last executing test programs: 26m53.919201166s ago: executing program 0 (id=73): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001200)=0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="a425e2f1a54d24f15247423360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e070000000000000055de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed9fa194c09273031900"}) r2 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x101, &(0x7f00000014c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r9, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 26m40.831312716s ago: executing program 0 (id=94): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='MR', 0x2}], 0x1, 0xc, 0x1000, 0xdb) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) 26m38.437814324s ago: executing program 0 (id=96): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) cachestat(r2, &(0x7f0000002080)={0x6, 0xb}, &(0x7f0000000080), 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26m25.436175203s ago: executing program 0 (id=119): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 26m20.782246022s ago: executing program 0 (id=121): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x727a, 0x0, 0x1, 0x4c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 26m17.989345601s ago: executing program 0 (id=126): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r2 = socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 26m2.823167723s ago: executing program 32 (id=126): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r2 = socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 23m55.780475781s ago: executing program 1 (id=337): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) read$midi(r0, &(0x7f0000000380)=""/246, 0xf6) 23m53.202456075s ago: executing program 1 (id=340): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)='MR', 0x2}], 0x1, 0xc, 0x1000, 0xdb) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 23m51.746354444s ago: executing program 1 (id=344): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_io_uring_setup(0x3fce, &(0x7f0000000180)={0x0, 0x4ee3, 0x4, 0x3, 0x1b2}, 0x0, &(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 23m50.401623719s ago: executing program 1 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 23m49.202045679s ago: executing program 1 (id=349): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x6, 0x2a2442) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_io_uring_setup(0x3fce, &(0x7f0000000180)={0x0, 0x4ee3, 0x4, 0x3, 0x1b2}, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, &(0x7f0000000100)='barrier') sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 23m43.095151299s ago: executing program 1 (id=357): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00010000000000000000000101008014000300fc01000000000000000000000000000014000100fe80000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x150, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x3, 0x8, 0x9, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca2"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) 23m26.690581234s ago: executing program 33 (id=357): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00010000000000000000000101008014000300fc01000000000000000000000000000014000100fe80000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x150, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x3, 0x8, 0x9, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca2"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) 22m14.231598057s ago: executing program 4 (id=475): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xdddd1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf042}, {0x0, 0x5}, {&(0x7f0000000500)="394564050a0000006c0000000000a817f82c12742fd0f2913a91f723b9b072fdbef5c6f7f5a9db59a86e17511570103a8d52817c43c0b1a377fe1e18aca2803e61f55b1be2e75d8d595581821a91dda9e1e386c9fb7e6baff18d9d8daaec25715004d2d02447aaa31bbf5ca52fcba83269b9a730769e8e5eb399b7a757f825d3d1920f6cf25bb423ea59bc00"/150}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1}) 22m11.343286091s ago: executing program 4 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) 22m9.302055738s ago: executing program 4 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xfffffffd, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x78, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) syz_open_dev$sg(0x0, 0x8, 0x505040) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) 22m7.346192436s ago: executing program 4 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x200040d0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) close(r2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)={0x0, 0x960, 0xf0, 0x360, 0x0, 0x7ff, 0x4, 0x0, {0x2, 0xffffff59, 0x1}, {0x73a8c463, 0x1, 0x1}, {0x4, 0x1465}, {}, 0x0, 0x1, 0x6, 0x8, 0x1, 0x723b, 0xb76f, 0x5, 0x1, 0x9, 0xffff, 0x40, 0x0, 0x2, 0x3, 0xb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x18) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x800}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') read$nci(r4, 0x0, 0x0) 22m6.671617039s ago: executing program 4 (id=486): timerfd_create(0x7, 0x800) clock_gettime(0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3}, 0x18) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) socket(0x1e, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 22m4.752728804s ago: executing program 4 (id=490): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6a040000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) r0 = socket(0x8, 0x0, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 21m44.6174203s ago: executing program 34 (id=490): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6a040000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) r0 = socket(0x8, 0x0, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) 15m3.737868472s ago: executing program 5 (id=1425): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r0, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xa}, {0x0, 0x5}, @addr}, {0x0, 0x4, 0x3, 0x80, @tick=0xfffffffa, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff85}, {}, {}, @time=@time}], 0x54) write$sndseq(r0, 0x0, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$getown(r1, 0x9) syz_pidfd_open(r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) epoll_create1(0x0) epoll_create1(0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000290100020000"], 0x14}}, 0xd4) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x4, 0x1, 0x3, 0x4000009, 0xffe, 0x1, 0xc, 0x40000001, 0x4, 0x4, 0xffff, 0x0, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x7ff, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x3, 0x70f]}) 15m2.557477454s ago: executing program 5 (id=1428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 15m1.411991709s ago: executing program 5 (id=1430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) 15m0.16688056s ago: executing program 5 (id=1433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = epoll_create(0x6) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 14m58.99973912s ago: executing program 5 (id=1437): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) capset(&(0x7f0000002300)={0x19980330}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd}) 14m55.727017655s ago: executing program 5 (id=1442): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m40.657427984s ago: executing program 35 (id=1442): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m4.924374761s ago: executing program 2 (id=1742): r0 = getpid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_pidfd_open(r0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x3158, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700"/30], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00'}, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12m2.041395766s ago: executing program 2 (id=1747): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r0, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xa}, {0x0, 0x5}, @addr}, {0x0, 0x4, 0x3, 0x80, @tick=0xfffffffa, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff85}, {}, {}, @time=@time}], 0x54) write$sndseq(r0, 0x0, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$getown(r1, 0x9) syz_pidfd_open(r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) epoll_create1(0x0) epoll_create1(0x0) r5 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000290100020000"], 0x14}}, 0xd4) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x5, 0xd09a, 0x2, 0x4, 0x1, 0x3, 0x4000009, 0xffe, 0x1, 0xc, 0x40000001, 0x4, 0x4, 0xffff, 0x0, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x7ff, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x3, 0x70f]}) 11m59.955703987s ago: executing program 2 (id=1751): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 11m58.251374097s ago: executing program 2 (id=1753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 11m55.119256577s ago: executing program 2 (id=1759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) chdir(0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x3, "5806de", 0x0, 0xff}]}}}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab1"], 0x0, 0x1a}, 0x28) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x10b200) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) 11m50.594379537s ago: executing program 2 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 11m35.424072385s ago: executing program 36 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 7m50.857802583s ago: executing program 7 (id=2141): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 7m48.158506656s ago: executing program 7 (id=2144): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7m43.690292478s ago: executing program 7 (id=2152): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 7m40.301695519s ago: executing program 7 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) write$snapshot(r6, &(0x7f0000000040)='\a', 0x1) ioctl$SNAPSHOT_FREE(r6, 0x3305) write$snapshot(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, 0xffffffffffffffff) write$snapshot(r6, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000080)={0x1, 0x35315258, 0xf00, 0x870, 0x0, @stepwise={{0x1}, {}, {0xffffffff}}}) 7m38.214203264s ago: executing program 7 (id=2164): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x1000) socket$netlink(0x10, 0x3, 0xb) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) 7m32.463010227s ago: executing program 7 (id=2172): syz_emit_vhci(0x0, 0x90) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa151f28f0960cc0f, 0x100, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$inet(0xa, 0x801, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 7m16.508161863s ago: executing program 37 (id=2172): syz_emit_vhci(0x0, 0x90) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa151f28f0960cc0f, 0x100, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$inet(0xa, 0x801, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 12.985000039s ago: executing program 3 (id=2740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 9.434870987s ago: executing program 6 (id=2743): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x80d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x2b, 0xd, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)}) pwrite64(r0, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 9.434193067s ago: executing program 3 (id=2744): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, 0x0) 9.156480881s ago: executing program 3 (id=2745): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 8.435574159s ago: executing program 8 (id=2746): socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(0x0, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) 7.461352s ago: executing program 6 (id=2747): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0xc, 0x1000, 0xdb) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) 6.71469896s ago: executing program 8 (id=2748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0xfc, 0x2}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x5}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.618278365s ago: executing program 3 (id=2749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000440)='/dev/cpu/#/msr\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) 5.127096256s ago: executing program 6 (id=2750): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0x1c) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x4008586f, &(0x7f0000000100)={0x8a0, 0x8001, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000400)={0x0, @sdr={0x20385655, 0x200}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.045488207s ago: executing program 8 (id=2751): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r3, 0x0, 0xa3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) tkill(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 5.00698839s ago: executing program 3 (id=2752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}}, 0x20040880) 2.998602048s ago: executing program 3 (id=2753): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x40, 0x13, 0x10, "f026be40f8d75e9e91d06ed7a7f9e0df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.911180272s ago: executing program 6 (id=2754): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0x1c) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x4008586f, &(0x7f0000000100)={0x8a0, 0x8001, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000400)={0x0, @sdr={0x20385655, 0x200}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.609988997s ago: executing program 8 (id=2755): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x80d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x2b, 0xd, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)}) pwrite64(r0, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 1.56446414s ago: executing program 6 (id=2756): syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b"]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xf7ae}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, 0x0, 0x0, 0x500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 496.600837ms ago: executing program 8 (id=2757): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 343.009488ms ago: executing program 6 (id=2758): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 0s ago: executing program 8 (id=2759): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4394) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}], 0x18}}], 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r6, @ANYBLOB="0000000000000001b702000014000020b70300000010000085000000d4000000bf09000000ffffffe5090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0xfed, &(0x7f0000001e40)=""/4077, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) kernel console output (not intermixed with test programs): ed allmulticast mode [ 1161.650113][T14825] bridge_slave_1: entered promiscuous mode [ 1161.772233][ T43] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 1161.963174][ T43] ft260 0003:0403:6030.000E: failed to retrieve status: -32 [ 1162.038024][ T43] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 1162.716140][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.889144][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.898874][ T43] usb 9-1: USB disconnect, device number 2 [ 1163.210089][T15078] netlink: 'syz.6.1944': attribute type 3 has an invalid length. [ 1163.218302][T15078] netlink: 'syz.6.1944': attribute type 1 has an invalid length. [ 1163.226437][T15078] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1163.235646][T15078] NCSI netlink: No device for ifindex 33022 [ 1163.261466][T15079] random: crng reseeded on system resumption [ 1163.276416][T15079] Restarting kernel threads ... [ 1163.281980][T15079] Done restarting kernel threads. [ 1163.336005][T15080] hub 8-0:1.0: USB hub found [ 1163.341878][T15080] hub 8-0:1.0: 1 port detected [ 1166.941367][T14825] team0: Port device team_slave_0 added [ 1168.382472][T14825] team0: Port device team_slave_1 added [ 1168.766861][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.951578][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.029629][ T43] IPVS: starting estimator thread 0... [ 1170.040779][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.859734][T15131] IPVS: using max 25 ests per chain, 60000 per kthread [ 1171.005405][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.019343][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.049649][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.641600][T15148] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1960'. [ 1173.331154][T14825] hsr_slave_0: entered promiscuous mode [ 1173.338064][T14825] hsr_slave_1: entered promiscuous mode [ 1173.754808][T14825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.216632][T15160] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1174.223297][T15160] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1174.231490][T15161] vhci_hcd: connection closed [ 1174.231553][T15160] vhci_hcd vhci_hcd.0: Device attached [ 1174.258237][T15157] affs: No valid root block on device nullb0 [ 1174.375435][ T59] vhci_hcd: stop threads [ 1174.409549][T14825] Cannot create hsr debugfs directory [ 1174.424494][ T59] vhci_hcd: release socket [ 1174.450483][ T59] vhci_hcd: disconnect device [ 1177.355177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.363434][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.364514][T14825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1179.010298][T14825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1179.480262][T14825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1179.692156][T14825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1179.761383][T15204] siw: device registration error -23 [ 1180.553401][T15204] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1180.560036][T15204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1180.567825][T15204] vhci_hcd vhci_hcd.0: Device attached [ 1180.569614][T15205] vhci_hcd: connection closed [ 1180.591876][ T12] vhci_hcd: stop threads [ 1180.604517][ T12] vhci_hcd: release socket [ 1180.609012][ T12] vhci_hcd: disconnect device [ 1180.843104][ T3603] libceph: connect (1)[c::]:6789 error -101 [ 1180.849383][ T3603] libceph: mon0 (1)[c::]:6789 connect error [ 1180.961708][T15210] ceph: No mds server is up or the cluster is laggy [ 1181.213099][T14825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.229415][T15226] overlayfs: failed to resolve './file0': -2 [ 1182.463271][T14825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.710530][T15278] hub 1-0:1.0: USB hub found [ 1185.716184][T15278] hub 1-0:1.0: 1 port detected [ 1186.202386][T15282] random: crng reseeded on system resumption [ 1186.213862][T15282] Restarting kernel threads ... [ 1186.219056][T15282] Done restarting kernel threads. [ 1187.551000][T15294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.571774][T15294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.583250][T15294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.597289][T15294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.611366][T15294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1188.071604][T15300] overlayfs: failed to resolve './file0': -2 [ 1188.473736][T15308] hub 8-0:1.0: USB hub found [ 1188.479901][T15308] hub 8-0:1.0: 1 port detected [ 1189.233209][T15292] lo speed is unknown, defaulting to 1000 [ 1190.152348][ T5852] Bluetooth: hci4: command tx timeout [ 1191.531600][T15327] openvswitch: netlink: VXLAN extension message has 101 unknown bytes. [ 1193.039621][ T5852] Bluetooth: hci4: command tx timeout [ 1193.568099][T15357] random: crng reseeded on system resumption [ 1193.583017][T15357] Restarting kernel threads ... [ 1193.588391][T15357] Done restarting kernel threads. [ 1193.925808][T15362] netlink: 'syz.8.1999': attribute type 3 has an invalid length. [ 1193.933803][T15362] netlink: 'syz.8.1999': attribute type 1 has an invalid length. [ 1193.942074][T15362] netlink: 216 bytes leftover after parsing attributes in process `syz.8.1999'. [ 1193.951722][T15362] NCSI netlink: No device for ifindex 33022 [ 1194.057392][T15363] hub 8-0:1.0: USB hub found [ 1194.186815][T15363] hub 8-0:1.0: 1 port detected [ 1195.090010][T15299] Bluetooth: hci4: command tx timeout [ 1195.782229][T15375] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1196.095561][T15379] overlayfs: failed to resolve './file0': -2 [ 1196.433042][T15384] hub 8-0:1.0: USB hub found [ 1196.439066][T15384] hub 8-0:1.0: 1 port detected [ 1197.169701][T15299] Bluetooth: hci4: command tx timeout [ 1199.695598][T15407] affs: No valid root block on device nullb0 [ 1199.845845][T15292] chnl_net:caif_netlink_parms(): no params data found [ 1202.653424][T15420] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1204.385513][T15432] overlayfs: failed to resolve './file0': -2 [ 1205.129168][T15447] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2015'. [ 1206.450661][T15462] siw: device registration error -23 [ 1207.833825][T15462] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1207.840513][T15462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1207.848682][T15462] vhci_hcd vhci_hcd.0: Device attached [ 1208.392250][T15466] vhci_hcd: connection closed [ 1208.398498][ T59] vhci_hcd: stop threads [ 1208.417504][ T59] vhci_hcd: release socket [ 1208.571358][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.578594][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.715753][ T9992] usb 50-1: SetAddress Request (4) to port 0 [ 1208.722753][ T9992] usb 50-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1208.749966][ T59] vhci_hcd: disconnect device [ 1208.779682][ T9992] usb 50-1: enqueue for inactive port 0 [ 1208.783022][T15292] bridge_slave_0: entered allmulticast mode [ 1209.119179][T15292] bridge_slave_0: entered promiscuous mode [ 1209.958401][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.843784][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.867990][T15292] bridge_slave_1: entered allmulticast mode [ 1211.119268][ T9992] usb usb50-port1: attempt power cycle [ 1211.133009][T15292] bridge_slave_1: entered promiscuous mode [ 1211.177800][ T1156] bridge_slave_1: left allmulticast mode [ 1211.192278][ T1156] bridge_slave_1: left promiscuous mode [ 1211.207026][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.686062][ T1156] bridge_slave_0: left allmulticast mode [ 1211.957707][ T9992] usb usb50-port1: unable to enumerate USB device [ 1213.084174][ T1156] bridge_slave_0: left promiscuous mode [ 1213.091681][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.203123][T15517] affs: No valid root block on device nullb0 [ 1221.572771][T15576] siw: device registration error -23 [ 1221.933936][T15576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1221.940524][T15576] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1221.948677][T15576] vhci_hcd vhci_hcd.0: Device attached [ 1222.007208][T15579] vhci_hcd: connection closed [ 1222.008900][ T3005] vhci_hcd: stop threads [ 1222.031626][ T3005] vhci_hcd: release socket [ 1222.036117][ T3005] vhci_hcd: disconnect device [ 1225.119671][T15594] netlink: 'syz.8.2044': attribute type 3 has an invalid length. [ 1225.127772][T15594] netlink: 'syz.8.2044': attribute type 1 has an invalid length. [ 1225.140788][T15594] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2044'. [ 1225.150041][T15594] NCSI netlink: No device for ifindex 33022 [ 1225.679875][T15598] hub 8-0:1.0: USB hub found [ 1225.829722][T15598] hub 8-0:1.0: 1 port detected [ 1227.177917][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.189937][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.200444][ T1156] bond0 (unregistering): Released all slaves [ 1227.959379][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.999681][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.600365][T15292] team0: Port device team_slave_0 added [ 1229.511751][ T1156] hsr_slave_0: left promiscuous mode [ 1229.541325][ T1156] hsr_slave_1: left promiscuous mode [ 1229.559933][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.568046][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.626259][T15646] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2055'. [ 1238.302075][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1239.030364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.036905][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.118819][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1243.720900][T15702] openvswitch: netlink: VXLAN extension message has 176 unknown bytes. [ 1244.504948][T15715] siw: device registration error -23 [ 1245.315415][T15292] team0: Port device team_slave_1 added [ 1246.045286][T15715] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1246.052195][T15715] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1246.061125][T15715] vhci_hcd vhci_hcd.0: Device attached [ 1246.109674][T15720] vhci_hcd: connection closed [ 1246.111434][ T1148] vhci_hcd: stop threads [ 1246.141279][ T1148] vhci_hcd: release socket [ 1246.166201][ T1148] vhci_hcd: disconnect device [ 1246.595762][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1246.618530][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1246.645998][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1246.697498][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1246.708790][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1248.040506][T15724] lo speed is unknown, defaulting to 1000 [ 1248.269937][T15713] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1248.276536][T15713] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1248.284460][T15713] vhci_hcd vhci_hcd.0: Device attached [ 1248.476858][T15752] affs: No valid root block on device nullb0 [ 1248.562384][T15753] overlayfs: failed to resolve './file0': -2 [ 1248.699846][ T5902] usb 46-1: SetAddress Request (22) to port 0 [ 1248.813912][ T5902] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1248.852205][ T5852] Bluetooth: hci2: command tx timeout [ 1249.836310][T15724] chnl_net:caif_netlink_parms(): no params data found [ 1249.978931][T15748] vhci_hcd: connection reset by peer [ 1250.776628][T15768] siw: device registration error -23 [ 1250.981964][T14608] vhci_hcd: stop threads [ 1250.986285][T14608] vhci_hcd: release socket [ 1250.991957][T14608] vhci_hcd: disconnect device [ 1251.009613][ T5852] Bluetooth: hci2: command tx timeout [ 1251.843561][T15768] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1251.850153][T15768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1251.858073][T15768] vhci_hcd vhci_hcd.0: Device attached [ 1251.869683][T15771] vhci_hcd: connection closed [ 1251.925700][T14608] vhci_hcd: stop threads [ 1252.088942][T14608] vhci_hcd: release socket [ 1252.095134][T14608] vhci_hcd: disconnect device [ 1252.142627][ T3603] usb 48-1: SetAddress Request (12) to port 0 [ 1252.149269][ T3603] usb 48-1: new SuperSpeed USB device number 12 using vhci_hcd [ 1252.249563][ T3603] usb 48-1: enqueue for inactive port 0 [ 1253.269533][ T5852] Bluetooth: hci2: command tx timeout [ 1253.403328][T15785] openvswitch: netlink: VXLAN extension message has 189 unknown bytes. [ 1253.682199][ T3603] usb usb48-port1: attempt power cycle [ 1253.971421][ T5902] usb 46-1: device descriptor read/8, error -110 [ 1254.789897][ T3603] usb usb48-port1: unable to enumerate USB device [ 1256.014371][ T5902] usb usb46-port1: attempt power cycle [ 1256.029897][ T5852] Bluetooth: hci2: command tx timeout [ 1256.371560][T15807] overlayfs: failed to resolve './file0': -2 [ 1257.651021][ T5902] usb usb46-port1: unable to enumerate USB device [ 1259.010765][T15831] siw: device registration error -23 [ 1259.309676][T15831] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1259.316254][T15831] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1259.324105][T15831] vhci_hcd vhci_hcd.0: Device attached [ 1259.559606][T15833] vhci_hcd: connection closed [ 1259.590424][T12833] vhci_hcd: stop threads [ 1259.711178][T12833] vhci_hcd: release socket [ 1259.813286][T12833] vhci_hcd: disconnect device [ 1259.818408][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.857152][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.885446][T15724] bridge_slave_0: entered allmulticast mode [ 1259.940002][T15724] bridge_slave_0: entered promiscuous mode [ 1259.994168][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.151366][T15849] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2096'. [ 1260.312552][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.437314][T15724] bridge_slave_1: entered allmulticast mode [ 1260.651796][T15724] bridge_slave_1: entered promiscuous mode [ 1260.727634][ T1156] bridge_slave_1: left allmulticast mode [ 1260.768149][ T1156] bridge_slave_1: left promiscuous mode [ 1260.828498][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.214416][T15863] openvswitch: netlink: VXLAN extension message has 189 unknown bytes. [ 1261.276123][ T1156] bridge_slave_0: left allmulticast mode [ 1261.855785][ T1156] bridge_slave_0: left promiscuous mode [ 1262.039752][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.226715][T15881] random: crng reseeded on system resumption [ 1263.375611][T15881] Restarting kernel threads ... [ 1263.528049][T15881] Done restarting kernel threads. [ 1264.313069][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.325728][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.393102][ T1156] bond0 (unregistering): Released all slaves [ 1267.465985][T15912] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1267.472580][T15912] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1267.480675][T15912] vhci_hcd vhci_hcd.0: Device attached [ 1267.653633][T15915] vhci_hcd: connection closed [ 1267.674382][ T6126] vhci_hcd: stop threads [ 1268.090399][T15918] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2107'. [ 1268.123733][ T6126] vhci_hcd: release socket [ 1268.523421][ T3603] usb 46-1: SetAddress Request (26) to port 0 [ 1268.529802][ T3603] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1268.798166][ T6126] vhci_hcd: disconnect device [ 1268.798471][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1270.183962][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1270.751266][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 1271.100497][T15930] ceph: No mds server is up or the cluster is laggy [ 1271.159256][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 1271.185005][T15927] affs: No valid root block on device nullb0 [ 1271.442840][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.614164][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.669548][ T3603] usb 46-1: device descriptor read/8, error -110 [ 1274.300669][ T3603] usb usb46-port1: attempt power cycle [ 1275.288601][T15724] team0: Port device team_slave_0 added [ 1275.331733][T15724] team0: Port device team_slave_1 added [ 1276.071478][T15979] overlayfs: failed to resolve './file0': -2 [ 1276.255092][ T3603] usb usb46-port1: unable to enumerate USB device [ 1276.264501][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.272970][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.322487][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.604831][T15986] netlink: 'syz.7.2119': attribute type 3 has an invalid length. [ 1276.612745][T15986] netlink: 'syz.7.2119': attribute type 1 has an invalid length. [ 1276.620679][T15986] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2119'. [ 1276.629801][T15986] NCSI netlink: No device for ifindex 33022 [ 1277.242698][T15990] hub 8-0:1.0: USB hub found [ 1277.243507][T15990] hub 8-0:1.0: 1 port detected [ 1277.889825][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.896843][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.064993][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.395886][T15996] random: crng reseeded on system resumption [ 1278.410853][T15996] Restarting kernel threads ... [ 1278.416226][T15996] Done restarting kernel threads. [ 1280.061347][T15724] hsr_slave_0: entered promiscuous mode [ 1280.068420][T15724] hsr_slave_1: entered promiscuous mode [ 1280.123380][T15724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.144739][T15724] Cannot create hsr debugfs directory [ 1282.412086][T16037] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1282.418669][T16037] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1282.426856][T16037] vhci_hcd vhci_hcd.0: Device attached [ 1283.510167][T16038] vhci_hcd: connection closed [ 1283.542082][ T6126] vhci_hcd: stop threads [ 1283.660634][ T6126] vhci_hcd: release socket [ 1283.670017][ T6126] vhci_hcd: disconnect device [ 1283.710727][T15442] usb 46-1: enqueue for inactive port 0 [ 1284.374656][T15442] usb usb46-port1: attempt power cycle [ 1285.020387][ T3603] libceph: connect (1)[c::]:6789 error -101 [ 1285.026561][ T3603] libceph: mon0 (1)[c::]:6789 connect error [ 1285.423715][T16061] random: crng reseeded on system resumption [ 1285.448749][T16061] Restarting kernel threads ... [ 1285.454611][T16061] Done restarting kernel threads. [ 1285.593546][T16056] ceph: No mds server is up or the cluster is laggy [ 1285.611950][ T3603] libceph: connect (1)[c::]:6789 error -101 [ 1285.618089][ T3603] libceph: mon0 (1)[c::]:6789 connect error [ 1286.266737][T15442] usb usb46-port1: unable to enumerate USB device [ 1290.143924][T16103] random: crng reseeded on system resumption [ 1290.155271][T16103] Restarting kernel threads ... [ 1290.160687][T16103] Done restarting kernel threads. [ 1294.015053][T15724] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1294.080295][T15724] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1294.271448][T15724] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1295.450135][T16144] netlink: 'syz.3.2156': attribute type 3 has an invalid length. [ 1295.457998][T16144] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 1295.466099][T16144] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2156'. [ 1295.475282][T16144] NCSI netlink: No device for ifindex 33022 [ 1295.877647][T16141] hub 8-0:1.0: USB hub found [ 1295.883795][T16141] hub 8-0:1.0: 1 port detected [ 1296.040061][T15724] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1297.914184][T16170] random: crng reseeded on system resumption [ 1297.928981][T16170] Restarting kernel threads ... [ 1297.934519][T16170] Done restarting kernel threads. [ 1299.193921][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.375126][T16190] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2162'. [ 1299.848212][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.108651][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.115923][T12833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.135315][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.142677][T12833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.263112][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.269584][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.590253][T16197] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1300.597005][T16197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1300.604910][T16197] vhci_hcd vhci_hcd.0: Device attached [ 1301.176286][T16198] vhci_hcd: connection closed [ 1301.612303][ T59] vhci_hcd: stop threads [ 1301.729756][ T59] vhci_hcd: release socket [ 1301.734262][ T59] vhci_hcd: disconnect device [ 1306.187253][T16245] random: crng reseeded on system resumption [ 1306.202280][T16245] Restarting kernel threads ... [ 1306.207677][T16245] Done restarting kernel threads. [ 1310.783779][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1310.794577][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1310.803825][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1310.812887][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1310.820849][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1311.339580][T16289] siw: device registration error -23 [ 1311.854438][T16292] siw: device registration error -23 [ 1312.570177][T16291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1312.572730][T16292] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1312.576732][T16291] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1312.583237][T16292] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1312.591237][T16291] vhci_hcd vhci_hcd.0: Device attached [ 1312.599399][T16292] vhci_hcd vhci_hcd.0: Device attached [ 1312.719630][T16294] vhci_hcd: connection closed [ 1312.777935][ T49] vhci_hcd: stop threads [ 1312.802350][ T49] vhci_hcd: release socket [ 1312.806849][ T49] vhci_hcd: disconnect device [ 1312.849654][T16295] vhci_hcd: connection closed [ 1312.882399][ T49] vhci_hcd: stop threads [ 1312.929693][T15299] Bluetooth: hci2: command tx timeout [ 1312.939917][ T49] vhci_hcd: release socket [ 1312.944497][ T49] vhci_hcd: disconnect device [ 1312.960371][ T9992] usb 50-1: SetAddress Request (9) to port 0 [ 1312.966479][ T9992] usb 50-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1313.039638][ T9992] usb 50-1: enqueue for inactive port 0 [ 1313.074410][T16281] lo speed is unknown, defaulting to 1000 [ 1313.481066][ T9992] usb usb50-port1: attempt power cycle [ 1315.036541][T16314] random: crng reseeded on system resumption [ 1315.052325][T16314] Restarting kernel threads ... [ 1315.057700][T16314] Done restarting kernel threads. [ 1315.066342][ T9992] usb usb50-port1: unable to enumerate USB device [ 1315.076165][T15299] Bluetooth: hci2: command tx timeout [ 1317.449470][ T5852] Bluetooth: hci2: command tx timeout [ 1319.499811][ T5852] Bluetooth: hci2: command tx timeout [ 1319.883419][T16281] chnl_net:caif_netlink_parms(): no params data found [ 1320.921871][T16350] siw: device registration error -23 [ 1321.495598][T16350] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1321.502198][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1321.510232][T16350] vhci_hcd vhci_hcd.0: Device attached [ 1321.519310][T16351] vhci_hcd: connection closed [ 1321.521547][ T12] vhci_hcd: stop threads [ 1321.695534][ T12] vhci_hcd: release socket [ 1321.700209][ T12] vhci_hcd: disconnect device [ 1323.440078][T16370] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2194'. [ 1323.720386][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.740513][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.887539][T16281] bridge_slave_0: entered allmulticast mode [ 1324.137051][T16281] bridge_slave_0: entered promiscuous mode [ 1324.146829][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.163596][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.171498][T16281] bridge_slave_1: entered allmulticast mode [ 1324.181230][T16281] bridge_slave_1: entered promiscuous mode [ 1325.522735][T16376] ceph: No mds server is up or the cluster is laggy [ 1325.570038][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1325.576189][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1325.740283][T15299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1325.760729][T15299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1325.771341][T15299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1325.781657][T15299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1325.807154][T15299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1326.489715][T16391] siw: device registration error -23 [ 1327.192318][T16391] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1327.198889][T16391] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1327.206712][T16391] vhci_hcd vhci_hcd.0: Device attached [ 1327.226094][T16393] vhci_hcd: connection closed [ 1327.239811][ T6126] vhci_hcd: stop threads [ 1327.311057][ T6126] vhci_hcd: release socket [ 1327.367196][ T6126] vhci_hcd: disconnect device [ 1327.489752][ T1148] bridge_slave_1: left allmulticast mode [ 1327.558223][ T1148] bridge_slave_1: left promiscuous mode [ 1327.620078][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.877670][ T1148] bridge_slave_0: left allmulticast mode [ 1327.889879][ T5852] Bluetooth: hci4: command tx timeout [ 1327.931908][ T1148] bridge_slave_0: left promiscuous mode [ 1327.958212][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.131420][ T925] usb usb50-port1: attempt power cycle [ 1328.320662][T16405] hub 8-0:1.0: USB hub found [ 1328.329877][T16405] hub 8-0:1.0: 1 port detected [ 1329.969778][ T5852] Bluetooth: hci4: command tx timeout [ 1330.170740][ T925] usb usb50-port1: unable to enumerate USB device [ 1331.114269][T16434] siw: device registration error -23 [ 1332.178000][ T5852] Bluetooth: hci4: command tx timeout [ 1332.329689][T16444] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1332.336275][T16444] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1332.521631][T16444] vhci_hcd vhci_hcd.0: Device attached [ 1332.989804][T15442] usb 40-1: SetAddress Request (38) to port 0 [ 1332.997467][T15442] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1333.273384][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1333.437005][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1333.539784][T16455] ceph: No mds server is up or the cluster is laggy [ 1334.209454][ T5852] Bluetooth: hci4: command tx timeout [ 1334.415142][T16462] siw: device registration error -23 [ 1334.531949][T16462] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1334.538533][T16462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1334.547445][T16462] vhci_hcd vhci_hcd.0: Device attached [ 1335.223112][T16464] vhci_hcd: connection closed [ 1335.239737][T12833] vhci_hcd: stop threads [ 1335.269053][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.281484][T12833] vhci_hcd: release socket [ 1335.286099][T12833] vhci_hcd: disconnect device [ 1335.301324][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.419733][T16445] vhci_hcd: connection reset by peer [ 1335.443938][ T6126] vhci_hcd: stop threads [ 1335.448531][ T6126] vhci_hcd: release socket [ 1335.487199][ T6126] vhci_hcd: disconnect device [ 1335.538339][ T1148] bond0 (unregistering): Released all slaves [ 1335.562925][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.667406][T16469] hub 8-0:1.0: USB hub found [ 1335.673755][T16469] hub 8-0:1.0: 1 port detected [ 1335.822468][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.920933][ T1148] hsr_slave_0: left promiscuous mode [ 1337.948815][ T1148] hsr_slave_1: left promiscuous mode [ 1337.986617][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.020456][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.134132][T15442] usb 40-1: device descriptor read/8, error -110 [ 1338.537147][ T9627] syz-executor (9627) used greatest stack depth: 19520 bytes left [ 1338.592776][T15442] usb usb40-port1: attempt power cycle [ 1339.974087][T15442] usb usb40-port1: unable to enumerate USB device [ 1341.239915][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1341.575294][T16534] netlink: 'syz.8.2218': attribute type 3 has an invalid length. [ 1341.583207][T16534] netlink: 'syz.8.2218': attribute type 1 has an invalid length. [ 1341.591079][T16534] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2218'. [ 1341.600469][T16534] NCSI netlink: No device for ifindex 33022 [ 1341.728505][T16535] hub 8-0:1.0: USB hub found [ 1341.739885][T16535] hub 8-0:1.0: 1 port detected [ 1342.230799][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1345.229655][T16384] lo speed is unknown, defaulting to 1000 [ 1345.270981][T16281] team0: Port device team_slave_0 added [ 1345.360599][T16281] team0: Port device team_slave_1 added [ 1345.390711][T16560] overlayfs: failed to resolve './file0': -2 [ 1346.633055][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.712281][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.765391][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.817473][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.846116][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.878236][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.235221][T16575] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2226'. [ 1348.811537][T16281] hsr_slave_0: entered promiscuous mode [ 1348.889983][T16281] hsr_slave_1: entered promiscuous mode [ 1348.914269][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1348.921237][T16281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.379475][T16586] ceph: No mds server is up or the cluster is laggy [ 1349.732044][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1349.780061][T16281] Cannot create hsr debugfs directory [ 1350.079033][T16384] chnl_net:caif_netlink_parms(): no params data found [ 1350.309539][T15442] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1350.382674][T16606] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2230'. [ 1350.514732][T15442] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.601493][T15442] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1350.709963][T15442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.898660][T15442] usb 9-1: config 0 descriptor?? [ 1351.163780][ T1148] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.206675][T16611] overlayfs: failed to resolve './file0': -2 [ 1351.455707][ T1148] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.471223][T15442] lenovo 0003:17EF:6047.000F: item fetching failed at offset 4/5 [ 1351.486827][T15442] lenovo 0003:17EF:6047.000F: hid_parse failed [ 1351.493564][T15442] lenovo 0003:17EF:6047.000F: probe with driver lenovo failed with error -22 [ 1351.641337][T16619] netlink: 'syz.3.2232': attribute type 3 has an invalid length. [ 1351.649186][T16619] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 1351.657200][T16619] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2232'. [ 1351.666326][T16619] NCSI netlink: No device for ifindex 33022 [ 1351.799951][T16620] hub 8-0:1.0: USB hub found [ 1351.810352][T16620] hub 8-0:1.0: 1 port detected [ 1353.909177][ T1148] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.967511][ T9992] usb 9-1: USB disconnect, device number 3 [ 1354.100652][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.107864][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.197124][T16384] bridge_slave_0: entered allmulticast mode [ 1355.161610][T16384] bridge_slave_0: entered promiscuous mode [ 1356.627386][ T1148] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.090795][T16656] netlink: 'syz.8.2238': attribute type 3 has an invalid length. [ 1357.098639][T16656] netlink: 'syz.8.2238': attribute type 1 has an invalid length. [ 1357.106633][T16656] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2238'. [ 1357.115800][T16656] NCSI netlink: No device for ifindex 33022 [ 1357.269278][T16657] hub 8-0:1.0: USB hub found [ 1357.275852][T16657] hub 8-0:1.0: 1 port detected [ 1357.852461][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.876444][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.902419][T16384] bridge_slave_1: entered allmulticast mode [ 1357.918927][T16384] bridge_slave_1: entered promiscuous mode [ 1358.644872][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1359.065977][T16673] hub 8-0:1.0: USB hub found [ 1359.071745][T16673] hub 8-0:1.0: 1 port detected [ 1359.412282][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.672851][T16679] overlayfs: failed to resolve './file0': -2 [ 1361.414943][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.617101][T16699] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1361.623704][T16699] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1361.631763][T16699] vhci_hcd vhci_hcd.0: Device attached [ 1362.351897][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.358230][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.367588][T16700] vhci_hcd: connection closed [ 1362.416700][T12833] vhci_hcd: stop threads [ 1362.455071][T12833] vhci_hcd: release socket [ 1362.467466][T12833] vhci_hcd: disconnect device [ 1362.509632][T13093] usb 46-1: enqueue for inactive port 0 [ 1363.672411][T13093] usb usb46-port1: attempt power cycle [ 1364.669840][T13093] usb usb46-port1: unable to enumerate USB device [ 1364.801454][T16716] siw: device registration error -23 [ 1364.847246][T16384] team0: Port device team_slave_0 added [ 1364.933644][T16717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1364.940237][T16717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1364.949008][T16717] vhci_hcd vhci_hcd.0: Device attached [ 1364.957643][T16384] team0: Port device team_slave_1 added [ 1365.217046][T16718] vhci_hcd: connection closed [ 1365.240864][ T12] vhci_hcd: stop threads [ 1365.271699][ T12] vhci_hcd: release socket [ 1365.280817][ T12] vhci_hcd: disconnect device [ 1365.287678][ T1148] bridge_slave_1: left allmulticast mode [ 1365.306838][ T1148] bridge_slave_1: left promiscuous mode [ 1365.312619][ T43] usb 40-1: enqueue for inactive port 0 [ 1365.329079][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.344915][ T1148] bridge_slave_0: left allmulticast mode [ 1365.355827][ T1148] bridge_slave_0: left promiscuous mode [ 1365.362052][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.932765][T16730] siw: device registration error -23 [ 1366.329471][ T43] usb usb40-port1: attempt power cycle [ 1366.454507][T16730] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1366.461085][T16730] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1366.469095][T16730] vhci_hcd vhci_hcd.0: Device attached [ 1366.759481][T16731] vhci_hcd: connection closed [ 1366.760032][T14608] vhci_hcd: stop threads [ 1366.774321][T14608] vhci_hcd: release socket [ 1366.778798][T14608] vhci_hcd: disconnect device [ 1367.024997][ T43] usb usb40-port1: unable to enumerate USB device [ 1367.059677][T16738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2250'. [ 1369.448579][T15299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1369.458101][T15299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1369.466867][T15299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1369.476335][T15299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1369.484008][T15299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1370.251281][T16763] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1370.257856][T16763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1370.265830][T16763] vhci_hcd vhci_hcd.0: Device attached [ 1370.819388][T16764] vhci_hcd: connection closed [ 1370.836606][ T1156] vhci_hcd: stop threads [ 1370.867638][ T1156] vhci_hcd: release socket [ 1370.896077][ T1156] vhci_hcd: disconnect device [ 1371.225714][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.241182][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.264078][ T1148] bond0 (unregistering): Released all slaves [ 1371.304592][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.333664][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.372742][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.401806][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.408805][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.443611][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.455763][T16769] siw: device registration error -23 [ 1371.486985][T16769] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1371.493566][T16769] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1371.503272][T16769] vhci_hcd vhci_hcd.0: Device attached [ 1371.569465][T15299] Bluetooth: hci1: command tx timeout [ 1371.699444][T16770] vhci_hcd: connection closed [ 1371.794188][ T12] vhci_hcd: stop threads [ 1371.836873][ T12] vhci_hcd: release socket [ 1371.860293][ T12] vhci_hcd: disconnect device [ 1371.862509][T13093] usb 50-1: SetAddress Request (18) to port 0 [ 1371.904925][T13093] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1372.162080][T16749] lo speed is unknown, defaulting to 1000 [ 1372.190370][T16384] hsr_slave_0: entered promiscuous mode [ 1372.203693][T16384] hsr_slave_1: entered promiscuous mode [ 1372.217127][T16384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1372.236148][T16384] Cannot create hsr debugfs directory [ 1373.701342][T15299] Bluetooth: hci1: command tx timeout [ 1374.092577][T16787] netlink: 'syz.3.2258': attribute type 3 has an invalid length. [ 1374.100465][T16787] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 1374.108232][T16787] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2258'. [ 1374.117365][T16787] NCSI netlink: No device for ifindex 33022 [ 1374.792646][T16786] hub 8-0:1.0: USB hub found [ 1374.799471][T16786] hub 8-0:1.0: 1 port detected [ 1374.875590][ T1148] hsr_slave_0: left promiscuous mode [ 1374.909033][ T1148] hsr_slave_1: left promiscuous mode [ 1374.920006][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.942820][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.008173][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.027997][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.083789][ T1148] veth1_macvtap: left promiscuous mode [ 1375.096029][ T1148] veth0_macvtap: left promiscuous mode [ 1375.114667][ T1148] veth1_vlan: left promiscuous mode [ 1375.120195][ T1148] veth0_vlan: left promiscuous mode [ 1375.779601][T15299] Bluetooth: hci1: command tx timeout [ 1375.943752][T16806] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2260'. [ 1377.069632][T13093] usb 50-1: device descriptor read/8, error -110 [ 1377.871678][T15299] Bluetooth: hci1: command tx timeout [ 1377.930284][T13093] usb 50-1: SetAddress Request (19) to port 0 [ 1377.948581][T13093] usb 50-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1378.484481][T16823] hub 8-0:1.0: USB hub found [ 1378.490599][T16823] hub 8-0:1.0: 1 port detected [ 1383.140285][T13093] usb 50-1: device descriptor read/8, error -110 [ 1383.250143][T13093] usb usb50-port1: attempt power cycle [ 1383.389493][T13093] usb 50-1: SetAddress Request (20) to port 0 [ 1383.395795][T13093] usb 50-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1383.697412][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1383.872535][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1383.902167][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.911594][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.922092][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1384.211003][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1384.231244][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1386.293370][ T5852] Bluetooth: hci2: command tx timeout [ 1387.230817][T16848] lo speed is unknown, defaulting to 1000 [ 1387.463006][T16749] chnl_net:caif_netlink_parms(): no params data found [ 1388.131413][T16881] hub 8-0:1.0: USB hub found [ 1388.259430][T16881] hub 8-0:1.0: 1 port detected [ 1388.539873][ T5852] Bluetooth: hci2: command tx timeout [ 1388.821759][T13093] usb 50-1: device descriptor read/8, error -110 [ 1389.079442][T13093] usb 50-1: SetAddress Request (21) to port 0 [ 1389.085664][T13093] usb 50-1: new SuperSpeed USB device number 21 using vhci_hcd [ 1390.670712][ T5852] Bluetooth: hci2: command tx timeout [ 1391.740281][T16749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.894094][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.907677][T16749] bridge_slave_0: entered allmulticast mode [ 1391.917378][T16749] bridge_slave_0: entered promiscuous mode [ 1391.932680][T16749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.943839][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.951681][T16749] bridge_slave_1: entered allmulticast mode [ 1392.657290][T16749] bridge_slave_1: entered promiscuous mode [ 1392.689675][ T5852] Bluetooth: hci2: command tx timeout [ 1393.598272][T16749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.685315][T16931] hub 1-0:1.0: USB hub found [ 1393.699578][T16931] hub 1-0:1.0: 1 port detected [ 1394.129688][T13093] usb 50-1: device descriptor read/8, error -110 [ 1394.235605][T16749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.253791][ T1148] IPVS: stop unused estimator thread 0... [ 1394.400482][T13093] usb usb50-port1: unable to enumerate USB device [ 1395.554438][T16749] team0: Port device team_slave_0 added [ 1396.133085][T16749] team0: Port device team_slave_1 added [ 1398.200819][ T1148] bridge_slave_1: left allmulticast mode [ 1398.286863][ T1148] bridge_slave_1: left promiscuous mode [ 1398.481218][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.509498][ T1148] bridge_slave_0: left allmulticast mode [ 1398.566466][ T1148] bridge_slave_0: left promiscuous mode [ 1398.578901][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.624011][ T1148] bridge_slave_1: left allmulticast mode [ 1398.639759][ T1148] bridge_slave_1: left promiscuous mode [ 1398.654467][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.792073][ T1148] bridge_slave_0: left allmulticast mode [ 1398.797781][ T1148] bridge_slave_0: left promiscuous mode [ 1398.804678][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.958626][T16960] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1398.965209][T16960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1399.008528][T16960] vhci_hcd vhci_hcd.0: Device attached [ 1400.651760][ T43] usb 46-1: SetAddress Request (38) to port 0 [ 1400.653096][T16961] vhci_hcd: connection closed [ 1400.670693][T12833] vhci_hcd: stop threads [ 1400.680001][ T43] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1400.708894][T12833] vhci_hcd: release socket [ 1400.726045][T12833] vhci_hcd: disconnect device [ 1400.795243][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.808734][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.821444][ T1148] bond0 (unregistering): Released all slaves [ 1400.918655][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.932463][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.943965][ T1148] bond0 (unregistering): Released all slaves [ 1400.959652][T16848] chnl_net:caif_netlink_parms(): no params data found [ 1400.979929][T16749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.987123][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.019536][T16749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.038058][T16749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.045795][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.093275][T16749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.395229][T16982] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1402.401816][T16982] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1402.409941][T16982] vhci_hcd vhci_hcd.0: Device attached [ 1402.849548][T16983] vhci_hcd: connection reset by peer [ 1403.252843][ T6027] vhci_hcd: stop threads [ 1403.257244][ T6027] vhci_hcd: release socket [ 1403.265178][ T6027] vhci_hcd: disconnect device [ 1405.986746][ T43] usb 46-1: device descriptor read/8, error -110 [ 1406.408870][ T43] usb usb46-port1: attempt power cycle [ 1406.444330][T16749] hsr_slave_0: entered promiscuous mode [ 1406.538147][T16749] hsr_slave_1: entered promiscuous mode [ 1406.625171][T16749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.682006][T16749] Cannot create hsr debugfs directory [ 1406.752770][ T1148] hsr_slave_0: left promiscuous mode [ 1406.772999][ T1148] hsr_slave_1: left promiscuous mode [ 1406.786439][T17009] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2297'. [ 1406.803627][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.846383][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.928389][ T1148] hsr_slave_0: left promiscuous mode [ 1407.001060][ T43] usb usb46-port1: unable to enumerate USB device [ 1407.185652][ T1148] hsr_slave_1: left promiscuous mode [ 1407.198580][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.225169][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.494836][T17027] hub 1-0:1.0: USB hub found [ 1408.500267][T17027] hub 1-0:1.0: 1 port detected [ 1409.424155][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1409.696980][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1411.233094][T17041] siw: device registration error -23 [ 1412.019625][T17041] vhci_hcd vhci_hcd.0: port 0 already used [ 1414.886208][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1414.931871][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1418.106374][T17084] affs: No valid root block on device nullb0 [ 1419.650784][T17103] netlink: 'syz.6.2314': attribute type 3 has an invalid length. [ 1419.658682][T17103] netlink: 'syz.6.2314': attribute type 1 has an invalid length. [ 1419.666911][T17103] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2314'. [ 1419.676133][T17103] NCSI netlink: No device for ifindex 33022 [ 1419.790558][T17108] hub 8-0:1.0: USB hub found [ 1419.797309][T17108] hub 8-0:1.0: 1 port detected [ 1420.490506][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.497782][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.531950][T16848] bridge_slave_0: entered allmulticast mode [ 1420.551315][T16848] bridge_slave_0: entered promiscuous mode [ 1420.563403][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.570955][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.592894][T16848] bridge_slave_1: entered allmulticast mode [ 1420.604514][T16848] bridge_slave_1: entered promiscuous mode [ 1422.643696][T16848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.102075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.108859][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.214454][T16848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.291850][T16848] team0: Port device team_slave_0 added [ 1426.415881][T16848] team0: Port device team_slave_1 added [ 1426.582144][T16848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.591283][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.675440][T16848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.733242][T16848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.752510][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.859567][T16848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.406890][T16848] hsr_slave_0: entered promiscuous mode [ 1427.442932][T16848] hsr_slave_1: entered promiscuous mode [ 1427.471457][T16848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.500148][T16848] Cannot create hsr debugfs directory [ 1428.526547][T17193] netlink: 'syz.3.2326': attribute type 3 has an invalid length. [ 1428.534551][T17193] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 1428.542667][T17193] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2326'. [ 1428.552055][T17193] NCSI netlink: No device for ifindex 33022 [ 1428.674404][T17196] hub 8-0:1.0: USB hub found [ 1428.681203][T17196] hub 8-0:1.0: 1 port detected [ 1429.029546][T15442] libceph: connect (1)[c::]:6789 error -101 [ 1429.035711][T15442] libceph: mon0 (1)[c::]:6789 connect error [ 1429.069931][T15299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1429.386136][T17176] ceph: No mds server is up or the cluster is laggy [ 1429.400557][T15299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1429.410492][T15299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1429.424817][T15442] libceph: connect (1)[c::]:6789 error -101 [ 1429.437944][T15299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1429.461161][T15299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1430.157308][T15442] libceph: mon0 (1)[c::]:6789 connect error [ 1431.759946][ T5852] Bluetooth: hci4: command tx timeout [ 1432.549148][T17229] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2330'. [ 1433.252249][T17228] Falling back ldisc for ttyS3. [ 1433.810813][ T5852] Bluetooth: hci4: command tx timeout [ 1435.889556][ T5852] Bluetooth: hci4: command tx timeout [ 1438.238990][ T5852] Bluetooth: hci4: command tx timeout [ 1442.221669][T17275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2341'. [ 1442.554620][T17186] lo speed is unknown, defaulting to 1000 [ 1442.745005][T17276] siw: device registration error -23 [ 1442.770590][T17276] vhci_hcd vhci_hcd.0: port 0 already used [ 1444.668210][T15299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1444.679933][T15299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1444.689485][T15299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1444.698073][T15299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1444.705854][T15299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1444.778236][T17287] lo speed is unknown, defaulting to 1000 [ 1446.773643][T15299] Bluetooth: hci1: command tx timeout [ 1447.131647][T17307] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2345'. [ 1447.859099][T17186] chnl_net:caif_netlink_parms(): no params data found [ 1447.943558][ T9992] libceph: connect (1)[c::]:6789 error -101 [ 1447.943738][ T9992] libceph: mon0 (1)[c::]:6789 connect error [ 1448.366585][T17304] ceph: No mds server is up or the cluster is laggy [ 1448.374271][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1448.380592][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1449.342361][ T5852] Bluetooth: hci1: command tx timeout [ 1449.757302][T12833] bridge_slave_1: left allmulticast mode [ 1449.763872][T12833] bridge_slave_1: left promiscuous mode [ 1449.770477][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.802324][T12833] bridge_slave_0: left allmulticast mode [ 1449.901300][T17333] random: crng reseeded on system resumption [ 1449.955214][T17333] Restarting kernel threads ... [ 1449.960747][T17333] Done restarting kernel threads. [ 1449.974920][T17333] Unrecognized hibernate image header format! [ 1449.981449][T17333] PM: hibernation: Image mismatch: architecture specific data [ 1450.555783][T12833] bridge_slave_0: left promiscuous mode [ 1450.592485][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.765198][ T5852] Bluetooth: hci1: command tx timeout [ 1452.069347][T17339] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1452.075911][T17339] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1452.113699][T17339] vhci_hcd vhci_hcd.0: Device attached [ 1452.362493][T17342] vhci_hcd: connection closed [ 1452.364646][ T6126] vhci_hcd: stop threads [ 1452.381968][ T6126] vhci_hcd: release socket [ 1452.386711][ T6126] vhci_hcd: disconnect device [ 1452.766739][T12833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.805652][T12833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.822130][T12833] bond0 (unregistering): Released all slaves [ 1452.948603][T17287] chnl_net:caif_netlink_parms(): no params data found [ 1453.103568][T12833] hsr_slave_0: left promiscuous mode [ 1453.145623][T12833] hsr_slave_1: left promiscuous mode [ 1453.164898][T12833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.188796][T12833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.570908][T17355] netlink: 'syz.6.2354': attribute type 3 has an invalid length. [ 1453.578845][T17355] netlink: 'syz.6.2354': attribute type 1 has an invalid length. [ 1453.586740][T17355] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2354'. [ 1453.595903][T17355] NCSI netlink: No device for ifindex 33022 [ 1453.721062][T17356] hub 8-0:1.0: USB hub found [ 1453.729650][T17356] hub 8-0:1.0: 1 port detected [ 1453.862495][ T5852] Bluetooth: hci1: command tx timeout [ 1455.207136][T12833] team0 (unregistering): Port device team_slave_1 removed [ 1455.268196][T12833] team0 (unregistering): Port device team_slave_0 removed [ 1455.449836][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1455.455989][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1455.722348][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1455.739570][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1456.151146][T17366] ceph: No mds server is up or the cluster is laggy [ 1456.899363][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1456.906258][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1457.032623][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.056888][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.069681][T17186] bridge_slave_0: entered allmulticast mode [ 1457.137363][T17186] bridge_slave_0: entered promiscuous mode [ 1457.147899][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.155148][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.162428][T17186] bridge_slave_1: entered allmulticast mode [ 1457.170599][T17186] bridge_slave_1: entered promiscuous mode [ 1458.136218][T17396] random: crng reseeded on system resumption [ 1458.187827][T17396] Restarting kernel threads ... [ 1458.193415][T17396] Done restarting kernel threads. [ 1458.207852][T17396] Unrecognized hibernate image header format! [ 1458.214059][T17396] PM: hibernation: Image mismatch: architecture specific data [ 1459.925924][T17399] Falling back ldisc for ttyS3. [ 1459.978117][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.026614][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.320358][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.327647][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.337405][T17287] bridge_slave_0: entered allmulticast mode [ 1461.350941][T17287] bridge_slave_0: entered promiscuous mode [ 1461.367044][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.383030][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.395508][T17287] bridge_slave_1: entered allmulticast mode [ 1461.405013][T17287] bridge_slave_1: entered promiscuous mode [ 1461.671777][T17419] netlink: 'syz.6.2365': attribute type 3 has an invalid length. [ 1461.679724][T17419] netlink: 'syz.6.2365': attribute type 1 has an invalid length. [ 1461.687521][T17419] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2365'. [ 1461.696711][T17419] NCSI netlink: No device for ifindex 33022 [ 1462.091313][T17425] hub 8-0:1.0: USB hub found [ 1462.098338][T17425] hub 8-0:1.0: 1 port detected [ 1462.808226][T17186] team0: Port device team_slave_0 added [ 1463.582622][T17186] team0: Port device team_slave_1 added [ 1464.268037][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.379011][T17439] random: crng reseeded on system resumption [ 1464.427770][T17439] Restarting kernel threads ... [ 1464.433257][T17439] Done restarting kernel threads. [ 1464.444377][T17439] Unrecognized hibernate image header format! [ 1464.450839][T17439] PM: hibernation: Image mismatch: architecture specific data [ 1465.612775][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.237983][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.260059][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.322633][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.951312][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.968129][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.038683][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.104453][T17287] team0: Port device team_slave_0 added [ 1467.173963][T12833] bridge_slave_1: left allmulticast mode [ 1467.193427][T12833] bridge_slave_1: left promiscuous mode [ 1467.229523][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.349714][T12833] bridge_slave_0: left allmulticast mode [ 1467.355451][T12833] bridge_slave_0: left promiscuous mode [ 1467.369624][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.485903][T12833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.519910][T12833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.558135][T12833] bond0 (unregistering): Released all slaves [ 1468.645929][T17287] team0: Port device team_slave_1 added [ 1468.865101][T12833] hsr_slave_0: left promiscuous mode [ 1468.906597][T12833] hsr_slave_1: left promiscuous mode [ 1468.935387][T12833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.013466][T12833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.952035][T17467] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1470.958629][T17467] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1470.966699][T17467] vhci_hcd vhci_hcd.0: Device attached [ 1471.038855][T17471] vhci_hcd: connection closed [ 1471.049475][ T1148] vhci_hcd: stop threads [ 1471.058523][ T1148] vhci_hcd: release socket [ 1471.063367][ T1148] vhci_hcd: disconnect device [ 1471.378614][T17478] random: crng reseeded on system resumption [ 1471.437438][T17478] Restarting kernel threads ... [ 1471.443206][T17478] Done restarting kernel threads. [ 1471.459479][T17478] Unrecognized hibernate image header format! [ 1471.465650][T17478] PM: hibernation: Image mismatch: architecture specific data [ 1474.388006][T17492] netlink: 'syz.6.2382': attribute type 3 has an invalid length. [ 1474.395887][T17492] netlink: 'syz.6.2382': attribute type 1 has an invalid length. [ 1474.403726][T17492] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2382'. [ 1474.413254][T17492] NCSI netlink: No device for ifindex 33022 [ 1474.496621][T17493] hub 8-0:1.0: USB hub found [ 1474.502715][T17493] hub 8-0:1.0: 1 port detected [ 1475.180311][T12833] team0 (unregistering): Port device team_slave_1 removed [ 1475.540467][T17505] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2384'. [ 1475.672531][T17506] netlink: 'syz.3.2385': attribute type 3 has an invalid length. [ 1475.680454][T17506] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 1475.688246][T17506] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1475.697408][T17506] NCSI netlink: No device for ifindex 33022 [ 1475.819832][T17507] hub 8-0:1.0: USB hub found [ 1475.829575][T17507] hub 8-0:1.0: 1 port detected [ 1476.993680][T12833] team0 (unregistering): Port device team_slave_0 removed [ 1477.422085][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.429099][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.470295][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.641732][T17186] hsr_slave_0: entered promiscuous mode [ 1477.649068][T17186] hsr_slave_1: entered promiscuous mode [ 1477.686496][T17186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1477.713609][T17186] Cannot create hsr debugfs directory [ 1478.888877][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.049471][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.075419][ C1] vkms_vblank_simulate: vblank timer overrun [ 1479.090766][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.095516][T17527] /dev/nullb0: Can't open blockdev [ 1479.547496][T17533] random: crng reseeded on system resumption [ 1479.596662][T17533] Restarting kernel threads ... [ 1479.602162][T17533] Done restarting kernel threads. [ 1479.616048][T17533] Unrecognized hibernate image header format! [ 1479.622253][T17533] PM: hibernation: Image mismatch: architecture specific data [ 1481.001229][T17542] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1481.551081][T17287] hsr_slave_0: entered promiscuous mode [ 1481.577044][T17287] hsr_slave_1: entered promiscuous mode [ 1481.592537][T17287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1481.605051][T17287] Cannot create hsr debugfs directory [ 1483.121146][T17556] hub 1-0:1.0: USB hub found [ 1483.160748][T17556] hub 1-0:1.0: 1 port detected [ 1484.534371][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.540756][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.954017][T17569] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2397'. [ 1485.912979][T17566] affs: No valid root block on device nullb0 [ 1486.381596][T17578] random: crng reseeded on system resumption [ 1486.432930][T17578] Restarting kernel threads ... [ 1486.438396][T17578] Done restarting kernel threads. [ 1486.453054][T17578] Unrecognized hibernate image header format! [ 1486.459657][T17578] PM: hibernation: Image mismatch: architecture specific data [ 1488.084647][T17585] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1491.493216][T17607] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1492.288727][T17611] hub 1-0:1.0: USB hub found [ 1492.297745][T17611] hub 1-0:1.0: 1 port detected [ 1493.857830][T17624] siw: device registration error -23 [ 1494.632318][T17287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1495.786155][T17627] ceph: No mds server is up or the cluster is laggy [ 1496.012445][T17628] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1496.019111][T17628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1496.027272][T17628] vhci_hcd vhci_hcd.0: Device attached [ 1496.049501][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1496.106878][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1496.450761][T17632] vhci_hcd: connection closed [ 1496.453603][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1496.471262][T17287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1496.478823][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1496.487376][ T1148] vhci_hcd: stop threads [ 1496.499605][ T1148] vhci_hcd: release socket [ 1496.514377][ T1148] vhci_hcd: disconnect device [ 1497.621269][T17287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1498.260519][T17652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1498.275690][T17652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1498.286350][T17652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1498.305548][T17652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1498.344885][T17652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1498.424780][T17287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1499.871521][T17671] hub 1-0:1.0: USB hub found [ 1499.879305][T17671] hub 1-0:1.0: 1 port detected [ 1500.451571][T17652] Bluetooth: hci2: command tx timeout [ 1500.783966][T17641] lo speed is unknown, defaulting to 1000 [ 1501.639463][T12833] bridge_slave_1: left allmulticast mode [ 1501.665725][T12833] bridge_slave_1: left promiscuous mode [ 1501.689771][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.734340][T12833] bridge_slave_0: left allmulticast mode [ 1501.741604][T12833] bridge_slave_0: left promiscuous mode [ 1501.747682][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.017741][T12833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.063085][T12833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.092410][T12833] bond0 (unregistering): Released all slaves [ 1502.493300][T12833] hsr_slave_0: left promiscuous mode [ 1502.508128][T12833] hsr_slave_1: left promiscuous mode [ 1502.514464][T12833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.529339][T17652] Bluetooth: hci2: command tx timeout [ 1502.680189][T12833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.616067][T17652] Bluetooth: hci2: command tx timeout [ 1504.664193][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1504.678117][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1504.688203][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1504.720629][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1504.736286][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1505.766309][T13093] libceph: connect (1)[c::]:6789 error -101 [ 1505.780240][T13093] libceph: mon0 (1)[c::]:6789 connect error [ 1505.834169][T12833] team0 (unregistering): Port device team_slave_1 removed [ 1505.851160][T17690] ceph: No mds server is up or the cluster is laggy [ 1505.881247][T12833] team0 (unregistering): Port device team_slave_0 removed [ 1506.700033][ T5852] Bluetooth: hci2: command tx timeout [ 1506.778548][ T5852] Bluetooth: hci4: command tx timeout [ 1508.459613][T17727] random: crng reseeded on system resumption [ 1508.669664][T17727] Restarting kernel threads ... [ 1508.675042][T17727] Done restarting kernel threads. [ 1508.866372][ T5852] Bluetooth: hci4: command tx timeout [ 1509.491843][T17732] netlink: 'syz.6.2429': attribute type 3 has an invalid length. [ 1509.499699][T17732] netlink: 'syz.6.2429': attribute type 1 has an invalid length. [ 1509.507454][T17732] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2429'. [ 1509.516567][T17732] NCSI netlink: No device for ifindex 33022 [ 1510.742058][T17733] netlink: 'syz.3.2430': attribute type 3 has an invalid length. [ 1510.750087][T17733] netlink: 'syz.3.2430': attribute type 1 has an invalid length. [ 1510.757988][T17733] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2430'. [ 1510.767585][T17733] NCSI netlink: No device for ifindex 33022 [ 1511.169653][ T5852] Bluetooth: hci4: command tx timeout [ 1511.307419][T17742] hub 8-0:1.0: USB hub found [ 1511.312836][T17742] hub 8-0:1.0: 1 port detected [ 1512.022973][T17698] lo speed is unknown, defaulting to 1000 [ 1513.249835][ T5852] Bluetooth: hci4: command tx timeout [ 1514.166811][T17641] chnl_net:caif_netlink_parms(): no params data found [ 1515.390147][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1515.390382][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1515.649938][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1515.656066][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1515.737433][T17788] affs: No valid root block on device nullb0 [ 1515.819114][T17641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.845758][T17641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.892055][T17641] bridge_slave_0: entered allmulticast mode [ 1515.932398][T17781] ceph: No mds server is up or the cluster is laggy [ 1516.691286][T17641] bridge_slave_0: entered promiscuous mode [ 1518.440934][T17698] chnl_net:caif_netlink_parms(): no params data found [ 1518.468565][T17641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.555932][T17641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.606435][T17641] bridge_slave_1: entered allmulticast mode [ 1518.709587][T17641] bridge_slave_1: entered promiscuous mode [ 1519.489929][T17641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.492052][T17641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.673802][T17828] affs: No valid root block on device nullb0 [ 1520.830677][T17698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.837934][T17698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.859516][T17698] bridge_slave_0: entered allmulticast mode [ 1520.867840][T17698] bridge_slave_0: entered promiscuous mode [ 1520.896077][T17641] team0: Port device team_slave_0 added [ 1520.943816][T17698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.959550][T17698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.977192][T17698] bridge_slave_1: entered allmulticast mode [ 1521.023664][T17698] bridge_slave_1: entered promiscuous mode [ 1521.112820][T17641] team0: Port device team_slave_1 added [ 1523.244263][T17641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.259046][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.410523][T17641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.696861][T17698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.726651][T17698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.768531][T17641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.777408][T17641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.803997][T17641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.960501][T14608] bridge_slave_1: left allmulticast mode [ 1523.978932][T14608] bridge_slave_1: left promiscuous mode [ 1524.010106][T14608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.068794][T14608] bridge_slave_0: left allmulticast mode [ 1524.078196][T14608] bridge_slave_0: left promiscuous mode [ 1524.089355][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.383926][T14608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.404431][T14608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.416704][T14608] bond0 (unregistering): Released all slaves [ 1525.677285][T17698] team0: Port device team_slave_0 added [ 1525.706800][T17698] team0: Port device team_slave_1 added [ 1526.453798][T14608] hsr_slave_0: left promiscuous mode [ 1526.463158][T17871] affs: No valid root block on device nullb0 [ 1526.497643][T14608] hsr_slave_1: left promiscuous mode [ 1526.508584][T14608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.528995][T14608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.096919][T14608] team0 (unregistering): Port device team_slave_1 removed [ 1532.256338][T14608] team0 (unregistering): Port device team_slave_0 removed [ 1532.352029][T17895] Falling back ldisc for ttyS3. [ 1533.752128][T17912] netlink: 'syz.6.2469': attribute type 3 has an invalid length. [ 1533.760012][T17912] netlink: 'syz.6.2469': attribute type 1 has an invalid length. [ 1533.767812][T17912] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2469'. [ 1533.777005][T17912] NCSI netlink: No device for ifindex 33022 [ 1533.913072][T17914] hub 8-0:1.0: USB hub found [ 1533.919928][T17914] hub 8-0:1.0: 1 port detected [ 1535.128305][T17698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.145389][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.962490][T17698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.093969][T17698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.109387][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.135655][T17698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.844106][T17641] hsr_slave_0: entered promiscuous mode [ 1536.928198][T17641] hsr_slave_1: entered promiscuous mode [ 1536.943352][T17641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1536.963902][T17641] Cannot create hsr debugfs directory [ 1537.028953][T17698] hsr_slave_0: entered promiscuous mode [ 1537.103040][T17698] hsr_slave_1: entered promiscuous mode [ 1537.147277][T17698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1537.201341][T17698] Cannot create hsr debugfs directory [ 1538.816381][T17951] netlink: 'syz.8.2479': attribute type 3 has an invalid length. [ 1538.824574][T17951] netlink: 'syz.8.2479': attribute type 1 has an invalid length. [ 1538.832649][T17951] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2479'. [ 1538.841804][T17951] NCSI netlink: No device for ifindex 33022 [ 1538.963877][T17952] hub 8-0:1.0: USB hub found [ 1538.969981][T17952] hub 8-0:1.0: 1 port detected [ 1540.912177][T17641] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1541.176562][T17641] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1541.188397][T17641] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1541.279128][T17969] netlink: 'syz.8.2483': attribute type 3 has an invalid length. [ 1541.287020][T17969] netlink: 'syz.8.2483': attribute type 1 has an invalid length. [ 1541.295449][T17969] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2483'. [ 1541.304884][T17969] NCSI netlink: No device for ifindex 33022 [ 1542.024797][T17641] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1544.214421][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.459886][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.948383][T18006] netlink: 'syz.6.2488': attribute type 3 has an invalid length. [ 1545.956290][T18006] netlink: 'syz.6.2488': attribute type 1 has an invalid length. [ 1545.964159][T18006] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2488'. [ 1545.982400][T18006] NCSI netlink: No device for ifindex 33022 [ 1546.085181][T18007] hub 8-0:1.0: USB hub found [ 1546.091198][T18007] hub 8-0:1.0: 1 port detected [ 1546.644429][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.650834][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.782228][T17641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.905039][T17641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.155718][T17698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1547.187215][T17698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1547.301748][T18019] netlink: 'syz.6.2489': attribute type 3 has an invalid length. [ 1547.309705][T18019] netlink: 'syz.6.2489': attribute type 1 has an invalid length. [ 1547.317509][T18019] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2489'. [ 1547.326938][T18019] NCSI netlink: No device for ifindex 33022 [ 1547.377778][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.385060][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.450004][T18021] hub 8-0:1.0: USB hub found [ 1547.456209][T18021] hub 8-0:1.0: 1 port detected [ 1548.081694][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.088910][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.595777][T17698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1548.813599][T17698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1549.260456][T18038] netlink: 'syz.6.2492': attribute type 3 has an invalid length. [ 1549.268550][T18038] netlink: 'syz.6.2492': attribute type 1 has an invalid length. [ 1549.276727][T18038] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2492'. [ 1549.285961][T18038] NCSI netlink: No device for ifindex 33022 [ 1549.407117][T18039] hub 8-0:1.0: USB hub found [ 1549.413809][T18039] hub 8-0:1.0: 1 port detected [ 1552.096853][T17698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.884725][T17698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.962109][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.969360][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.051587][T14608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.058888][T14608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.088559][T17652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1553.100018][T17652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1553.108849][T17652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1553.117058][T17652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1553.125019][T17652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1554.335637][T18063] lo speed is unknown, defaulting to 1000 [ 1555.169563][ T5852] Bluetooth: hci1: command tx timeout [ 1556.863127][T17698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1556.879253][T17698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1557.329450][ T5852] Bluetooth: hci1: command tx timeout [ 1559.271065][T18104] siw: device registration error -23 [ 1559.383619][T18108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1559.390204][T18108] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1559.398165][T18108] vhci_hcd vhci_hcd.0: Device attached [ 1559.534188][ T5852] Bluetooth: hci1: command tx timeout [ 1559.627336][T18114] netlink: 'syz.6.2508': attribute type 3 has an invalid length. [ 1559.635286][T18114] netlink: 'syz.6.2508': attribute type 1 has an invalid length. [ 1559.643240][T18114] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1559.652496][T18114] NCSI netlink: No device for ifindex 33022 [ 1559.776915][T18116] hub 8-0:1.0: USB hub found [ 1559.789679][T18116] hub 8-0:1.0: 1 port detected [ 1560.213472][T18111] vhci_hcd: connection closed [ 1560.239263][ T2981] vhci_hcd: stop threads [ 1560.254990][ T2981] vhci_hcd: release socket [ 1560.309447][ T2981] vhci_hcd: disconnect device [ 1561.591633][ T5852] Bluetooth: hci1: command tx timeout [ 1563.503576][T18137] Falling back ldisc for ttyS3. [ 1564.013441][T18150] netlink: 'syz.3.2513': attribute type 3 has an invalid length. [ 1564.013493][T18150] netlink: 'syz.3.2513': attribute type 1 has an invalid length. [ 1564.013508][T18150] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1564.013525][T18150] NCSI netlink: No device for ifindex 33022 [ 1564.175433][T18156] hub 8-0:1.0: USB hub found [ 1564.180608][T18156] hub 8-0:1.0: 1 port detected [ 1564.331874][T18063] chnl_net:caif_netlink_parms(): no params data found [ 1564.431324][ T1148] bridge_slave_1: left allmulticast mode [ 1564.457797][ T1148] bridge_slave_1: left promiscuous mode [ 1564.499982][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.692974][ T1148] bridge_slave_0: left allmulticast mode [ 1564.718386][ T1148] bridge_slave_0: left promiscuous mode [ 1564.853785][T18168] netlink: 'syz.6.2512': attribute type 3 has an invalid length. [ 1564.861708][T18168] netlink: 'syz.6.2512': attribute type 1 has an invalid length. [ 1564.869554][T18168] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2512'. [ 1564.878650][T18168] NCSI netlink: No device for ifindex 33022 [ 1565.194517][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.221128][T18139] hub 8-0:1.0: USB hub found [ 1565.246316][T18139] hub 8-0:1.0: 1 port detected [ 1566.134682][T17652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1566.150667][T17652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1566.159713][T17652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1566.168535][T17652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1566.176346][T17652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1566.359469][T16580] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1566.547399][T16580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.586840][T16580] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1566.618489][T16580] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1566.633907][T16580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.694528][T16580] usb 4-1: config 0 descriptor?? [ 1567.184313][T16580] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1567.380313][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.444984][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.475685][ T1148] bond0 (unregistering): Released all slaves [ 1567.552764][T16580] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 1567.567979][T16580] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 1567.605230][T16580] kovaplus 0003:1E7D:2D50.0010: probe with driver kovaplus failed with error -71 [ 1567.810385][T16580] usb 4-1: USB disconnect, device number 11 [ 1568.887124][T18210] netlink: 'syz.8.2516': attribute type 3 has an invalid length. [ 1568.895000][T18210] netlink: 'syz.8.2516': attribute type 1 has an invalid length. [ 1568.902827][T18210] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2516'. [ 1568.911907][T18210] NCSI netlink: No device for ifindex 33022 [ 1569.038367][ T5852] Bluetooth: hci2: command tx timeout [ 1569.301100][T18214] hub 8-0:1.0: USB hub found [ 1569.399626][T18214] hub 8-0:1.0: 1 port detected [ 1569.944981][ T1148] hsr_slave_0: left promiscuous mode [ 1569.992995][ T1148] hsr_slave_1: left promiscuous mode [ 1570.000214][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.014303][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.294685][T18225] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1570.294685][T18225] program syz.3.2519 not setting count and/or reply_len properly [ 1570.547133][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1570.607539][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1571.093886][ T5852] Bluetooth: hci2: command tx timeout [ 1572.023312][T18235] netlink: 'syz.8.2521': attribute type 3 has an invalid length. [ 1572.031301][T18235] netlink: 'syz.8.2521': attribute type 1 has an invalid length. [ 1572.039106][T18235] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2521'. [ 1572.048356][T18235] NCSI netlink: No device for ifindex 33022 [ 1572.166228][T18236] hub 8-0:1.0: USB hub found [ 1572.172504][T18236] hub 8-0:1.0: 1 port detected [ 1572.842766][T18180] lo speed is unknown, defaulting to 1000 [ 1573.083761][T18063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.173698][ T5852] Bluetooth: hci2: command tx timeout [ 1573.176524][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.325051][T18063] bridge_slave_0: entered allmulticast mode [ 1573.333568][T18063] bridge_slave_0: entered promiscuous mode [ 1573.342561][T18063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.367065][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.367261][T18063] bridge_slave_1: entered allmulticast mode [ 1574.180056][T18063] bridge_slave_1: entered promiscuous mode [ 1575.140537][ T30] audit: type=1326 audit(1752589777.135:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18255 comm="syz.6.2526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f276a58e929 code=0x0 [ 1575.679255][ T5852] Bluetooth: hci2: command tx timeout [ 1575.777554][T18063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.860174][T18063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1576.260065][ T30] audit: type=1326 audit(1752589778.275:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.6.2527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f276a58e929 code=0x0 [ 1576.951161][T18063] team0: Port device team_slave_0 added [ 1576.996193][T18063] team0: Port device team_slave_1 added [ 1577.850162][T18063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.621187][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.657350][T18063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.182045][T18063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.189006][T18063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.239706][T18063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.797406][T18318] netlink: 'syz.6.2534': attribute type 3 has an invalid length. [ 1581.805470][T18318] netlink: 'syz.6.2534': attribute type 1 has an invalid length. [ 1581.813780][T18318] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2534'. [ 1581.822913][T18318] NCSI netlink: No device for ifindex 33022 [ 1581.941527][T18319] hub 8-0:1.0: USB hub found [ 1581.947469][T18319] hub 8-0:1.0: 1 port detected [ 1585.283047][T18063] hsr_slave_0: entered promiscuous mode [ 1585.368625][T18063] hsr_slave_1: entered promiscuous mode [ 1585.449339][T18063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.515230][T18063] Cannot create hsr debugfs directory [ 1585.902652][T18336] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2537'. [ 1587.059272][T18331] mkiss: ax0: crc mode is auto. [ 1588.369999][T18180] chnl_net:caif_netlink_parms(): no params data found [ 1594.251380][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.354685][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.528918][T18180] bridge_slave_0: entered allmulticast mode [ 1594.851292][T18180] bridge_slave_0: entered promiscuous mode [ 1594.964757][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.982004][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.996203][T18180] bridge_slave_1: entered allmulticast mode [ 1595.215878][T18180] bridge_slave_1: entered promiscuous mode [ 1595.390417][T18390] netlink: 'syz.3.2545': attribute type 3 has an invalid length. [ 1595.398263][T18390] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 1595.406233][T18390] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2545'. [ 1595.415407][T18390] NCSI netlink: No device for ifindex 33022 [ 1595.564645][T18391] hub 8-0:1.0: USB hub found [ 1595.570910][T18391] hub 8-0:1.0: 1 port detected [ 1596.093666][ T1148] bridge_slave_1: left allmulticast mode [ 1596.124567][ T1148] bridge_slave_1: left promiscuous mode [ 1596.149445][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.095270][ T1148] bridge_slave_0: left allmulticast mode [ 1597.137620][ T1148] bridge_slave_0: left promiscuous mode [ 1597.174620][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.725871][T18415] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2550'. [ 1599.762549][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.783285][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.798220][ T1148] bond0 (unregistering): Released all slaves [ 1600.665972][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.797745][ T1148] hsr_slave_0: left promiscuous mode [ 1602.062507][ T1148] hsr_slave_1: left promiscuous mode [ 1602.073379][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.084308][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.600234][T18445] hub 1-0:1.0: USB hub found [ 1602.645226][T18445] hub 1-0:1.0: 1 port detected [ 1603.378568][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1603.593808][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1606.428559][T18482] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 1606.436551][T18482] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 1606.444408][T18482] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1606.453638][T18482] NCSI netlink: No device for ifindex 33022 [ 1606.585397][T18484] hub 8-0:1.0: USB hub found [ 1606.591613][T18484] hub 8-0:1.0: 1 port detected [ 1607.418513][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.614942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.168428][T18492] Falling back ldisc for ttyS3. [ 1608.667489][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.721336][T18180] team0: Port device team_slave_0 added [ 1609.732395][T18180] team0: Port device team_slave_1 added [ 1610.190485][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.236172][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.284572][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.344815][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.352209][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.381203][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.846054][T18180] hsr_slave_0: entered promiscuous mode [ 1610.871250][T18180] hsr_slave_1: entered promiscuous mode [ 1610.883097][T18180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.899195][T18180] Cannot create hsr debugfs directory [ 1611.069908][T18525] hub 1-0:1.0: USB hub found [ 1611.115942][T18525] hub 1-0:1.0: 1 port detected [ 1613.062332][T17652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1613.083969][T17652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1613.099633][T17652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1613.108872][T17652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1613.116935][T17652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1613.199059][T18180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1613.658275][T18180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1613.690354][T18180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1613.828220][T18180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1614.018518][ T6126] bridge_slave_1: left allmulticast mode [ 1614.034512][ T6126] bridge_slave_1: left promiscuous mode [ 1614.094720][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.173669][ T6126] bridge_slave_0: left allmulticast mode [ 1614.195409][ T6126] bridge_slave_0: left promiscuous mode [ 1614.208012][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.738464][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.776571][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.808031][ T6126] bond0 (unregistering): Released all slaves [ 1614.844399][T18547] lo speed is unknown, defaulting to 1000 [ 1615.409984][ T5852] Bluetooth: hci1: command tx timeout [ 1616.042329][ T6126] hsr_slave_0: left promiscuous mode [ 1616.962423][ T6126] hsr_slave_1: left promiscuous mode [ 1616.968479][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.018657][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.489656][ T5852] Bluetooth: hci1: command tx timeout [ 1618.702137][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 1619.576891][ T5852] Bluetooth: hci1: command tx timeout [ 1619.587586][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 1621.202057][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.725813][ T5852] Bluetooth: hci1: command tx timeout [ 1621.812142][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.222411][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.230132][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.296043][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.303324][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.435643][T18547] chnl_net:caif_netlink_parms(): no params data found [ 1623.778175][T18638] Falling back ldisc for ttyS3. [ 1624.381864][T18547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.389082][T18547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.463639][T18547] bridge_slave_0: entered allmulticast mode [ 1624.502939][T18547] bridge_slave_0: entered promiscuous mode [ 1625.069923][T18547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.077116][T18547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.161573][T18547] bridge_slave_1: entered allmulticast mode [ 1625.420523][T18547] bridge_slave_1: entered promiscuous mode [ 1627.025875][T18547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.314141][T18547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.613554][T18547] team0: Port device team_slave_0 added [ 1628.661121][T18547] team0: Port device team_slave_1 added [ 1630.436178][T17652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1630.449590][T17652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1630.458654][T17652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1630.476309][T18547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.489435][T17652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1630.496659][T18547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.524889][T18547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.545395][T17652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1630.732319][T18547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.787455][T18547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.859349][T18547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.948721][T18689] lo speed is unknown, defaulting to 1000 [ 1631.094012][T18547] hsr_slave_0: entered promiscuous mode [ 1631.120685][T18547] hsr_slave_1: entered promiscuous mode [ 1631.127321][T18547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1631.164935][T18547] Cannot create hsr debugfs directory [ 1632.610936][T17652] Bluetooth: hci2: command tx timeout [ 1634.696742][T17652] Bluetooth: hci2: command tx timeout [ 1635.756439][T18734] Falling back ldisc for ttyS3. [ 1637.180752][T17652] Bluetooth: hci2: command tx timeout [ 1637.475760][ T12] bridge_slave_1: left allmulticast mode [ 1637.510740][ T12] bridge_slave_1: left promiscuous mode [ 1637.727411][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.772278][ T12] bridge_slave_0: left allmulticast mode [ 1637.789290][ T12] bridge_slave_0: left promiscuous mode [ 1637.795173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.249525][T17652] Bluetooth: hci2: command tx timeout [ 1640.396326][T18766] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1643.696468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.725971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.751638][ T12] bond0 (unregistering): Released all slaves [ 1644.184859][ T12] hsr_slave_0: left promiscuous mode [ 1644.212785][ T12] hsr_slave_1: left promiscuous mode [ 1644.224703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.247075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.690903][T18791] netlink: 'syz.6.2610': attribute type 3 has an invalid length. [ 1644.698745][T18791] netlink: 'syz.6.2610': attribute type 1 has an invalid length. [ 1644.706670][T18791] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1644.715862][T18791] NCSI netlink: No device for ifindex 33022 [ 1644.838846][T18792] hub 8-0:1.0: USB hub found [ 1644.845201][T18792] hub 8-0:1.0: 1 port detected [ 1646.707849][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1647.031291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1647.754652][T18822] netlink: 'syz.8.2613': attribute type 3 has an invalid length. [ 1647.762627][T18822] netlink: 'syz.8.2613': attribute type 1 has an invalid length. [ 1647.770474][T18822] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2613'. [ 1647.779847][T18822] NCSI netlink: No device for ifindex 33022 [ 1647.902958][T18825] hub 8-0:1.0: USB hub found [ 1647.908965][T18825] hub 8-0:1.0: 1 port detected [ 1649.767068][T18689] chnl_net:caif_netlink_parms(): no params data found [ 1653.575766][T18689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.656105][T18689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.665226][T18689] bridge_slave_0: entered allmulticast mode [ 1653.761923][T18689] bridge_slave_0: entered promiscuous mode [ 1653.962871][T18689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.970712][T18689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.977922][T18689] bridge_slave_1: entered allmulticast mode [ 1654.058867][T18689] bridge_slave_1: entered promiscuous mode [ 1654.660581][T18689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.706955][T18547] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1656.250678][T18547] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1656.407889][T18689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.521043][T18547] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1657.564161][T18547] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1657.601628][T18689] team0: Port device team_slave_0 added [ 1657.625297][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.676375][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.694673][T18689] team0: Port device team_slave_1 added [ 1657.867805][T18689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.880000][T18689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1657.937399][T18689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.018935][T18689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.026500][T18689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1658.056842][T18689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.230437][T18910] Falling back ldisc for ttyS3. [ 1659.437836][T18689] hsr_slave_0: entered promiscuous mode [ 1659.452438][T18689] hsr_slave_1: entered promiscuous mode [ 1659.489898][T18689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1659.525396][T18689] Cannot create hsr debugfs directory [ 1661.538588][T18547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.828436][T18547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.900497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.907721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.921923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.929244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.644392][T18689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1664.045733][T18689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1664.168811][T18689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1665.330736][T18689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1666.337871][T18547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1666.551522][T18992] siw: device registration error -23 [ 1667.292161][T18992] vhci_hcd vhci_hcd.0: port 0 already used [ 1668.856785][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.863212][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.765787][T18689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.778866][T18689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.960790][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.968003][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.038879][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.046121][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.387265][T18689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1672.402507][T18689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.982124][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2651'. [ 1676.040810][T19062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1676.048405][T19062] IPv6: NLM_F_CREATE should be set when creating new route [ 1676.612951][T18689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.736233][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1676.751425][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1676.780244][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1676.802276][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1676.811157][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1677.022114][T19074] lo speed is unknown, defaulting to 1000 [ 1677.075381][T18689] veth0_vlan: entered promiscuous mode [ 1677.154219][T18689] veth1_vlan: entered promiscuous mode [ 1679.422788][ T5852] Bluetooth: hci1: command tx timeout [ 1679.808822][T18689] veth0_macvtap: entered promiscuous mode [ 1681.489618][ T5852] Bluetooth: hci1: command tx timeout [ 1682.748162][ T1148] bridge_slave_1: left allmulticast mode [ 1682.755941][ T1148] bridge_slave_1: left promiscuous mode [ 1682.779462][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.974822][ T1148] bridge_slave_0: left allmulticast mode [ 1683.735746][ T5852] Bluetooth: hci1: command tx timeout [ 1683.752964][ T1148] bridge_slave_0: left promiscuous mode [ 1683.782704][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.950323][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.043505][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1685.199415][ T1148] bond0 (unregistering): Released all slaves [ 1685.490234][T18689] veth1_macvtap: entered promiscuous mode [ 1685.728216][T19074] chnl_net:caif_netlink_parms(): no params data found [ 1685.869334][ T5852] Bluetooth: hci1: command tx timeout [ 1686.100208][ T1148] hsr_slave_0: left promiscuous mode [ 1686.136325][ T1148] hsr_slave_1: left promiscuous mode [ 1686.160920][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.209623][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1687.363758][T19168] hub 1-0:1.0: USB hub found [ 1687.368972][T19168] hub 1-0:1.0: 1 port detected [ 1688.299387][T17652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1688.347415][T17652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1688.358553][T17652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1688.369436][T17652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1688.383807][T17652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1690.271468][T19197] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1690.278056][T19197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1690.286499][T19197] vhci_hcd vhci_hcd.0: Device attached [ 1690.645523][ T5852] Bluetooth: hci4: command tx timeout [ 1690.659470][T19198] vhci_hcd: connection closed [ 1690.673945][T18832] vhci_hcd: stop threads [ 1690.802645][T18832] vhci_hcd: release socket [ 1690.821642][T18832] vhci_hcd: disconnect device [ 1692.510231][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1692.719273][ T5852] Bluetooth: hci4: command tx timeout [ 1692.864669][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1694.889355][ T5852] Bluetooth: hci4: command tx timeout [ 1696.929486][ T5852] Bluetooth: hci4: command tx timeout [ 1698.055077][T19254] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2683'. [ 1700.984476][T19278] siw: device registration error -23 [ 1701.188125][T19280] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1701.194705][T19280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1701.202861][T19280] vhci_hcd vhci_hcd.0: Device attached [ 1701.788914][T19281] vhci_hcd: connection closed [ 1701.811436][ T6027] vhci_hcd: stop threads [ 1701.997401][T19074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.064696][ T6027] vhci_hcd: release socket [ 1702.069418][ T6027] vhci_hcd: disconnect device [ 1702.075468][T19074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.091801][T19074] bridge_slave_0: entered allmulticast mode [ 1702.134092][T19074] bridge_slave_0: entered promiscuous mode [ 1702.175160][T19172] lo speed is unknown, defaulting to 1000 [ 1702.182964][T19074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.191659][T19074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.198923][T19074] bridge_slave_1: entered allmulticast mode [ 1702.212043][T19074] bridge_slave_1: entered promiscuous mode [ 1703.251106][T19074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.415343][T19074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1704.317332][T19310] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2689'. [ 1704.700990][T19074] team0: Port device team_slave_0 added [ 1704.772315][T19074] team0: Port device team_slave_1 added [ 1707.671392][T19074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.678825][T19074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.520915][T19074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.567295][T19074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.578575][T19074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.781689][T19074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.097525][T19074] hsr_slave_0: entered promiscuous mode [ 1712.142028][T19074] hsr_slave_1: entered promiscuous mode [ 1712.148187][T19074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.215715][T19074] Cannot create hsr debugfs directory [ 1713.360868][T19374] siw: device registration error -23 [ 1713.799754][T19374] vhci_hcd vhci_hcd.0: port 0 already used [ 1718.048844][T19172] chnl_net:caif_netlink_parms(): no params data found [ 1719.087337][ T1148] bridge_slave_1: left allmulticast mode [ 1719.099168][ T1148] bridge_slave_1: left promiscuous mode [ 1720.042173][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.083004][ T1148] bridge_slave_0: left allmulticast mode [ 1720.088732][ T1148] bridge_slave_0: left promiscuous mode [ 1720.190251][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.543970][T19466] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1726.550559][T19466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1726.558706][T19466] vhci_hcd vhci_hcd.0: Device attached [ 1726.906413][T19467] vhci_hcd: connection closed [ 1726.908731][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1726.939663][ T6027] vhci_hcd: stop threads [ 1726.944705][ T6027] vhci_hcd: release socket [ 1726.949440][ T6027] vhci_hcd: disconnect device [ 1726.954664][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1726.970325][ T1148] bond0 (unregistering): Released all slaves [ 1726.972660][ T5902] usb 46-1: enqueue for inactive port 0 [ 1727.252220][ T1148] hsr_slave_0: left promiscuous mode [ 1727.295829][ T1148] hsr_slave_1: left promiscuous mode [ 1727.305210][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.330668][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.376097][ T1148] veth1_macvtap: left promiscuous mode [ 1727.392388][ T1148] veth0_macvtap: left promiscuous mode [ 1727.398151][ T1148] veth1_vlan: left promiscuous mode [ 1727.419306][ T1148] veth0_vlan: left promiscuous mode [ 1727.575087][ T5902] usb usb46-port1: attempt power cycle [ 1728.702502][ T5902] usb usb46-port1: unable to enumerate USB device [ 1730.298989][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.320495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.722857][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 1730.853496][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 1733.756498][T19528] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2726'. [ 1733.841041][T19172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.851908][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.002604][T19172] bridge_slave_0: entered allmulticast mode [ 1734.011280][T19172] bridge_slave_0: entered promiscuous mode [ 1734.023701][T19172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.057412][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.914433][T19172] bridge_slave_1: entered allmulticast mode [ 1735.144508][T19172] bridge_slave_1: entered promiscuous mode [ 1735.179605][T19544] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2728' sets config #0 [ 1735.190335][T19544] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2728' sets config #1 [ 1735.764208][T19172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.803941][T19172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.976979][T19172] team0: Port device team_slave_0 added [ 1736.005782][T19172] team0: Port device team_slave_1 added [ 1736.093726][T19172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.100836][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.127960][T19172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.149376][T19172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.156366][T19172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.189320][T19172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.290793][T19172] hsr_slave_0: entered promiscuous mode [ 1736.297352][T19172] hsr_slave_1: entered promiscuous mode [ 1736.304326][T19172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1736.312265][T19172] Cannot create hsr debugfs directory [ 1738.088399][T19556] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1738.533041][T14608] bridge_slave_1: left allmulticast mode [ 1738.538905][T14608] bridge_slave_1: left promiscuous mode [ 1738.545154][T14608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.586801][T14608] bridge_slave_0: left allmulticast mode [ 1738.594530][T14608] bridge_slave_0: left promiscuous mode [ 1738.613641][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.738223][T17652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1739.748162][T17652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1739.757584][T17652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1739.795384][T17652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1739.804499][T17652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1739.861133][T14608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.909647][T14608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.014763][T14608] bond0 (unregistering): Released all slaves [ 1740.548998][T14608] hsr_slave_0: left promiscuous mode [ 1740.575022][T14608] hsr_slave_1: left promiscuous mode [ 1740.582889][T14608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.608131][T14608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.423787][T14608] team0 (unregistering): Port device team_slave_1 removed [ 1741.481708][T14608] team0 (unregistering): Port device team_slave_0 removed [ 1741.905666][T17652] Bluetooth: hci1: command tx timeout [ 1742.450346][T19561] lo speed is unknown, defaulting to 1000 [ 1744.021389][T17652] Bluetooth: hci1: command tx timeout [ 1745.964807][T19602] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2739' sets config #0 [ 1745.975039][T19602] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2739' sets config #1 [ 1746.079204][T17652] Bluetooth: hci1: command tx timeout [ 1746.706892][T19561] chnl_net:caif_netlink_parms(): no params data found [ 1746.985631][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.993345][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.007977][T19561] bridge_slave_0: entered allmulticast mode [ 1747.016540][T19561] bridge_slave_0: entered promiscuous mode [ 1747.026102][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.033770][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.043791][T19561] bridge_slave_1: entered allmulticast mode [ 1747.060236][T19561] bridge_slave_1: entered promiscuous mode [ 1748.129564][T17652] Bluetooth: hci1: command tx timeout [ 1748.131351][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.193542][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.909593][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1749.931739][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1749.960903][T19561] team0: Port device team_slave_0 added [ 1749.989512][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1749.999868][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1750.007990][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1750.124489][T19633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1750.735491][T19641] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1750.742116][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1750.751424][T19641] vhci_hcd vhci_hcd.0: Device attached [ 1750.757542][T19643] vhci_hcd: connection closed [ 1750.769482][ T2981] vhci_hcd: stop threads [ 1750.827515][ T2981] vhci_hcd: release socket [ 1750.860433][ T2981] vhci_hcd: disconnect device [ 1751.377961][T19561] team0: Port device team_slave_1 added [ 1751.565703][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.585919][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.617715][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.656237][T19651] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2752'. [ 1751.804415][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.819179][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1751.856635][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.982074][T19655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2751' sets config #0 [ 1751.996685][T19655] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2751' sets config #1 [ 1753.468180][ T6027] bridge_slave_1: left allmulticast mode [ 1753.496572][ T6027] bridge_slave_1: left promiscuous mode [ 1753.508616][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.560202][ T6027] bridge_slave_0: left allmulticast mode [ 1753.565914][ T6027] bridge_slave_0: left promiscuous mode [ 1753.594169][ T5852] Bluetooth: hci2: command tx timeout [ 1753.622284][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.869159][T19473] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1753.967669][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.891393][T19473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.913220][T19473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1754.950512][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1754.981287][T19473] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1755.015479][ T6027] bond0 (unregistering): Released all slaves [ 1755.030158][T19473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.217730][T19628] lo speed is unknown, defaulting to 1000 [ 1755.226643][T19473] usb 4-1: config 0 descriptor?? [ 1755.740682][ T5852] Bluetooth: hci2: command tx timeout [ 1756.208226][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1756.215891][T19473] usbhid 4-1:0.0: can't add hid device: -32 [ 1756.222860][T19473] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1756.252505][T19473] usb 4-1: USB disconnect, device number 12 [ 1756.365073][T19561] hsr_slave_0: entered promiscuous mode [ 1756.376733][T19561] hsr_slave_1: entered promiscuous mode [ 1756.384107][T19561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1756.396599][T19561] Cannot create hsr debugfs directory [ 1756.523548][ T6027] hsr_slave_0: left promiscuous mode [ 1756.535004][ T6027] hsr_slave_1: left promiscuous mode [ 1756.541279][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1756.575228][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.073075][T19684] [ 1757.075486][T19684] ====================================================== [ 1757.082520][T19684] WARNING: possible circular locking dependency detected [ 1757.089553][T19684] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 1757.096753][T19684] ------------------------------------------------------ [ 1757.103797][T19684] syz.6.2758/19684 is trying to acquire lock: [ 1757.109881][T19684] ffff88806cc78140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50 [ 1757.119691][T19684] [ 1757.119691][T19684] but task is already holding lock: [ 1757.127082][T19684] ffff88805b1fb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1757.136548][T19684] [ 1757.136548][T19684] which lock already depends on the new lock. [ 1757.136548][T19684] [ 1757.146987][T19684] [ 1757.146987][T19684] the existing dependency chain (in reverse order) is: [ 1757.156046][T19684] [ 1757.156046][T19684] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1757.163292][T19684] lock_acquire+0x120/0x360 [ 1757.168346][T19684] __mutex_lock+0x182/0xe80 [ 1757.173381][T19684] kernfs_seq_start+0x55/0x3c0 [ 1757.178678][T19684] seq_read_iter+0x3ef/0xe10 [ 1757.183882][T19684] copy_splice_read+0x54f/0x9b0 [ 1757.189274][T19684] splice_file_to_pipe+0x273/0x440 [ 1757.194917][T19684] do_sendfile+0x475/0x7e0 [ 1757.199858][T19684] __se_sys_sendfile64+0x13e/0x190 [ 1757.205511][T19684] do_syscall_64+0xfa/0x3b0 [ 1757.210539][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.216957][T19684] [ 1757.216957][T19684] -> #2 (&p->lock){+.+.}-{4:4}: [ 1757.224109][T19684] lock_acquire+0x120/0x360 [ 1757.229138][T19684] __mutex_lock+0x182/0xe80 [ 1757.234164][T19684] seq_read_iter+0xb7/0xe10 [ 1757.239198][T19684] copy_splice_read+0x54f/0x9b0 [ 1757.244672][T19684] splice_file_to_pipe+0x273/0x440 [ 1757.250311][T19684] do_sendfile+0x475/0x7e0 [ 1757.255254][T19684] __se_sys_sendfile64+0x13e/0x190 [ 1757.260976][T19684] do_syscall_64+0xfa/0x3b0 [ 1757.266052][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.272473][T19684] [ 1757.272473][T19684] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1757.279868][T19684] lock_acquire+0x120/0x360 [ 1757.284892][T19684] __mutex_lock+0x182/0xe80 [ 1757.289916][T19684] anon_pipe_write+0x16a/0x1360 [ 1757.295290][T19684] __kernel_write_iter+0x3ec/0x860 [ 1757.300929][T19684] __kernel_write+0xef/0x150 [ 1757.306064][T19684] autofs_notify_daemon+0x748/0xe50 [ 1757.311794][T19684] autofs_wait+0x11dc/0x1870 [ 1757.316911][T19684] autofs_mount_wait+0x16b/0x330 [ 1757.322380][T19684] autofs_d_automount+0x393/0x720 [ 1757.327931][T19684] __traverse_mounts+0x308/0x5b0 [ 1757.333426][T19684] step_into+0x534/0xf30 [ 1757.338219][T19684] link_path_walk+0x77b/0xea0 [ 1757.343454][T19684] path_lookupat+0x97/0x430 [ 1757.348507][T19684] filename_lookup+0x212/0x570 [ 1757.353809][T19684] user_path_at+0x3a/0x60 [ 1757.358672][T19684] bpf_obj_get_user+0xa9/0x430 [ 1757.363968][T19684] __sys_bpf+0x71e/0x860 [ 1757.368739][T19684] __x64_sys_bpf+0x7c/0x90 [ 1757.373701][T19684] do_syscall_64+0xfa/0x3b0 [ 1757.378755][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.385200][T19684] [ 1757.385200][T19684] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1757.392958][T19684] validate_chain+0xb9b/0x2140 [ 1757.398259][T19684] __lock_acquire+0xab9/0xd20 [ 1757.403478][T19684] lock_acquire+0x120/0x360 [ 1757.408507][T19684] __mutex_lock+0x182/0xe80 [ 1757.413708][T19684] autofs_notify_daemon+0x735/0xe50 [ 1757.419436][T19684] autofs_wait+0x11dc/0x1870 [ 1757.424557][T19684] autofs_mount_wait+0x16b/0x330 [ 1757.430107][T19684] autofs_d_automount+0x393/0x720 [ 1757.435744][T19684] __traverse_mounts+0x308/0x5b0 [ 1757.441202][T19684] step_into+0x534/0xf30 [ 1757.445972][T19684] path_lookupat+0x163/0x430 [ 1757.451092][T19684] filename_lookup+0x212/0x570 [ 1757.456465][T19684] kern_path+0x35/0x50 [ 1757.461153][T19684] lookup_bdev+0xc0/0x280 [ 1757.466010][T19684] resume_store+0x169/0x460 [ 1757.471041][T19684] kernfs_fop_write_iter+0x378/0x4f0 [ 1757.476856][T19684] vfs_write+0x54b/0xa90 [ 1757.481713][T19684] ksys_write+0x145/0x250 [ 1757.486568][T19684] do_syscall_64+0xfa/0x3b0 [ 1757.491593][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.498020][T19684] [ 1757.498020][T19684] other info that might help us debug this: [ 1757.498020][T19684] [ 1757.508264][T19684] Chain exists of: [ 1757.508264][T19684] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1757.508264][T19684] [ 1757.520363][T19684] Possible unsafe locking scenario: [ 1757.520363][T19684] [ 1757.527821][T19684] CPU0 CPU1 [ 1757.533189][T19684] ---- ---- [ 1757.538555][T19684] lock(&of->mutex); [ 1757.542544][T19684] lock(&p->lock); [ 1757.548876][T19684] lock(&of->mutex); [ 1757.555395][T19684] lock(&sbi->pipe_mutex); [ 1757.559912][T19684] [ 1757.559912][T19684] *** DEADLOCK *** [ 1757.559912][T19684] [ 1757.568056][T19684] 4 locks held by syz.6.2758/19684: [ 1757.573253][T19684] #0: ffff88803122b5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1757.582318][T19684] #1: ffff8880352de428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1757.591214][T19684] #2: ffff88805b1fb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1757.600992][T19684] #3: ffff8881404a0878 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1757.611017][T19684] [ 1757.611017][T19684] stack backtrace: [ 1757.616911][T19684] CPU: 1 UID: 0 PID: 19684 Comm: syz.6.2758 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1757.616930][T19684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1757.616940][T19684] Call Trace: [ 1757.616946][T19684] [ 1757.616953][T19684] dump_stack_lvl+0x189/0x250 [ 1757.616973][T19684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.616989][T19684] ? __pfx__printk+0x10/0x10 [ 1757.617008][T19684] ? print_lock_name+0xde/0x100 [ 1757.617026][T19684] print_circular_bug+0x2ee/0x310 [ 1757.617046][T19684] check_noncircular+0x134/0x160 [ 1757.617065][T19684] validate_chain+0xb9b/0x2140 [ 1757.617089][T19684] __lock_acquire+0xab9/0xd20 [ 1757.617104][T19684] ? autofs_notify_daemon+0x735/0xe50 [ 1757.617124][T19684] lock_acquire+0x120/0x360 [ 1757.617137][T19684] ? autofs_notify_daemon+0x735/0xe50 [ 1757.617161][T19684] __mutex_lock+0x182/0xe80 [ 1757.617175][T19684] ? autofs_notify_daemon+0x735/0xe50 [ 1757.617195][T19684] ? autofs_notify_daemon+0x6e5/0xe50 [ 1757.617215][T19684] ? autofs_notify_daemon+0x735/0xe50 [ 1757.617241][T19684] ? __pfx___mutex_lock+0x10/0x10 [ 1757.617255][T19684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1757.617268][T19684] ? from_kgid_munged+0x1f4/0x6a0 [ 1757.617290][T19684] ? __pfx_from_kgid_munged+0x10/0x10 [ 1757.617308][T19684] ? kasan_save_track+0x4f/0x80 [ 1757.617326][T19684] ? __kasan_kmalloc+0x93/0xb0 [ 1757.617343][T19684] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1757.617363][T19684] ? autofs_wait+0xd32/0x1870 [ 1757.617381][T19684] ? autofs_notify_daemon+0x3d1/0xe50 [ 1757.617402][T19684] autofs_notify_daemon+0x735/0xe50 [ 1757.617420][T19684] ? do_syscall_64+0xfa/0x3b0 [ 1757.617435][T19684] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1757.617466][T19684] ? __raw_spin_lock_init+0x45/0x100 [ 1757.617484][T19684] ? autofs_wait+0xe13/0x1870 [ 1757.617504][T19684] autofs_wait+0x11dc/0x1870 [ 1757.617522][T19684] ? d_walk+0x2c0/0x780 [ 1757.617539][T19684] ? __pfx_autofs_wait+0x10/0x10 [ 1757.617558][T19684] ? preempt_schedule_common+0x83/0xd0 [ 1757.617578][T19684] ? preempt_schedule+0xae/0xc0 [ 1757.617597][T19684] ? __pfx_preempt_schedule+0x10/0x10 [ 1757.617621][T19684] autofs_mount_wait+0x16b/0x330 [ 1757.617641][T19684] autofs_d_automount+0x393/0x720 [ 1757.617663][T19684] __traverse_mounts+0x308/0x5b0 [ 1757.617680][T19684] step_into+0x534/0xf30 [ 1757.617695][T19684] ? lookup_slow+0x5e/0x70 [ 1757.617711][T19684] ? __pfx_step_into+0x10/0x10 [ 1757.617725][T19684] ? walk_component+0x190/0x400 [ 1757.617740][T19684] path_lookupat+0x163/0x430 [ 1757.617758][T19684] filename_lookup+0x212/0x570 [ 1757.617775][T19684] ? __pfx_filename_lookup+0x10/0x10 [ 1757.617797][T19684] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1757.617815][T19684] ? getname_kernel+0x146/0x2f0 [ 1757.617831][T19684] ? getname_kernel+0x20e/0x2f0 [ 1757.617844][T19684] kern_path+0x35/0x50 [ 1757.617859][T19684] lookup_bdev+0xc0/0x280 [ 1757.617874][T19684] ? rcu_is_watching+0x15/0xb0 [ 1757.617890][T19684] ? __pfx_lookup_bdev+0x10/0x10 [ 1757.617902][T19684] ? kstrndup+0xbf/0x160 [ 1757.617920][T19684] resume_store+0x169/0x460 [ 1757.617937][T19684] ? sysfs_file_kobj+0x1a/0x230 [ 1757.617957][T19684] ? __pfx_resume_store+0x10/0x10 [ 1757.617975][T19684] ? sysfs_file_kobj+0x1a/0x230 [ 1757.617994][T19684] ? sysfs_file_kobj+0x1a/0x230 [ 1757.618012][T19684] ? sysfs_file_kobj+0x1a/0x230 [ 1757.618031][T19684] ? sysfs_file_kobj+0x1e4/0x230 [ 1757.618050][T19684] ? sysfs_kf_write+0x166/0x260 [ 1757.618071][T19684] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1757.618090][T19684] kernfs_fop_write_iter+0x378/0x4f0 [ 1757.618110][T19684] vfs_write+0x54b/0xa90 [ 1757.618130][T19684] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1757.618149][T19684] ? __pfx_vfs_write+0x10/0x10 [ 1757.618168][T19684] ? __rcu_read_unlock+0x84/0xe0 [ 1757.618188][T19684] ? __fget_files+0x2a/0x420 [ 1757.618204][T19684] ksys_write+0x145/0x250 [ 1757.618223][T19684] ? __pfx_ksys_write+0x10/0x10 [ 1757.618246][T19684] ? rcu_is_watching+0x15/0xb0 [ 1757.618262][T19684] ? do_syscall_64+0xbe/0x3b0 [ 1757.618277][T19684] do_syscall_64+0xfa/0x3b0 [ 1757.618290][T19684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.618305][T19684] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1757.618319][T19684] ? clear_bhb_loop+0x60/0xb0 [ 1757.618334][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.618349][T19684] RIP: 0033:0x7f276a58e929 [ 1757.618362][T19684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.618376][T19684] RSP: 002b:00007f276b3a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.618391][T19684] RAX: ffffffffffffffda RBX: 00007f276a7b6240 RCX: 00007f276a58e929 [ 1757.618402][T19684] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 1757.618411][T19684] RBP: 00007f276a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1757.618421][T19684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.618430][T19684] R13: 0000000000000000 R14: 00007f276a7b6240 R15: 00007ffc503629f8 [ 1757.618446][T19684] SYZFAIL: failed to recv rpc [ 1758.155099][ T5852] Bluetooth: hci2: command tx timeout fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1758.342746][T19684] block device autoloading is deprecated and will be removed. [ 1758.350651][T19684] PM: Image not found (code -22) [ 1758.551127][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1758.589140][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1759.461372][ T6027] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.515812][ T6027] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.584909][ T6027] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.624912][ T6027] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.743276][ T6027] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.798627][ T6027] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.856000][ T6027] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.913884][ T6027] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.315794][ T6027] bridge_slave_1: left allmulticast mode [ 1760.321739][ T6027] bridge_slave_1: left promiscuous mode [ 1760.327504][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.338044][ T6027] bridge_slave_0: left allmulticast mode [ 1760.345008][ T6027] bridge_slave_0: left promiscuous mode [ 1760.352683][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.362492][ T6027] bridge_slave_1: left allmulticast mode [ 1760.368181][ T6027] bridge_slave_1: left promiscuous mode [ 1760.377093][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.392953][ T6027] bridge_slave_0: left allmulticast mode [ 1760.398644][ T6027] bridge_slave_0: left promiscuous mode [ 1760.405709][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.417053][ T6027] team0: left allmulticast mode [ 1760.422740][ T6027] team_slave_0: left allmulticast mode [ 1760.428252][ T6027] team_slave_1: left allmulticast mode [ 1760.435336][ T6027] team0: left promiscuous mode [ 1760.440407][ T6027] team_slave_0: left promiscuous mode [ 1760.446041][ T6027] team_slave_1: left promiscuous mode [ 1760.454187][ T6027] bridge0: port 3(team0) entered disabled state [ 1760.462258][ T6027] bridge_slave_1: left allmulticast mode [ 1760.467935][ T6027] bridge_slave_1: left promiscuous mode [ 1760.475174][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.484017][ T6027] bridge_slave_0: left allmulticast mode [ 1760.494224][ T6027] bridge_slave_0: left promiscuous mode [ 1760.500850][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.512321][ T6027] bridge_slave_1: left promiscuous mode [ 1760.518542][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.527427][ T6027] bridge_slave_0: left promiscuous mode [ 1760.534423][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.694818][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.712310][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.725407][ T6027] bond0 (unregistering): Released all slaves [ 1760.874465][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.885008][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.895287][ T6027] bond0 (unregistering): Released all slaves [ 1760.952088][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.961822][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.973880][ T6027] bond0 (unregistering): Released all slaves [ 1761.246443][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.256207][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.265841][ T6027] bond0 (unregistering): Released all slaves [ 1761.862827][ T6027] hsr_slave_0: left promiscuous mode [ 1761.868938][ T6027] hsr_slave_1: left promiscuous mode [ 1761.875936][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.886162][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.897487][ T6027] hsr_slave_0: left promiscuous mode [ 1761.904238][ T6027] hsr_slave_1: left promiscuous mode [ 1761.910792][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.918236][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.926362][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.934810][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.946163][ T6027] hsr_slave_0: left promiscuous mode [ 1761.952773][ T6027] hsr_slave_1: left promiscuous mode [ 1761.958598][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.966404][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.975044][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.982541][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.994964][ T6027] hsr_slave_0: left promiscuous mode [ 1762.000941][ T6027] hsr_slave_1: left promiscuous mode [ 1762.006609][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.014225][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.025558][ T6027] veth1_macvtap: left promiscuous mode [ 1762.031404][ T6027] veth0_macvtap: left promiscuous mode [ 1762.036954][ T6027] veth1_vlan: left promiscuous mode [ 1762.042919][ T6027] veth0_vlan: left promiscuous mode [ 1762.048840][ T6027] veth1_macvtap: left promiscuous mode [ 1762.054410][ T6027] veth0_macvtap: left promiscuous mode [ 1762.060596][ T6027] veth1_vlan: left promiscuous mode [ 1762.066163][ T6027] veth0_vlan: left promiscuous mode [ 1762.176718][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1762.203480][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1762.341515][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1762.366886][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1762.524216][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1762.549058][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1762.941090][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 1762.981752][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 1763.337158][T13093] lo speed is unknown, defaulting to 1000 [ 1763.349263][T13093] infiniband syz0: ib_query_port failed (-19) [ 1764.292790][ T6027] IPVS: stop unused estimator thread 0... [ 1764.299814][ T6027] IPVS: stop unused estimator thread 0... [ 1764.306797][ T6027] IPVS: stop unused estimator thread 0...