last executing test programs: 18m7.700812659s ago: executing program 32 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) accept4(r3, 0x0, 0x0, 0x0) 17m13.133750785s ago: executing program 3 (id=187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000300)={0x1, 0x1}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x5, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 17m11.700698972s ago: executing program 3 (id=189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x80) lseek(0xffffffffffffffff, 0x2004, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673"], 0xac}}, 0x0) remap_file_pages(&(0x7f00009ad000/0x3000)=nil, 0x3000, 0x2000001, 0x0, 0x8000) 17m10.449793746s ago: executing program 3 (id=190): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800006b0000000000000000e50000000000000000000000000000010000000000000052a71234910901747dcdfd1cb0bb7f9c0f388d27f21331f92862a50857948faf2557b374c56209dfa9732294c9e7965f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 17m7.301010019s ago: executing program 3 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdir(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) unshare(0x62040200) 16m51.110616572s ago: executing program 33 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdir(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) unshare(0x62040200) 9m14.963022859s ago: executing program 34 (id=752): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m34.420916344s ago: executing program 35 (id=1072): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000500)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r5 = semget(0x3, 0x2, 0x441) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x111) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) acct(0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0x0, &(0x7f0000000080)) semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000100)=""/235) 2m47.722690863s ago: executing program 0 (id=1165): accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000002c0)=0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r0, 0x0, 0x0) r1 = syz_clone3(&(0x7f00000004c0)={0xd0012000, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffed2, 0x0, &(0x7f0000000480), 0x1}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) 2m46.621689496s ago: executing program 0 (id=1166): unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400e1600000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@setlink={0x70, 0x13, 0x7c4c7b7a67916b25, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40080, 0x409}, [@IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "edf42c0bce5d2bc3d06d81092cf067a7"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9478fa5358a0086ab876a922045f2376"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "faec3eabe99f550fee9c8db2c8b414db"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000802) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x9) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) ioctl$FS_IOC_RESVSP(r7, 0x40044591, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000200), &(0x7f0000000100)) 2m43.454600614s ago: executing program 0 (id=1167): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m43.110013156s ago: executing program 0 (id=1168): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m42.375131177s ago: executing program 0 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) fchdir(r6) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045519, &(0x7f0000000480)=0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r4, 0x12) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 2m40.812417035s ago: executing program 0 (id=1170): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 2m25.509655306s ago: executing program 36 (id=1170): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 1m35.70437608s ago: executing program 9 (id=1171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x4) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0x0, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="10", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0x1, 0x6, @multicast}, 0x14) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x14, r5, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x44889}, 0x20000804) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket(0xa, 0x3, 0xff) 1m34.420912243s ago: executing program 9 (id=1181): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) 1m33.364610398s ago: executing program 6 (id=215): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = eventfd2(0x3, 0x0) close(r1) close(0x5) 1m33.101493412s ago: executing program 6 (id=1183): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 1m31.374791775s ago: executing program 5 (id=1184): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) unshare(0x2c060000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xa}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m28.310988239s ago: executing program 8 (id=1189): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x90, r1, 0x1, 0x70bd2b, 0xfffffffd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49001082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1378627a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b168f3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a1ede6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cbc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c912164}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30b63c73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa52a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x472668e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43ea9ace}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x344a9267}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x177bf8c2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x90}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0xa}]}]}, {0x0, [0x61, 0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/158, 0x32, 0x9e, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1}, 0x40002022) 1m24.008125896s ago: executing program 5 (id=1191): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) 1m23.853869758s ago: executing program 8 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000480)=0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 1m23.824606043s ago: executing program 5 (id=1194): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 1m22.633051343s ago: executing program 8 (id=1195): syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) 1m20.873143417s ago: executing program 5 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000040)=0x68) 1m19.662414191s ago: executing program 5 (id=1197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x4) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0x0, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x14, r5, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x44889}, 0x20000804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket(0xa, 0x3, 0xff) 1m18.86933739s ago: executing program 37 (id=1181): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) 1m18.800332808s ago: executing program 5 (id=1200): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m17.345624559s ago: executing program 38 (id=1183): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 1m16.938279535s ago: executing program 8 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r5, 0x10}, &(0x7f0000000180)=0x8) 1m15.899268272s ago: executing program 8 (id=1203): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) unshare(0x2040400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x200000402) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x80000001) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, r3, 0x300, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4c6d}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x20040080) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x4010) sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) sendto$inet6(r7, &(0x7f0000000040)='n', 0x1, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, 0x0) connect$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) 1m15.204289987s ago: executing program 8 (id=1204): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m11.494737094s ago: executing program 7 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000040)) 1m10.232813132s ago: executing program 7 (id=1208): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = eventfd2(0x3, 0x0) close(r2) close(0x5) 1m8.897212282s ago: executing program 7 (id=1209): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m8.14177684s ago: executing program 7 (id=1210): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r2, 0x0, 0x0) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 1m5.96351616s ago: executing program 7 (id=1211): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}}, 0x20040880) 1m5.134740767s ago: executing program 7 (id=1212): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 1m3.089774955s ago: executing program 39 (id=1200): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 59.880931341s ago: executing program 40 (id=1204): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40002001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 49.826830834s ago: executing program 41 (id=1212): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 42.768248099s ago: executing program 3 (id=1201): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 40.163496517s ago: executing program 3 (id=1220): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 24.907507129s ago: executing program 42 (id=1220): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r0, &(0x7f0000000640)='\x00', 0x81101) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='vet'], 0x12) 14.387530073s ago: executing program 1 (id=1246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}}, 0x20040880) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000200), 0x0, 0x4c040) dup(r0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) r6 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f00000000c0), &(0x7f00000001c0)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000440)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0xffffffffffffffff, 0x3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 14.337057237s ago: executing program 2 (id=1247): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}}, 0x20040880) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000200), 0x0, 0x4c040) dup(r0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) r6 = syz_io_uring_setup(0x38ff, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f00000000c0), &(0x7f00000001c0)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000440)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0xffffffffffffffff, 0x3}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 13.019274954s ago: executing program 2 (id=1248): socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200009b9a, 0x1000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r5, 0x0, 0x8}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 12.997740339s ago: executing program 1 (id=1249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40}, 0x94) 11.878680505s ago: executing program 1 (id=1250): unshare(0x28060400) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x800001a}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e2, &(0x7f0000000080)={0x0, 0x7935, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 11.825711043s ago: executing program 2 (id=1251): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB="513e26d7ddd378c62b35e05b9f21a116a40b975d75ab4499256ddc909516ca55ef6805560218d7d1e8e55d138c27ab5b312b9e12c615b90811cf189a34fbc873f43cbae5ab4d1a2ebc71791e8b3d0d377f38a3df50ebf93f4b3d1f08eb79e2cb75406d1ad792faeddb05597cded21ff0223b763911cb576bb56e2e80e45f816764e5669b7e2360f9c6a7d07d17cef34471d8e72dd15800464f100e15e20c9b451acaa7d3aae5fdf754b878177fa9a30ad5f41150ac48daa90910", @ANYRES32=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x63) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, &(0x7f0000000040)) 9.769729867s ago: executing program 1 (id=1252): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000500)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r5 = semget(0x3, 0x2, 0x441) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x111) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) acct(0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0x0, &(0x7f0000000080)) semctl$GETVAL(r5, 0x1, 0xc, &(0x7f0000000100)=""/235) shmctl$SHM_INFO(0x0, 0xe, 0x0) 8.680103778s ago: executing program 4 (id=1254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61]}}, 0x0, 0x2b, 0x0, 0x0, 0x2c81}, 0x28) r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, &(0x7f0000000980)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80) r1 = syz_io_uring_setup(0x417, 0x0, 0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000300)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x2e) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) r7 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee00, r8) 7.828372884s ago: executing program 4 (id=1255): r0 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 4.671132975s ago: executing program 4 (id=1256): accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000002c0)=0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r0, 0x0, 0x0) r1 = syz_clone3(&(0x7f00000004c0)={0xd0012000, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffed2, 0x0, &(0x7f0000000480), 0x1}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0xfd, 0x8, 0x200}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 4.578705763s ago: executing program 2 (id=1257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/73, 0x2b, 0x49, 0x0, 0x2c81}, 0x28) r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x417, 0x0, 0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000300)=""/86}, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000680)={'\x00', 0xe, 0x2, 0x8, 0x6, 0xe41b}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x2e) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) r7 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee00, r8) 3.524421424s ago: executing program 1 (id=1258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40}, 0x94) 3.46614363s ago: executing program 4 (id=1259): socket(0xb, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0x2ce0, 0xc, 0xfffffff7, 0xff, 0x6]}, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x400006, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(r0, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) link(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4010) unlink(&(0x7f0000000640)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 2.367035204s ago: executing program 4 (id=1260): accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f00000002c0)=0x1c) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) read$FUSE(r0, 0x0, 0x0) r1 = syz_clone3(&(0x7f00000004c0)={0xd0012000, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffed2, 0x0, &(0x7f0000000480), 0x1}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0xfd, 0x8, 0x200}}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 2.352448344s ago: executing program 2 (id=1261): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047145bc7", 0x38}], 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xee01, r4) 2.303700077s ago: executing program 1 (id=1262): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="1a", 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.252163ms ago: executing program 4 (id=1263): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) pwrite64(r1, &(0x7f00000002c0)="e6", 0x1, 0x4002) fcntl$addseals(r1, 0x409, 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{r1, 0x0, 0x0, 0x4000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ac4}, [@ldst={0x0, 0x3, 0x4, 0x7, 0x2, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) lseek(r5, 0xfffffffffffffff5, 0x1) 0s ago: executing program 2 (id=1264): r0 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): device [ 932.692426][ T5975] usb 1-1: USB disconnect, device number 20 [ 933.618336][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 933.640698][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 933.642691][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 933.644429][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 933.645295][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 933.889117][ T6000] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 933.996341][T10616] hsr_slave_0: entered promiscuous mode [ 933.997681][T10616] hsr_slave_1: entered promiscuous mode [ 933.998603][T10616] debugfs: 'hsr0' already exists in 'hsr' [ 933.998627][T10616] Cannot create hsr debugfs directory [ 934.043339][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.043365][ T6000] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 934.043410][ T6000] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 934.043433][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.073082][ T6000] usb 2-1: config 0 descriptor?? [ 935.739099][ T8408] Bluetooth: hci1: command tx timeout [ 935.946267][T10778] chnl_net:caif_netlink_parms(): no params data found [ 935.973752][T10931] lo speed is unknown, defaulting to 1000 [ 936.711246][ T5996] usb 2-1: USB disconnect, device number 14 [ 936.781031][ T981] usb 34-1: device descriptor read/8, error -110 [ 937.237213][ T981] usb usb34-port1: attempt power cycle [ 937.888502][ T8408] Bluetooth: hci1: command tx timeout [ 938.535242][ T981] usb usb34-port1: unable to enumerate USB device [ 939.682372][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.682514][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.682705][T10778] bridge_slave_0: entered allmulticast mode [ 939.718530][T10778] bridge_slave_0: entered promiscuous mode [ 939.785331][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.785531][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.785720][T10778] bridge_slave_1: entered allmulticast mode [ 939.874517][T10778] bridge_slave_1: entered promiscuous mode [ 940.244499][ T8408] Bluetooth: hci1: command tx timeout [ 941.423315][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.485583][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.798653][T10778] team0: Port device team_slave_0 added [ 941.874102][T10778] team0: Port device team_slave_1 added [ 942.299394][ T8408] Bluetooth: hci1: command tx timeout [ 942.950228][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.950245][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.950270][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.953052][ T13] bridge_slave_1: left allmulticast mode [ 942.953081][ T13] bridge_slave_1: left promiscuous mode [ 942.953357][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.130748][ T13] bridge_slave_0: left allmulticast mode [ 943.130781][ T13] bridge_slave_0: left promiscuous mode [ 943.131051][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.238418][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 943.248933][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 943.250130][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 943.251820][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 943.253114][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 943.487601][ T13] bridge_slave_1: left allmulticast mode [ 943.487633][ T13] bridge_slave_1: left promiscuous mode [ 943.487884][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.562772][ T13] bridge_slave_0: left allmulticast mode [ 944.562805][ T13] bridge_slave_0: left promiscuous mode [ 944.563043][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.949883][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.044125][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.090718][ T13] bond0 (unregistering): Released all slaves [ 945.349024][ T8408] Bluetooth: hci3: command tx timeout [ 945.386748][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.469782][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.568218][ T13] bond0 (unregistering): Released all slaves [ 945.847523][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.847539][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.847565][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.931163][T10931] chnl_net:caif_netlink_parms(): no params data found [ 947.151469][T10778] hsr_slave_0: entered promiscuous mode [ 947.157323][T10778] hsr_slave_1: entered promiscuous mode [ 947.158249][T10778] debugfs: 'hsr0' already exists in 'hsr' [ 947.158272][T10778] Cannot create hsr debugfs directory [ 947.310793][T10986] lo speed is unknown, defaulting to 1000 [ 947.421284][ T8408] Bluetooth: hci3: command tx timeout [ 947.897215][ T13] hsr_slave_0: left promiscuous mode [ 947.948641][ T13] hsr_slave_1: left promiscuous mode [ 947.953474][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.011142][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.073612][T11006] syz.1.1033 (11006) used greatest stack depth: 18736 bytes left [ 948.231056][ T13] hsr_slave_0: left promiscuous mode [ 948.271984][ T13] hsr_slave_1: left promiscuous mode [ 948.273921][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.415931][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.499509][ T8408] Bluetooth: hci3: command tx timeout [ 949.759941][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.987659][ C0] vkms_vblank_simulate: vblank timer overrun [ 950.578821][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.059319][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.617282][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.659042][ T5157] Bluetooth: hci3: command tx timeout [ 951.925704][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.019157][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.126580][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.309572][T11033] 9pnet_fd: Insufficient options for proto=fd [ 952.677589][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.760788][ T13] team0 (unregistering): Port device team_slave_1 removed [ 953.113564][ C0] vkms_vblank_simulate: vblank timer overrun [ 953.117879][ T13] team0 (unregistering): Port device team_slave_0 removed [ 957.179238][ T6000] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 957.333655][ T6000] usb 2-1: not running at top speed; connect to a high speed hub [ 957.335967][ T6000] usb 2-1: config 127 has an invalid interface number: 219 but max is 1 [ 957.335993][ T6000] usb 2-1: config 127 has an invalid interface number: 124 but max is 1 [ 957.336013][ T6000] usb 2-1: config 127 has an invalid interface number: 113 but max is 1 [ 957.336033][ T6000] usb 2-1: config 127 has an invalid descriptor of length 243, skipping remainder of the config [ 957.336147][ T6000] usb 2-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 957.336169][ T6000] usb 2-1: config 127 has no interface number 0 [ 957.336185][ T6000] usb 2-1: config 127 has no interface number 1 [ 957.336201][ T6000] usb 2-1: config 127 has no interface number 2 [ 957.336279][ T6000] usb 2-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 957.336306][ T6000] usb 2-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 957.336326][ T6000] usb 2-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 957.336347][ T6000] usb 2-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 957.336373][ T6000] usb 2-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 957.336413][ T6000] usb 2-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 957.336439][ T6000] usb 2-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 957.336481][ T6000] usb 2-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 957.336505][ T6000] usb 2-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 957.336531][ T6000] usb 2-1: config 127 interface 113 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 957.336558][ T6000] usb 2-1: config 127 interface 219 has no altsetting 0 [ 957.336575][ T6000] usb 2-1: config 127 interface 124 has no altsetting 0 [ 957.336597][ T6000] usb 2-1: config 127 interface 113 has no altsetting 0 [ 957.507852][ T6000] usb 2-1: Dual-Role OTG device on HNP port [ 957.586225][ T6000] usb 2-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 957.586255][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.586274][ T6000] usb 2-1: Product: 盌侰緔ۚ▿뭒☕๚î®ç’°æ¹î¾¢æ­´ï ƒã„ºê€æƒ¬æ¼•íšŸï—®á™‡êœæœ—蠵ꗊ켜샕뽒묰纋괌è»âš‹á¯³î–…ã¨ä±µáž¥î£—æˆÕ‹î¦—爄㚱ᰄã§å†°ä¿¾â½ë•´é¹¹áŠ¯ë¸†æ‚œáŸƒæ„꧄鼽쬓⣇磶橱âœë’’䅼빮螛 [ 957.586299][ T6000] usb 2-1: Manufacturer: ê²ëœàº¿ã—⢙à¥âº…裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏ï€ã‡¨ß„㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅á˜É”䌎諈൷눎ᨃ㓗áºì³œéµžâ£¦ëŸ‹à¶«äŽŒâ“ƒåˆ’á”ºë®¶è‡‹çµ˜é‚ŠãŽŸ [ 957.586324][ T6000] usb 2-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗ä’î¥â¤ž [ 960.130182][ T6000] usb 2-1: can't set config #127, error -71 [ 960.159498][ T6000] usb 2-1: USB disconnect, device number 15 [ 960.808406][T11070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 961.511132][ T37] audit: type=1326 audit(1758257871.253:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11076 comm="syz.1.1052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc47bfbeba9 code=0x0 [ 962.111135][ T13] team0 (unregistering): Port device team_slave_1 removed [ 967.513495][ T13] team0 (unregistering): Port device team_slave_0 removed [ 969.384292][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.397766][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.404047][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.405452][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.407254][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 971.499157][ T5157] Bluetooth: hci4: command tx timeout [ 971.794706][T11105] misc userio: Invalid payload size [ 973.376866][T11110] misc userio: Invalid payload size [ 973.579507][ T5157] Bluetooth: hci4: command tx timeout [ 975.659035][ T5157] Bluetooth: hci4: command tx timeout [ 977.739288][ T5157] Bluetooth: hci4: command tx timeout [ 978.811255][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.685700][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.817534][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.933367][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.933547][T10931] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.933773][T10931] bridge_slave_0: entered allmulticast mode [ 979.936451][T10931] bridge_slave_0: entered promiscuous mode [ 980.124356][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.259339][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.261949][T10931] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.265681][T10931] bridge_slave_1: entered allmulticast mode [ 980.383937][T10931] bridge_slave_1: entered promiscuous mode [ 980.787205][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.168469][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.408769][T10931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.411761][T11095] lo speed is unknown, defaulting to 1000 [ 982.489457][T10931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.048074][T10931] team0: Port device team_slave_0 added [ 983.097612][T10931] team0: Port device team_slave_1 added [ 983.132874][T11148] misc userio: Invalid payload size [ 986.569806][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.789823][T11156] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1068'. [ 986.818687][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.547522][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.731169][T10931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.731186][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.731313][T10931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.826049][T10931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.826065][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.826092][T10931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.242649][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.141311][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.229362][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.788529][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.834893][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.890326][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.973795][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.974122][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.273079][T10986] chnl_net:caif_netlink_parms(): no params data found [ 1003.741583][ T8408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1003.766131][ T8408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1003.768104][ T8408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1003.800224][ T8408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1003.826929][ T8408] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1004.082919][ T57] bridge_slave_1: left allmulticast mode [ 1004.082953][ T57] bridge_slave_1: left promiscuous mode [ 1004.083204][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.185148][ T57] bridge_slave_0: left allmulticast mode [ 1004.185181][ T57] bridge_slave_0: left promiscuous mode [ 1004.185489][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.271785][ T57] bridge_slave_1: left allmulticast mode [ 1004.271807][ T57] bridge_slave_1: left promiscuous mode [ 1004.271963][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.370437][ T57] bridge_slave_0: left allmulticast mode [ 1004.370477][ T57] bridge_slave_0: left promiscuous mode [ 1004.370701][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.917479][ T5157] Bluetooth: hci5: command tx timeout [ 1007.971342][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.979512][ T5157] Bluetooth: hci5: command tx timeout [ 1008.106272][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.204994][ T8408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.207993][ T8408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.235331][ T8408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.237390][ T8408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.238153][ T8408] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1008.287109][ T57] bond0 (unregistering): Released all slaves [ 1008.501670][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1008.516815][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1008.518129][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1008.520134][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1008.520975][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1008.829476][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.939994][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.005928][ T57] bond0 (unregistering): Released all slaves [ 1009.049696][T11095] chnl_net:caif_netlink_parms(): no params data found [ 1010.070373][ T5157] Bluetooth: hci5: command tx timeout [ 1010.430720][ T5157] Bluetooth: hci1: command tx timeout [ 1010.549112][ T5157] Bluetooth: hci2: command tx timeout [ 1012.141102][ T5157] Bluetooth: hci5: command tx timeout [ 1012.459419][ T5157] Bluetooth: hci1: command tx timeout [ 1012.619137][ T5157] Bluetooth: hci2: command tx timeout [ 1013.775168][T11184] lo speed is unknown, defaulting to 1000 [ 1014.482680][ T57] hsr_slave_0: left promiscuous mode [ 1014.529068][ T57] hsr_slave_1: left promiscuous mode [ 1014.529984][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.539209][ T5157] Bluetooth: hci1: command tx timeout [ 1014.553490][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.698980][ T5157] Bluetooth: hci2: command tx timeout [ 1014.719082][ T57] hsr_slave_0: left promiscuous mode [ 1014.739128][ T57] hsr_slave_1: left promiscuous mode [ 1014.740016][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.789912][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.549711][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1015.709950][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1016.970871][ T5157] Bluetooth: hci1: command tx timeout [ 1016.970905][ T5157] Bluetooth: hci2: command tx timeout [ 1018.929925][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1019.051072][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1019.918627][T11201] lo speed is unknown, defaulting to 1000 [ 1020.879594][T11199] lo speed is unknown, defaulting to 1000 [ 1020.880323][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.880536][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.880740][T11095] bridge_slave_0: entered allmulticast mode [ 1020.887748][T11095] bridge_slave_0: entered promiscuous mode [ 1020.989513][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.989608][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.989742][T11095] bridge_slave_1: entered allmulticast mode [ 1021.010522][T11095] bridge_slave_1: entered promiscuous mode [ 1021.353310][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.406071][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.867016][T11095] team0: Port device team_slave_0 added [ 1021.963629][T11095] team0: Port device team_slave_1 added [ 1022.548611][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.548629][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.548651][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.575344][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.575360][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.575384][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.471600][T11184] chnl_net:caif_netlink_parms(): no params data found [ 1023.847903][T11095] hsr_slave_0: entered promiscuous mode [ 1023.857316][T11095] hsr_slave_1: entered promiscuous mode [ 1025.013283][T11199] chnl_net:caif_netlink_parms(): no params data found [ 1025.029168][T11201] chnl_net:caif_netlink_parms(): no params data found [ 1026.251922][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.252065][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.252272][T11184] bridge_slave_0: entered allmulticast mode [ 1026.280362][T11184] bridge_slave_0: entered promiscuous mode [ 1026.419580][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.419722][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.419914][T11184] bridge_slave_1: entered allmulticast mode [ 1026.432814][T11184] bridge_slave_1: entered promiscuous mode [ 1027.428318][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.765446][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.765681][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.765812][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.765992][T11199] bridge_slave_0: entered allmulticast mode [ 1027.767617][T11199] bridge_slave_0: entered promiscuous mode [ 1028.007105][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.074950][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.075092][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.075329][T11201] bridge_slave_0: entered allmulticast mode [ 1028.078666][T11201] bridge_slave_0: entered promiscuous mode [ 1028.230230][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.230309][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.230436][T11199] bridge_slave_1: entered allmulticast mode [ 1028.231895][T11199] bridge_slave_1: entered promiscuous mode [ 1028.273166][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.288371][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.288628][T11201] bridge_slave_1: entered allmulticast mode [ 1028.327697][T11201] bridge_slave_1: entered promiscuous mode [ 1028.928802][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.190890][T11184] team0: Port device team_slave_0 added [ 1029.497966][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.534179][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.579213][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.596942][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.597721][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.743255][T11184] team0: Port device team_slave_1 added [ 1029.771293][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.956240][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.028461][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.140734][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.147207][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.207620][ T37] audit: type=1326 audit(1758257939.943:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79bd12eba9 code=0x0 [ 1030.494163][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.751128][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.751145][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.751170][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.052610][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.052626][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.052649][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.074824][T11199] team0: Port device team_slave_0 added [ 1031.112247][T11201] team0: Port device team_slave_0 added [ 1031.116093][T11199] team0: Port device team_slave_1 added [ 1031.278368][T11201] team0: Port device team_slave_1 added [ 1031.579211][ T6069] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1031.640106][T11184] hsr_slave_0: entered promiscuous mode [ 1031.641517][T11184] hsr_slave_1: entered promiscuous mode [ 1031.642424][T11184] debugfs: 'hsr0' already exists in 'hsr' [ 1031.642448][T11184] Cannot create hsr debugfs directory [ 1031.643410][T11307] lo speed is unknown, defaulting to 1000 [ 1031.659439][ T8408] Bluetooth: hci3: command tx timeout [ 1031.762250][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.762268][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.762292][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.768072][ T6069] usb 1-1: Using ep0 maxpacket: 16 [ 1031.771672][ T6069] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.771696][ T6069] usb 1-1: config 0 has no interfaces? [ 1031.771721][ T6069] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1031.771741][ T6069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.815572][T11201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.815589][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.815613][T11201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.820240][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.820253][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.820277][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.948449][ T6069] usb 1-1: config 0 descriptor?? [ 1032.032583][T11201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.032600][T11201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1032.032625][T11201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.157016][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 1032.327006][ T6069] usb 1-1: USB disconnect, device number 21 [ 1032.811252][T11199] hsr_slave_0: entered promiscuous mode [ 1032.812568][T11199] hsr_slave_1: entered promiscuous mode [ 1032.813472][T11199] debugfs: 'hsr0' already exists in 'hsr' [ 1032.813495][T11199] Cannot create hsr debugfs directory [ 1032.871011][T11201] hsr_slave_0: entered promiscuous mode [ 1032.872279][T11201] hsr_slave_1: entered promiscuous mode [ 1032.873198][T11201] debugfs: 'hsr0' already exists in 'hsr' [ 1032.873220][T11201] Cannot create hsr debugfs directory [ 1032.877120][ T57] bridge_slave_1: left allmulticast mode [ 1032.877148][ T57] bridge_slave_1: left promiscuous mode [ 1032.877392][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.950641][ T57] bridge_slave_0: left allmulticast mode [ 1032.950677][ T57] bridge_slave_0: left promiscuous mode [ 1032.950951][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.738972][ T8408] Bluetooth: hci3: command tx timeout [ 1034.659792][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.742317][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.763986][ T57] bond0 (unregistering): Released all slaves [ 1034.938483][ T57] bond0 (unregistering): Released all slaves [ 1035.209350][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.280313][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.342921][ T57] bond0 (unregistering): Released all slaves [ 1035.819329][ T8408] Bluetooth: hci3: command tx timeout [ 1037.899274][ T8408] Bluetooth: hci3: command tx timeout [ 1038.977857][T11337] overlayfs: missing 'lowerdir' [ 1043.209272][ T57] hsr_slave_0: left promiscuous mode [ 1043.249952][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.249985][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.301269][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.301301][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.349621][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.399807][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.559268][ T57] veth1_macvtap: left promiscuous mode [ 1043.562353][ T57] veth0_macvtap: left promiscuous mode [ 1043.562524][ T57] veth1_vlan: left promiscuous mode [ 1043.562643][ T57] veth0_vlan: left promiscuous mode [ 1045.567585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.317603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.669889][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1046.897593][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1049.440413][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1049.570115][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1050.222828][T11307] chnl_net:caif_netlink_parms(): no params data found [ 1051.582721][T11184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1051.940059][T11184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1052.509858][T11184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1052.939160][T11385] blktrace: Concurrent blktraces are not allowed on sg0 [ 1053.392666][T11184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1054.161204][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.161421][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.161670][T11307] bridge_slave_0: entered allmulticast mode [ 1054.166452][T11307] bridge_slave_0: entered promiscuous mode [ 1054.284963][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.285101][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.285311][T11307] bridge_slave_1: entered allmulticast mode [ 1054.308643][T11307] bridge_slave_1: entered promiscuous mode [ 1054.671646][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.674655][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.235890][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.250004][T11199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1055.321510][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.334119][T11199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1056.719951][T11199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1056.980817][T11418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1059.375585][T11199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.431467][T11307] team0: Port device team_slave_0 added [ 1059.484564][T11307] team0: Port device team_slave_1 added [ 1059.734380][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.734396][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.734420][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.810478][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.810494][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.810514][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.878828][T11201] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1060.169272][T11201] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1060.222640][T11201] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1060.369097][T11201] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1060.694333][T11307] hsr_slave_0: entered promiscuous mode [ 1060.729601][T11307] hsr_slave_1: entered promiscuous mode [ 1060.730527][T11307] debugfs: 'hsr0' already exists in 'hsr' [ 1060.730549][T11307] Cannot create hsr debugfs directory [ 1060.955798][ T8408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1060.980922][ T8408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1060.996144][ T8408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1061.037712][ T8408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1061.048695][ T8408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1061.196111][T11442] misc userio: Invalid payload size [ 1063.102236][ T5157] Bluetooth: hci4: command tx timeout [ 1064.451360][T11437] lo speed is unknown, defaulting to 1000 [ 1064.494819][T11457] overlayfs: missing 'lowerdir' [ 1065.179621][ T5157] Bluetooth: hci4: command tx timeout [ 1065.627907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1065.946573][ T8408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1065.966035][ T8408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1065.980592][ T8408] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1065.990367][ T8408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1065.991152][ T8408] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1066.719046][ T6550] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1066.874737][ T6550] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1066.874768][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.874788][ T6550] usb 1-1: Product: syz [ 1066.874802][ T6550] usb 1-1: Manufacturer: syz [ 1066.874816][ T6550] usb 1-1: SerialNumber: syz [ 1066.934896][ T6550] usb 1-1: config 0 descriptor?? [ 1067.024451][ T8408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1067.038369][ T8408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.046885][ T8408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.064544][ T8408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.081786][ T8408] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.144987][ T6550] hso 1-1:0.0: Failed to find BULK IN ep [ 1067.259395][ T5157] Bluetooth: hci4: command tx timeout [ 1067.356840][T11480] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1067.380755][T11480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1067.380784][T11480] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1067.380881][T11480] vhci_hcd vhci_hcd.0: Device attached [ 1067.381496][T11480] trusted_key: encrypted_key: master key parameter 'defaúˆ' is invalid [ 1067.661268][ T6069] usb 34-1: SetAddress Request (26) to port 0 [ 1067.661351][ T6069] usb 34-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1068.095367][T11467] lo speed is unknown, defaulting to 1000 [ 1068.219380][ T5157] Bluetooth: hci5: command tx timeout [ 1068.280390][T11484] lo speed is unknown, defaulting to 1000 [ 1069.132914][T11437] chnl_net:caif_netlink_parms(): no params data found [ 1069.179607][ T5157] Bluetooth: hci1: command tx timeout [ 1069.339507][ T5157] Bluetooth: hci4: command tx timeout [ 1069.434680][ T57] bridge_slave_1: left allmulticast mode [ 1069.434713][ T57] bridge_slave_1: left promiscuous mode [ 1069.434973][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.505416][T11489] vhci_hcd: connection reset by peer [ 1069.506004][ T1490] vhci_hcd: stop threads [ 1069.506018][ T1490] vhci_hcd: release socket [ 1069.506101][ T1490] vhci_hcd: disconnect device [ 1069.510582][ T9892] usb 1-1: USB disconnect, device number 22 [ 1069.524721][ T57] bridge_slave_0: left allmulticast mode [ 1069.524750][ T57] bridge_slave_0: left promiscuous mode [ 1069.525016][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.646204][ T57] bridge_slave_1: left allmulticast mode [ 1069.646236][ T57] bridge_slave_1: left promiscuous mode [ 1069.646498][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.299014][ T5157] Bluetooth: hci5: command tx timeout [ 1071.259132][ T5157] Bluetooth: hci1: command tx timeout [ 1072.112193][ T57] bridge_slave_0: left allmulticast mode [ 1072.112698][ T57] bridge_slave_0: left promiscuous mode [ 1072.118619][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.379064][ T5157] Bluetooth: hci5: command tx timeout [ 1072.699701][ T6069] usb 34-1: device descriptor read/8, error -110 [ 1073.037156][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.091791][ T6069] usb usb34-port1: attempt power cycle [ 1073.339108][ T5157] Bluetooth: hci1: command tx timeout [ 1073.359945][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.425479][ T57] bond0 (unregistering): Released all slaves [ 1073.660996][ T6069] usb usb34-port1: unable to enumerate USB device [ 1073.690200][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.779911][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.845737][ T57] bond0 (unregistering): Released all slaves [ 1074.041724][T11307] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1074.231120][T11307] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1074.470076][ T5157] Bluetooth: hci5: command tx timeout [ 1074.478130][T11307] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1074.753054][T11307] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1074.795051][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.795159][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.795326][T11437] bridge_slave_0: entered allmulticast mode [ 1074.798186][T11437] bridge_slave_0: entered promiscuous mode [ 1074.885626][T11437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.885862][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.886086][T11437] bridge_slave_1: entered allmulticast mode [ 1074.899429][T11437] bridge_slave_1: entered promiscuous mode [ 1075.421848][ T5157] Bluetooth: hci1: command tx timeout [ 1076.289025][ T57] hsr_slave_0: left promiscuous mode [ 1076.310437][ T57] hsr_slave_1: left promiscuous mode [ 1076.311522][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.349966][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.439035][ T6550] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1076.489032][ T57] hsr_slave_0: left promiscuous mode [ 1076.510561][ T57] hsr_slave_1: left promiscuous mode [ 1076.512331][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.561956][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.605930][ T6550] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1076.605960][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.605979][ T6550] usb 1-1: Product: syz [ 1076.605993][ T6550] usb 1-1: Manufacturer: syz [ 1076.606006][ T6550] usb 1-1: SerialNumber: syz [ 1076.643851][ T6550] usb 1-1: config 0 descriptor?? [ 1076.854610][ T6550] hso 1-1:0.0: Failed to find BULK IN ep [ 1077.051276][T11577] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1077.054389][T11577] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1077.054412][T11577] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1077.060477][T11577] vhci_hcd vhci_hcd.0: Device attached [ 1077.069787][T11577] trusted_key: encrypted_key: master key parameter 'defaúˆ' is invalid [ 1077.381175][ T6550] usb 34-1: SetAddress Request (30) to port 0 [ 1077.381227][ T6550] usb 34-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1077.479965][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1077.630176][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1078.870057][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1079.013293][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1079.697575][T11550] usb 1-1: USB disconnect, device number 23 [ 1079.699531][T11578] vhci_hcd: connection reset by peer [ 1079.701189][ T12] vhci_hcd: stop threads [ 1079.701202][ T12] vhci_hcd: release socket [ 1079.701264][ T12] vhci_hcd: disconnect device [ 1080.024830][T11589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.984930][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.003428][T11467] chnl_net:caif_netlink_parms(): no params data found [ 1081.047343][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.129466][T11484] chnl_net:caif_netlink_parms(): no params data found [ 1082.444404][T11437] team0: Port device team_slave_0 added [ 1082.469830][ T6550] usb 34-1: device descriptor read/8, error -110 [ 1082.469897][T10591] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1082.496613][T11437] team0: Port device team_slave_1 added [ 1082.624376][T10591] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.624403][T10591] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1082.624480][T10591] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1082.624503][T10591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.677807][T10591] usb 1-1: config 0 descriptor?? [ 1082.689475][T10591] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1082.689522][T10591] dvb-usb: bulk message failed: -22 (3/0) [ 1082.742476][T10591] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1082.746254][T10591] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1082.746309][T10591] usb 1-1: media controller created [ 1082.786250][T10591] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.824680][T10591] dvb-usb: bulk message failed: -22 (6/0) [ 1082.824765][T10591] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1082.856588][T10591] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 1082.866920][T10591] dvb-usb: schedule remote query interval to 150 msecs. [ 1082.866941][T10591] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1082.880786][ T6550] usb usb34-port1: attempt power cycle [ 1083.019102][T11594] dvb-usb: bulk message failed: -22 (1/0) [ 1083.019133][T11594] dvb-usb: error while querying for an remote control event. [ 1083.179339][T11594] dvb-usb: bulk message failed: -22 (1/0) [ 1083.179372][T11594] dvb-usb: error while querying for an remote control event. [ 1083.339129][T11594] dvb-usb: bulk message failed: -22 (1/0) [ 1083.339160][T11594] dvb-usb: error while querying for an remote control event. [ 1083.356396][T11603] dvb-usb: bulk message failed: -22 (4/0) [ 1083.463293][ T6550] usb usb34-port1: unable to enumerate USB device [ 1083.503031][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1083.503066][ T6550] dvb-usb: error while querying for an remote control event. [ 1083.659293][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1083.659329][ T6550] dvb-usb: error while querying for an remote control event. [ 1083.773550][T11437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.773567][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.773593][T11437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.818965][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1083.818995][ T6550] dvb-usb: error while querying for an remote control event. [ 1083.923960][T11437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.923976][T11437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.923999][T11437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.970220][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.970353][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.970589][T11467] bridge_slave_0: entered allmulticast mode [ 1083.978162][T11467] bridge_slave_0: entered promiscuous mode [ 1083.979226][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1083.982177][ T6550] dvb-usb: error while querying for an remote control event. [ 1084.135968][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.136107][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.136299][T11467] bridge_slave_1: entered allmulticast mode [ 1084.139300][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1084.139326][ T6550] dvb-usb: error while querying for an remote control event. [ 1084.140455][T11467] bridge_slave_1: entered promiscuous mode [ 1084.300969][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1084.301003][ T6550] dvb-usb: error while querying for an remote control event. [ 1084.466571][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1084.466624][ T6550] dvb-usb: error while querying for an remote control event. [ 1084.619077][ T6550] dvb-usb: bulk message failed: -22 (1/0) [ 1084.619106][ T6550] dvb-usb: error while querying for an remote control event. [ 1084.740334][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.740548][T11484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.740753][T11484] bridge_slave_0: entered allmulticast mode [ 1084.742680][T11484] bridge_slave_0: entered promiscuous mode [ 1084.747700][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.778987][T10591] dvb-usb: bulk message failed: -22 (1/0) [ 1084.779016][T10591] dvb-usb: error while querying for an remote control event. [ 1084.870507][T11484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.870743][T11484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.870942][T11484] bridge_slave_1: entered allmulticast mode [ 1084.873821][T11484] bridge_slave_1: entered promiscuous mode [ 1084.880528][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.939667][T10591] dvb-usb: bulk message failed: -22 (1/0) [ 1084.939699][T10591] dvb-usb: error while querying for an remote control event. [ 1084.973606][T11437] hsr_slave_0: entered promiscuous mode [ 1084.974950][T11437] hsr_slave_1: entered promiscuous mode [ 1085.099100][T10591] dvb-usb: bulk message failed: -22 (1/0) [ 1085.099134][T10591] dvb-usb: error while querying for an remote control event. [ 1085.360303][T10591] dvb-usb: bulk message failed: -22 (1/0) [ 1085.360337][T10591] dvb-usb: error while querying for an remote control event. [ 1085.360653][ T6550] usb 1-1: USB disconnect, device number 24 [ 1085.729695][ T6550] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1085.782343][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.787672][T11467] team0: Port device team_slave_0 added [ 1085.882280][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.885062][T11467] team0: Port device team_slave_1 added [ 1086.420821][T11615] binder: 11614:11615 ioctl c0306201 0 returned -14 [ 1086.528712][T11484] team0: Port device team_slave_0 added [ 1086.537786][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.537801][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.537825][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.589071][T11484] team0: Port device team_slave_1 added [ 1086.591612][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.591632][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.591656][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.911572][T11484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.911589][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.911614][T11484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.024743][T11484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.024755][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.024769][T11484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.599385][T11467] hsr_slave_0: entered promiscuous mode [ 1088.600789][T11467] hsr_slave_1: entered promiscuous mode [ 1088.601727][T11467] debugfs: 'hsr0' already exists in 'hsr' [ 1088.601751][T11467] Cannot create hsr debugfs directory [ 1088.689280][T10591] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1088.860197][T10591] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1088.860227][T10591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.860247][T10591] usb 1-1: Product: syz [ 1088.860260][T10591] usb 1-1: Manufacturer: syz [ 1088.860274][T10591] usb 1-1: SerialNumber: syz [ 1088.874253][T10591] usb 1-1: config 0 descriptor?? [ 1089.086250][T10591] hso 1-1:0.0: Failed to find BULK IN ep [ 1089.162869][T11484] hsr_slave_0: entered promiscuous mode [ 1089.168845][T11484] hsr_slave_1: entered promiscuous mode [ 1089.181519][T11484] debugfs: 'hsr0' already exists in 'hsr' [ 1089.181544][T11484] Cannot create hsr debugfs directory [ 1089.284534][T11622] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1089.287073][T11622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1089.287089][T11622] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1089.288026][T11622] vhci_hcd vhci_hcd.0: Device attached [ 1089.288558][T11622] trusted_key: encrypted_key: master key parameter 'defaúˆ' is invalid [ 1089.599570][ T2171] usb 34-1: SetAddress Request (34) to port 0 [ 1089.599653][ T2171] usb 34-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1090.368440][ T8408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1090.385469][ T8408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1090.386673][ T8408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1090.394236][ T8408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1090.395012][ T8408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1091.457777][T11623] vhci_hcd: connection reset by peer [ 1091.458162][ T1501] vhci_hcd: stop threads [ 1091.458185][ T1501] vhci_hcd: release socket [ 1091.461037][ T1501] vhci_hcd: disconnect device [ 1091.462349][T10591] usb 1-1: USB disconnect, device number 25 [ 1092.553909][ T5157] Bluetooth: hci2: command tx timeout [ 1092.592663][T11627] lo speed is unknown, defaulting to 1000 [ 1094.630087][ T5157] Bluetooth: hci2: command tx timeout [ 1094.699249][ T2171] usb 34-1: device descriptor read/8, error -110 [ 1095.377072][T11644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.073478][ T2171] usb usb34-port1: attempt power cycle [ 1096.655327][ T2171] usb usb34-port1: unable to enumerate USB device [ 1097.089100][T11437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1097.268582][ T5157] Bluetooth: hci2: command tx timeout [ 1097.393508][T11437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1098.564493][T11437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1098.592172][T11437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1098.730980][ T6000] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1098.892864][ T6000] usb 1-1: not running at top speed; connect to a high speed hub [ 1098.894786][ T6000] usb 1-1: config 127 has an invalid interface number: 219 but max is 1 [ 1098.894810][ T6000] usb 1-1: config 127 has an invalid interface number: 124 but max is 1 [ 1098.894830][ T6000] usb 1-1: config 127 has an invalid interface number: 113 but max is 1 [ 1098.894849][ T6000] usb 1-1: config 127 has an invalid descriptor of length 243, skipping remainder of the config [ 1098.894868][ T6000] usb 1-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1098.894888][ T6000] usb 1-1: config 127 has no interface number 0 [ 1098.894904][ T6000] usb 1-1: config 127 has no interface number 1 [ 1098.894920][ T6000] usb 1-1: config 127 has no interface number 2 [ 1098.894998][ T6000] usb 1-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1098.895024][ T6000] usb 1-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1098.895044][ T6000] usb 1-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1098.895065][ T6000] usb 1-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1098.895091][ T6000] usb 1-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1098.895144][ T6000] usb 1-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1098.895171][ T6000] usb 1-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1098.895211][ T6000] usb 1-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1098.895238][ T6000] usb 1-1: config 127 interface 113 altsetting 5 endpoint 0x8A has invalid maxpacket 63481, setting to 64 [ 1098.895264][ T6000] usb 1-1: config 127 interface 113 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1098.895289][ T6000] usb 1-1: config 127 interface 219 has no altsetting 0 [ 1098.895308][ T6000] usb 1-1: config 127 interface 124 has no altsetting 0 [ 1098.895326][ T6000] usb 1-1: config 127 interface 113 has no altsetting 0 [ 1098.910716][ T6000] usb 1-1: Dual-Role OTG device on HNP port [ 1098.911050][ T6000] usb 1-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1098.911074][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.911093][ T6000] usb 1-1: Product: 盌侰緔ۚ▿뭒☕๚î®ç’°æ¹î¾¢æ­´ï ƒã„ºê€æƒ¬æ¼•íšŸï—®á™‡êœæœ—蠵ꗊ켜샕뽒묰纋괌è»âš‹á¯³î–…ã¨ä±µáž¥î£—æˆÕ‹î¦—爄㚱ᰄã§å†°ä¿¾â½ë•´é¹¹áŠ¯ë¸†æ‚œáŸƒæ„꧄鼽쬓⣇磶橱âœë’’䅼빮螛 [ 1098.911118][ T6000] usb 1-1: Manufacturer: ê²ëœàº¿ã—⢙à¥âº…裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏ï€ã‡¨ß„㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅á˜É”䌎諈൷눎ᨃ㓗áºì³œéµžâ£¦ëŸ‹à¶«äŽŒâ“ƒåˆ’á”ºë®¶è‡‹çµ˜é‚ŠãŽŸ [ 1098.911143][ T6000] usb 1-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗ä’î¥â¤ž [ 1098.943187][T11656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1099.339267][ T5157] Bluetooth: hci2: command tx timeout [ 1099.561756][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.575966][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.688255][T11627] chnl_net:caif_netlink_parms(): no params data found [ 1101.519544][ T6000] keyspan_pda 1-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1101.520696][ T6000] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1101.522434][ T6000] usb 1-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1101.522459][ T6000] usb 1-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1102.062249][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.062461][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.062719][T11627] bridge_slave_0: entered allmulticast mode [ 1102.083094][T11627] bridge_slave_0: entered promiscuous mode [ 1102.093554][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.093731][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.093954][T11627] bridge_slave_1: entered allmulticast mode [ 1102.106402][T11627] bridge_slave_1: entered promiscuous mode [ 1102.420644][ T57] bridge_slave_1: left allmulticast mode [ 1102.420676][ T57] bridge_slave_1: left promiscuous mode [ 1102.420931][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.580749][ T57] bridge_slave_0: left allmulticast mode [ 1102.580781][ T57] bridge_slave_0: left promiscuous mode [ 1102.581042][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.906957][ T57] bridge_slave_1: left allmulticast mode [ 1102.906981][ T57] bridge_slave_1: left promiscuous mode [ 1102.907143][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.910669][ T57] bridge_slave_0: left allmulticast mode [ 1103.910701][ T57] bridge_slave_0: left promiscuous mode [ 1103.910967][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.179979][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.349825][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.493812][T11723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1160'. [ 1107.441243][ T57] bond0 (unregistering): Released all slaves [ 1109.429894][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.519984][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.344502][ T57] bond0 (unregistering): Released all slaves [ 1111.148377][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.202732][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.542215][T11627] team0: Port device team_slave_0 added [ 1112.679301][ T57] hsr_slave_0: left promiscuous mode [ 1112.719365][ T57] hsr_slave_1: left promiscuous mode [ 1112.720299][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.782446][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.971845][ T57] hsr_slave_0: left promiscuous mode [ 1113.013339][ T57] hsr_slave_1: left promiscuous mode [ 1113.014001][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.032367][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.799820][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1113.972676][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1115.389848][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1115.561074][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1115.984397][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.984474][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.702909][T11627] team0: Port device team_slave_1 added [ 1118.051159][T11782] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1118.807423][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.816414][T11627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.816432][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.816457][T11627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.866960][T11627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.866976][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.867001][T11627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.534293][T11627] hsr_slave_0: entered promiscuous mode [ 1119.545130][T11627] hsr_slave_1: entered promiscuous mode [ 1119.546021][T11627] debugfs: 'hsr0' already exists in 'hsr' [ 1119.546043][T11627] Cannot create hsr debugfs directory [ 1119.571823][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.882058][ T1501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.882214][ T1501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.362144][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.362383][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.018692][T11467] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1121.444797][T11467] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1121.520440][T11467] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1121.804513][T11467] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1122.907537][ T8408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1122.934740][ T8408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1122.936198][ T8408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1122.951880][ T8408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1122.952683][ T8408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1123.382711][T11816] lo speed is unknown, defaulting to 1000 [ 1123.709355][T11484] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1123.769656][T11484] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1123.993404][T11484] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1124.075853][T11484] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1124.394977][T11627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1124.427534][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.449435][T11627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1124.521326][T11627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1124.613577][T11627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.771726][ T1490] bridge_slave_1: left allmulticast mode [ 1124.772168][ T1490] bridge_slave_1: left promiscuous mode [ 1124.772463][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.840741][ T1490] bridge_slave_0: left allmulticast mode [ 1124.840775][ T1490] bridge_slave_0: left promiscuous mode [ 1124.841029][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.926478][ T1490] bridge_slave_1: left allmulticast mode [ 1124.926512][ T1490] bridge_slave_1: left promiscuous mode [ 1124.926766][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.990611][ T1490] bridge_slave_0: left allmulticast mode [ 1124.990645][ T1490] bridge_slave_0: left promiscuous mode [ 1124.990934][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.019248][ T8408] Bluetooth: hci3: command tx timeout [ 1126.338571][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1126.346436][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1126.347692][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1126.378307][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1126.381610][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1126.910055][ T1490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.986673][ T1490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.030763][ T1490] bond0 (unregistering): Released all slaves [ 1127.115314][ T8408] Bluetooth: hci3: command tx timeout [ 1127.764008][ T1490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.839819][ T1490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.903282][ T1490] bond0 (unregistering): Released all slaves [ 1128.015740][T11816] chnl_net:caif_netlink_parms(): no params data found [ 1128.477024][ T8408] Bluetooth: hci4: command tx timeout [ 1128.532591][T11832] lo speed is unknown, defaulting to 1000 [ 1129.000475][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1129.014702][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1129.017561][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1129.020831][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1129.021587][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1129.179179][ T8408] Bluetooth: hci3: command tx timeout [ 1129.509664][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.509807][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.510044][T11816] bridge_slave_0: entered allmulticast mode [ 1129.512843][T11816] bridge_slave_0: entered promiscuous mode [ 1129.649015][ T1490] hsr_slave_0: left promiscuous mode [ 1129.679152][ T1490] hsr_slave_1: left promiscuous mode [ 1129.680132][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.739941][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.910956][ T1490] hsr_slave_0: left promiscuous mode [ 1129.929072][ T1490] hsr_slave_1: left promiscuous mode [ 1129.929948][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.980329][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.539014][ T8408] Bluetooth: hci4: command tx timeout [ 1131.083096][ T1490] team0 (unregistering): Port device team_slave_1 removed [ 1131.108550][ T8408] Bluetooth: hci1: command tx timeout [ 1131.259028][ T8408] Bluetooth: hci3: command tx timeout [ 1131.293318][ T1490] team0 (unregistering): Port device team_slave_0 removed [ 1132.628101][ T8408] Bluetooth: hci4: command tx timeout [ 1133.179140][ T8408] Bluetooth: hci1: command tx timeout [ 1133.927655][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1133.944077][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1133.946572][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1133.973380][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1133.974585][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1134.309947][ T1490] team0 (unregistering): Port device team_slave_1 removed [ 1134.450728][ T1490] team0 (unregistering): Port device team_slave_0 removed [ 1134.699185][ T8408] Bluetooth: hci4: command tx timeout [ 1135.161874][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.162105][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.162284][T11816] bridge_slave_1: entered allmulticast mode [ 1135.163766][T11816] bridge_slave_1: entered promiscuous mode [ 1135.259115][ T8408] Bluetooth: hci1: command tx timeout [ 1135.436922][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.501730][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.738488][T11840] lo speed is unknown, defaulting to 1000 [ 1135.753371][T11816] team0: Port device team_slave_0 added [ 1135.774478][T11843] lo speed is unknown, defaulting to 1000 [ 1135.776371][T11816] team0: Port device team_slave_1 added [ 1136.039722][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.039739][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.039763][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.059054][ T8408] Bluetooth: hci5: command tx timeout [ 1136.113247][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.113263][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.113285][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.886549][T11816] hsr_slave_0: entered promiscuous mode [ 1136.887861][T11816] hsr_slave_1: entered promiscuous mode [ 1136.944868][T11832] chnl_net:caif_netlink_parms(): no params data found [ 1137.339161][ T8408] Bluetooth: hci1: command tx timeout [ 1137.420383][T11627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.957584][T11832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.957955][T11832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.958097][T11832] bridge_slave_0: entered allmulticast mode [ 1137.960434][T11832] bridge_slave_0: entered promiscuous mode [ 1138.093052][T11832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.093189][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.093390][T11832] bridge_slave_1: entered allmulticast mode [ 1138.096447][T11832] bridge_slave_1: entered promiscuous mode [ 1138.139126][ T8408] Bluetooth: hci5: command tx timeout [ 1138.142711][T11840] chnl_net:caif_netlink_parms(): no params data found [ 1138.386945][T11627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.421816][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.541058][T11843] chnl_net:caif_netlink_parms(): no params data found [ 1138.561245][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.993876][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.994014][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.253443][T11832] team0: Port device team_slave_0 added [ 1139.382574][T11832] team0: Port device team_slave_1 added [ 1139.874100][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.874270][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.874821][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.874897][T11840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.875023][T11840] bridge_slave_0: entered allmulticast mode [ 1139.876547][T11840] bridge_slave_0: entered promiscuous mode [ 1140.002853][T11840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.002935][T11840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.003071][T11840] bridge_slave_1: entered allmulticast mode [ 1140.004624][T11840] bridge_slave_1: entered promiscuous mode [ 1140.219088][ T8408] Bluetooth: hci5: command tx timeout [ 1140.279420][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.279436][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.279462][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.532527][T11832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.532539][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.532554][T11832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.644362][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.644499][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.644628][T11843] bridge_slave_0: entered allmulticast mode [ 1140.646138][T11843] bridge_slave_0: entered promiscuous mode [ 1140.838220][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.843336][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.843469][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.843654][T11843] bridge_slave_1: entered allmulticast mode [ 1140.846262][T11843] bridge_slave_1: entered promiscuous mode [ 1141.004492][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.466938][T11843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.696922][T11843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.723688][T11832] hsr_slave_0: entered promiscuous mode [ 1141.725065][T11832] hsr_slave_1: entered promiscuous mode [ 1141.725999][T11832] debugfs: 'hsr0' already exists in 'hsr' [ 1141.726022][T11832] Cannot create hsr debugfs directory [ 1141.787507][T11840] team0: Port device team_slave_0 added [ 1141.967688][T11840] team0: Port device team_slave_1 added [ 1142.234110][T11843] team0: Port device team_slave_0 added [ 1142.299234][ T8408] Bluetooth: hci5: command tx timeout [ 1142.452675][T11843] team0: Port device team_slave_1 added [ 1142.507285][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.507295][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.507309][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.737040][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.737056][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.737080][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.914653][T11843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.914669][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.914694][T11843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.967050][T11843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.967065][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.967089][T11843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.015543][T11816] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1143.142192][T11816] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1143.314620][T11816] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1143.390476][T11840] hsr_slave_0: entered promiscuous mode [ 1143.391755][T11840] hsr_slave_1: entered promiscuous mode [ 1143.392711][T11840] debugfs: 'hsr0' already exists in 'hsr' [ 1143.392734][T11840] Cannot create hsr debugfs directory [ 1143.396687][T11816] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1143.996161][T11843] hsr_slave_0: entered promiscuous mode [ 1143.997531][T11843] hsr_slave_1: entered promiscuous mode [ 1143.998464][T11843] debugfs: 'hsr0' already exists in 'hsr' [ 1143.998488][T11843] Cannot create hsr debugfs directory [ 1145.693661][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.909507][ T1501] bridge_slave_1: left allmulticast mode [ 1145.909541][ T1501] bridge_slave_1: left promiscuous mode [ 1145.909827][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.953149][ T1501] bridge_slave_0: left allmulticast mode [ 1145.953180][ T1501] bridge_slave_0: left promiscuous mode [ 1145.953456][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.043994][ T1501] bridge_slave_1: left allmulticast mode [ 1146.044026][ T1501] bridge_slave_1: left promiscuous mode [ 1146.044271][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.120939][ T1501] bridge_slave_0: left allmulticast mode [ 1146.120971][ T1501] bridge_slave_0: left promiscuous mode [ 1146.121245][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.661089][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.752347][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.838783][ T1501] bond0 (unregistering): Released all slaves [ 1148.381353][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.475036][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.538757][ T1501] bond0 (unregistering): Released all slaves [ 1149.239270][ T1501] hsr_slave_0: left promiscuous mode [ 1149.261256][ T1501] hsr_slave_1: left promiscuous mode [ 1149.262786][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.319999][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.482193][ T1501] hsr_slave_0: left promiscuous mode [ 1149.499362][ T1501] hsr_slave_1: left promiscuous mode [ 1149.500345][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.551119][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.389711][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 1150.519796][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 1151.858181][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 1152.101256][ T5157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1152.105897][ T5157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1152.121499][ T5157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1152.131006][ T5157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1152.131731][ T5157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1152.154549][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 1153.214752][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.488804][T11880] lo speed is unknown, defaulting to 1000 [ 1153.526095][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.605772][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.605988][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.682939][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.684234][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.143140][ T5157] Bluetooth: hci6: command tx timeout [ 1154.886700][T11880] chnl_net:caif_netlink_parms(): no params data found [ 1155.545565][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.545710][T11880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.545913][T11880] bridge_slave_0: entered allmulticast mode [ 1155.547521][T11880] bridge_slave_0: entered promiscuous mode [ 1155.580518][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.580739][T11880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.580981][T11880] bridge_slave_1: entered allmulticast mode [ 1155.583757][T11880] bridge_slave_1: entered promiscuous mode [ 1155.594553][T11832] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1155.746070][T11832] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1155.881964][T11832] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1155.940243][T11880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.977749][T11832] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1156.017185][T11880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.219462][ T5157] Bluetooth: hci6: command tx timeout [ 1156.255765][T11880] team0: Port device team_slave_0 added [ 1156.278756][T11880] team0: Port device team_slave_1 added [ 1156.294679][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.694033][T11880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.694050][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.694076][T11880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.749088][T11843] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1157.045005][T11880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.045022][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.045047][T11880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.048173][T11843] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1157.147603][T11843] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1157.372170][T11843] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1157.834435][T11880] hsr_slave_0: entered promiscuous mode [ 1157.835791][T11880] hsr_slave_1: entered promiscuous mode [ 1157.836747][T11880] debugfs: 'hsr0' already exists in 'hsr' [ 1157.836770][T11880] Cannot create hsr debugfs directory [ 1158.244926][T11840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1158.301430][ T5157] Bluetooth: hci6: command tx timeout [ 1158.442885][T11840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1158.540614][T11840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1158.627713][T11840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1159.312334][T11816] veth0_vlan: entered promiscuous mode [ 1159.427250][ T1501] bridge_slave_1: left allmulticast mode [ 1159.427283][ T1501] bridge_slave_1: left promiscuous mode [ 1159.427537][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.500832][ T1501] bridge_slave_0: left allmulticast mode [ 1159.500864][ T1501] bridge_slave_0: left promiscuous mode [ 1159.501126][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.399564][ T5157] Bluetooth: hci6: command tx timeout [ 1161.520033][ T1501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.580454][ T1501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.628328][ T1501] bond0 (unregistering): Released all slaves [ 1161.956801][T11816] veth1_vlan: entered promiscuous mode [ 1162.071120][ T6000] usb 1-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1162.071146][ T6000] usb 1-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1162.071286][ T6000] keyspan_pda 1-1:127.219: probe with driver keyspan_pda failed with error -2 [ 1162.110885][ T6000] keyspan_pda 1-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 1162.111466][ T6000] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1162.113700][ T6000] usb 1-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1162.113722][ T6000] usb 1-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1162.199098][ T1501] hsr_slave_0: left promiscuous mode [ 1162.220663][ T1501] hsr_slave_1: left promiscuous mode [ 1162.221572][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.266935][ T1501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.321143][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 1163.559478][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 1165.119837][ T5208] udevd[5208]: worker [11409] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1166.141255][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.483007][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.502410][T11816] veth0_macvtap: entered promiscuous mode [ 1166.525464][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.525690][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.556116][T11843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.565456][T11816] veth1_macvtap: entered promiscuous mode [ 1166.597400][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.597529][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.806190][T11843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.846264][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.854745][T11840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.972342][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.992643][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.992793][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.235700][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.235938][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.282767][ T3577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.334201][ T3577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.362793][ T3577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.418154][T11840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.418449][ T3577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.515620][T11880] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1167.605777][T11880] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1167.635181][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.636153][ T6199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.709211][T11880] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1167.854091][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.859156][ T6199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.864480][T11880] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1168.319110][T11715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.319131][T11715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.603393][ T1501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.603413][ T1501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.770747][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.064489][T11843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.107657][T11880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.243291][T11880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.267964][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.269165][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.357044][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.357221][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.448968][T12010] siw: device registration error -23 [ 1169.698491][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.196553][T11832] veth0_vlan: entered promiscuous mode [ 1170.276706][T11832] veth1_vlan: entered promiscuous mode [ 1170.574584][T11832] veth0_macvtap: entered promiscuous mode [ 1170.596666][T11843] veth0_vlan: entered promiscuous mode [ 1170.606446][T11832] veth1_macvtap: entered promiscuous mode [ 1170.670937][T11843] veth1_vlan: entered promiscuous mode [ 1170.745155][T11832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.852810][T11832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.948204][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.957759][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.972598][ T57] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.993252][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.137635][T11880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.164562][T11843] veth0_macvtap: entered promiscuous mode [ 1171.351279][T11843] veth1_macvtap: entered promiscuous mode [ 1171.587635][T11840] veth0_vlan: entered promiscuous mode [ 1171.685382][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.685402][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.727791][T11843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.777548][T11840] veth1_vlan: entered promiscuous mode [ 1171.858027][T11843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.943702][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.943722][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.012284][ T1490] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.018688][ T1490] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.037491][ T1490] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.080688][ T1490] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.677979][T12064] netlink: 316 bytes leftover after parsing attributes in process `syz.8.1075'. [ 1174.920419][T11840] veth0_macvtap: entered promiscuous mode [ 1175.400538][T11840] veth1_macvtap: entered promiscuous mode [ 1177.460849][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.460988][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.822275][ T8408] Bluetooth: hci4: command 0x0406 tx timeout [ 1178.497384][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.497405][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.571102][T11880] veth0_vlan: entered promiscuous mode [ 1178.577274][T11840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.804470][T12078] bridge0: port 3(vlan2) entered blocking state [ 1178.805273][T12078] bridge0: port 3(vlan2) entered disabled state [ 1178.808312][T12078] vlan2: entered allmulticast mode [ 1178.808356][T12078] dummy0: entered allmulticast mode [ 1178.831987][T12078] vlan2: entered promiscuous mode [ 1178.832062][T12078] dummy0: entered promiscuous mode [ 1179.110930][T12078] hub 9-0:1.0: USB hub found [ 1179.119421][T12078] hub 9-0:1.0: 1 port detected [ 1179.705667][T11840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.724753][T11880] veth1_vlan: entered promiscuous mode [ 1179.887511][ T6199] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.913328][T11715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.913349][T11715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.917021][ T6199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.954712][ T6199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.958094][ T6199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.968402][T12090] siw: device registration error -23 [ 1183.248343][T11880] veth0_macvtap: entered promiscuous mode [ 1183.288472][T11880] veth1_macvtap: entered promiscuous mode [ 1184.361253][ T1490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.361273][ T1490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.485781][T11880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.522569][T11715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.522587][T11715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.597660][T11880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.093117][T11715] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.093694][T11715] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.094352][T11715] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.094929][T11715] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.922204][T11715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.922224][T11715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.703843][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.703864][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.982680][T12138] hub 9-0:1.0: USB hub found [ 1187.984873][T12138] hub 9-0:1.0: 1 port detected [ 1189.164712][T12142] misc userio: Invalid payload size [ 1190.847880][T12155] bridge0: port 3(vlan2) entered blocking state [ 1190.848251][T12155] bridge0: port 3(vlan2) entered disabled state [ 1190.848607][T12155] vlan2: entered allmulticast mode [ 1190.848627][T12155] dummy0: entered allmulticast mode [ 1190.857421][T12155] vlan2: entered promiscuous mode [ 1190.857469][T12155] dummy0: entered promiscuous mode [ 1190.981291][T12155] hub 9-0:1.0: USB hub found [ 1190.989082][T12155] hub 9-0:1.0: 1 port detected [ 1191.256097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.774570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.220962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.252571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.470058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.740298][T12165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.489220][T11550] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1196.759004][T11550] usb 6-1: Using ep0 maxpacket: 16 [ 1196.765369][T11550] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1196.765395][T11550] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1196.765425][T11550] usb 6-1: config 166 has no interface number 0 [ 1196.765443][T11550] usb 6-1: config 166 has no interface number 1 [ 1196.765506][T11550] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1196.765528][T11550] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1196.765576][T11550] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1196.765611][T11550] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1196.765636][T11550] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1196.765664][T11550] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1196.765688][T11550] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1196.765713][T11550] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1196.765734][T11550] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1196.765760][T11550] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1196.765776][T11550] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1196.965407][T11550] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1196.965437][T11550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.965457][T11550] usb 6-1: Product: syz [ 1196.965469][T11550] usb 6-1: Manufacturer: syz [ 1196.965482][T11550] usb 6-1: SerialNumber: syz [ 1197.014804][T12183] siw: device registration error -23 [ 1197.281340][T11550] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1197.492723][T11550] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1197.568569][T11550] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 1197.591641][T11550] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 1197.591680][T11550] usb 6-1: No valid video chain found. [ 1197.652974][T11550] usb 6-1: USB disconnect, device number 2 [ 1201.866765][ T8408] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1201.883308][ T8408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1201.884657][ T8408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1201.886266][ T8408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1201.887069][ T8408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1202.028512][T12214] lo speed is unknown, defaulting to 1000 [ 1202.951255][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1202.954365][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1202.987286][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1203.018500][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1203.120424][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1203.982808][ T5157] Bluetooth: hci2: command tx timeout [ 1204.447425][T12221] lo speed is unknown, defaulting to 1000 [ 1204.492987][T12214] chnl_net:caif_netlink_parms(): no params data found [ 1205.259178][ T5157] Bluetooth: hci7: command tx timeout [ 1206.209375][ T5157] Bluetooth: hci2: command tx timeout [ 1206.239228][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.239374][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.239580][T12214] bridge_slave_0: entered allmulticast mode [ 1206.281981][T12214] bridge_slave_0: entered promiscuous mode [ 1206.285091][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.289125][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.289694][T12214] bridge_slave_1: entered allmulticast mode [ 1206.292345][T12214] bridge_slave_1: entered promiscuous mode [ 1207.455178][ T5157] Bluetooth: hci7: command tx timeout [ 1207.541909][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.750738][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.282885][ T5157] Bluetooth: hci2: command tx timeout [ 1208.888167][T12214] team0: Port device team_slave_0 added [ 1208.897689][T12221] chnl_net:caif_netlink_parms(): no params data found [ 1208.953935][T12214] team0: Port device team_slave_1 added [ 1209.485118][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.485136][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.485161][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.499411][ T5157] Bluetooth: hci7: command tx timeout [ 1209.712152][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.712188][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.712214][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.379350][ T5157] Bluetooth: hci2: command tx timeout [ 1210.496665][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.496965][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.497580][T12221] bridge_slave_0: entered allmulticast mode [ 1210.526124][T12221] bridge_slave_0: entered promiscuous mode [ 1210.763818][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.764102][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.764315][T12221] bridge_slave_1: entered allmulticast mode [ 1210.799137][T12221] bridge_slave_1: entered promiscuous mode [ 1210.808537][T12214] hsr_slave_0: entered promiscuous mode [ 1210.829915][T12214] hsr_slave_1: entered promiscuous mode [ 1210.830837][T12214] debugfs: 'hsr0' already exists in 'hsr' [ 1210.830860][T12214] Cannot create hsr debugfs directory [ 1211.520447][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.579054][ T5157] Bluetooth: hci7: command tx timeout [ 1211.880512][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.375157][T12221] team0: Port device team_slave_0 added [ 1212.446968][T12221] team0: Port device team_slave_1 added [ 1212.912330][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.912347][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.912372][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.050803][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.050820][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.050844][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.605421][T12300] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1211'. [ 1214.962588][T12221] hsr_slave_0: entered promiscuous mode [ 1214.963957][T12221] hsr_slave_1: entered promiscuous mode [ 1214.964905][T12221] debugfs: 'hsr0' already exists in 'hsr' [ 1214.964929][T12221] Cannot create hsr debugfs directory [ 1216.765400][ T8408] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1216.795939][ T8408] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1216.797537][ T8408] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1216.805464][ T8408] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1216.816535][ T8408] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1217.009114][T12214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1217.065700][T12214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1217.423545][T12214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1217.479898][T12214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1217.856007][T12339] lo speed is unknown, defaulting to 1000 [ 1218.940087][ T5157] Bluetooth: hci8: command tx timeout [ 1219.068899][T12221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1219.103660][T12339] chnl_net:caif_netlink_parms(): no params data found [ 1219.156290][T12221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1219.299084][T12221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1219.432364][T12221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1219.745101][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.930663][ T8408] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1219.946572][ T8408] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1219.961177][ T8408] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1219.966447][ T8408] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1219.990920][ T8408] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1220.105626][T12339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.105790][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.106014][T12339] bridge_slave_0: entered allmulticast mode [ 1220.108769][T12339] bridge_slave_0: entered promiscuous mode [ 1220.156158][T12339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.156235][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.156368][T12339] bridge_slave_1: entered allmulticast mode [ 1220.157851][T12339] bridge_slave_1: entered promiscuous mode [ 1220.480996][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.486509][T12339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.528538][T12339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.672571][T12406] lo speed is unknown, defaulting to 1000 [ 1220.712507][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.712805][ T1513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.890183][T12339] team0: Port device team_slave_0 added [ 1220.917812][T12339] team0: Port device team_slave_1 added [ 1220.982705][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.982911][T11112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.019264][ T5157] Bluetooth: hci8: command tx timeout [ 1221.331866][T12339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.331882][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.331904][T12339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.405030][T12339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.405047][T12339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.405072][T12339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.843021][T12339] hsr_slave_0: entered promiscuous mode [ 1221.844419][T12339] hsr_slave_1: entered promiscuous mode [ 1221.845362][T12339] debugfs: 'hsr0' already exists in 'hsr' [ 1221.845385][T12339] Cannot create hsr debugfs directory [ 1222.059173][ T5157] Bluetooth: hci9: command tx timeout [ 1222.896619][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.997877][T12406] chnl_net:caif_netlink_parms(): no params data found [ 1223.102370][ T5157] Bluetooth: hci8: command tx timeout [ 1223.501911][ T6000] usb 1-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 1223.501949][ T6000] usb 1-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 1223.502082][ T6000] keyspan_pda 1-1:127.124: probe with driver keyspan_pda failed with error -2 [ 1223.525307][ T6000] keyspan_pda 1-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 1223.529445][ T6000] usb 1-1: ezusb_set_reset-1 failed: -71 [ 1223.531974][ T6000] usb 1-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1223.531998][ T6000] usb 1-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1223.829671][T12221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.139210][ T5157] Bluetooth: hci9: command tx timeout [ 1224.632512][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.647565][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.647854][T12406] bridge_slave_0: entered allmulticast mode [ 1224.652790][T12406] bridge_slave_0: entered promiscuous mode [ 1224.656974][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.657119][T11112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.672686][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.672816][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.673011][T12406] bridge_slave_1: entered allmulticast mode [ 1224.684784][T12406] bridge_slave_1: entered promiscuous mode [ 1224.891864][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.891999][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.178965][ T8408] Bluetooth: hci8: command tx timeout [ 1225.196824][T12406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.238583][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.245937][T12406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.721342][T12406] team0: Port device team_slave_0 added [ 1225.746755][T12406] team0: Port device team_slave_1 added [ 1226.219443][ T8408] Bluetooth: hci9: command tx timeout [ 1226.228489][T12406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.228505][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.228530][T12406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.255943][T12406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.255958][T12406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.255980][T12406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.661942][T12406] hsr_slave_0: entered promiscuous mode [ 1226.663321][T12406] hsr_slave_1: entered promiscuous mode [ 1226.664245][T12406] debugfs: 'hsr0' already exists in 'hsr' [ 1226.664268][T12406] Cannot create hsr debugfs directory [ 1226.689176][T12339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1226.830105][T12339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1227.050885][T12339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1227.178187][T12339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1227.714952][T12214] veth0_vlan: entered promiscuous mode [ 1227.843332][T12221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.846704][T12214] veth1_vlan: entered promiscuous mode [ 1228.309533][ T8408] Bluetooth: hci9: command tx timeout [ 1228.709654][T12214] veth0_macvtap: entered promiscuous mode [ 1228.740923][T12214] veth1_macvtap: entered promiscuous mode [ 1229.235297][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.236285][T12221] veth0_vlan: entered promiscuous mode [ 1229.661387][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.720983][T12221] veth1_vlan: entered promiscuous mode [ 1229.772738][ T1512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.781021][ T1512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.782748][ T1512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.785322][ T1512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.965356][T12339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.028209][ T5157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1230.047385][ T5157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1230.056706][ T5157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1230.057733][ T5157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1230.058438][ T5157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1230.476546][T12339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.610629][T12573] lo speed is unknown, defaulting to 1000 [ 1230.618350][T12221] veth0_macvtap: entered promiscuous mode [ 1230.644478][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.644498][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.705019][T12406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1230.748703][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.750337][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.785634][T12406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1230.884754][T12406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1230.928599][T12221] veth1_macvtap: entered promiscuous mode [ 1230.971201][T12406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1231.051352][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.051559][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.121963][T11715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.121983][T11715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.314534][T12221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.414645][T12221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.526208][ T1513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.982707][ T1513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.102212][ T1513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.139208][ T5157] Bluetooth: hci10: command tx timeout [ 1232.155685][ T1513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.641658][T12573] chnl_net:caif_netlink_parms(): no params data found [ 1234.249282][ T5157] Bluetooth: hci10: command tx timeout [ 1234.927133][ T5972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.927153][ T5972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.539407][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.539609][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.539883][T12573] bridge_slave_0: entered allmulticast mode [ 1235.541839][T12573] bridge_slave_0: entered promiscuous mode [ 1235.589191][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.589329][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.589648][T12573] bridge_slave_1: entered allmulticast mode [ 1235.593386][T12573] bridge_slave_1: entered promiscuous mode [ 1235.660004][ T1558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.660024][ T1558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.016808][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.070550][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.141884][T12339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.178522][T12406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.299769][ T5157] Bluetooth: hci10: command tx timeout [ 1238.383248][ T5157] Bluetooth: hci10: command tx timeout [ 1238.915418][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.915504][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.947290][T12573] team0: Port device team_slave_0 added [ 1238.995778][T12573] team0: Port device team_slave_1 added [ 1240.691976][T12406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.715448][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.715462][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.715485][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.801604][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.801622][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.801647][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.896880][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.897108][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.026255][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.026861][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.463612][T12573] hsr_slave_0: entered promiscuous mode [ 1241.465167][T12573] hsr_slave_1: entered promiscuous mode [ 1241.466126][T12573] debugfs: 'hsr0' already exists in 'hsr' [ 1241.466150][T12573] Cannot create hsr debugfs directory [ 1241.811497][T12339] veth0_vlan: entered promiscuous mode [ 1242.281661][T12339] veth1_vlan: entered promiscuous mode [ 1243.996643][T12573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.226329][T12339] veth0_macvtap: entered promiscuous mode [ 1244.485346][T12573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.583578][T12339] veth1_macvtap: entered promiscuous mode [ 1245.624007][T12573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.721506][T12406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.731806][T12339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.926035][T12740] bridge0: port 3(vlan2) entered blocking state [ 1245.930137][T12740] bridge0: port 3(vlan2) entered disabled state [ 1245.935211][T12740] vlan2: entered allmulticast mode [ 1245.935279][T12740] dummy0: entered allmulticast mode [ 1245.959205][T12740] vlan2: entered promiscuous mode [ 1245.959274][T12740] dummy0: entered promiscuous mode [ 1246.688748][ T8408] Bluetooth: hci3: command 0x0406 tx timeout [ 1247.054025][T12744] 9pnet_fd: Insufficient options for proto=fd [ 1247.079188][T12573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.167259][T12339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.266854][T11112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.268132][T11112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.268415][T11112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.268690][T11112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.865664][T12406] veth0_vlan: entered promiscuous mode [ 1248.058525][T12406] veth1_vlan: entered promiscuous mode [ 1248.121493][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.121512][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.672229][T12573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1248.727056][T12573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1248.830114][T12573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1248.897695][ T1558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.897723][ T1558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.899491][T12573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1249.728492][T12406] veth0_macvtap: entered promiscuous mode [ 1249.758228][T12406] veth1_macvtap: entered promiscuous mode [ 1250.493029][T12406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.606690][T12406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.654811][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.654883][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.654937][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.654989][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.610665][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.610692][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 1253.577730][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 1255.195442][T12815] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1237'. [ 1255.575226][T12573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.605653][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.605673][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.881966][T12573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.937174][T12821] misc userio: Invalid payload size [ 1255.953352][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.953371][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.007313][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.010931][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.113619][T12823] hub 9-0:1.0: USB hub found [ 1256.115497][T12823] hub 9-0:1.0: 1 port detected [ 1256.888051][ T8408] Bluetooth: hci5: command 0x0406 tx timeout [ 1257.030615][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.034291][T12731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.818487][ T8408] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1257.856050][ T8408] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1257.867208][ T8408] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1257.880151][ T8408] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1257.881643][ T8408] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1258.246995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.340811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.758002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.952865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.981378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.176211][T12830] lo speed is unknown, defaulting to 1000 [ 1259.213265][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.644962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.730478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1259.889552][T12847] trusted_key: syz.4.1241 sent an empty control message without MSG_MORE. [ 1260.116450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1260.139101][ T5157] Bluetooth: hci11: command tx timeout [ 1260.615944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.374394][T12852] binder_alloc: 12851: binder_alloc_buf, no vma [ 1261.854727][T12573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.232177][ T8408] Bluetooth: hci11: command tx timeout [ 1262.253476][T12864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.543751][T12857] siw: device registration error -23 [ 1264.371180][ T8408] Bluetooth: hci11: command tx timeout [ 1265.093987][T12872] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1246'. [ 1265.506267][T12874] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1247'. [ 1266.102832][T12573] veth0_vlan: entered promiscuous mode [ 1266.142072][T12573] veth1_vlan: entered promiscuous mode [ 1266.413989][ T5157] Bluetooth: hci11: command tx timeout [ 1267.272576][T12830] chnl_net:caif_netlink_parms(): no params data found [ 1270.714274][T12902] blktrace: Concurrent blktraces are not allowed on sg0 [ 1270.945229][T12573] veth0_macvtap: entered promiscuous mode [ 1270.948248][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.948379][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.948637][T12830] bridge_slave_0: entered allmulticast mode [ 1270.989274][T12830] bridge_slave_0: entered promiscuous mode [ 1271.016649][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.016797][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.017095][T12830] bridge_slave_1: entered allmulticast mode [ 1271.030622][T12830] bridge_slave_1: entered promiscuous mode [ 1271.312620][T12573] veth1_macvtap: entered promiscuous mode [ 1274.439588][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.427045][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.732801][T12919] blktrace: Concurrent blktraces are not allowed on sg0 [ 1277.274306][ T5157] Bluetooth: hci6: command 0x0406 tx timeout [ 1278.243234][T12830] team0: Port device team_slave_0 added [ 1278.442288][T12830] team0: Port device team_slave_1 added [ 1279.179971][ T38] INFO: task syz.0.1170:11790 blocked for more than 143 seconds. [ 1279.179998][ T38] Not tainted syzkaller #0 [ 1279.180008][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1279.180021][ T38] task:syz.0.1170 state:D stack:28104 pid:11790 tgid:11788 ppid:5838 task_flags:0x400040 flags:0x00004004 [ 1279.180084][ T38] Call Trace: [ 1279.180091][ T38] [ 1279.180103][ T38] __schedule+0x16f3/0x4c20 [ 1279.180158][ T38] ? __pfx___schedule+0x10/0x10 [ 1279.180206][ T38] rt_mutex_schedule+0x77/0xf0 [ 1279.180226][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1279.180261][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1279.180286][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1279.180310][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1279.180331][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1279.180350][ T38] ? __lock_acquire+0xab9/0xd20 [ 1279.180384][ T38] ? usbdev_open+0x16e/0x790 [ 1279.180411][ T38] ? bus_find_device+0x279/0x2c0 [ 1279.180435][ T38] ? __pfx_device_match_devt+0x10/0x10 [ 1279.180460][ T38] ? usbdev_open+0x16e/0x790 [ 1279.180480][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1279.180500][ T38] ? usbdev_open+0xa7/0x790 [ 1279.180526][ T38] usbdev_open+0x16e/0x790 [ 1279.180549][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 1279.180571][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1279.180593][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 1279.180627][ T38] chrdev_open+0x4cf/0x5e0 [ 1279.180654][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1279.180679][ T38] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 1279.180709][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 1279.180732][ T38] do_dentry_open+0x9b1/0x1350 [ 1279.180763][ T38] vfs_open+0x3b/0x350 [ 1279.180785][ T38] ? path_openat+0x2ed9/0x3840 [ 1279.180809][ T38] path_openat+0x2ef1/0x3840 [ 1279.180836][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 1279.180884][ T38] ? __pfx_path_openat+0x10/0x10 [ 1279.180905][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1279.180936][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1279.180962][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.180987][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1279.181019][ T38] do_filp_open+0x1fa/0x410 [ 1279.181042][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 1279.181060][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1279.181106][ T38] ? alloc_fd+0x64f/0x6c0 [ 1279.181141][ T38] do_sys_openat2+0x121/0x1c0 [ 1279.181163][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1279.181182][ T38] ? exc_page_fault+0x76/0xf0 [ 1279.181210][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 1279.181234][ T38] __x64_sys_openat+0x138/0x170 [ 1279.181259][ T38] do_syscall_64+0xfa/0x3b0 [ 1279.181275][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.181299][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.181317][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1279.181339][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.181361][ T38] RIP: 0033:0x7f79bd12d510 [ 1279.181381][ T38] RSP: 002b:00007f79bb374b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1279.181400][ T38] RAX: ffffffffffffffda RBX: 000000000000a401 RCX: 00007f79bd12d510 [ 1279.181414][ T38] RDX: 000000000000a401 RSI: 00007f79bb374c10 RDI: 00000000ffffff9c [ 1279.181427][ T38] RBP: 00007f79bb374c10 R08: 0000000000000000 R09: 0000000000000000 [ 1279.181439][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1279.181451][ T38] R13: 00007f79bd376128 R14: 00007f79bd376090 R15: 00007fff5e519ff8 [ 1279.181483][ T38] [ 1279.181552][ T38] [ 1279.181552][ T38] Showing all locks held in the system: [ 1279.181562][ T38] 1 lock held by khungtaskd/38: [ 1279.181573][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1279.181640][ T38] 7 locks held by udevd/5208: [ 1279.181650][ T38] 2 locks held by dhcpcd/5502: [ 1279.181660][ T38] #0: ffffffff8ecb7c18 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 1279.181705][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 1279.181755][ T38] 2 locks held by getty/5597: [ 1279.181772][ T38] #0: ffff888030d3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1279.181820][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1279.181866][ T38] 2 locks held by kworker/1:3/5905: [ 1279.181876][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1279.181924][ T38] #1: ffffc90004f67bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1279.181969][ T38] 6 locks held by kworker/1:8/6000: [ 1279.181979][ T38] #0: ffff8880199ca138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1279.182024][ T38] #1: ffffc90005407bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1279.182070][ T38] #2: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1279.182114][ T38] #3: ffff88802f7e7188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1279.182155][ T38] #4: ffff888037b0f150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1279.182196][ T38] #5: ffffffff8d851160 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1279.182243][ T38] 3 locks held by kworker/u8:2/11112: [ 1279.182253][ T38] #0: ffff88814ce89138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1279.182299][ T38] #1: ffffc900040a7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1279.182344][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1279.182387][ T38] 4 locks held by udevd/11409: [ 1279.182397][ T38] #0: ffff888053343838 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 1279.182441][ T38] #1: ffff88805d5aa478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1279.182491][ T38] #2: ffff8880234b5e18 (kn->active#20){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1279.182540][ T38] #3: ffff88802f7e7188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1279.182583][ T38] 1 lock held by udevd/11471: [ 1279.182592][ T38] #0: ffff88802f687218 (&ep->lock){++++}-{3:3}, at: do_epoll_wait+0x84d/0xbb0 [ 1279.182641][ T38] 2 locks held by kworker/u8:6/11715: [ 1279.182651][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1279.182696][ T38] #1: ffffc90004e87bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1279.182742][ T38] 1 lock held by syz.0.1170/11790: [ 1279.182753][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.182809][ T38] 1 lock held by syz.9.1181/12106: [ 1279.182820][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.182865][ T38] 1 lock held by syz.6.1183/12120: [ 1279.182876][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.182921][ T38] 2 locks held by kworker/u8:18/12148: [ 1279.182932][ T38] 1 lock held by syz.5.1200/12208: [ 1279.182942][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.182988][ T38] 1 lock held by syz.8.1204/12230: [ 1279.182998][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.183045][ T38] 1 lock held by syz.7.1212/12308: [ 1279.183055][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.183102][ T38] 1 lock held by syz-executor/12573: [ 1279.183112][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1279.183160][ T38] 1 lock held by syz.3.1220/12661: [ 1279.183170][ T38] #0: ffff888144b74188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 1279.183216][ T38] 2 locks held by syz-executor/12830: [ 1279.183226][ T38] #0: ffffffff8e43b8a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1279.183277][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1279.183321][ T38] 2 locks held by syz.2.1264/12938: [ 1279.183333][ T38] 1 lock held by syz.4.1263/12939: [ 1279.183343][ T38] #0: ffff888071f218d0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 1279.183389][ T38] 1 lock held by syz.4.1263/12940: [ 1279.183400][ T38] [ 1279.183405][ T38] ============================================= [ 1279.183405][ T38] [ 1279.183419][ T38] NMI backtrace for cpu 0 [ 1279.183441][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1279.183462][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1279.183471][ T38] Call Trace: [ 1279.183479][ T38] [ 1279.183485][ T38] dump_stack_lvl+0x189/0x250 [ 1279.183513][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1279.183536][ T38] ? __pfx__printk+0x10/0x10 [ 1279.183567][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1279.183592][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1279.183616][ T38] ? __pfx__printk+0x10/0x10 [ 1279.183639][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1279.183662][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1279.183685][ T38] watchdog+0xf93/0xfe0 [ 1279.183712][ T38] ? watchdog+0x1de/0xfe0 [ 1279.183739][ T38] kthread+0x70e/0x8a0 [ 1279.183770][ T38] ? __pfx_watchdog+0x10/0x10 [ 1279.183790][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.183818][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.183842][ T38] ret_from_fork+0x436/0x7d0 [ 1279.183866][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1279.183894][ T38] ? __switch_to_asm+0x39/0x70 [ 1279.183910][ T38] ? __switch_to_asm+0x33/0x70 [ 1279.183925][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.183949][ T38] ret_from_fork_asm+0x1a/0x30 [ 1279.183980][ T38] [ 1279.183986][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1279.184010][ C1] NMI backtrace for cpu 1 [ 1279.184023][ C1] CPU: 1 UID: 0 PID: 12940 Comm: syz.4.1263 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1279.184041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1279.184050][ C1] RIP: 0010:__kasan_check_byte+0x0/0x40 [ 1279.184071][ C1] Code: 44 24 48 a8 01 0f 84 da fe ff ff 48 ff c8 49 89 c4 e9 cf fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 84 c0 75 16 [ 1279.184085][ C1] RSP: 0018:ffffc90006597450 EFLAGS: 00000202 [ 1279.184098][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d120ccd31cdcce00 [ 1279.184109][ C1] RDX: 0000000000000000 RSI: ffffffff8220e025 RDI: ffffffff8d9a8d80 [ 1279.184120][ C1] RBP: ffffffff8220e009 R08: 0000000000000000 R09: 0000000000000000 [ 1279.184130][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: 0000000000000002 [ 1279.184141][ C1] R13: ffffffff8d9a8d80 R14: 0000000000000000 R15: 0000000000000000 [ 1279.184151][ C1] FS: 00007f0f34b4e6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1279.184165][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.184176][ C1] CR2: 0000555555919808 CR3: 0000000024bb2000 CR4: 00000000003526f0 [ 1279.184191][ C1] Call Trace: [ 1279.184196][ C1] [ 1279.184202][ C1] lock_acquire+0x8d/0x360 [ 1279.184221][ C1] ? xas_store+0xaef/0x1880 [ 1279.184236][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1279.184252][ C1] __lruvec_stat_mod_folio+0x95/0x2f0 [ 1279.184265][ C1] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 1279.184281][ C1] shmem_add_to_page_cache+0x8be/0xbc0 [ 1279.184306][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1279.184332][ C1] shmem_get_folio_gfp+0x7d2/0x1a70 [ 1279.184363][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1279.184386][ C1] shmem_fault+0x170/0x380 [ 1279.184403][ C1] __do_fault+0x135/0x390 [ 1279.184419][ C1] handle_mm_fault+0x23c6/0x3400 [ 1279.184442][ C1] ? handle_mm_fault+0xdb/0x3400 [ 1279.184464][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1279.184482][ C1] ? follow_page_pte+0xc0d/0x1360 [ 1279.184504][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 1279.184528][ C1] ? vma_is_secretmem+0xd/0x50 [ 1279.184549][ C1] __get_user_pages+0x16e4/0x2b60 [ 1279.184583][ C1] populate_vma_page_range+0x29f/0x3a0 [ 1279.184603][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1279.184619][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1279.184639][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1279.184656][ C1] __mm_populate+0x24c/0x380 [ 1279.184674][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1279.184691][ C1] ? vm_mmap_pgoff+0x353/0x4d0 [ 1279.184711][ C1] vm_mmap_pgoff+0x38a/0x4d0 [ 1279.184728][ C1] ? __se_sys_futex+0x36f/0x400 [ 1279.184745][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1279.184762][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 1279.184779][ C1] ? rcu_is_watching+0x15/0xb0 [ 1279.184801][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1279.184820][ C1] do_syscall_64+0xfa/0x3b0 [ 1279.184833][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.184851][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.184866][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1279.184881][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.184895][ C1] RIP: 0033:0x7f0f368eeba9 [ 1279.184908][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.184921][ C1] RSP: 002b:00007f0f34b4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1279.184936][ C1] RAX: ffffffffffffffda RBX: 00007f0f36b35fa0 RCX: 00007f0f368eeba9 [ 1279.184947][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1279.184958][ C1] RBP: 00007f0f36971e19 R08: ffffffffffffffff R09: 0000000000000000 [ 1279.184969][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1279.184979][ C1] R13: 00007f0f36b36038 R14: 00007f0f36b35fa0 R15: 00007ffec3858008 [ 1279.184998][ C1] [ 1279.185010][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1279.185024][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1279.185044][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1279.185055][ T38] Call Trace: [ 1279.185062][ T38] [ 1279.185070][ T38] dump_stack_lvl+0x99/0x250 [ 1279.185093][ T38] ? __asan_memcpy+0x40/0x70 [ 1279.185113][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1279.185135][ T38] ? __pfx__printk+0x10/0x10 [ 1279.185167][ T38] vpanic+0x281/0x750 [ 1279.185193][ T38] ? __pfx_vpanic+0x10/0x10 [ 1279.185214][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1279.185232][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.185266][ T38] panic+0xb9/0xc0 [ 1279.185288][ T38] ? __pfx_panic+0x10/0x10 [ 1279.185313][ T38] ? irq_work_queue+0xc3/0x140 [ 1279.185338][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1279.185378][ T38] watchdog+0xfd2/0xfe0 [ 1279.185403][ T38] ? watchdog+0x1de/0xfe0 [ 1279.185430][ T38] kthread+0x70e/0x8a0 [ 1279.185455][ T38] ? __pfx_watchdog+0x10/0x10 [ 1279.185475][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.185504][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.185529][ T38] ret_from_fork+0x436/0x7d0 [ 1279.185552][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1279.185579][ T38] ? __switch_to_asm+0x39/0x70 [ 1279.185595][ T38] ? __switch_to_asm+0x33/0x70 [ 1279.185611][ T38] ? __pfx_kthread+0x10/0x10 [ 1279.185635][ T38] ret_from_fork_asm+0x1a/0x30 [ 1279.185667][ T38] [ 1279.185992][ T38] Kernel Offset: disabled