last executing test programs: 37m46.869133975s ago: executing program 32 (id=83): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0}) 37m1.755793876s ago: executing program 33 (id=246): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f00000003c0), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000004080)=0x99, 0x4) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x12}, 0x0) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109029400030109d0050904000000010100000a240105000902010211240605040502000200030006000200030824070602000fd90c240701050006fee6bc1be9090401000001020000090402010101020000090501ef0f0008260507250104000700090402"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 34m30.358172865s ago: executing program 34 (id=906): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 25m41.552281707s ago: executing program 35 (id=3015): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x2c8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x2b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x2a8, 0x3, "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"}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 22m17.899406221s ago: executing program 0 (id=3485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m16.438247143s ago: executing program 0 (id=3490): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 22m11.770440914s ago: executing program 0 (id=3493): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @mcast2, 0x2}, 0x1c) 22m11.5193947s ago: executing program 0 (id=3496): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0x0) 22m11.27511224s ago: executing program 0 (id=3497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) cachestat(r4, &(0x7f00000003c0)={0x9, 0x6}, &(0x7f0000000400), 0x0) 22m9.865374558s ago: executing program 36 (id=3472): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22m9.856350203s ago: executing program 0 (id=3499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 21m57.95048128s ago: executing program 37 (id=3491): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x8, 0x20ab40) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) 21m54.441739064s ago: executing program 38 (id=3499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2, 0xd7, 0x90, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) close(r0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 21m6.751491261s ago: executing program 8 (id=3603): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r3 = accept$alg(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) readv(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/165, 0xa5}], 0x1) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) dup2(r0, r1) tkill(0x0, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21m5.31899745s ago: executing program 8 (id=3605): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r4}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) 21m5.059799581s ago: executing program 8 (id=3606): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="380000002e0001002dbd7000ffdbdf2508004300", @ANYRES32, @ANYBLOB="200045801c001b8004"], 0x38}], 0x1, 0x0, 0x0, 0x20004081}, 0xc000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$notify(r0, 0x402, 0x0) close_range(r0, r3, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000ac0)=""/4096) 21m4.669095912s ago: executing program 8 (id=3608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 21m3.600713278s ago: executing program 8 (id=3610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 21m2.167503646s ago: executing program 8 (id=3612): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket(0x10, 0x80002, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 20m46.473335448s ago: executing program 39 (id=3612): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket(0x10, 0x80002, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 19m40.503151615s ago: executing program 6 (id=3695): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80009) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00', @private1, @mcast1, 0x4fd, 0x8, 0x7, 0x500, 0xffffffffffffff7b, 0x80000000}) sched_setparam(0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) 19m39.93572145s ago: executing program 6 (id=3696): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x10}) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19m39.833674893s ago: executing program 6 (id=3697): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x6, @private2}}, 0x0, 0x0, 0x0, 0x0, "a38fbcb957f6ee650a88e81a5cb3b0852da5b6b13aa9aed3e923ad05392be7124f3883a973ec229f5f6d572c1ff8e2f4bff900"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0xc851) 19m39.762316584s ago: executing program 6 (id=3698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x144) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 19m37.632473805s ago: executing program 6 (id=3699): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 19m37.523640272s ago: executing program 6 (id=3700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 19m22.29160505s ago: executing program 40 (id=3700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 11m8.165517866s ago: executing program 5 (id=3842): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r3) 11m6.574472764s ago: executing program 5 (id=3844): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) 11m4.09478468s ago: executing program 5 (id=3847): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4) 11m3.372008371s ago: executing program 5 (id=3848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}}) 11m1.980114417s ago: executing program 5 (id=3851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xa) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m59.173557095s ago: executing program 5 (id=3852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 10m42.359957652s ago: executing program 41 (id=3852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 6m48.126273558s ago: executing program 9 (id=4091): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xffffb45f, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) 6m44.197749285s ago: executing program 9 (id=4094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x8, 0x401, 0x56595559, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2}}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) 6m42.712409959s ago: executing program 9 (id=4095): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) accept(r3, 0x0, 0x0) 6m41.562548052s ago: executing program 9 (id=4096): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 6m41.255422807s ago: executing program 9 (id=4097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) 6m38.723121179s ago: executing program 9 (id=4100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m23.002631182s ago: executing program 42 (id=4100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m35.212307343s ago: executing program 4 (id=4139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, 0xffffffffffffffff, 0x11, 0x0, r5}, 0x11) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m33.731942006s ago: executing program 4 (id=4141): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 4m30.52180151s ago: executing program 4 (id=4144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000", @ANYRES16], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$MAP_CREATE(0x0, 0x0, 0x48) 4m28.124385083s ago: executing program 4 (id=4147): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7fffefff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 4m26.580040156s ago: executing program 4 (id=4149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x70}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) eventfd(0x100000ae) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2020) 4m23.908800323s ago: executing program 4 (id=4151): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x8000002, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x5, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x3, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0xffffffff, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x7, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x6, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xfffffffb, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x5, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x4, 0xfffffff9, 0xe55, 0x10, 0x2b8, 0x4, 0x4, 0x7, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x6d7e, 0x3, 0x10006, 0x7ffd, 0xbf23, 0x6, 0x8, 0x97a, 0x9, 0x3ff, 0x3, 0x6, 0x1010001, 0x5b9, 0x4000007, 0x4, 0xea, 0x9, 0x9, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x0, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1003, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x2000005, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x3, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x564, 0x4040) 4m8.663961441s ago: executing program 43 (id=4151): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x8000002, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x5, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x3, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0xffffffff, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x7, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x6, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0xfffffffb, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x5, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x4, 0xfffffff9, 0xe55, 0x10, 0x2b8, 0x4, 0x4, 0x7, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x6d7e, 0x3, 0x10006, 0x7ffd, 0xbf23, 0x6, 0x8, 0x97a, 0x9, 0x3ff, 0x3, 0x6, 0x1010001, 0x5b9, 0x4000007, 0x4, 0xea, 0x9, 0x9, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x0, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1003, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x2000005, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x3, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x564, 0x4040) 3m7.803809263s ago: executing program 7 (id=4245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x1, 0x45) mkdirat(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0/file0/file0\x00', 0x81100) fstat(0xffffffffffffffff, &(0x7f0000000440)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x80}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd, 0x40, 0x8, 0x0, 0xc5c1, 0x0, r4}) 3m5.899629986s ago: executing program 7 (id=4248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) writev(r3, 0x0, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000900)=0x19) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="da", 0x1}], 0x1) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1) 3m3.874661993s ago: executing program 7 (id=4251): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2m55.566284314s ago: executing program 7 (id=4257): socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2m42.999524631s ago: executing program 7 (id=4271): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) 2m41.570777874s ago: executing program 7 (id=4272): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x20, 0x4, @thr={&(0x7f0000000300)="5082f6b5223915eceaf2b552d302fdb15069d45caf88d7203d4acc30fd7cd9b884b39d400ada4d885ea7bd23c54bd532ba12fb06d21917f6f3fd50fe6c7e2363dfa3f13520580714ca7c9de741af5cc9a9c4903aff1110bb079c88b8f0793bd219efd57ba07ae85a6a0135fbab8fe991294977464ce86924aad815018f33a66ed4cfd005417a510b7af2e466586d9fac9cc789533652d2f9e6d00c84ed84f5fd658242a48e91fa40fa0627a06ad0d52b80f0b9", &(0x7f00000003c0)="8ef12ce7e65199bd8b703995e64b368e61e69026a3acd54e582883bace7841c0fe68d6d121f061b4ee5a8e9b06c75f6b766dcd867c8eaa5691ace47728478672bf6d383ffb859bdf"}}, &(0x7f0000000280)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2m25.856932395s ago: executing program 44 (id=4272): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x20, 0x4, @thr={&(0x7f0000000300)="5082f6b5223915eceaf2b552d302fdb15069d45caf88d7203d4acc30fd7cd9b884b39d400ada4d885ea7bd23c54bd532ba12fb06d21917f6f3fd50fe6c7e2363dfa3f13520580714ca7c9de741af5cc9a9c4903aff1110bb079c88b8f0793bd219efd57ba07ae85a6a0135fbab8fe991294977464ce86924aad815018f33a66ed4cfd005417a510b7af2e466586d9fac9cc789533652d2f9e6d00c84ed84f5fd658242a48e91fa40fa0627a06ad0d52b80f0b9", &(0x7f00000003c0)="8ef12ce7e65199bd8b703995e64b368e61e69026a3acd54e582883bace7841c0fe68d6d121f061b4ee5a8e9b06c75f6b766dcd867c8eaa5691ace47728478672bf6d383ffb859bdf"}}, &(0x7f0000000280)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 22.327544477s ago: executing program 2 (id=4424): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x150, 0xd3, 0x12, 0x36, 0x10, 0x9fb, 0x602a, 0xfd36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xaa, 0x72, 0x59}}]}}]}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 13.947633269s ago: executing program 1 (id=4426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 13.870551041s ago: executing program 2 (id=4427): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 12.287787093s ago: executing program 2 (id=4429): syz_io_uring_submit(0x0, 0x0, 0x0) 12.173241763s ago: executing program 3 (id=4430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) sendmmsg(r1, &(0x7f0000000280), 0x17, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 12.137660751s ago: executing program 2 (id=4431): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="08e302000200100008001b000000000223d3c3ddee231eec5fd266ab48835fc1b5e9b35d6e70f3492bc5126b4ed9855264a7d6523c3d76c77a9a274bee7fed542b8600000000c7e533cb4a5fcb01f4bbc2c8117ae9d7e17b1cd04408f075e323968f38d314e72361d769c316"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.177110757s ago: executing program 1 (id=4432): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, r3, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 9.442516437s ago: executing program 3 (id=4433): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 8.824141064s ago: executing program 3 (id=4434): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x1, 0x8, 0x2, 0x7fffffff}, {0x81, 0x4, 0x7, 0x10}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(0x0, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.62522941s ago: executing program 3 (id=4435): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) syz_io_uring_setup(0x2287, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 6.850098879s ago: executing program 1 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 5.051263205s ago: executing program 1 (id=4437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.048873586s ago: executing program 2 (id=4438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) syz_open_dev$loop(0x0, 0x4, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000380)={0xf0f002, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) 5.02837278s ago: executing program 3 (id=4439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$llc_int(r4, 0x10c, 0x2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.865226219s ago: executing program 1 (id=4440): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) socket$pppoe(0x18, 0x1, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 957.10161ms ago: executing program 1 (id=4441): openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x8042, 0x10c) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) 875.380141ms ago: executing program 2 (id=4442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=4443): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = gettid() tkill(r3, 0x11) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) kernel console output (not intermixed with test programs): interface not active [ 1621.829541][T18260] hsr_slave_0: entered promiscuous mode [ 1621.831015][T18260] hsr_slave_1: entered promiscuous mode [ 1621.832007][T18260] debugfs: 'hsr0' already exists in 'hsr' [ 1621.832034][T18260] Cannot create hsr debugfs directory [ 1622.217517][T10244] hsr_slave_0: left promiscuous mode [ 1622.237549][T10244] hsr_slave_1: left promiscuous mode [ 1622.238959][T10244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.239004][T10244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.311230][T10244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.311269][T10244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.443419][T10244] veth1_macvtap: left promiscuous mode [ 1622.443519][T10244] veth0_macvtap: left promiscuous mode [ 1622.443767][T10244] veth1_vlan: left promiscuous mode [ 1622.443963][T10244] veth0_vlan: left promiscuous mode [ 1623.968463][T10244] team0 (unregistering): Port device team_slave_1 removed [ 1624.138074][T10244] team0 (unregistering): Port device team_slave_0 removed [ 1627.596382][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1627.618977][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1627.621019][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1627.664224][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1627.681584][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1627.986485][T10244] team0 (unregistering): Port device team_slave_1 removed [ 1628.299293][T10244] team0 (unregistering): Port device team_slave_0 removed [ 1629.787569][ T5849] Bluetooth: hci4: command tx timeout [ 1631.850779][ T5849] Bluetooth: hci4: command tx timeout [ 1632.227527][T18279] hsr_slave_0: entered promiscuous mode [ 1632.229269][T18279] hsr_slave_1: entered promiscuous mode [ 1632.230354][T18279] debugfs: 'hsr0' already exists in 'hsr' [ 1632.230381][T18279] Cannot create hsr debugfs directory [ 1632.916318][T18304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.916588][T18304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.916828][T18304] bridge_slave_0: entered allmulticast mode [ 1632.942858][T18304] bridge_slave_0: entered promiscuous mode [ 1633.363306][T18304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.363478][T18304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.363709][T18304] bridge_slave_1: entered allmulticast mode [ 1633.376242][T18304] bridge_slave_1: entered promiscuous mode [ 1633.892295][T18304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.907225][ T5849] Bluetooth: hci4: command tx timeout [ 1634.034558][T18304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.494077][T18304] team0: Port device team_slave_0 added [ 1634.704363][T18304] team0: Port device team_slave_1 added [ 1635.141759][T18304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.141778][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.141806][T18304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.215390][T18304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.215411][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.215444][T18304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.703832][T18304] hsr_slave_0: entered promiscuous mode [ 1635.705102][T18304] hsr_slave_1: entered promiscuous mode [ 1635.705848][T18304] debugfs: 'hsr0' already exists in 'hsr' [ 1635.705870][T18304] Cannot create hsr debugfs directory [ 1636.009941][ T5849] Bluetooth: hci4: command tx timeout [ 1636.155971][T18323] chnl_net:caif_netlink_parms(): no params data found [ 1637.034483][T18323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.034729][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.034952][T18323] bridge_slave_0: entered allmulticast mode [ 1637.040551][T18323] bridge_slave_0: entered promiscuous mode [ 1637.063522][T18323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.063719][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.064462][T18323] bridge_slave_1: entered allmulticast mode [ 1637.070694][T18323] bridge_slave_1: entered promiscuous mode [ 1637.357998][T18323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.409449][T18323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.670302][T18323] team0: Port device team_slave_0 added [ 1637.690645][T18323] team0: Port device team_slave_1 added [ 1638.071976][T18323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.071998][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.072033][T18323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.093693][T18323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.093718][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.093771][T18323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.114540][T18260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.163191][T18279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.484941][T18323] hsr_slave_0: entered promiscuous mode [ 1638.486025][T18323] hsr_slave_1: entered promiscuous mode [ 1638.486764][T18323] debugfs: 'hsr0' already exists in 'hsr' [ 1638.486784][T18323] Cannot create hsr debugfs directory [ 1638.528601][T10244] bridge_slave_1: left allmulticast mode [ 1638.528641][T10244] bridge_slave_1: left promiscuous mode [ 1638.528959][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.599099][T10244] bridge_slave_0: left allmulticast mode [ 1638.599140][T10244] bridge_slave_0: left promiscuous mode [ 1638.599507][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.984554][T10244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.058267][T10244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.136258][T10244] bond0 (unregistering): Released all slaves [ 1639.198870][T18260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.605039][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.605320][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.687365][T10244] hsr_slave_0: left promiscuous mode [ 1639.709234][T10244] hsr_slave_1: left promiscuous mode [ 1639.711593][T10244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.758629][T10244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.590225][T10244] team0 (unregistering): Port device team_slave_1 removed [ 1640.784480][T10244] team0 (unregistering): Port device team_slave_0 removed [ 1641.642980][T18279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.719512][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.719709][T10242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.756994][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.757281][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.908326][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.908508][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.401640][T18304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.756362][T18304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.831589][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.832463][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1642.929927][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.930290][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1643.215685][T18323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.302887][T18279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1643.392406][T18323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1643.414194][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.417346][T10242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.455610][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.456065][T10242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.456465][T18304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.562063][T17661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1644.575359][T17661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1644.586197][T17661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1644.616477][T17661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1644.617817][T17661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1644.819178][T10244] bridge_slave_1: left allmulticast mode [ 1644.819219][T10244] bridge_slave_1: left promiscuous mode [ 1644.819518][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.916647][T10244] bridge_slave_0: left allmulticast mode [ 1644.916683][T10244] bridge_slave_0: left promiscuous mode [ 1644.916930][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.737182][ T5849] Bluetooth: hci0: command tx timeout [ 1647.298741][T10244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.358299][T10244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.410483][T10244] bond0 (unregistering): Released all slaves [ 1647.612825][T18323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.337627][T10244] hsr_slave_0: left promiscuous mode [ 1648.399242][T17661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1648.433279][T17661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1648.435475][T10244] hsr_slave_1: left promiscuous mode [ 1648.436590][T10244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.443582][T17661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1648.445099][T17661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1648.467670][T17661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1648.494842][T10244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.787346][T17661] Bluetooth: hci0: command tx timeout [ 1649.888279][T10244] team0 (unregistering): Port device team_slave_1 removed [ 1650.228370][T10244] team0 (unregistering): Port device team_slave_0 removed [ 1650.627702][T17661] Bluetooth: hci2: command tx timeout [ 1650.867608][T17661] Bluetooth: hci0: command tx timeout [ 1652.717468][T17661] Bluetooth: hci2: command tx timeout [ 1652.953910][T17661] Bluetooth: hci0: command tx timeout [ 1654.067491][T18377] chnl_net:caif_netlink_parms(): no params data found [ 1654.378547][T18304] veth0_vlan: entered promiscuous mode [ 1654.753724][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.753892][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.754191][T18377] bridge_slave_0: entered allmulticast mode [ 1654.762408][T18377] bridge_slave_0: entered promiscuous mode [ 1654.787236][T17661] Bluetooth: hci2: command tx timeout [ 1654.807199][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.807455][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.807813][T18377] bridge_slave_1: entered allmulticast mode [ 1654.811078][T18377] bridge_slave_1: entered promiscuous mode [ 1654.814003][T18304] veth1_vlan: entered promiscuous mode [ 1655.112917][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.203272][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.204904][T18323] veth0_vlan: entered promiscuous mode [ 1655.462899][T18377] team0: Port device team_slave_0 added [ 1655.465017][T18390] chnl_net:caif_netlink_parms(): no params data found [ 1655.482773][T18377] team0: Port device team_slave_1 added [ 1655.750933][T18323] veth1_vlan: entered promiscuous mode [ 1655.870137][T10244] bridge_slave_1: left allmulticast mode [ 1655.870183][T10244] bridge_slave_1: left promiscuous mode [ 1655.870497][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.939403][T10244] bridge_slave_0: left allmulticast mode [ 1655.939452][T10244] bridge_slave_0: left promiscuous mode [ 1655.939944][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.873647][T17661] Bluetooth: hci2: command tx timeout [ 1658.349252][T10244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.408449][T10244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.464194][T10244] bond0 (unregistering): Released all slaves [ 1658.508708][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.508730][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.508764][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.577655][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.577675][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.577707][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.058553][T18390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.058810][T18390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.059097][T18390] bridge_slave_0: entered allmulticast mode [ 1659.061251][T18390] bridge_slave_0: entered promiscuous mode [ 1659.307641][T10244] hsr_slave_0: left promiscuous mode [ 1659.327532][T10244] hsr_slave_1: left promiscuous mode [ 1659.328871][T10244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.378821][T10244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.828135][T10244] team0 (unregistering): Port device team_slave_1 removed [ 1661.138550][T10244] team0 (unregistering): Port device team_slave_0 removed [ 1664.435964][T18390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.436141][T18390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.436465][T18390] bridge_slave_1: entered allmulticast mode [ 1664.441108][T18390] bridge_slave_1: entered promiscuous mode [ 1664.473683][T18377] hsr_slave_0: entered promiscuous mode [ 1664.475354][T18377] hsr_slave_1: entered promiscuous mode [ 1664.476461][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 1664.476491][T18377] Cannot create hsr debugfs directory [ 1664.481784][T18304] veth0_macvtap: entered promiscuous mode [ 1664.749540][T18390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.755173][T18304] veth1_macvtap: entered promiscuous mode [ 1664.908381][T18390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.332959][T18390] team0: Port device team_slave_0 added [ 1665.482092][T18390] team0: Port device team_slave_1 added [ 1665.721442][T18323] veth0_macvtap: entered promiscuous mode [ 1665.870007][T18390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.870028][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.870058][T18390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.913231][T18390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.913256][T18390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1665.913297][T18390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1665.923084][T18304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.929272][T18323] veth1_macvtap: entered promiscuous mode [ 1666.145997][T18304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.340118][T18390] hsr_slave_0: entered promiscuous mode [ 1666.341236][T18390] hsr_slave_1: entered promiscuous mode [ 1666.341989][T18390] debugfs: 'hsr0' already exists in 'hsr' [ 1666.342009][T18390] Cannot create hsr debugfs directory [ 1666.458774][T18323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.690921][T18323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.474842][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.474865][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.794760][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.794786][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.934461][T10242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1667.934487][T10242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.142460][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.142486][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.252195][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.614425][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.678139][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.678338][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.054418][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.054650][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.100731][T18390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1673.780693][T18447] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 18447 comm: syz.9.3768) [ 1673.839981][ T38] audit: type=1800 audit(1758449941.101:726): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3768" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=70676 res=0 errno=0 [ 1674.190602][T18390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.073296][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.073394][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.196127][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.196342][T11420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.367578][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.367764][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1689.496732][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.825241][T18390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.736277][T18509] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3781'. [ 1698.028188][T18377] veth0_vlan: entered promiscuous mode [ 1699.106736][T18377] veth1_vlan: entered promiscuous mode [ 1699.751410][T18390] veth0_vlan: entered promiscuous mode [ 1700.238712][T18390] veth1_vlan: entered promiscuous mode [ 1700.268584][T15096] libceph: connect (1)[c::]:6789 error -101 [ 1700.268957][T15096] libceph: mon0 (1)[c::]:6789 connect error [ 1700.378210][T18548] ceph: No mds server is up or the cluster is laggy [ 1700.388614][T18377] veth0_macvtap: entered promiscuous mode [ 1700.535447][T18377] veth1_macvtap: entered promiscuous mode [ 1701.941652][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.957583][T18390] veth0_macvtap: entered promiscuous mode [ 1702.228692][T18390] veth1_macvtap: entered promiscuous mode [ 1702.259933][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.535387][T18390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.785435][T18390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.413356][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.413384][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.543970][ T3621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.543997][ T3621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.178355][T18585] TCP: TCP_TX_DELAY enabled [ 1712.285492][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1712.327510][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1712.337525][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1712.378840][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1712.401977][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1712.949834][T18619] netlink: 'syz.5.3805': attribute type 1 has an invalid length. [ 1712.949929][T18619] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1714.506960][T18609] Bluetooth: hci0: command tx timeout [ 1714.565247][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1714.757404][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1714.766083][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1714.773159][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1714.779184][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1715.090202][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1715.091057][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3808'. [ 1716.965433][ T5849] Bluetooth: hci0: command tx timeout [ 1716.966968][ T5849] Bluetooth: hci5: command tx timeout [ 1719.027506][T17661] Bluetooth: hci5: command tx timeout [ 1719.027548][T17661] Bluetooth: hci0: command tx timeout [ 1721.756138][T17661] Bluetooth: hci0: command tx timeout [ 1721.756182][T17661] Bluetooth: hci5: command tx timeout [ 1722.421790][ T3621] bridge_slave_1: left allmulticast mode [ 1722.421832][ T3621] bridge_slave_1: left promiscuous mode [ 1722.422139][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.169162][ T5849] Bluetooth: hci5: command tx timeout [ 1724.232518][ T3621] bridge_slave_0: left allmulticast mode [ 1724.232555][ T3621] bridge_slave_0: left promiscuous mode [ 1724.232849][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.630733][T18697] kvm: kvm [18687]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1735.569625][T18736] tipc: Failed to remove unknown binding: 66,1,1/0:2229486449/2229486451 [ 1735.569696][T18736] tipc: Failed to remove unknown binding: 66,1,1/0:2229486449/2229486451 [ 1736.952819][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.952908][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.770154][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 1739.502112][T18761] loop5: detected capacity change from 0 to 524255232 [ 1740.438121][T18766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1742.670415][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.779719][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.844464][ T3621] bond0 (unregistering): Released all slaves [ 1744.438246][T18770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1747.087311][ T3621] hsr_slave_0: left promiscuous mode [ 1747.932817][ T3621] hsr_slave_1: left promiscuous mode [ 1747.933961][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1747.933994][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.026142][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.026180][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.919624][ T3621] veth1_macvtap: left promiscuous mode [ 1750.919763][ T3621] veth0_macvtap: left promiscuous mode [ 1750.920115][ T3621] veth1_vlan: left promiscuous mode [ 1750.920357][ T3621] veth0_vlan: left promiscuous mode [ 1754.078949][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 1760.832486][T17805] IPVS: starting estimator thread 0... [ 1760.978675][T18858] IPVS: using max 6 ests per chain, 14400 per kthread [ 1770.306733][T17661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1770.399029][T17661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1770.435033][T17661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1770.449997][T17661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1770.465563][T17661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1772.198310][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 1772.555460][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 1772.676799][ T5849] Bluetooth: hci2: command tx timeout [ 1772.739529][T17661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1772.944068][T17661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1772.957557][T17661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1772.967678][T17661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1772.969746][T17661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1773.486798][T18609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1773.557603][T18609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1773.570872][T18609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1773.598365][T18609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1773.628495][T18609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1774.707239][T17661] Bluetooth: hci2: command tx timeout [ 1775.107161][T17661] Bluetooth: hci6: command tx timeout [ 1775.845211][T17661] Bluetooth: hci7: command tx timeout [ 1776.797835][T17661] Bluetooth: hci2: command tx timeout [ 1777.798164][T17661] Bluetooth: hci6: command tx timeout [ 1777.942139][T17661] Bluetooth: hci7: command tx timeout [ 1778.664083][T18815] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1778.664147][T18815] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1778.664174][T18815] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1778.752652][ T38] audit: type=1800 audit(1758450045.981:727): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3852" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1778.867158][T17661] Bluetooth: hci2: command tx timeout [ 1780.059409][T17661] Bluetooth: hci6: command tx timeout [ 1780.059455][T17661] Bluetooth: hci7: command tx timeout [ 1782.447837][T18609] Bluetooth: hci7: command tx timeout [ 1782.447884][T18609] Bluetooth: hci6: command tx timeout [ 1782.908891][ T5222] libceph: connect (1)[c::]:6789 error -101 [ 1782.909166][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1782.914218][ T5222] libceph: connect (1)[c::]:6789 error -101 [ 1782.914482][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1783.646522][ T5222] libceph: connect (1)[c::]:6789 error -101 [ 1783.646760][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1783.708512][T18944] ceph: No mds server is up or the cluster is laggy [ 1790.081620][T18901] chnl_net:caif_netlink_parms(): no params data found [ 1791.276338][T18986] sp0: Synchronizing with TNC [ 1791.702608][T18884] chnl_net:caif_netlink_parms(): no params data found [ 1791.722512][T18899] chnl_net:caif_netlink_parms(): no params data found [ 1797.457858][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.457946][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.878155][ T3621] bridge_slave_1: left allmulticast mode [ 1797.878183][ T3621] bridge_slave_1: left promiscuous mode [ 1797.878384][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.958789][ T3621] bridge_slave_0: left allmulticast mode [ 1797.958820][ T3621] bridge_slave_0: left promiscuous mode [ 1797.959098][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.072338][ T3621] bridge_slave_1: left allmulticast mode [ 1798.072379][ T3621] bridge_slave_1: left promiscuous mode [ 1798.072693][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.249116][ T3621] bridge_slave_0: left allmulticast mode [ 1798.249155][ T3621] bridge_slave_0: left promiscuous mode [ 1798.249443][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.458237][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1819.558622][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.882699][ T3621] bond0 (unregistering): Released all slaves [ 1829.034837][T19163] loop5: detected capacity change from 0 to 524255232 [ 1829.573431][T19169] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1831.235136][T18609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1831.266141][T18609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1831.272157][T18609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1831.275671][T18609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1831.283317][T18609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1833.399433][T17661] Bluetooth: hci0: command tx timeout [ 1833.983387][T18609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1834.034719][T18609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1834.047265][T18609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1834.052630][T18609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1834.053766][T18609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1834.848209][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1834.908501][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.944913][ T3621] bond0 (unregistering): Released all slaves [ 1835.397248][T18901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.397430][T18901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.397741][T18901] bridge_slave_0: entered allmulticast mode [ 1835.401120][T18901] bridge_slave_0: entered promiscuous mode [ 1835.437143][T18609] Bluetooth: hci0: command tx timeout [ 1836.147323][T18609] Bluetooth: hci3: command tx timeout [ 1837.507083][T18609] Bluetooth: hci0: command tx timeout [ 1838.215152][T17661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1838.233670][T17661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1838.238826][ T5849] Bluetooth: hci3: command tx timeout [ 1838.253290][T17661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1838.255888][T17661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1838.256884][T17661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1839.651596][T17661] Bluetooth: hci0: command tx timeout [ 1840.307374][T17661] Bluetooth: hci3: command tx timeout [ 1841.987407][T17661] Bluetooth: hci5: command tx timeout [ 1842.437439][T17661] Bluetooth: hci3: command tx timeout [ 1844.072983][T17661] Bluetooth: hci5: command tx timeout [ 1846.185122][T18609] Bluetooth: hci5: command tx timeout [ 1846.426908][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1848.406747][T18609] Bluetooth: hci5: command tx timeout [ 1853.199634][T19174] chnl_net:caif_netlink_parms(): no params data found [ 1853.228094][T19182] chnl_net:caif_netlink_parms(): no params data found [ 1858.821685][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.821776][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1873.315710][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3973'. [ 1874.217379][ T3621] hsr_slave_0: left promiscuous mode [ 1874.627189][ T3621] hsr_slave_1: left promiscuous mode [ 1874.628332][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.628368][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1876.775395][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1876.788195][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1879.327119][ T3621] hsr_slave_0: left promiscuous mode [ 1879.640318][ T3621] hsr_slave_1: left promiscuous mode [ 1879.663563][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.672809][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.357870][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1880.357911][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1884.304431][ T3621] veth1_macvtap: left promiscuous mode [ 1884.304590][ T3621] veth0_macvtap: left promiscuous mode [ 1884.304950][ T3621] veth1_vlan: left promiscuous mode [ 1884.305216][ T3621] veth0_vlan: left promiscuous mode [ 1885.003485][ T3621] veth1_macvtap: left promiscuous mode [ 1885.003629][ T3621] veth0_macvtap: left promiscuous mode [ 1885.003962][ T3621] veth1_vlan: left promiscuous mode [ 1885.004221][ T3621] veth0_vlan: left promiscuous mode [ 1886.606783][ T38] audit: type=1326 audit(1758450153.921:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.649213][ T38] audit: type=1326 audit(1758450153.921:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.649613][ T38] audit: type=1326 audit(1758450153.921:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.713056][ T38] audit: type=1326 audit(1758450153.921:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.713657][ T38] audit: type=1326 audit(1758450153.921:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.713969][ T38] audit: type=1326 audit(1758450153.921:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf865d590 code=0x7ffc0000 [ 1886.714283][ T38] audit: type=1326 audit(1758450153.921:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.714754][ T38] audit: type=1326 audit(1758450153.921:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1886.715050][ T38] audit: type=1326 audit(1758450153.921:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bf865d590 code=0x7ffc0000 [ 1886.715328][ T38] audit: type=1326 audit(1758450153.921:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19404 comm="syz.9.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf865ec29 code=0x7ffc0000 [ 1889.409091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1889.532406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1889.610587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1889.684110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1889.752203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.146803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.230661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.321268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.398890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.459136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.667591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1890.899235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1891.750465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1891.899714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1892.887273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1893.146508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1897.636173][T17661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1897.675448][T17661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1897.682236][T17661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1897.686420][T17661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1897.691489][T17661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1899.170983][T17661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1899.203491][T17661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1899.215016][T17661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1899.242219][T17661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1899.246839][T17661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1900.311177][T17661] Bluetooth: hci2: command tx timeout [ 1901.220965][T17661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1901.243920][T17661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1901.246048][T17661] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1901.259086][T17661] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1901.260036][T17661] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1902.477166][T17661] Bluetooth: hci6: command tx timeout [ 1902.692723][T18609] Bluetooth: hci2: command tx timeout [ 1904.546190][T18609] Bluetooth: hci7: command tx timeout [ 1904.552543][T17661] Bluetooth: hci6: command tx timeout [ 1904.707082][T18609] Bluetooth: hci2: command tx timeout [ 1906.632636][T17661] Bluetooth: hci6: command tx timeout [ 1906.688888][T18609] Bluetooth: hci7: command tx timeout [ 1906.790638][T18609] Bluetooth: hci2: command tx timeout [ 1908.737459][T17661] Bluetooth: hci6: command tx timeout [ 1908.867204][T18609] Bluetooth: hci7: command tx timeout [ 1908.978377][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 1911.607433][T18609] Bluetooth: hci7: command tx timeout [ 1911.828091][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 1913.884922][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1913.884947][ T38] audit: type=1326 audit(1758450181.191:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885017][ T38] audit: type=1326 audit(1758450181.191:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885073][ T38] audit: type=1326 audit(1758450181.191:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885125][ T38] audit: type=1326 audit(1758450181.191:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885179][ T38] audit: type=1326 audit(1758450181.191:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885233][ T38] audit: type=1326 audit(1758450181.191:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885285][ T38] audit: type=1326 audit(1758450181.191:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885340][ T38] audit: type=1326 audit(1758450181.191:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885402][ T38] audit: type=1326 audit(1758450181.191:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1913.885455][ T38] audit: type=1326 audit(1758450181.191:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19510 comm="syz.4.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09812dec29 code=0x7fc00000 [ 1916.954807][T19530] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4016'. [ 1920.558087][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.558180][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1937.952039][ T38] kauditd_printk_skb: 36 callbacks suppressed [ 1937.952065][ T38] audit: type=1800 audit(1758450205.271:785): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4034" name="/" dev="9p" ino=2 res=0 errno=0 [ 1944.669223][T19631] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4043'. [ 1949.696809][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 1949.988830][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 1953.969922][T17661] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1953.996666][T17661] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1954.043940][T19174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.044111][T19174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.044433][T19174] bridge_slave_0: entered allmulticast mode [ 1954.047451][T17661] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1954.108098][T19174] bridge_slave_0: entered promiscuous mode [ 1954.219578][T17661] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1954.220547][T17661] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1954.712844][T19652] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1954.728106][T19652] VFS: Can't find a romfs filesystem on dev nullb0. [ 1954.728106][T19652] [ 1955.393284][T17661] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1955.419775][T17661] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1955.426403][T17661] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1955.430934][T17661] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1955.433055][T17661] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1956.712260][T11611] Bluetooth: hci8: command tx timeout [ 1957.753222][T11611] Bluetooth: hci9: command tx timeout [ 1958.358321][T11611] Bluetooth: hci0: command 0x0406 tx timeout [ 1958.358364][T11611] Bluetooth: hci3: command 0x0406 tx timeout [ 1958.788001][ T5849] Bluetooth: hci8: command tx timeout [ 1959.835302][T17661] Bluetooth: hci9: command tx timeout [ 1960.622818][ T38] audit: type=1804 audit(1758450227.881:786): pid=19677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.4052" name="/newroot/124/file0" dev="tmpfs" ino=670 res=1 errno=0 [ 1961.700650][T17661] Bluetooth: hci8: command tx timeout [ 1961.942804][T17661] Bluetooth: hci9: command tx timeout [ 1962.313848][T18609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1962.330301][T18609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1962.332538][T18609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1962.383534][T18609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1962.388917][T18609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1963.945977][T18609] Bluetooth: hci8: command tx timeout [ 1964.521302][T18609] Bluetooth: hci0: command tx timeout [ 1964.659974][T18609] Bluetooth: hci9: command tx timeout [ 1966.557133][T18609] Bluetooth: hci0: command tx timeout [ 1966.920625][T19655] chnl_net:caif_netlink_parms(): no params data found [ 1967.277266][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4058'. [ 1968.647535][T18609] Bluetooth: hci0: command tx timeout [ 1969.059397][T19644] chnl_net:caif_netlink_parms(): no params data found [ 1970.707117][T18609] Bluetooth: hci0: command tx timeout [ 1972.153215][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.153375][T19655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.153689][T19655] bridge_slave_0: entered allmulticast mode [ 1972.178621][T19655] bridge_slave_0: entered promiscuous mode [ 1973.107542][T19655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.107702][T19655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.108007][T19655] bridge_slave_1: entered allmulticast mode [ 1973.111307][T19655] bridge_slave_1: entered promiscuous mode [ 1974.218448][ T5222] libceph: connect (1)[c::]:6789 error -101 [ 1974.218702][ T5222] libceph: mon0 (1)[c::]:6789 connect error [ 1974.494337][T17805] libceph: connect (1)[c::]:6789 error -101 [ 1974.494576][T17805] libceph: mon0 (1)[c::]:6789 connect error [ 1974.655919][T19741] ceph: No mds server is up or the cluster is laggy [ 1977.252309][T19655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.767683][T19644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.961746][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.962096][T19644] bridge_slave_0: entered allmulticast mode [ 1979.058344][T19644] bridge_slave_0: entered promiscuous mode [ 1979.074992][T19655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.105489][T19644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.105649][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.105939][T19644] bridge_slave_1: entered allmulticast mode [ 1979.161954][T19644] bridge_slave_1: entered promiscuous mode [ 1981.707232][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.713184][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.482655][T19790] hub 9-0:1.0: USB hub found [ 1983.485446][T19790] hub 9-0:1.0: 1 port detected [ 1986.759536][T19655] team0: Port device team_slave_0 added [ 1986.772264][T19644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1986.809181][T19644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.812041][T19655] team0: Port device team_slave_1 added [ 1988.852432][T19811] loop5: detected capacity change from 0 to 524255232 [ 1989.289677][T19644] team0: Port device team_slave_0 added [ 1989.291616][T19655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.291637][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.291668][T19655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.292899][T19679] chnl_net:caif_netlink_parms(): no params data found [ 1989.497251][T19655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.497273][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.497307][T19655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.501006][T19644] team0: Port device team_slave_1 added [ 1995.882506][T19644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.882528][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.882563][T19644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.947357][T19644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.947377][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.947402][T19644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1998.972817][ T3621] bridge_slave_0: left allmulticast mode [ 1998.972847][ T3621] bridge_slave_0: left promiscuous mode [ 1998.973057][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.242784][ T3621] bridge_slave_0: left allmulticast mode [ 1999.242814][ T3621] bridge_slave_0: left promiscuous mode [ 1999.243065][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.821595][ T3621] bond0 (unregistering): Released all slaves [ 2001.176337][ T3621] bond0 (unregistering): Released all slaves [ 2001.516815][ T3621] bond0 (unregistering): Released all slaves [ 2001.839264][ T3621] bond0 (unregistering): Released all slaves [ 2003.372447][ T3621] bond0 (unregistering): Released all slaves [ 2003.860141][T19862] loop5: detected capacity change from 0 to 524255232 [ 2003.963889][T19655] hsr_slave_0: entered promiscuous mode [ 2003.965519][T19655] hsr_slave_1: entered promiscuous mode [ 2003.966588][T19655] debugfs: 'hsr0' already exists in 'hsr' [ 2003.966617][T19655] Cannot create hsr debugfs directory [ 2005.109628][T19679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.109790][T19679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.110046][T19679] bridge_slave_0: entered allmulticast mode [ 2005.113332][T19679] bridge_slave_0: entered promiscuous mode [ 2005.428864][T19644] hsr_slave_0: entered promiscuous mode [ 2005.439355][T19644] hsr_slave_1: entered promiscuous mode [ 2005.440681][T19644] debugfs: 'hsr0' already exists in 'hsr' [ 2005.440717][T19644] Cannot create hsr debugfs directory [ 2005.442473][T19679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.442683][T19679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.442972][T19679] bridge_slave_1: entered allmulticast mode [ 2005.446590][T19679] bridge_slave_1: entered promiscuous mode [ 2008.125341][T19679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2008.403493][T19679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2009.826129][T19679] team0: Port device team_slave_0 added [ 2010.037997][T19679] team0: Port device team_slave_1 added [ 2013.218033][T19679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2013.218058][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2013.218091][T19679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2013.430831][T19679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2013.430851][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2013.430883][T19679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2014.614663][T19679] hsr_slave_0: entered promiscuous mode [ 2014.616333][T19679] hsr_slave_1: entered promiscuous mode [ 2014.638020][T19679] debugfs: 'hsr0' already exists in 'hsr' [ 2014.638051][T19679] Cannot create hsr debugfs directory [ 2014.640637][T19644] kthread_run failed with err -4 [ 2016.842547][T17661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2016.948298][T17661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2016.966208][T17661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2017.113657][T17661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2017.378245][T17661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2019.510836][T17661] Bluetooth: hci2: command tx timeout [ 2021.587430][T17661] Bluetooth: hci2: command tx timeout [ 2023.667348][T17661] Bluetooth: hci2: command tx timeout [ 2025.730312][T18609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2025.749626][ T5849] Bluetooth: hci2: command tx timeout [ 2025.805595][T18609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2025.808252][T18609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2025.815727][T18609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2025.816701][T18609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2027.937388][T17661] Bluetooth: hci3: command tx timeout [ 2028.321955][T18609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2028.360657][T18609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2028.366504][T18609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2028.400333][T18609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2028.422669][T18609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2029.054876][T17661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2029.135411][T17661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2029.152860][T17661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2029.190229][T17661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2029.253146][T17661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2029.627550][T19907] chnl_net:caif_netlink_parms(): no params data found [ 2029.862624][T19913] chnl_net:caif_netlink_parms(): no params data found [ 2029.987982][T17661] Bluetooth: hci3: command tx timeout [ 2030.711377][T17661] Bluetooth: hci0: command tx timeout [ 2031.427536][T17661] Bluetooth: hci4: command tx timeout [ 2031.825723][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.826294][T19907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.826590][T19907] bridge_slave_0: entered allmulticast mode [ 2031.850987][T19907] bridge_slave_0: entered promiscuous mode [ 2031.998814][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.999659][T19907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.999976][T19907] bridge_slave_1: entered allmulticast mode [ 2032.030022][T19907] bridge_slave_1: entered promiscuous mode [ 2032.067232][T17661] Bluetooth: hci3: command tx timeout [ 2032.346793][T19913] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.347589][T19913] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.348101][T19913] bridge_slave_0: entered allmulticast mode [ 2032.351996][T19913] bridge_slave_0: entered promiscuous mode [ 2032.538575][T19913] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.538738][T19913] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.539030][T19913] bridge_slave_1: entered allmulticast mode [ 2032.542169][T19913] bridge_slave_1: entered promiscuous mode [ 2032.583818][T19907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2032.741076][T19907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.789637][T17661] Bluetooth: hci0: command tx timeout [ 2033.086151][T19913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.510099][T17661] Bluetooth: hci4: command tx timeout [ 2034.547890][T17661] Bluetooth: hci3: command tx timeout [ 2034.867058][T17661] Bluetooth: hci0: command tx timeout [ 2036.093446][T17661] Bluetooth: hci4: command tx timeout [ 2036.094298][T19913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.329893][T19907] team0: Port device team_slave_0 added [ 2036.962115][T17661] Bluetooth: hci0: command tx timeout [ 2037.449691][T19907] team0: Port device team_slave_1 added [ 2038.257923][T17661] Bluetooth: hci4: command tx timeout [ 2039.251284][T19913] team0: Port device team_slave_0 added [ 2040.721878][T19913] team0: Port device team_slave_1 added [ 2040.741116][T19907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2040.741138][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2040.741170][T19907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2041.497612][T19926] chnl_net:caif_netlink_parms(): no params data found [ 2041.515424][T19907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2041.515445][T19907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2041.515489][T19907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.026261][T19913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.026281][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.026314][T19913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.203757][T19913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.203779][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.203813][T19913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2043.125188][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.125278][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.622429][T19930] chnl_net:caif_netlink_parms(): no params data found [ 2047.959113][T19907] hsr_slave_0: entered promiscuous mode [ 2047.967951][T19907] hsr_slave_1: entered promiscuous mode [ 2047.969034][T19907] debugfs: 'hsr0' already exists in 'hsr' [ 2047.969064][T19907] Cannot create hsr debugfs directory [ 2050.500375][ T3621] bridge_slave_1: left allmulticast mode [ 2050.500413][ T3621] bridge_slave_1: left promiscuous mode [ 2050.500728][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.418933][ T3621] bridge_slave_0: left allmulticast mode [ 2051.418972][ T3621] bridge_slave_0: left promiscuous mode [ 2051.419302][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.812559][ T3621] bridge_slave_1: left allmulticast mode [ 2051.812603][ T3621] bridge_slave_1: left promiscuous mode [ 2051.812895][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.749216][ T3621] bridge_slave_0: left allmulticast mode [ 2052.749256][ T3621] bridge_slave_0: left promiscuous mode [ 2052.749555][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.832668][ T3621] bridge_slave_1: left allmulticast mode [ 2052.832708][ T3621] bridge_slave_1: left promiscuous mode [ 2052.833003][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.900462][ T3621] bridge_slave_0: left allmulticast mode [ 2052.900502][ T3621] bridge_slave_0: left promiscuous mode [ 2052.900803][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.962350][ T3621] bridge_slave_1: left allmulticast mode [ 2052.962392][ T3621] bridge_slave_1: left promiscuous mode [ 2052.962693][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.059363][ T3621] bridge_slave_0: left allmulticast mode [ 2053.059403][ T3621] bridge_slave_0: left promiscuous mode [ 2053.059727][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.868540][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.928028][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.983718][ T3621] bond0 (unregistering): Released all slaves [ 2056.328349][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.408176][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.480012][ T3621] bond0 (unregistering): Released all slaves [ 2056.818332][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.906724][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.961935][ T3621] bond0 (unregistering): Released all slaves [ 2057.271221][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.347946][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2057.411897][ T3621] bond0 (unregistering): Released all slaves [ 2057.640629][T19913] hsr_slave_0: entered promiscuous mode [ 2057.642186][T19913] hsr_slave_1: entered promiscuous mode [ 2057.643136][T19913] debugfs: 'hsr0' already exists in 'hsr' [ 2057.643161][T19913] Cannot create hsr debugfs directory [ 2057.852594][T19926] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.852751][T19926] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.852989][T19926] bridge_slave_0: entered allmulticast mode [ 2057.856287][T19926] bridge_slave_0: entered promiscuous mode [ 2057.963038][T19926] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.963302][T19926] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.963532][T19926] bridge_slave_1: entered allmulticast mode [ 2057.966768][T19926] bridge_slave_1: entered promiscuous mode [ 2059.392933][T19926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2059.473149][T19926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.473478][T19930] bridge0: port 1(bridge_slave_0) entered blocking state [ 2059.473635][T19930] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.473853][T19930] bridge_slave_0: entered allmulticast mode [ 2059.520849][T19930] bridge_slave_0: entered promiscuous mode [ 2059.629125][T19930] bridge0: port 2(bridge_slave_1) entered blocking state [ 2059.629367][T19930] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.629598][T19930] bridge_slave_1: entered allmulticast mode [ 2059.632577][T19930] bridge_slave_1: entered promiscuous mode [ 2060.204925][T19926] team0: Port device team_slave_0 added [ 2060.443429][T19926] team0: Port device team_slave_1 added [ 2060.463834][T19930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.653326][T19930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.920838][T19926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.920859][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.920892][T19926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2061.046603][T19926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2061.046624][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2061.046658][T19926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2061.052526][T19930] team0: Port device team_slave_0 added [ 2061.100560][T19930] team0: Port device team_slave_1 added [ 2061.330471][ T3621] hsr_slave_0: left promiscuous mode [ 2061.377182][ T3621] hsr_slave_1: left promiscuous mode [ 2061.378253][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2061.378279][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.402954][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2061.403020][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.527401][ T3621] hsr_slave_0: left promiscuous mode [ 2061.567238][ T3621] hsr_slave_1: left promiscuous mode [ 2061.568366][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.591282][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.747583][ T3621] hsr_slave_0: left promiscuous mode [ 2061.767530][ T3621] hsr_slave_1: left promiscuous mode [ 2061.768543][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.827904][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.947367][ T3621] hsr_slave_0: left promiscuous mode [ 2061.967385][ T3621] hsr_slave_1: left promiscuous mode [ 2061.968503][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.009073][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2062.142741][ T3621] veth1_macvtap: left promiscuous mode [ 2062.142840][ T3621] veth0_macvtap: left promiscuous mode [ 2062.143056][ T3621] veth1_vlan: left promiscuous mode [ 2062.143210][ T3621] veth0_vlan: left promiscuous mode [ 2065.630497][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2065.948770][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2070.220683][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2070.398079][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2072.078050][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2072.317994][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2074.038541][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2074.228226][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2075.580907][T19930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2075.580929][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2075.580962][T19930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2075.703069][T19930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2075.703092][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2075.703126][T19930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2075.716351][T19926] hsr_slave_0: entered promiscuous mode [ 2075.729303][T19926] hsr_slave_1: entered promiscuous mode [ 2075.730363][T19926] debugfs: 'hsr0' already exists in 'hsr' [ 2075.730393][T19926] Cannot create hsr debugfs directory [ 2076.434595][T18609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2076.465044][T18609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2076.484773][T18609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2076.518368][T18609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2076.519293][T18609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2076.753714][T19930] hsr_slave_0: entered promiscuous mode [ 2076.808031][T19930] hsr_slave_1: entered promiscuous mode [ 2076.817292][T19930] debugfs: 'hsr0' already exists in 'hsr' [ 2076.817321][T19930] Cannot create hsr debugfs directory [ 2077.316420][T18609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2077.354177][T18609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2077.457123][T18609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2077.484525][T18609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2077.485385][T18609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2078.586991][T17661] Bluetooth: hci2: command tx timeout [ 2079.587561][T17661] Bluetooth: hci5: command tx timeout [ 2079.709138][T20032] chnl_net:caif_netlink_parms(): no params data found [ 2079.795620][T20029] chnl_net:caif_netlink_parms(): no params data found [ 2080.627148][T17661] Bluetooth: hci2: command tx timeout [ 2080.760300][T20032] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.760566][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.760884][T20032] bridge_slave_0: entered allmulticast mode [ 2080.764123][T20032] bridge_slave_0: entered promiscuous mode [ 2080.865074][T19926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2080.868227][T20032] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.868424][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.868758][T20032] bridge_slave_1: entered allmulticast mode [ 2080.872317][T20032] bridge_slave_1: entered promiscuous mode [ 2080.874272][T20029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.874436][T20029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.874698][T20029] bridge_slave_0: entered allmulticast mode [ 2080.880486][T20029] bridge_slave_0: entered promiscuous mode [ 2081.015723][T20029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2081.015891][T20029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.016135][T20029] bridge_slave_1: entered allmulticast mode [ 2081.029896][T20029] bridge_slave_1: entered promiscuous mode [ 2081.252734][T20032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.392047][T20032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.401675][T20029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.522960][T20029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.667110][T17661] Bluetooth: hci5: command tx timeout [ 2081.863955][T20032] team0: Port device team_slave_0 added [ 2081.945483][T19926] 8021q: adding VLAN 0 to HW filter on device team0 [ 2081.958443][T20032] team0: Port device team_slave_1 added [ 2081.965416][T20029] team0: Port device team_slave_0 added [ 2081.975011][T19930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2082.068928][T20029] team0: Port device team_slave_1 added [ 2082.178053][ T3621] IPVS: stop unused estimator thread 0... [ 2082.283924][T20032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.283939][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.283959][T20032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.424892][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.425177][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2082.530562][T20032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.530581][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.530613][T20032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.543471][T20029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.543494][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.543527][T20029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.592348][T20029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.592372][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.592406][T20029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.596059][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.596392][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2082.717222][T17661] Bluetooth: hci2: command tx timeout [ 2082.763685][T19930] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.104569][T20032] hsr_slave_0: entered promiscuous mode [ 2083.105590][T20032] hsr_slave_1: entered promiscuous mode [ 2083.106271][T20032] debugfs: 'hsr0' already exists in 'hsr' [ 2083.106290][T20032] Cannot create hsr debugfs directory [ 2083.194900][T20029] hsr_slave_0: entered promiscuous mode [ 2083.195988][T20029] hsr_slave_1: entered promiscuous mode [ 2083.196758][T20029] debugfs: 'hsr0' already exists in 'hsr' [ 2083.196780][T20029] Cannot create hsr debugfs directory [ 2083.226701][ T3621] bridge_slave_1: left allmulticast mode [ 2083.226739][ T3621] bridge_slave_1: left promiscuous mode [ 2083.238564][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.298928][ T3621] bridge_slave_0: left allmulticast mode [ 2083.298969][ T3621] bridge_slave_0: left promiscuous mode [ 2083.299354][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.371880][ T3621] bridge_slave_1: left allmulticast mode [ 2083.371918][ T3621] bridge_slave_1: left promiscuous mode [ 2083.372209][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2083.429503][ T3621] bridge_slave_0: left allmulticast mode [ 2083.429542][ T3621] bridge_slave_0: left promiscuous mode [ 2083.429837][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2083.747593][T17661] Bluetooth: hci5: command tx timeout [ 2083.898153][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2083.979133][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.053960][ T3621] bond0 (unregistering): Released all slaves [ 2084.381399][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2084.468004][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2084.549944][ T3621] bond0 (unregistering): Released all slaves [ 2084.762456][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.762625][T10242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.817038][T17661] Bluetooth: hci2: command tx timeout [ 2085.285054][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.285407][T10232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2085.597213][ T3621] hsr_slave_0: left promiscuous mode [ 2085.617488][ T3621] hsr_slave_1: left promiscuous mode [ 2085.618621][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.672107][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2085.812666][ T3621] hsr_slave_0: left promiscuous mode [ 2085.827327][T17661] Bluetooth: hci5: command tx timeout [ 2085.828226][ T3621] hsr_slave_1: left promiscuous mode [ 2085.829361][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.881269][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2086.858203][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2087.046448][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2088.978166][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2089.089263][T18609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2089.175134][T18609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2089.191437][T11611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2089.200730][T20064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2089.207787][T18609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2089.217297][T20064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2089.219335][T20064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2089.220470][T20064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2089.221084][T20064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2089.224943][T17661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2089.342867][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2091.299368][ T5849] Bluetooth: hci6: command tx timeout [ 2091.377660][ T5849] Bluetooth: hci3: command tx timeout [ 2092.545936][T20062] chnl_net:caif_netlink_parms(): no params data found [ 2092.809857][T20060] chnl_net:caif_netlink_parms(): no params data found [ 2093.291945][T20062] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.292879][T20062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.293517][T20062] bridge_slave_0: entered allmulticast mode [ 2093.320557][T20062] bridge_slave_0: entered promiscuous mode [ 2093.357718][ T5849] Bluetooth: hci6: command tx timeout [ 2093.379791][T20062] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.379993][T20062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.380304][T20062] bridge_slave_1: entered allmulticast mode [ 2093.383618][T20062] bridge_slave_1: entered promiscuous mode [ 2093.437720][ T5849] Bluetooth: hci3: command tx timeout [ 2093.779022][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.783936][T20060] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.784178][T20060] bridge_slave_0: entered allmulticast mode [ 2093.787746][T20060] bridge_slave_0: entered promiscuous mode [ 2093.822293][T20062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2093.823635][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.823752][T20060] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.823940][T20060] bridge_slave_1: entered allmulticast mode [ 2093.826558][T20060] bridge_slave_1: entered promiscuous mode [ 2093.883873][T20062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.223284][T20060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.248179][T20060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2094.250669][T20062] team0: Port device team_slave_0 added [ 2094.381872][T20062] team0: Port device team_slave_1 added [ 2094.729665][T20060] team0: Port device team_slave_0 added [ 2094.813991][T20032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2094.829349][T20060] team0: Port device team_slave_1 added [ 2094.830075][ T3621] bridge_slave_1: left allmulticast mode [ 2094.830153][ T3621] bridge_slave_1: left promiscuous mode [ 2094.830349][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.938837][ T3621] bridge_slave_0: left allmulticast mode [ 2094.938876][ T3621] bridge_slave_0: left promiscuous mode [ 2094.939165][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.028846][ T3621] bridge_slave_1: left allmulticast mode [ 2095.028888][ T3621] bridge_slave_1: left promiscuous mode [ 2095.029218][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.100460][ T3621] bridge_slave_0: left allmulticast mode [ 2095.100502][ T3621] bridge_slave_0: left promiscuous mode [ 2095.100818][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.436653][ T5849] Bluetooth: hci6: command tx timeout [ 2095.525078][ T5849] Bluetooth: hci3: command tx timeout [ 2097.537170][ T5849] Bluetooth: hci6: command tx timeout [ 2097.587709][ T5849] Bluetooth: hci3: command tx timeout [ 2097.593390][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2097.664667][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.705363][ T3621] bond0 (unregistering): Released all slaves [ 2099.917350][ T3621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2099.998035][ T3621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2100.061708][ T3621] bond0 (unregistering): Released all slaves [ 2100.109067][T20062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2100.109087][T20062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.109120][T20062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2100.678419][T20062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.678440][T20062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.678472][T20062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.809202][T20029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2100.811201][T20060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2100.811218][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.811248][T20060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2100.816164][T20060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.816177][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.816198][T20060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.097318][ T3621] hsr_slave_0: left promiscuous mode [ 2101.152582][ T3621] hsr_slave_1: left promiscuous mode [ 2101.153352][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.172185][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2101.337419][ T3621] hsr_slave_0: left promiscuous mode [ 2101.379835][ T3621] hsr_slave_1: left promiscuous mode [ 2101.380862][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.388932][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.507950][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2102.838935][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2104.568826][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.568900][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.617827][ T3621] team0 (unregistering): Port device team_slave_1 removed [ 2106.818189][ T3621] team0 (unregistering): Port device team_slave_0 removed [ 2109.557359][T20062] hsr_slave_0: entered promiscuous mode [ 2109.558864][T20062] hsr_slave_1: entered promiscuous mode [ 2109.559961][T20062] debugfs: 'hsr0' already exists in 'hsr' [ 2109.559988][T20062] Cannot create hsr debugfs directory [ 2109.678796][T20032] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.838146][T20060] hsr_slave_0: entered promiscuous mode [ 2109.839175][T20060] hsr_slave_1: entered promiscuous mode [ 2109.839880][T20060] debugfs: 'hsr0' already exists in 'hsr' [ 2109.839911][T20060] Cannot create hsr debugfs directory [ 2109.989847][T20029] 8021q: adding VLAN 0 to HW filter on device team0 [ 2110.231670][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.231938][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2110.493409][T18894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.493683][T18894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2110.496763][T18894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.501201][T18894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.748703][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.748887][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.176776][T20062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.215392][T20060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.236340][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2112.267867][T20029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2112.314951][T20062] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.379346][T20060] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.396230][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.397103][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.424281][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.425151][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.456585][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.457009][T10232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.479022][T10232] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.479221][T10232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2113.291142][T20032] veth0_vlan: entered promiscuous mode [ 2113.367557][T20032] veth1_vlan: entered promiscuous mode [ 2113.481033][T20029] veth0_vlan: entered promiscuous mode [ 2113.534648][T20029] veth1_vlan: entered promiscuous mode [ 2113.549762][T20062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.578984][T20060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.585071][T20032] veth0_macvtap: entered promiscuous mode [ 2113.636011][T20032] veth1_macvtap: entered promiscuous mode [ 2113.841710][T20032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2113.873446][T20032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.891279][T20029] veth0_macvtap: entered promiscuous mode [ 2113.937616][T20029] veth1_macvtap: entered promiscuous mode [ 2114.235613][T20029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.482355][T20029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2114.595060][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.595087][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.762197][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.762219][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.326360][T20060] veth0_vlan: entered promiscuous mode [ 2115.706021][T20062] veth0_vlan: entered promiscuous mode [ 2116.416971][T10248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.416996][T10248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.487226][T20060] veth1_vlan: entered promiscuous mode [ 2116.536441][T20062] veth1_vlan: entered promiscuous mode [ 2118.001115][T10242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.001145][T10242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.422340][T20062] veth0_macvtap: entered promiscuous mode [ 2119.428764][T20060] veth0_macvtap: entered promiscuous mode [ 2119.783366][T20062] veth1_macvtap: entered promiscuous mode [ 2119.924920][T20062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2119.977866][T20062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2121.164566][T20060] veth1_macvtap: entered promiscuous mode [ 2121.690623][T20060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2122.325010][T20060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.678430][T10232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.678456][T10232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.181985][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.182009][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.475750][T18659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.475775][T18659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.031493][T20217] tty tty29: ldisc open failed (-12), clearing slot 28 [ 2134.836012][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.836038][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.848795][ T5222] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2138.888876][ T5222] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.888961][ T5222] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2138.888990][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.901526][ T5222] usb 4-1: config 0 descriptor?? [ 2138.942799][ T5222] pwc: Askey VC010 type 2 USB webcam detected. [ 2139.427510][ T5222] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2139.428629][ T5222] pwc: recv_control_msg error -32 req 02 val 2700 [ 2139.429370][ T5222] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2139.430139][ T5222] pwc: recv_control_msg error -32 req 04 val 1000 [ 2139.431395][ T5222] pwc: recv_control_msg error -32 req 04 val 1300 [ 2139.434938][ T5222] pwc: recv_control_msg error -32 req 04 val 1400 [ 2139.454053][ T5222] pwc: recv_control_msg error -32 req 02 val 2000 [ 2140.279046][ T5222] pwc: recv_control_msg error -32 req 02 val 2100 [ 2140.308875][ T5222] pwc: recv_control_msg error -32 req 04 val 1500 [ 2140.361016][ T5222] pwc: recv_control_msg error -32 req 02 val 2500 [ 2140.822424][ T5222] pwc: recv_control_msg error -71 req 02 val 2600 [ 2140.822961][ T5222] pwc: recv_control_msg error -71 req 02 val 2900 [ 2140.823508][ T5222] pwc: recv_control_msg error -71 req 02 val 2800 [ 2140.868764][ T5222] pwc: recv_control_msg error -71 req 04 val 1100 [ 2140.869324][ T5222] pwc: recv_control_msg error -71 req 04 val 1200 [ 2140.891769][ T5222] pwc: Registered as video103. [ 2140.893924][ T5222] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 2140.914427][ T5222] usb 4-1: USB disconnect, device number 14 [ 2146.081206][T20273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4150'. [ 2146.081233][T20273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4150'. [ 2146.081260][T20273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4150'. [ 2146.081307][T20273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4150'. [ 2155.546937][T20329] program syz.2.4162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2156.818870][T20339] ptrace attach of "./syz-executor exec"[17872] was attempted by "./syz-executor exec"[20339] [ 2157.293581][T20338] 9pnet_fd: Insufficient options for proto=fd [ 2158.400385][ T38] audit: type=1326 audit(1758450425.681:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2158.400868][ T38] audit: type=1326 audit(1758450425.681:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2158.401164][ T38] audit: type=1326 audit(1758450425.681:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeff62d590 code=0x7ffc0000 [ 2158.401420][ T38] audit: type=1326 audit(1758450425.701:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2158.401833][ T38] audit: type=1326 audit(1758450425.711:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2158.402094][ T38] audit: type=1326 audit(1758450425.711:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeff62d590 code=0x7ffc0000 [ 2158.402373][ T38] audit: type=1326 audit(1758450425.711:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2158.402625][ T38] audit: type=1326 audit(1758450425.711:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20343 comm="syz.3.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2165.996860][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.996944][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.169243][T18609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2166.195734][T18609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2166.232803][T18609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2166.234807][T18609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2166.235526][T18609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2168.432692][ T5849] Bluetooth: hci0: command tx timeout [ 2168.735658][T20398] slcan: can't register candev [ 2168.736463][T20398] Falling back ldisc for ptm0. [ 2169.414129][ T38] audit: type=1326 audit(1758450436.731:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2169.414190][ T38] audit: type=1326 audit(1758450436.731:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2169.414238][ T38] audit: type=1326 audit(1758450436.731:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2169.414286][ T38] audit: type=1326 audit(1758450436.731:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2169.414335][ T38] audit: type=1326 audit(1758450436.731:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2169.866877][ T5222] IPVS: starting estimator thread 0... [ 2170.496324][ T5849] Bluetooth: hci0: command tx timeout [ 2170.517334][T20410] IPVS: using max 10 ests per chain, 24000 per kthread [ 2173.352986][ T5849] Bluetooth: hci0: command tx timeout [ 2173.683617][ T38] audit: type=1326 audit(1758450441.001:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2173.683664][ T38] audit: type=1326 audit(1758450441.001:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2173.683698][ T38] audit: type=1326 audit(1758450441.001:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfa7f7d590 code=0x7ffc0000 [ 2173.683731][ T38] audit: type=1326 audit(1758450441.001:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2173.683764][ T38] audit: type=1326 audit(1758450441.001:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20422 comm="syz.7.4186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2175.432163][ T5849] Bluetooth: hci0: command tx timeout [ 2179.569123][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 2179.569144][ T38] audit: type=1326 audit(1758450446.881:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20455 comm="syz.7.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2179.569203][ T38] audit: type=1326 audit(1758450446.881:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20455 comm="syz.7.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2179.569255][ T38] audit: type=1326 audit(1758450446.881:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20455 comm="syz.7.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2179.569305][ T38] audit: type=1326 audit(1758450446.881:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20455 comm="syz.7.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2179.569356][ T38] audit: type=1326 audit(1758450446.891:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20455 comm="syz.7.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa7f7ec29 code=0x7ffc0000 [ 2180.160519][T20462] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4194'. [ 2180.485568][T10248] bridge_slave_1: left allmulticast mode [ 2180.485607][T10248] bridge_slave_1: left promiscuous mode [ 2180.485928][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.132477][T10248] bridge_slave_0: left allmulticast mode [ 2181.132516][T10248] bridge_slave_0: left promiscuous mode [ 2181.132817][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.980527][T20499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.724362][ T38] audit: type=1326 audit(1758450459.041:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20509 comm="syz.2.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cd28ec29 code=0x7ffc0000 [ 2191.724409][ T38] audit: type=1326 audit(1758450459.041:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20509 comm="syz.2.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cd28ec29 code=0x7ffc0000 [ 2191.724442][ T38] audit: type=1326 audit(1758450459.041:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20509 comm="syz.2.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc1cd28ec29 code=0x7ffc0000 [ 2191.724474][ T38] audit: type=1326 audit(1758450459.041:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20509 comm="syz.2.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cd28ec29 code=0x7ffc0000 [ 2191.724506][ T38] audit: type=1326 audit(1758450459.041:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20509 comm="syz.2.4206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cd28ec29 code=0x7ffc0000 [ 2197.542070][T20561] sd 0:0:1:0: device reset [ 2199.197580][T18609] Bluetooth: hci2: command 0x0406 tx timeout [ 2200.773880][ T38] audit: type=1326 audit(1758450467.841:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20567 comm="syz.3.4219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeff62ec29 code=0x0 [ 2203.621675][T18050] Process accounting resumed [ 2204.093465][T18609] Bluetooth: hci5: command 0x0406 tx timeout [ 2205.051219][T20598] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4224'. [ 2206.338716][ T38] audit: type=1326 audit(1758450473.621:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2206.339056][ T38] audit: type=1326 audit(1758450473.621:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2206.339384][ T38] audit: type=1326 audit(1758450473.621:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeff62d590 code=0x7ffc0000 [ 2206.339915][ T38] audit: type=1326 audit(1758450473.621:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2206.340189][ T38] audit: type=1326 audit(1758450473.621:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2206.340429][ T38] audit: type=1326 audit(1758450473.621:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efeff62d590 code=0x7ffc0000 [ 2206.340909][ T38] audit: type=1326 audit(1758450473.621:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2206.341622][ T38] audit: type=1326 audit(1758450473.621:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20599 comm="syz.3.4228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeff62ec29 code=0x7ffc0000 [ 2207.817032][ T5833] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2208.038194][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 2208.861969][ T5833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2208.862002][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.862024][ T5833] usb 3-1: Product: syz [ 2208.862040][ T5833] usb 3-1: Manufacturer: syz [ 2208.862057][ T5833] usb 3-1: SerialNumber: syz [ 2208.918338][ T5833] usb 3-1: config 0 descriptor?? [ 2209.514605][ T5833] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2211.510980][ T5833] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2211.717891][T19506] usb 3-1: USB disconnect, device number 25 [ 2212.201745][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4235'. [ 2212.892744][ C1] vkms_vblank_simulate: vblank timer overrun [ 2213.449048][ C1] vkms_vblank_simulate: vblank timer overrun [ 2213.763332][ C1] vkms_vblank_simulate: vblank timer overrun [ 2213.849150][ C1] vkms_vblank_simulate: vblank timer overrun [ 2213.874906][ C1] vkms_vblank_simulate: vblank timer overrun [ 2214.725858][ C1] vkms_vblank_simulate: vblank timer overrun [ 2214.826856][T17661] Bluetooth: hci3: command 0x0406 tx timeout [ 2214.877194][ C1] vkms_vblank_simulate: vblank timer overrun [ 2215.415203][T17661] Bluetooth: hci6: command 0x0406 tx timeout [ 2216.952052][ C1] vkms_vblank_simulate: vblank timer overrun [ 2217.667830][ C1] vkms_vblank_simulate: vblank timer overrun [ 2217.670066][T18050] IPVS: starting estimator thread 0... [ 2219.463752][T20646] IPVS: using max 9 ests per chain, 21600 per kthread [ 2227.897750][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.897835][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2234.689909][T18609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2234.707132][T18609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2234.723338][T18609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2234.724440][T18609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2234.725115][T18609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2236.028343][T10248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2236.787064][T18609] Bluetooth: hci1: command tx timeout [ 2236.907138][T20724] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 2236.907203][T20724] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2236.907259][T20724] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2236.907316][T20724] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 2236.907371][T20724] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 2236.907424][T20724] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2236.907580][T20724] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 2236.907638][T20724] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2236.907694][T20724] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 2236.907861][T20724] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2236.907914][T20724] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 2236.907966][T20724] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2236.908470][T20724] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2237.886166][T10248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2238.121982][T10248] bond0 (unregistering): Released all slaves [ 2239.127480][T20747] nvme_fabrics: missing parameter 'transport=%s' [ 2239.127502][T20747] nvme_fabrics: missing parameter 'nqn=%s' [ 2239.370077][T18609] Bluetooth: hci1: command tx timeout [ 2241.427290][T18609] Bluetooth: hci1: command tx timeout [ 2242.203969][ C0] vkms_vblank_simulate: vblank timer overrun [ 2242.638064][ C0] vkms_vblank_simulate: vblank timer overrun [ 2242.946467][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.567908][ C0] vkms_vblank_simulate: vblank timer overrun [ 2243.687749][T18609] Bluetooth: hci1: command tx timeout [ 2244.007196][ C0] vkms_vblank_simulate: vblank timer overrun [ 2244.311183][ C0] vkms_vblank_simulate: vblank timer overrun [ 2244.431647][ C0] vkms_vblank_simulate: vblank timer overrun [ 2246.094616][ C0] vkms_vblank_simulate: vblank timer overrun [ 2248.033451][ C1] vkms_vblank_simulate: vblank timer overrun [ 2248.867829][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.023170][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.448589][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.672955][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.727147][T10248] hsr_slave_0: left promiscuous mode [ 2249.763960][T10248] hsr_slave_1: left promiscuous mode [ 2249.764756][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2249.764780][T10248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2249.798182][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2249.798219][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2249.881527][T10248] veth1_macvtap: left promiscuous mode [ 2249.881623][T10248] veth0_macvtap: left promiscuous mode [ 2249.881837][T10248] veth1_vlan: left promiscuous mode [ 2249.882002][T10248] veth0_vlan: left promiscuous mode [ 2250.771558][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.875447][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.932820][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.076166][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.561905][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.615899][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.835585][ C1] vkms_vblank_simulate: vblank timer overrun [ 2252.012451][ C1] vkms_vblank_simulate: vblank timer overrun [ 2252.337263][ C1] vkms_vblank_simulate: vblank timer overrun [ 2253.001961][ C1] vkms_vblank_simulate: vblank timer overrun [ 2256.351222][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596e9400: rx timeout, send abort [ 2256.358050][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880596e9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2256.361459][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880596e8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 2257.999626][T20832] overlayfs: failed lookup in lower (newroot/32, name='bus', err=-40): overlapping layers [ 2269.929771][T17661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2269.961102][T17661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2269.963248][T17661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2269.965792][T17661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2269.973164][T17661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2270.536516][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 2272.256024][T17661] Bluetooth: hci0: command tx timeout [ 2274.501601][T17661] Bluetooth: hci0: command tx timeout [ 2275.949018][T10248] team0 (unregistering): Port device team_slave_1 removed [ 2276.547975][T17661] Bluetooth: hci0: command tx timeout [ 2276.818900][T10248] team0 (unregistering): Port device team_slave_0 removed [ 2278.634699][T17661] Bluetooth: hci0: command tx timeout [ 2282.116368][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4308'. [ 2283.629994][T20789] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2283.630041][T20789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2283.630065][T20789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2283.716893][ T38] audit: type=1800 audit(1758450550.951:827): pid=20789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4272" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2284.369280][T18609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2284.401904][T18609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2284.405068][T18609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2284.577716][T18609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2284.582103][T18609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2286.710813][T17661] Bluetooth: hci4: command tx timeout [ 2287.621015][ C0] vkms_vblank_simulate: vblank timer overrun [ 2287.922776][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.563936][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.683889][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.736162][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.787131][T17661] Bluetooth: hci4: command tx timeout [ 2288.888530][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.888640][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.009699][ C0] vkms_vblank_simulate: vblank timer overrun [ 2289.338802][ C0] vkms_vblank_simulate: vblank timer overrun [ 2289.563649][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.358962][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.528443][ C0] vkms_vblank_simulate: vblank timer overrun [ 2290.569801][ C0] vkms_vblank_simulate: vblank timer overrun [ 2291.600403][ C0] vkms_vblank_simulate: vblank timer overrun [ 2291.601903][T17661] Bluetooth: hci4: command tx timeout [ 2293.666963][T17661] Bluetooth: hci4: command tx timeout [ 2295.800396][ C1] vkms_vblank_simulate: vblank timer overrun [ 2296.039765][ C1] vkms_vblank_simulate: vblank timer overrun [ 2296.723197][ C1] vkms_vblank_simulate: vblank timer overrun [ 2296.747063][ C1] vkms_vblank_simulate: vblank timer overrun [ 2296.849792][ C1] vkms_vblank_simulate: vblank timer overrun [ 2297.100573][ C1] vkms_vblank_simulate: vblank timer overrun [ 2297.412637][ C1] vkms_vblank_simulate: vblank timer overrun [ 2297.866998][ C1] vkms_vblank_simulate: vblank timer overrun [ 2298.081943][ C1] vkms_vblank_simulate: vblank timer overrun [ 2298.488652][ C1] vkms_vblank_simulate: vblank timer overrun [ 2298.964743][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.293504][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.374681][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.400477][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.449982][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.397000][ C1] vkms_vblank_simulate: vblank timer overrun [ 2301.187580][ C1] vkms_vblank_simulate: vblank timer overrun [ 2301.306091][T20882] chnl_net:caif_netlink_parms(): no params data found [ 2301.455380][ C1] vkms_vblank_simulate: vblank timer overrun [ 2301.553061][ C1] vkms_vblank_simulate: vblank timer overrun [ 2301.895995][ C1] vkms_vblank_simulate: vblank timer overrun [ 2304.908983][T21039] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2305.389123][T20882] bridge0: port 1(bridge_slave_0) entered blocking state [ 2305.389302][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.389549][T20882] bridge_slave_0: entered allmulticast mode [ 2305.392521][T20882] bridge_slave_0: entered promiscuous mode [ 2305.453317][T20938] chnl_net:caif_netlink_parms(): no params data found [ 2305.484692][T20882] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.485031][T20882] bridge0: port 2(bridge_slave_1) entered disabled state [ 2305.485307][T20882] bridge_slave_1: entered allmulticast mode [ 2305.496684][T20882] bridge_slave_1: entered promiscuous mode [ 2311.454802][T10248] IPVS: stop unused estimator thread 0... [ 2311.476914][T20807] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2312.606360][T20882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2312.650132][T20882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2312.687051][T20807] usb 3-1: device not accepting address 26, error -71 [ 2313.620196][T20882] team0: Port device team_slave_0 added [ 2315.674617][T20882] team0: Port device team_slave_1 added [ 2315.675329][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.675493][T20938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.675710][T20938] bridge_slave_0: entered allmulticast mode [ 2315.709338][T20938] bridge_slave_0: entered promiscuous mode [ 2318.667152][ C0] vkms_vblank_simulate: vblank timer overrun [ 2318.710254][T20938] bridge0: port 2(bridge_slave_1) entered blocking state [ 2318.710404][T20938] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.710656][T20938] bridge_slave_1: entered allmulticast mode [ 2318.715260][T20938] bridge_slave_1: entered promiscuous mode [ 2318.963777][ C0] vkms_vblank_simulate: vblank timer overrun [ 2318.972774][T10248] bridge_slave_1: left allmulticast mode [ 2318.972817][T10248] bridge_slave_1: left promiscuous mode [ 2318.973284][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.382284][ C0] vkms_vblank_simulate: vblank timer overrun [ 2319.398334][T10248] bridge_slave_0: left allmulticast mode [ 2319.398368][T10248] bridge_slave_0: left promiscuous mode [ 2319.398675][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.380930][ C0] vkms_vblank_simulate: vblank timer overrun [ 2321.541671][ C0] vkms_vblank_simulate: vblank timer overrun [ 2322.503672][ C0] vkms_vblank_simulate: vblank timer overrun [ 2322.665692][ C0] vkms_vblank_simulate: vblank timer overrun [ 2323.045848][ C0] vkms_vblank_simulate: vblank timer overrun [ 2323.321814][ C0] vkms_vblank_simulate: vblank timer overrun [ 2323.529859][T21139] ieee802154 phy0 wpan0: encryption failed: -22 [ 2324.804019][ C0] vkms_vblank_simulate: vblank timer overrun [ 2324.908096][ C0] vkms_vblank_simulate: vblank timer overrun [ 2326.919398][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.176970][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.348485][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.393031][T18609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2327.410194][T18609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2327.433189][T18609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2327.434031][T18609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2327.434589][T18609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2327.593623][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.737891][ C0] vkms_vblank_simulate: vblank timer overrun [ 2327.964354][ C0] vkms_vblank_simulate: vblank timer overrun [ 2328.664951][ C0] vkms_vblank_simulate: vblank timer overrun [ 2329.510764][T18609] Bluetooth: hci1: command tx timeout [ 2330.037414][ C0] vkms_vblank_simulate: vblank timer overrun [ 2330.678079][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.025651][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.128346][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.429068][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.728112][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.865563][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.904211][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.959213][T18609] Bluetooth: hci1: command tx timeout [ 2331.995301][ C0] vkms_vblank_simulate: vblank timer overrun [ 2332.603026][ C0] vkms_vblank_simulate: vblank timer overrun [ 2332.738590][ C0] vkms_vblank_simulate: vblank timer overrun [ 2333.502609][ C0] vkms_vblank_simulate: vblank timer overrun [ 2333.987090][T18609] Bluetooth: hci1: command tx timeout [ 2336.246064][T18609] Bluetooth: hci1: command tx timeout [ 2341.066206][T21212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4370'. [ 2341.066461][T21212] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4370'. [ 2341.860274][T17661] Bluetooth: hci5: command 0x1003 tx timeout [ 2341.901983][T18609] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2348.698887][T17661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2348.728890][T17661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2348.730942][T17661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2348.733286][T17661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2348.734147][T17661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2350.431755][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.431831][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2351.168343][T18609] Bluetooth: hci5: command tx timeout [ 2353.737878][T18609] Bluetooth: hci5: command tx timeout [ 2354.203241][T21275] net_ratelimit: 5 callbacks suppressed [ 2354.203269][T21275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2355.284857][T10248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2355.748038][T17661] Bluetooth: hci5: command tx timeout [ 2356.778021][T10248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2357.901999][T17661] Bluetooth: hci5: command tx timeout [ 2357.930549][T10248] bond0 (unregistering): Released all slaves [ 2359.525130][T21303] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2360.361662][ T38] audit: type=1326 audit(1758450627.681:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21300 comm="syz.1.4391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f061848ec29 code=0x0 [ 2361.100408][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.083564][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.330429][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.415972][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.479066][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.697400][ C0] vkms_vblank_simulate: vblank timer overrun [ 2362.858935][ C0] vkms_vblank_simulate: vblank timer overrun [ 2363.195687][ C0] vkms_vblank_simulate: vblank timer overrun [ 2363.470818][T21326] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2363.472798][ C0] vkms_vblank_simulate: vblank timer overrun [ 2364.119869][ C0] vkms_vblank_simulate: vblank timer overrun [ 2364.618942][ C0] vkms_vblank_simulate: vblank timer overrun [ 2364.702626][ C0] vkms_vblank_simulate: vblank timer overrun [ 2365.068785][ C0] vkms_vblank_simulate: vblank timer overrun [ 2365.415914][ C0] vkms_vblank_simulate: vblank timer overrun [ 2365.666059][ C0] vkms_vblank_simulate: vblank timer overrun [ 2365.951703][ C0] vkms_vblank_simulate: vblank timer overrun [ 2368.671946][T21346] input: syz1 as /devices/virtual/input/input32 [ 2372.758298][ C0] vkms_vblank_simulate: vblank timer overrun [ 2372.843816][ C0] vkms_vblank_simulate: vblank timer overrun [ 2372.958450][ C0] vkms_vblank_simulate: vblank timer overrun [ 2373.071849][ C0] vkms_vblank_simulate: vblank timer overrun [ 2373.415141][ C0] vkms_vblank_simulate: vblank timer overrun [ 2374.134459][ C0] vkms_vblank_simulate: vblank timer overrun [ 2374.755507][ C0] vkms_vblank_simulate: vblank timer overrun [ 2375.602416][ C0] vkms_vblank_simulate: vblank timer overrun [ 2375.736006][ C0] vkms_vblank_simulate: vblank timer overrun [ 2375.884493][ C0] vkms_vblank_simulate: vblank timer overrun [ 2376.003253][ T38] audit: type=1326 audit(1758450643.321:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.003314][ T38] audit: type=1326 audit(1758450643.321:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.003367][ T38] audit: type=1326 audit(1758450643.321:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f061848d590 code=0x7ffc0000 [ 2376.003417][ T38] audit: type=1326 audit(1758450643.321:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.003470][ T38] audit: type=1326 audit(1758450643.321:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.003521][ T38] audit: type=1326 audit(1758450643.321:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f061848d590 code=0x7ffc0000 [ 2376.003573][ T38] audit: type=1326 audit(1758450643.321:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.003625][ T38] audit: type=1326 audit(1758450643.321:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21373 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061848ec29 code=0x7ffc0000 [ 2376.352794][T21378] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2376.731686][ C0] vkms_vblank_simulate: vblank timer overrun [ 2377.415567][ C0] vkms_vblank_simulate: vblank timer overrun [ 2377.646340][ C0] vkms_vblank_simulate: vblank timer overrun [ 2377.706998][ C0] vkms_vblank_simulate: vblank timer overrun [ 2378.008763][T21394] Invalid source name [ 2378.008786][T21394] UBIFS error (pid: 21394): cannot open "ubifs", error -22 [ 2387.880967][T21438] input: syz1 as /devices/virtual/input/input33 [ 2388.062192][T18609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2388.377813][T18609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2388.540486][T18609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2394.381046][T18609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2394.409809][T18609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2396.758251][ C1] vkms_vblank_simulate: vblank timer overrun [ 2396.794571][ C1] vkms_vblank_simulate: vblank timer overrun [ 2397.225231][T21463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4428'. [ 2397.225271][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 2397.411400][T17661] Bluetooth: hci0: command tx timeout [ 2397.724913][ C1] vkms_vblank_simulate: vblank timer overrun [ 2397.839796][T10248] hsr_slave_0: left promiscuous mode [ 2397.895270][T10248] hsr_slave_1: left promiscuous mode [ 2397.896342][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2397.896375][T10248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2397.964464][T10248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2397.964490][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2398.015048][ C1] vkms_vblank_simulate: vblank timer overrun [ 2398.791578][T10248] veth1_macvtap: left promiscuous mode [ 2398.791715][T10248] veth0_macvtap: left promiscuous mode [ 2398.792049][T10248] veth1_vlan: left promiscuous mode [ 2398.792278][T10248] veth0_vlan: left promiscuous mode [ 2398.870575][T21455] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2399.427033][T17661] Bluetooth: hci0: command tx timeout [ 2400.286199][ C1] vkms_vblank_simulate: vblank timer overrun [ 2400.670585][ C1] vkms_vblank_simulate: vblank timer overrun [ 2400.962264][ C1] vkms_vblank_simulate: vblank timer overrun [ 2401.598805][T17661] Bluetooth: hci0: command tx timeout [ 2404.385883][T17661] Bluetooth: hci0: command tx timeout [ 2408.939959][T18609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2408.975753][T18609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2408.990085][T18609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2408.993128][T18609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2409.017587][T18609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2411.570384][T21520] ------------[ cut here ]------------ [ 2411.570400][T21520] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2411.570618][ C1] vkms_vblank_simulate: vblank timer overrun [ 2411.571168][T21520] WARNING: CPU: 0 PID: 21520 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 2411.571364][T21520] Modules linked in: [ 2411.571388][T21520] CPU: 0 UID: 0 PID: 21520 Comm: syz.1.4441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2411.571413][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2411.571432][T21520] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 2411.571462][T21520] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 59 4a be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 80 d4 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 2411.571481][T21520] RSP: 0018:ffffc900049afae0 EFLAGS: 00010246 [ 2411.571500][T21520] RAX: 7da6ec8254ae6700 RBX: 1ffff1102856e401 RCX: 0000000000080000 [ 2411.571518][T21520] RDX: ffffc900108e9000 RSI: 00000000000006f0 RDI: 00000000000006f1 [ 2411.571533][T21520] RBP: ffffc900049afbe0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.571548][T21520] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880245c4000 [ 2411.571565][T21520] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 2411.571582][T21520] FS: 00007f06162916c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 2411.571601][T21520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2411.571617][T21520] CR2: 00005555607cb5c8 CR3: 0000000050776000 CR4: 00000000003526f0 [ 2411.571637][T21520] Call Trace: [ 2411.571646][T21520] [ 2411.571662][T21520] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 2411.571703][T21520] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2411.571772][T21520] ? rt_spin_unlock+0x65/0x80 [ 2411.571908][T21520] ? drm_vblank_get+0x148/0x260 [ 2411.571936][T21520] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 2411.572014][T21520] drm_fb_helper_ioctl+0x116/0x140 [ 2411.572046][T21520] do_fb_ioctl+0x45c/0x750 [ 2411.572130][T21520] ? __pfx_do_fb_ioctl+0x10/0x10 [ 2411.572176][T21520] ? smk_tskacc+0x2fc/0x370 [ 2411.572304][T21520] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2411.572347][T21520] ? __fget_files+0x3a6/0x420 [ 2411.572406][T21520] ? __fget_files+0x2a/0x420 [ 2411.572444][T21520] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2411.572493][T21520] ? __pfx_fb_ioctl+0x10/0x10 [ 2411.572520][T21520] __se_sys_ioctl+0xff/0x170 [ 2411.572548][T21520] do_syscall_64+0xfa/0x3b0 [ 2411.572595][T21520] ? lockdep_hardirqs_on+0x9c/0x150 [ 2411.572629][T21520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.572687][T21520] ? clear_bhb_loop+0x60/0xb0 [ 2411.572716][T21520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.572738][T21520] RIP: 0033:0x7f061848ec29 [ 2411.572759][T21520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2411.572779][T21520] RSP: 002b:00007f0616291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.572802][T21520] RAX: ffffffffffffffda RBX: 00007f06186d6270 RCX: 00007f061848ec29 [ 2411.572820][T21520] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 2411.572836][T21520] RBP: 00007f0618511e41 R08: 0000000000000000 R09: 0000000000000000 [ 2411.572851][T21520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2411.572865][T21520] R13: 00007f06186d6308 R14: 00007f06186d6270 R15: 00007ffd81509198 [ 2411.572901][T21520] [ 2411.572918][T21520] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2411.572935][T21520] CPU: 0 UID: 0 PID: 21520 Comm: syz.1.4441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2411.572961][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2411.572975][T21520] Call Trace: [ 2411.572984][T21520] [ 2411.572993][T21520] dump_stack_lvl+0x99/0x250 [ 2411.573048][T21520] ? __asan_memcpy+0x40/0x70 [ 2411.573079][T21520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2411.573114][T21520] ? __pfx__printk+0x10/0x10 [ 2411.573164][T21520] vpanic+0x281/0x750 [ 2411.573194][T21520] ? __pfx__printk+0x10/0x10 [ 2411.573224][T21520] ? __pfx_vpanic+0x10/0x10 [ 2411.573261][T21520] ? is_bpf_text_address+0x26/0x2b0 [ 2411.573309][T21520] panic+0xb9/0xc0 [ 2411.573342][T21520] ? __pfx_panic+0x10/0x10 [ 2411.573389][T21520] __warn+0x31b/0x4b0 [ 2411.573419][T21520] ? drm_wait_one_vblank+0x571/0x5b0 [ 2411.573453][T21520] ? drm_wait_one_vblank+0x571/0x5b0 [ 2411.573482][T21520] report_bug+0x2be/0x4f0 [ 2411.573588][T21520] ? drm_wait_one_vblank+0x571/0x5b0 [ 2411.573617][T21520] ? drm_wait_one_vblank+0x571/0x5b0 [ 2411.573646][T21520] ? drm_wait_one_vblank+0x573/0x5b0 [ 2411.573676][T21520] handle_bug+0x84/0x160 [ 2411.573711][T21520] exc_invalid_op+0x1a/0x50 [ 2411.573735][T21520] asm_exc_invalid_op+0x1a/0x20 [ 2411.573757][T21520] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 2411.573788][T21520] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 59 4a be fc 4d 8b 2c 24 48 c7 c7 a0 a2 74 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 80 d4 23 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 2411.573807][T21520] RSP: 0018:ffffc900049afae0 EFLAGS: 00010246 [ 2411.573826][T21520] RAX: 7da6ec8254ae6700 RBX: 1ffff1102856e401 RCX: 0000000000080000 [ 2411.573844][T21520] RDX: ffffc900108e9000 RSI: 00000000000006f0 RDI: 00000000000006f1 [ 2411.573860][T21520] RBP: ffffc900049afbe0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.573876][T21520] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff8880245c4000 [ 2411.573893][T21520] R13: ffffffff8b785260 R14: 0000000000000000 R15: ffffffff8b79eea0 [ 2411.573935][T21520] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 2411.573967][T21520] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2411.573999][T21520] ? rt_spin_unlock+0x65/0x80 [ 2411.574032][T21520] ? drm_vblank_get+0x148/0x260 [ 2411.574060][T21520] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 2411.574090][T21520] drm_fb_helper_ioctl+0x116/0x140 [ 2411.574121][T21520] do_fb_ioctl+0x45c/0x750 [ 2411.574151][T21520] ? __pfx_do_fb_ioctl+0x10/0x10 [ 2411.574189][T21520] ? smk_tskacc+0x2fc/0x370 [ 2411.574232][T21520] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2411.574267][T21520] ? __fget_files+0x3a6/0x420 [ 2411.574296][T21520] ? __fget_files+0x2a/0x420 [ 2411.574331][T21520] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2411.574355][T21520] ? __pfx_fb_ioctl+0x10/0x10 [ 2411.574379][T21520] __se_sys_ioctl+0xff/0x170 [ 2411.574408][T21520] do_syscall_64+0xfa/0x3b0 [ 2411.574431][T21520] ? lockdep_hardirqs_on+0x9c/0x150 [ 2411.574465][T21520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.574488][T21520] ? clear_bhb_loop+0x60/0xb0 [ 2411.574515][T21520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2411.574537][T21520] RIP: 0033:0x7f061848ec29 [ 2411.574558][T21520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2411.574578][T21520] RSP: 002b:00007f0616291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.574600][T21520] RAX: ffffffffffffffda RBX: 00007f06186d6270 RCX: 00007f061848ec29 [ 2411.574618][T21520] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 2411.574634][T21520] RBP: 00007f0618511e41 R08: 0000000000000000 R09: 0000000000000000 [ 2411.574648][T21520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2411.574663][T21520] R13: 00007f06186d6308 R14: 00007f06186d6270 R15: 00007ffd81509198 [ 2411.574711][T21520] [ 2411.575133][T21520] Kernel Offset: disabled