeout [ 1311.626484][T17697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.626499][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.626516][T17697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.568052][T17697] hsr_slave_0: entered promiscuous mode [ 1313.569850][T17697] hsr_slave_1: entered promiscuous mode [ 1313.571148][T17697] debugfs: 'hsr0' already exists in 'hsr' [ 1313.571176][T17697] Cannot create hsr debugfs directory [ 1313.633512][ T5118] Bluetooth: hci2: command tx timeout [ 1314.123819][T17913] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3590'. [ 1315.879995][ T5118] Bluetooth: hci2: command tx timeout [ 1317.212443][T17872] chnl_net:caif_netlink_parms(): no params data found [ 1317.951800][ T5118] Bluetooth: hci2: command tx timeout [ 1318.998767][ T36] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1319.191762][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 1319.195997][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.196033][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.196075][ T36] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1319.196100][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.290511][ T36] usb 7-1: config 0 descriptor?? [ 1319.383722][T17960] kAFS: unable to lookup cell 'ÿ' [ 1319.384992][T17960] kAFS: unable to lookup cell '(,c¾Ì' [ 1319.512706][ T36] usbhid 7-1:0.0: can't add hid device: -71 [ 1319.512838][ T36] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1319.578554][ T36] usb 7-1: USB disconnect, device number 12 [ 1319.933047][T17970] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3600'. [ 1325.217059][T17994] random: crng reseeded on system resumption [ 1326.018591][T17872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.018785][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.019177][T17872] bridge_slave_0: entered allmulticast mode [ 1326.029287][T17872] bridge_slave_0: entered promiscuous mode [ 1326.093128][T18004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1327.207170][T17872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.207266][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.207457][T17872] bridge_slave_1: entered allmulticast mode [ 1327.209244][T17872] bridge_slave_1: entered promiscuous mode [ 1327.221796][ T5962] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1327.372830][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 1327.374655][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.374676][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.374700][ T5962] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1327.374714][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.377926][ T5962] usb 6-1: config 0 descriptor?? [ 1327.607548][ T5962] usbhid 6-1:0.0: can't add hid device: -71 [ 1327.607640][ T5962] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1327.624120][ T5962] usb 6-1: USB disconnect, device number 16 [ 1329.594127][T17872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.614112][T17872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.439772][T17872] team0: Port device team_slave_0 added [ 1330.466106][T17872] team0: Port device team_slave_1 added [ 1332.609036][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1333.046293][T17872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.046306][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.046322][T17872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.053855][T17872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.053871][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.053895][T17872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.196121][ T5817] usb 7-1: Using ep0 maxpacket: 32 [ 1333.198770][ T5817] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1333.198803][ T5817] usb 7-1: config 0 has no interface number 0 [ 1333.201297][ T5817] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1333.201321][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.201339][ T5817] usb 7-1: Product: syz [ 1333.201352][ T5817] usb 7-1: Manufacturer: syz [ 1333.201365][ T5817] usb 7-1: SerialNumber: syz [ 1333.220731][ T5817] usb 7-1: config 0 descriptor?? [ 1333.270801][ T5817] smsc95xx v2.0.0 [ 1333.270824][ T5817] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1333.271143][ T5817] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 1333.478334][T17872] hsr_slave_0: entered promiscuous mode [ 1333.500059][T17872] hsr_slave_1: entered promiscuous mode [ 1333.500681][T17872] debugfs: 'hsr0' already exists in 'hsr' [ 1333.500698][T17872] Cannot create hsr debugfs directory [ 1333.505917][T17697] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1333.800584][T18036] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3619'. [ 1334.507923][T17697] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1334.775402][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3620'. [ 1334.800752][T17697] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1334.847700][T17697] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1334.913812][ T58] bridge_slave_1: left allmulticast mode [ 1334.913843][ T58] bridge_slave_1: left promiscuous mode [ 1334.914133][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.008898][ T58] bridge_slave_0: left allmulticast mode [ 1335.008920][ T58] bridge_slave_0: left promiscuous mode [ 1335.009108][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.241786][ T5962] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1335.401823][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 1335.406757][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.406819][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.407041][ T5962] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1335.407064][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.458254][ T5962] usb 6-1: config 0 descriptor?? [ 1335.712590][ T5962] usbhid 6-1:0.0: can't add hid device: -71 [ 1335.712734][ T5962] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1335.785282][ T5962] usb 6-1: USB disconnect, device number 17 [ 1336.174534][ T36] usb 7-1: USB disconnect, device number 13 [ 1336.474720][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.432364][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.514268][ T58] bond0 (unregistering): Released all slaves [ 1337.544417][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3626'. [ 1337.813107][T17697] kthread_run failed with err -4 [ 1338.084495][ T58] hsr_slave_0: left promiscuous mode [ 1338.162418][ T58] hsr_slave_1: left promiscuous mode [ 1338.164501][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.258318][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.888640][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1339.156596][T18076] random: crng reseeded on system resumption [ 1339.474022][T17209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1339.510820][T17209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1339.526948][T17209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1339.534443][T17209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1339.537845][T17209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1339.865968][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1340.030353][T18084] random: crng reseeded on system resumption [ 1341.844256][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1341.881854][ T5118] Bluetooth: hci4: command tx timeout [ 1344.173249][T17209] Bluetooth: hci4: command tx timeout [ 1345.572619][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'. [ 1346.191885][T17209] Bluetooth: hci4: command tx timeout [ 1347.564283][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1348.019331][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'. [ 1348.298514][T17209] Bluetooth: hci4: command tx timeout [ 1349.678480][T18079] chnl_net:caif_netlink_parms(): no params data found [ 1350.248882][T18182] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3651'. [ 1352.050809][T18210] random: crng reseeded on system resumption [ 1352.967052][T18079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.969026][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.021948][T18079] bridge_slave_0: entered allmulticast mode [ 1353.024986][T18079] bridge_slave_0: entered promiscuous mode [ 1353.052135][T18079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.052281][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.052547][T18079] bridge_slave_1: entered allmulticast mode [ 1353.055810][T18079] bridge_slave_1: entered promiscuous mode [ 1353.446242][T18222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3657'. [ 1354.335830][T17872] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1354.402768][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3658'. [ 1354.785308][T18237] random: crng reseeded on system resumption [ 1355.256623][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.281904][T17872] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1355.544209][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.942230][T17872] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1356.052655][T17872] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1356.116090][T18079] team0: Port device team_slave_0 added [ 1356.138148][T18079] team0: Port device team_slave_1 added [ 1356.616249][T18262] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3666'. [ 1357.673168][T18265] kAFS: unable to lookup cell 'ÿ' [ 1357.830458][T18270] kAFS: unable to lookup cell '(,c¾Ì' [ 1357.857619][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3667'. [ 1358.150888][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.150903][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.150919][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.222092][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.222112][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.222141][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.776909][T18079] hsr_slave_0: entered promiscuous mode [ 1358.805954][T18079] hsr_slave_1: entered promiscuous mode [ 1358.823095][T18079] debugfs: 'hsr0' already exists in 'hsr' [ 1358.823126][T18079] Cannot create hsr debugfs directory [ 1358.963129][ T58] bridge_slave_1: left allmulticast mode [ 1358.963163][ T58] bridge_slave_1: left promiscuous mode [ 1358.963436][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.132052][ T58] bridge_slave_0: left allmulticast mode [ 1359.132086][ T58] bridge_slave_0: left promiscuous mode [ 1359.132383][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.007138][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.042542][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.155069][ T58] bond0 (unregistering): Released all slaves [ 1361.703084][ T58] hsr_slave_0: left promiscuous mode [ 1361.724734][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.771890][ T58] hsr_slave_1: left promiscuous mode [ 1361.772649][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.823816][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.392125][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'. [ 1363.557144][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1364.052975][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1364.226007][ T5817] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1364.431781][ T5817] usb 7-1: Using ep0 maxpacket: 8 [ 1364.444343][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.444375][ T5817] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.444413][ T5817] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1364.444434][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.457186][ T5817] usb 7-1: config 0 descriptor?? [ 1364.713144][ T5817] usbhid 7-1:0.0: can't add hid device: -71 [ 1364.713288][ T5817] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1364.717933][ T5817] usb 7-1: USB disconnect, device number 14 [ 1365.462531][T18320] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3679'. [ 1371.872427][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1371.921155][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1371.939450][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1371.952427][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1371.975086][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1373.877206][ T36] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1374.025038][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.025070][ T36] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1374.025103][ T36] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1374.025117][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.032216][ T5118] Bluetooth: hci5: command tx timeout [ 1374.056594][ T36] usb 7-1: config 0 descriptor?? [ 1375.733050][T18079] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1375.820036][T18079] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1376.115392][ T5118] Bluetooth: hci5: command tx timeout [ 1376.334242][T18079] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1376.451906][T18079] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1376.568394][T18354] chnl_net:caif_netlink_parms(): no params data found [ 1376.635873][ T5817] usb 7-1: USB disconnect, device number 15 [ 1377.296532][T18401] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1378.192128][ T5118] Bluetooth: hci5: command tx timeout [ 1378.609293][T18411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.413472][ T5118] Bluetooth: hci5: command tx timeout [ 1383.677474][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.677550][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.677731][T18354] bridge_slave_0: entered allmulticast mode [ 1383.682700][T18354] bridge_slave_0: entered promiscuous mode [ 1383.817356][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.817492][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.817715][T18354] bridge_slave_1: entered allmulticast mode [ 1383.820826][T18354] bridge_slave_1: entered promiscuous mode [ 1384.134089][ T58] bridge_slave_1: left allmulticast mode [ 1384.134120][ T58] bridge_slave_1: left promiscuous mode [ 1384.134394][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.240042][T18432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.342489][ T58] bridge_slave_0: left allmulticast mode [ 1385.342520][ T58] bridge_slave_0: left promiscuous mode [ 1385.342775][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.615808][T18441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.414634][T18453] kAFS: unable to lookup cell 'ÿ' [ 1389.415011][T18453] kAFS: unable to lookup cell '(,c¾Ì' [ 1390.641397][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.752828][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.848058][ T58] bond0 (unregistering): Released all slaves [ 1391.008362][T18354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.254995][T18354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.715174][T18474] random: crng reseeded on system resumption [ 1393.112099][ T58] hsr_slave_0: left promiscuous mode [ 1393.165955][ T58] hsr_slave_1: left promiscuous mode [ 1393.166704][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.216742][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.589775][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1395.949523][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1396.094420][ T5962] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1396.274864][ T5962] usb 7-1: Using ep0 maxpacket: 32 [ 1396.318798][ T5962] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1396.318822][ T5962] usb 7-1: config 0 has no interface number 0 [ 1396.322005][ T5962] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1396.322137][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.322161][ T5962] usb 7-1: Product: syz [ 1396.322176][ T5962] usb 7-1: Manufacturer: syz [ 1396.322191][ T5962] usb 7-1: SerialNumber: syz [ 1396.327091][ T5962] usb 7-1: config 0 descriptor?? [ 1396.336690][ T5962] smsc95xx v2.0.0 [ 1396.336709][ T5962] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1396.336992][ T5962] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 1396.741732][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1397.060953][ T5790] usb 7-1: USB disconnect, device number 16 [ 1401.481340][T18354] team0: Port device team_slave_0 added [ 1401.634412][T18354] team0: Port device team_slave_1 added [ 1401.802527][T18354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.802546][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.802574][T18354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.843634][T18354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.843655][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.843681][T18354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.068633][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1402.112443][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1402.117514][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1402.140968][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1402.146083][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1402.358028][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 1402.529514][T18354] hsr_slave_0: entered promiscuous mode [ 1402.531930][T18354] hsr_slave_1: entered promiscuous mode [ 1402.533726][T18354] debugfs: 'hsr0' already exists in 'hsr' [ 1402.533752][T18354] Cannot create hsr debugfs directory [ 1405.241757][ T5118] Bluetooth: hci2: command tx timeout [ 1407.162578][T18554] random: crng reseeded on system resumption [ 1407.314798][ T5118] Bluetooth: hci2: command tx timeout [ 1409.391720][ T5118] Bluetooth: hci2: command tx timeout [ 1411.526743][ T5118] Bluetooth: hci2: command tx timeout [ 1413.329783][T18581] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1416.524116][T18594] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1416.529813][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1416.616165][T18598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.238491][T18516] chnl_net:caif_netlink_parms(): no params data found [ 1419.285467][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.292441][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.292727][T18516] bridge_slave_0: entered allmulticast mode [ 1419.304609][T18516] bridge_slave_0: entered promiscuous mode [ 1419.311505][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.314660][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.314896][T18516] bridge_slave_1: entered allmulticast mode [ 1419.320032][T18516] bridge_slave_1: entered promiscuous mode [ 1419.674555][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.819644][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.205843][T18516] team0: Port device team_slave_0 added [ 1420.322511][T18516] team0: Port device team_slave_1 added [ 1421.644816][T18354] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1421.678036][T18632] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3748'. [ 1421.808676][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.808691][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.808707][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.861949][T18354] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1423.050918][T18641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.089180][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.089195][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.089212][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.090247][ T58] bridge_slave_1: left allmulticast mode [ 1423.090274][ T58] bridge_slave_1: left promiscuous mode [ 1423.090443][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.278553][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.414314][ T58] bridge_slave_0: left allmulticast mode [ 1423.414338][ T58] bridge_slave_0: left promiscuous mode [ 1423.414520][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.242232][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.373618][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.458488][ T58] bond0 (unregistering): Released all slaves [ 1429.540917][T18661] NILFS (nullb0): couldn't find nilfs on the device [ 1429.555858][T18354] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1429.744811][T18663] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3757'. [ 1429.813436][T18354] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1430.272554][T18668] random: crng reseeded on system resumption [ 1430.869963][ T58] hsr_slave_0: left promiscuous mode [ 1430.901880][ T58] hsr_slave_1: left promiscuous mode [ 1430.903149][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.963424][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.587054][T18681] kAFS: unable to lookup cell 'ÿ' [ 1432.587254][T18681] kAFS: unable to lookup cell '(,c¾Ì' [ 1432.673492][T17209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1432.680715][T17209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1432.709582][T17209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1432.719610][T17209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1432.720441][T17209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1432.843507][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1433.178089][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1435.851614][ T5118] Bluetooth: hci4: command tx timeout [ 1437.871696][ T5118] Bluetooth: hci4: command tx timeout [ 1437.974997][T18709] random: crng reseeded on system resumption [ 1438.083810][T18354] kthread_run failed with err -4 [ 1438.141049][T18516] hsr_slave_0: entered promiscuous mode [ 1438.149427][T18516] hsr_slave_1: entered promiscuous mode [ 1438.155955][T18516] debugfs: 'hsr0' already exists in 'hsr' [ 1438.155982][T18516] Cannot create hsr debugfs directory [ 1439.074707][T18717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.654408][ T5118] Bluetooth: hci4: command tx timeout [ 1443.819260][T17209] Bluetooth: hci4: command tx timeout [ 1445.440156][T18738] kAFS: unable to lookup cell 'ÿ' [ 1445.442214][T18738] kAFS: unable to lookup cell '(,c¾Ì' [ 1446.923673][T18748] random: crng reseeded on system resumption [ 1447.511361][T18754] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.494325][T18761] kAFS: unable to lookup cell 'ÿ' [ 1448.495018][T18761] kAFS: unable to lookup cell '(,c¾Ì' [ 1449.692375][T18682] chnl_net:caif_netlink_parms(): no params data found [ 1450.513628][T18682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.513707][T18682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.513883][T18682] bridge_slave_0: entered allmulticast mode [ 1450.537709][T18682] bridge_slave_0: entered promiscuous mode [ 1450.775840][T18682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.775990][T18682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.776251][T18682] bridge_slave_1: entered allmulticast mode [ 1450.780015][T18682] bridge_slave_1: entered promiscuous mode [ 1453.117732][T18784] random: crng reseeded on system resumption [ 1453.192585][T18682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.269780][T18682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.401682][T18516] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1453.531851][T18516] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1453.557096][ T58] bridge_slave_1: left allmulticast mode [ 1453.557130][ T58] bridge_slave_1: left promiscuous mode [ 1453.557399][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.663199][ T58] bridge_slave_0: left allmulticast mode [ 1453.663235][ T58] bridge_slave_0: left promiscuous mode [ 1453.663550][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.509670][T18797] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1458.051305][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.163091][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.245387][ T58] bond0 (unregistering): Released all slaves [ 1458.686180][T18682] team0: Port device team_slave_0 added [ 1458.693841][T18516] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1458.904609][T18682] team0: Port device team_slave_1 added [ 1458.905319][T18516] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1459.413134][T18682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1459.413155][T18682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.413185][T18682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.536263][T18818] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1460.541888][ T58] hsr_slave_0: left promiscuous mode [ 1460.583866][ T58] hsr_slave_1: left promiscuous mode [ 1460.584706][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.632597][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.162914][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1462.272441][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1462.823371][T18516] kthread_run failed with err -4 [ 1462.842996][T18682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.843014][T18682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.843044][T18682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.229590][T18682] hsr_slave_0: entered promiscuous mode [ 1463.240460][T18682] hsr_slave_1: entered promiscuous mode [ 1463.256109][T18682] debugfs: 'hsr0' already exists in 'hsr' [ 1463.256144][T18682] Cannot create hsr debugfs directory [ 1463.387407][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1463.408371][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1463.410288][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1463.411374][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1463.433608][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1466.165434][T17209] Bluetooth: hci5: command tx timeout [ 1467.200153][T18855] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3803'. [ 1468.192217][T17209] Bluetooth: hci5: command tx timeout [ 1470.272691][T17209] Bluetooth: hci5: command tx timeout [ 1473.190204][T17209] Bluetooth: hci5: command tx timeout [ 1475.006476][T18841] chnl_net:caif_netlink_parms(): no params data found [ 1475.495918][T18682] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1476.078181][T18902] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1477.232250][T18682] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1477.345135][T18682] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1477.572874][T18910] random: crng reseeded on system resumption [ 1478.014187][T18682] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1478.069360][T18841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.069438][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.069618][T18841] bridge_slave_0: entered allmulticast mode [ 1478.074060][T18841] bridge_slave_0: entered promiscuous mode [ 1478.142348][T18841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.142426][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.142617][T18841] bridge_slave_1: entered allmulticast mode [ 1478.150703][T18841] bridge_slave_1: entered promiscuous mode [ 1479.447113][ T58] bridge_slave_1: left allmulticast mode [ 1479.447136][ T58] bridge_slave_1: left promiscuous mode [ 1479.447301][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.534154][ T58] bridge_slave_0: left allmulticast mode [ 1479.534187][ T58] bridge_slave_0: left promiscuous mode [ 1479.534486][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.598252][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.717832][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.787328][ T58] bond0 (unregistering): Released all slaves [ 1480.907317][T18841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.013396][T18841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.174820][T18841] team0: Port device team_slave_0 added [ 1481.331959][ T58] hsr_slave_0: left promiscuous mode [ 1481.547440][ T58] hsr_slave_1: left promiscuous mode [ 1481.549256][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.622467][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.434670][T18949] nfs: Unknown parameter 'ac' [ 1484.632519][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.008207][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1486.418669][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1487.634969][T18970] kAFS: unable to lookup cell 'ÿ' [ 1487.635344][T18970] kAFS: unable to lookup cell '(,c¾Ì' [ 1487.672282][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1488.254985][T18841] team0: Port device team_slave_1 added [ 1488.641765][T18841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.641785][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.641815][T18841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.707181][T18841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.707200][T18841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.707229][T18841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.181449][T18841] hsr_slave_0: entered promiscuous mode [ 1489.183055][T18841] hsr_slave_1: entered promiscuous mode [ 1489.189831][T18841] debugfs: 'hsr0' already exists in 'hsr' [ 1489.189854][T18841] Cannot create hsr debugfs directory [ 1490.993274][T18682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.248606][T18682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.332417][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.333398][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.051192][T18994] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.660382][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1494.680691][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1494.695587][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1494.715191][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1494.718762][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1494.894165][T18841] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1495.464896][T18841] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1496.521648][T18841] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1496.839482][T17209] Bluetooth: hci2: command tx timeout [ 1498.610670][T19035] ieee802154 phy1 wpan1: encryption failed: -22 [ 1499.053034][T19036] random: crng reseeded on system resumption [ 1499.071724][T17209] Bluetooth: hci2: command tx timeout [ 1499.479101][T18841] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1499.859934][T19041] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3843'. [ 1500.220355][T19057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1500.268818][T19057] netlink: 584 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1501.153954][T17209] Bluetooth: hci2: command tx timeout [ 1502.586438][T19011] chnl_net:caif_netlink_parms(): no params data found [ 1502.740009][ T13] bridge_slave_1: left allmulticast mode [ 1502.740045][ T13] bridge_slave_1: left promiscuous mode [ 1502.740327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.845244][ T13] bridge_slave_0: left allmulticast mode [ 1502.845277][ T13] bridge_slave_0: left promiscuous mode [ 1502.845603][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.231683][T17209] Bluetooth: hci2: command tx timeout [ 1504.565437][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1506.343644][T19101] kAFS: unable to lookup cell 'ÿ' [ 1506.344926][T19101] kAFS: unable to lookup cell '(,c¾Ì' [ 1506.534781][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.720291][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.775844][ T13] bond0 (unregistering): Released all slaves [ 1506.914039][T19093] netlink: 'syz.6.3852': attribute type 12 has an invalid length. [ 1507.128435][T19110] kAFS: unable to lookup cell 'ÿ' [ 1507.128765][T19110] kAFS: unable to lookup cell '(,c¾Ì' [ 1507.402994][ T13] hsr_slave_0: left promiscuous mode [ 1507.442243][ T13] hsr_slave_1: left promiscuous mode [ 1507.443380][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.496158][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.244090][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1509.450652][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1511.204553][T19147] kAFS: unable to lookup cell 'ÿ' [ 1511.204721][T19147] kAFS: unable to lookup cell '(,c¾Ì' [ 1513.556035][T19154] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1513.948924][T18841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.949969][T19011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.991655][T19011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.991930][T19011] bridge_slave_0: entered allmulticast mode [ 1513.999667][T19011] bridge_slave_0: entered promiscuous mode [ 1514.034969][T19011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.036986][T19011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.037251][T19011] bridge_slave_1: entered allmulticast mode [ 1514.039092][T19011] bridge_slave_1: entered promiscuous mode [ 1514.222354][T19011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1514.237569][T19011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.433976][T18841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.724549][T19011] team0: Port device team_slave_0 added [ 1515.348706][T19011] team0: Port device team_slave_1 added [ 1515.635584][T19179] random: crng reseeded on system resumption [ 1515.745510][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.747402][T10672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.593706][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.593834][T12712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.626078][T19011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.626096][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.626123][T19011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.692979][T19011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.692999][T19011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.693025][T19011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.886120][T19011] hsr_slave_0: entered promiscuous mode [ 1517.887724][T19011] hsr_slave_1: entered promiscuous mode [ 1517.888895][T19011] debugfs: 'hsr0' already exists in 'hsr' [ 1517.888923][T19011] Cannot create hsr debugfs directory [ 1517.976311][T19193] kAFS: unable to lookup cell 'ÿ' [ 1517.976423][T19193] kAFS: unable to lookup cell '(,c¾Ì' [ 1520.935543][T19223] kAFS: unable to lookup cell 'ÿ' [ 1520.936063][T19223] kAFS: unable to lookup cell '(,c¾Ì' [ 1525.308063][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1525.313797][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1525.322797][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1525.327922][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1525.800872][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1526.133620][T19267] random: crng reseeded on system resumption [ 1526.383834][T19011] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1526.578528][T19011] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1527.819164][T19011] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1527.846898][T19011] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1528.201822][T17209] Bluetooth: hci4: command tx timeout [ 1530.280994][T17209] Bluetooth: hci4: command tx timeout [ 1531.148112][T19301] kAFS: unable to lookup cell 'ÿ' [ 1531.148606][T19301] kAFS: unable to lookup cell '(,c¾Ì' [ 1532.351825][T17209] Bluetooth: hci4: command tx timeout [ 1534.431997][T17209] Bluetooth: hci4: command tx timeout [ 1536.235913][T19261] chnl_net:caif_netlink_parms(): no params data found [ 1536.357082][T10672] bridge_slave_1: left allmulticast mode [ 1536.357114][T10672] bridge_slave_1: left promiscuous mode [ 1536.357412][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.467712][T10672] bridge_slave_0: left allmulticast mode [ 1536.467747][T10672] bridge_slave_0: left promiscuous mode [ 1536.468094][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.229360][T19339] random: crng reseeded on system resumption [ 1541.053126][T10672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.092096][T10672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.113964][T10672] bond0 (unregistering): Released all slaves [ 1541.545556][T19354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3910'. [ 1541.807532][T19356] netlink: 'syz.6.3910': attribute type 12 has an invalid length. [ 1542.691924][T10672] hsr_slave_0: left promiscuous mode [ 1542.731617][T10672] hsr_slave_1: left promiscuous mode [ 1542.733656][T10672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.785738][T10672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.700509][T19382] kAFS: unable to lookup cell 'ÿ' [ 1545.701156][T19382] kAFS: unable to lookup cell '(,c¾Ì' [ 1546.070774][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.922673][T10672] team0 (unregistering): Port device team_slave_1 removed [ 1547.265349][T10672] team0 (unregistering): Port device team_slave_0 removed [ 1549.095331][T19393] random: crng reseeded on system resumption [ 1550.526135][T19397] random: crng reseeded on system resumption [ 1551.134198][T19261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.134349][T19261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.134615][T19261] bridge_slave_0: entered allmulticast mode [ 1551.229880][T19261] bridge_slave_0: entered promiscuous mode [ 1551.312726][T19011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.317053][T19261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.317131][T19261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.317308][T19261] bridge_slave_1: entered allmulticast mode [ 1551.401146][T19261] bridge_slave_1: entered promiscuous mode [ 1551.784554][T19261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.801179][T19011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.843274][T19261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.975035][T19414] kAFS: unable to lookup cell 'ÿ' [ 1551.975680][T19414] kAFS: unable to lookup cell '(,c¾Ì' [ 1552.135446][T19261] team0: Port device team_slave_0 added [ 1552.232063][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.232154][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.238163][T19261] team0: Port device team_slave_1 added [ 1552.402638][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.402731][T12564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.490453][T19261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.490473][T19261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.490502][T19261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.708350][T19261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.708371][T19261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.708402][T19261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.164958][T19261] hsr_slave_0: entered promiscuous mode [ 1553.186706][T19261] hsr_slave_1: entered promiscuous mode [ 1553.201233][T19261] debugfs: 'hsr0' already exists in 'hsr' [ 1553.201265][T19261] Cannot create hsr debugfs directory [ 1555.942386][T19460] random: crng reseeded on system resumption [ 1556.411299][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1556.437553][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1556.455825][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1556.471395][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1556.496505][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1559.092936][T19475] overlayfs: missing 'workdir' [ 1559.981561][T17209] Bluetooth: hci2: command tx timeout [ 1562.034407][ T5118] Bluetooth: hci2: command tx timeout [ 1563.197947][T19509] random: crng reseeded on system resumption [ 1563.671991][T19261] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1563.730634][T19261] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1563.795094][T19261] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1564.036158][T19261] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1564.117698][ T5118] Bluetooth: hci2: command tx timeout [ 1566.211677][ T5118] Bluetooth: hci2: command tx timeout [ 1566.535579][ T1174] bridge_slave_1: left allmulticast mode [ 1566.535612][ T1174] bridge_slave_1: left promiscuous mode [ 1566.535888][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.676208][ T1174] bridge_slave_0: left allmulticast mode [ 1566.676232][ T1174] bridge_slave_0: left promiscuous mode [ 1566.676416][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.375563][T19565] random: crng reseeded on system resumption [ 1573.365148][T19594] random: crng reseeded on system resumption [ 1573.932733][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.043152][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.065124][ T1174] bond0 (unregistering): Released all slaves [ 1574.229417][T19459] chnl_net:caif_netlink_parms(): no params data found [ 1574.701598][ T1174] hsr_slave_0: left promiscuous mode [ 1574.741943][ T1174] hsr_slave_1: left promiscuous mode [ 1574.742656][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.793705][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.857534][T19627] random: crng reseeded on system resumption [ 1580.250455][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 1580.450575][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1580.601593][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1580.606950][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1580.606981][ T10] usb 2-1: config 0 has no interface number 0 [ 1580.610291][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1580.610321][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.610341][ T10] usb 2-1: Product: syz [ 1580.610355][ T10] usb 2-1: Manufacturer: syz [ 1580.610371][ T10] usb 2-1: SerialNumber: syz [ 1581.849311][T19642] nfs: Unknown parameter 'ac' [ 1582.483182][ T10] usb 2-1: config 0 descriptor?? [ 1583.067049][ T10] smsc95xx v2.0.0 [ 1583.067069][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1583.067379][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 1583.604625][ T10] usb 2-1: USB disconnect, device number 48 [ 1584.042784][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 1585.439325][T19662] random: crng reseeded on system resumption [ 1587.199361][T17209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1587.221029][T17209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1587.231646][T17209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1587.240931][T17209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1587.301388][T17209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1589.394354][ T5118] Bluetooth: hci5: command tx timeout [ 1591.526947][ T5118] Bluetooth: hci5: command tx timeout [ 1592.781908][T19698] random: crng reseeded on system resumption [ 1593.443775][T19459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.443921][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.444162][T19459] bridge_slave_0: entered allmulticast mode [ 1593.447163][T19459] bridge_slave_0: entered promiscuous mode [ 1593.545283][T19459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.547465][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.547791][T19459] bridge_slave_1: entered allmulticast mode [ 1593.550837][T19459] bridge_slave_1: entered promiscuous mode [ 1593.555392][ T5118] Bluetooth: hci5: command tx timeout [ 1593.977962][T19459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.017077][T19459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.392814][T19459] team0: Port device team_slave_0 added [ 1594.556737][T19723] kAFS: unable to lookup cell '(,c¾Ì' [ 1594.874864][T19459] team0: Port device team_slave_1 added [ 1595.631545][ T5118] Bluetooth: hci5: command tx timeout [ 1596.771758][T19739] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3992'. [ 1598.064171][T19459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.064185][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.064202][T19459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.102517][T19459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.102535][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.102560][T19459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.473164][T19459] hsr_slave_0: entered promiscuous mode [ 1598.492625][T19459] hsr_slave_1: entered promiscuous mode [ 1598.499166][T19459] debugfs: 'hsr0' already exists in 'hsr' [ 1598.499187][T19459] Cannot create hsr debugfs directory [ 1600.036351][T19755] random: crng reseeded on system resumption [ 1601.106079][T19669] chnl_net:caif_netlink_parms(): no params data found [ 1601.132263][T19758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3996'. [ 1601.501350][T19765] random: crng reseeded on system resumption [ 1605.224527][T19796] kAFS: unable to lookup cell '(,c¾Ì' [ 1606.405600][T19669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.405741][T19669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.405908][T19669] bridge_slave_0: entered allmulticast mode [ 1606.448999][T19669] bridge_slave_0: entered promiscuous mode [ 1606.482454][T19669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.482606][T19669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.482884][T19669] bridge_slave_1: entered allmulticast mode [ 1606.489513][T19669] bridge_slave_1: entered promiscuous mode [ 1606.884622][T19669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.914586][T19669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.160335][T19669] team0: Port device team_slave_0 added [ 1607.312288][T19669] team0: Port device team_slave_1 added [ 1607.476865][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.627228][T19810] random: crng reseeded on system resumption [ 1608.361287][T19815] random: crng reseeded on system resumption [ 1608.374155][T19669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.374167][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.374183][T19669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.380474][T19669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.380487][T19669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.380504][T19669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.838085][ T1174] bridge_slave_1: left allmulticast mode [ 1608.838119][ T1174] bridge_slave_1: left promiscuous mode [ 1608.838398][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.074727][ T1174] bridge_slave_0: left allmulticast mode [ 1609.074751][ T1174] bridge_slave_0: left promiscuous mode [ 1609.074933][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.625164][T19839] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1614.015485][T19843] NILFS (nullb0): couldn't find nilfs on the device [ 1615.634926][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.724162][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.783759][ T1174] bond0 (unregistering): Released all slaves [ 1615.993565][T19669] hsr_slave_0: entered promiscuous mode [ 1615.995076][T19669] hsr_slave_1: entered promiscuous mode [ 1615.996126][T19669] debugfs: 'hsr0' already exists in 'hsr' [ 1615.996152][T19669] Cannot create hsr debugfs directory [ 1616.431757][ T1174] hsr_slave_0: left promiscuous mode [ 1616.481597][ T1174] hsr_slave_1: left promiscuous mode [ 1616.482717][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.536627][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.087283][T19866] 9p: Bad value for 'rfdno' [ 1617.477337][T19872] nfs: Unknown parameter 'ac' [ 1619.204658][T17209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1619.230980][T17209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1619.276962][T17209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1619.305067][T17209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1619.306320][T17209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1620.791134][T19895] random: crng reseeded on system resumption [ 1620.859925][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 1621.311753][T17209] Bluetooth: hci2: command tx timeout [ 1621.924112][T19903] NILFS (nullb0): couldn't find nilfs on the device [ 1622.032659][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 1623.355871][T19909] 9p: Bad value for 'rfdno' [ 1623.423366][T17209] Bluetooth: hci2: command tx timeout [ 1623.511575][T19911] kAFS: unable to lookup cell 'ÿ' [ 1623.518137][T19911] kAFS: unable to lookup cell '(,c¾Ì' [ 1625.481496][T17209] Bluetooth: hci2: command tx timeout [ 1627.551823][T17209] Bluetooth: hci2: command tx timeout [ 1629.840446][T19951] 9p: Bad value for 'rfdno' [ 1631.993874][T19878] chnl_net:caif_netlink_parms(): no params data found [ 1632.387904][ T1174] bridge_slave_1: left allmulticast mode [ 1632.387935][ T1174] bridge_slave_1: left promiscuous mode [ 1632.388213][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.534510][ T1174] bridge_slave_0: left allmulticast mode [ 1632.534544][ T1174] bridge_slave_0: left promiscuous mode [ 1632.534835][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.168267][T19979] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4040'. [ 1634.617553][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1635.803103][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1636.123735][ T1174] bond0 (unregistering): Released all slaves [ 1637.565730][T20022] 9p: Bad value for 'wfdno' [ 1637.663907][T20024] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4047'. [ 1638.621919][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4048'. [ 1639.108374][T19878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.108599][T19878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.108820][T19878] bridge_slave_0: entered allmulticast mode [ 1639.112276][T19878] bridge_slave_0: entered promiscuous mode [ 1639.334749][T20033] netlink: 'syz.6.4048': attribute type 12 has an invalid length. [ 1639.340437][T19878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.340589][T19878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.340845][T19878] bridge_slave_1: entered allmulticast mode [ 1639.373331][T19878] bridge_slave_1: entered promiscuous mode [ 1639.541729][ T1174] hsr_slave_0: left promiscuous mode [ 1639.630857][ T1174] hsr_slave_1: left promiscuous mode [ 1639.632336][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.732521][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.890371][T20040] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1641.543610][T20054] kAFS: unable to lookup cell 'ÿ' [ 1641.543738][T20054] kAFS: unable to lookup cell '(,c¾Ì' [ 1643.771308][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 1645.149811][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 1647.306126][T20041] netlink: 'syz.6.4050': attribute type 12 has an invalid length. [ 1647.349325][T19878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.374960][T19878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.463222][T19878] team0: Port device team_slave_0 added [ 1647.466294][T19878] team0: Port device team_slave_1 added [ 1647.550851][T19878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.550872][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.550901][T19878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.609292][T19878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.609311][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.609339][T19878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.781980][T19878] hsr_slave_0: entered promiscuous mode [ 1647.783492][T19878] hsr_slave_1: entered promiscuous mode [ 1647.784512][T19878] debugfs: 'hsr0' already exists in 'hsr' [ 1647.784538][T19878] Cannot create hsr debugfs directory [ 1648.242690][T20097] 9p: Bad value for 'wfdno' [ 1648.487892][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1648.523091][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1648.532088][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1648.537924][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1648.538894][T20099] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1649.456483][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1651.886545][ T5118] Bluetooth: hci4: command tx timeout [ 1653.952191][ T5118] Bluetooth: hci4: command tx timeout [ 1656.033683][ T5118] Bluetooth: hci4: command tx timeout [ 1656.712143][T20143] 9p: Bad value for 'wfdno' [ 1658.122068][ T5118] Bluetooth: hci4: command tx timeout [ 1658.164516][T20155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4068'. [ 1660.407511][T20157] netlink: 'syz.6.4068': attribute type 12 has an invalid length. [ 1664.682336][T19878] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1664.813494][T19878] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1665.066322][T19878] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1665.951872][T19878] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1667.710941][T20100] chnl_net:caif_netlink_parms(): no params data found [ 1668.095883][ T1174] bridge_slave_1: left allmulticast mode [ 1668.095906][ T1174] bridge_slave_1: left promiscuous mode [ 1668.096071][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.139079][ T1174] bridge_slave_0: left allmulticast mode [ 1668.139112][ T1174] bridge_slave_0: left promiscuous mode [ 1668.139406][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.423179][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.882022][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1671.028716][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1671.101275][ T1174] bond0 (unregistering): Released all slaves [ 1671.534396][T20100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.534543][T20100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.534824][T20100] bridge_slave_0: entered allmulticast mode [ 1671.537848][T20100] bridge_slave_0: entered promiscuous mode [ 1672.776216][ T1174] hsr_slave_0: left promiscuous mode [ 1672.814429][ T1174] hsr_slave_1: left promiscuous mode [ 1672.815643][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.862669][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.395083][ T10] ------------[ cut here ]------------ [ 1676.395096][ T10] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1676.395107][ T10] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:1/10 [ 1676.395250][ T10] Modules linked in: [ 1676.395266][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1676.395283][ T10] Tainted: [L]=SOFTLOCKUP [ 1676.395288][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1676.395296][ T10] Workqueue: events drm_fb_helper_damage_work [ 1676.395323][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1676.395336][ T10] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1676.395347][ T10] RSP: 0018:ffffc900000f78e0 EFLAGS: 00010246 [ 1676.395357][ T10] RAX: 1ffff11004986a00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1676.395366][ T10] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1676.395375][ T10] RBP: ffffc900000f79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1676.395382][ T10] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1676.395391][ T10] R13: ffff888024c35000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1676.395399][ T10] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1676.395410][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1676.395418][ T10] CR2: 0000001b2f017ff8 CR3: 000000000d9ba000 CR4: 00000000003526f0 [ 1676.395432][ T10] Call Trace: [ 1676.395439][ T10] [ 1676.395450][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1676.395462][ T10] ? rt_spin_unlock+0x14f/0x200 [ 1676.395548][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1676.395593][ T10] ? rt_spin_unlock+0x160/0x200 [ 1676.395610][ T10] ? drm_vblank_get+0x147/0x260 [ 1676.395643][ T10] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1676.395661][ T10] drm_fb_helper_damage_work+0x131/0x6f0 [ 1676.395674][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.395692][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1676.395706][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.395719][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.395733][ T10] process_scheduled_works+0xaec/0x17a0 [ 1676.395763][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1676.395780][ T10] ? assign_work+0x3d5/0x5e0 [ 1676.395796][ T10] worker_thread+0xa50/0xfc0 [ 1676.395832][ T10] kthread+0x388/0x470 [ 1676.395856][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1676.395877][ T10] ? __pfx_kthread+0x10/0x10 [ 1676.395906][ T10] ret_from_fork+0x51e/0xb90 [ 1676.395955][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1676.395978][ T10] ? __switch_to+0xc7d/0x1400 [ 1676.396015][ T10] ? __pfx_kthread+0x10/0x10 [ 1676.396031][ T10] ret_from_fork_asm+0x1a/0x30 [ 1676.396067][ T10] [ 1676.396074][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1676.396087][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1676.396103][ T10] Tainted: [L]=SOFTLOCKUP [ 1676.396107][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1676.396116][ T10] Workqueue: events drm_fb_helper_damage_work [ 1676.396132][ T10] Call Trace: [ 1676.396137][ T10] [ 1676.396142][ T10] vpanic+0x1e0/0x670 [ 1676.396172][ T10] panic+0xc5/0xd0 [ 1676.396188][ T10] ? __pfx_panic+0x10/0x10 [ 1676.396209][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 1676.396228][ T10] __warn+0x315/0x4a0 [ 1676.396243][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1676.396255][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1676.396267][ T10] __report_bug+0x29a/0x540 [ 1676.396323][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1676.396335][ T10] ? __pfx___report_bug+0x10/0x10 [ 1676.396360][ T10] report_bug_entry+0x19a/0x290 [ 1676.396375][ T10] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1676.396385][ T10] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1676.396396][ T10] handle_bug+0xca/0x200 [ 1676.396443][ T10] exc_invalid_op+0x1a/0x50 [ 1676.396459][ T10] asm_exc_invalid_op+0x1a/0x20 [ 1676.396487][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1676.396499][ T10] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1676.396509][ T10] RSP: 0018:ffffc900000f78e0 EFLAGS: 00010246 [ 1676.396519][ T10] RAX: 1ffff11004986a00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1676.396527][ T10] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1676.396536][ T10] RBP: ffffc900000f79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1676.396544][ T10] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1676.396553][ T10] R13: ffff888024c35000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1676.396573][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1676.396584][ T10] ? rt_spin_unlock+0x14f/0x200 [ 1676.396596][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1676.396611][ T10] ? rt_spin_unlock+0x160/0x200 [ 1676.396625][ T10] ? drm_vblank_get+0x147/0x260 [ 1676.396643][ T10] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1676.396660][ T10] drm_fb_helper_damage_work+0x131/0x6f0 [ 1676.396673][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.396689][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1676.396704][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.396716][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 1676.396730][ T10] process_scheduled_works+0xaec/0x17a0 [ 1676.396759][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1676.396776][ T10] ? assign_work+0x3d5/0x5e0 [ 1676.396792][ T10] worker_thread+0xa50/0xfc0 [ 1676.396821][ T10] kthread+0x388/0x470 [ 1676.396843][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1676.396856][ T10] ? __pfx_kthread+0x10/0x10 [ 1676.396872][ T10] ret_from_fork+0x51e/0xb90 [ 1676.396888][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1676.396901][ T10] ? __switch_to+0xc7d/0x1400 [ 1676.396915][ T10] ? __pfx_kthread+0x10/0x10 [ 1676.396931][ T10] ret_from_fork_asm+0x1a/0x30 [ 1676.396957][ T10] [ 1676.397129][ T10] Kernel Offset: disabled