last executing test programs: 5m34.596468998s ago: executing program 2 (id=90): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) 5m34.299571916s ago: executing program 2 (id=94): syz_open_dev$loop(&(0x7f0000000040), 0x3a, 0x200000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001380)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5m33.803083902s ago: executing program 2 (id=97): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x78, 0x0, &(0x7f0000000580)="a2e6883753df458677b5e3f99b792b29155de88d78d89fa5b71f0e78c46fbb152d9e008a41cb1f9955989208b11b2e0aa9808f23eb2277571a79da648dfbcdfd93b36a931c5ea3ab1dc61ff663c833ff78a03666b3dda016c2f2507c0e054a28bfac1de1f345c6cce13fea6c52014614063ad4575cc5b6ed"}) 5m33.269194258s ago: executing program 2 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x52) 5m32.839606918s ago: executing program 2 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$kcm(0x29, 0x5, 0x0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) 5m25.121107536s ago: executing program 2 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5m9.578015356s ago: executing program 32 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4m54.859473054s ago: executing program 1 (id=175): sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m53.175494895s ago: executing program 1 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$kcm(0x29, 0x5, 0x0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e21, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0xff}, {0x100000001, 0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x1}, {0x0, 0x340000000000000, 0x6}, 0x9, 0x6e6bbf}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x804d5, 0x3c}, 0x8, @in=@private=0xa010104, 0x3504, 0x1, 0x2, 0x5, 0x0, 0x916d, 0x4}}, 0xe8) 4m51.123755776s ago: executing program 0 (id=185): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0xf0, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x94, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4d, 0x6, "305c995792ee6623a1fe1b2a1dbef019a8c4cb810ce04ae194301e77bfbd5b9d7a0e4e4d9f0cde0c2beb9026135b6457e6b5a96b9f811ec2d7e13c91660d6fbeb6c037c37f87e70803"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) 4m47.997737221s ago: executing program 1 (id=188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1b87, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x100000) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x8, 0x8000, 0x4}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) 4m44.701880489s ago: executing program 0 (id=194): add_key(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x2255, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SG_IO(r1, 0x2285, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4m44.447411053s ago: executing program 0 (id=196): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(0x3) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x8, 0x2, 0x0, 0x0, 0x0) 4m43.353840655s ago: executing program 0 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$kcm(0x29, 0x5, 0x0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'}) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e21, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0xff}, {0x100000001, 0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x1}, {0x0, 0x340000000000000, 0x6}, 0x9, 0x6e6bbf}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x804d5, 0x3c}, 0x8, @in=@private=0xa010104, 0x3504, 0x1, 0x2, 0x5, 0x0, 0x916d, 0x4}}, 0xe8) 4m42.290941993s ago: executing program 1 (id=199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x12) flock(r6, 0x2) 4m40.771082466s ago: executing program 1 (id=201): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x80, 0x80, 0x1, 0xffff8000, {{0x6, 0x4, 0x0, 0x22, 0x18, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0xc}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x80d}], 0x1) 4m40.200526558s ago: executing program 1 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) 4m38.82390039s ago: executing program 0 (id=206): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) close(0x3) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x8, 0x2, 0x0, 0x0, 0x0) 4m37.70614075s ago: executing program 0 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x118, 0x137db) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000000)={0x2}) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000200)={0x3f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xdc) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$igmp(0x2, 0x3, 0x2) 4m22.441132659s ago: executing program 33 (id=202): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) 4m22.19383176s ago: executing program 34 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x118, 0x137db) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000000)={0x2}) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000200)={0x3f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xdc) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$igmp(0x2, 0x3, 0x2) 50.690143973s ago: executing program 5 (id=509): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44", 0xe}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 48.360720165s ago: executing program 5 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 47.803787693s ago: executing program 5 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000020000009, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/ptype\x00') read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$FE_READ_STATUS(r2, 0x80046f45, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r3, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 46.032236761s ago: executing program 5 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfde0, &(0x7f0000000640)=ANY=[], 0x0) 45.66621111s ago: executing program 5 (id=519): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x0, 0x73, 0x0, 0x5, 0x0, "5ee691000200000017e0054200", 0x1000, 0x4}) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xa, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) rmdir(&(0x7f0000000080)='./file2\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x30, 0x40000, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 45.226261691s ago: executing program 4 (id=520): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0483, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}}, 0xc000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r4, 0xffffffffffffffff, 0x2c, 0x0, @void}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 40.459488822s ago: executing program 5 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x400, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet(0x2, 0x3, 0x8d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 40.382500576s ago: executing program 4 (id=534): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 39.868686205s ago: executing program 4 (id=536): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r2, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 39.459734491s ago: executing program 4 (id=537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44844}, 0x8c1) 38.693906113s ago: executing program 4 (id=539): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 37.61385047s ago: executing program 4 (id=540): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000090000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01020000000000000000a770b7c60100fffe0900010073797a30000000000900030073797a30000000002c000000060a010400000000000000000100000008000b4000000008040004800900010073797a3000000000140000001100010000000000000000000000000a8cd6f616297a1409306e0587dacd852577096133333d0a621c34d10610f9e1239285f7b4cd8835a7870c9fb5ac0482e73b6208d7e49b908dc56bb9a4618129f90fb1fc16ef2f5f959570b6df334641925c364e4b73fce85551c57303f6f2c7a87b5225c4ed8b639a50cc7bc83ffe4c44a203c3c1e5e709c8d31dc59b1a3bd02e31afb6319b5f333e74fc827d6df2933867479835f14a13e0a0be87a442"], 0xa0}, 0x1, 0x0, 0x0, 0x40070}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 25.050552281s ago: executing program 35 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x400, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$inet(0x2, 0x3, 0x8d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20.465017021s ago: executing program 36 (id=540): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000090000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01020000000000000000a770b7c60100fffe0900010073797a30000000000900030073797a30000000002c000000060a010400000000000000000100000008000b4000000008040004800900010073797a3000000000140000001100010000000000000000000000000a8cd6f616297a1409306e0587dacd852577096133333d0a621c34d10610f9e1239285f7b4cd8835a7870c9fb5ac0482e73b6208d7e49b908dc56bb9a4618129f90fb1fc16ef2f5f959570b6df334641925c364e4b73fce85551c57303f6f2c7a87b5225c4ed8b639a50cc7bc83ffe4c44a203c3c1e5e709c8d31dc59b1a3bd02e31afb6319b5f333e74fc827d6df2933867479835f14a13e0a0be87a442"], 0xa0}, 0x1, 0x0, 0x0, 0x40070}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.980846038s ago: executing program 3 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 10.675862719s ago: executing program 3 (id=566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44844}, 0x8c1) 9.730281983s ago: executing program 3 (id=567): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="11000000140025000307f4f9002304000a", 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="15a31ae9b77a306d5d3418def83421daef8bc61f50c603b6e2072bf9aa93746fe11ce6cc33ca4fe0f3cbfd228dd5a2951f1218dacfd2cc0e36966c9fde554cdc4ca8602ee26302ae43760573b94c", @ANYRESDEC=0x0, @ANYBLOB="2489f2ff4c07e09fa28aaf455d08a155c648b11556baff00fadda8159f18b6e4e7a72114573fc922b29302bbb534ce2e14f88c00fbf1c8d7068da0bbaa4d2073fcedfab24736f8aa1b52caa9dc7e8fc210c8c61aef60dc0b6c9bde9285aab16d91f8e551fe8636dcfa2dfdeb1a19c297dc1c9e4f1a2ba4c0607082da9e4dda7c6e70034c12891fe5163a6b9cfa6f62f012b28115f42049ddbd38b7597b28f3", @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c}, 0x48040) 6.084138396s ago: executing program 3 (id=569): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x331002, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x91) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) recvmsg(r3, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x57, 0x0}, 0x0, 0x120, 0x1}) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 2.28764734s ago: executing program 7 (id=571): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) 2.212253001s ago: executing program 7 (id=572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfde0, &(0x7f0000000640)=ANY=[], 0x0) 2.14594701s ago: executing program 3 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0) sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.509356624s ago: executing program 7 (id=574): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44844}, 0x8c1) 1.356517216s ago: executing program 3 (id=575): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x2c9, 0x0, 0xfffffffd}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc0205647, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000356ffc)=0xffffff3d, 0x4) 250.372468ms ago: executing program 7 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) 159.806023ms ago: executing program 7 (id=577): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 7 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 97.226500][ T941] cfg80211: failed to load regulatory.db [ 99.646601][ T5778] cgroup: Unknown subsys name 'net' [ 99.898374][ T5778] cgroup: Unknown subsys name 'cpuset' [ 99.952047][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.018638][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.670622][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.702265][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.723842][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.729756][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.751487][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.755566][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.756943][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.758048][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.759222][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.760521][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.770186][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.796515][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.803831][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.807364][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.818476][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.826586][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.831898][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.833229][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.835272][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.839323][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.841109][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.843359][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.845037][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.847813][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.866269][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.018156][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 106.125642][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 106.185538][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 106.202041][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 106.230791][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 106.502653][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.504609][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.505081][ T5793] bridge_slave_0: entered allmulticast mode [ 106.507967][ T5793] bridge_slave_0: entered promiscuous mode [ 106.578501][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.578677][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.578856][ T5793] bridge_slave_1: entered allmulticast mode [ 106.580703][ T5793] bridge_slave_1: entered promiscuous mode [ 106.688526][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.688687][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.688886][ T5795] bridge_slave_0: entered allmulticast mode [ 106.694522][ T5795] bridge_slave_0: entered promiscuous mode [ 106.781697][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.781873][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.782063][ T5795] bridge_slave_1: entered allmulticast mode [ 106.784259][ T5795] bridge_slave_1: entered promiscuous mode [ 106.787509][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.787641][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.787976][ T5791] bridge_slave_0: entered allmulticast mode [ 106.790244][ T5791] bridge_slave_0: entered promiscuous mode [ 106.853933][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.854047][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.854227][ T5792] bridge_slave_0: entered allmulticast mode [ 106.856544][ T5792] bridge_slave_0: entered promiscuous mode [ 106.880070][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.880786][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.881117][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.885528][ T5794] bridge_slave_0: entered allmulticast mode [ 106.898888][ T5794] bridge_slave_0: entered promiscuous mode [ 106.904398][ T60] Bluetooth: hci2: command tx timeout [ 106.964974][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.965123][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.965298][ T5791] bridge_slave_1: entered allmulticast mode [ 106.967181][ T5791] bridge_slave_1: entered promiscuous mode [ 106.969003][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.969120][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.969556][ T5792] bridge_slave_1: entered allmulticast mode [ 106.978319][ T5792] bridge_slave_1: entered promiscuous mode [ 106.981347][ T60] Bluetooth: hci1: command tx timeout [ 106.981397][ T5802] Bluetooth: hci3: command tx timeout [ 106.996106][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.061439][ T60] Bluetooth: hci4: command tx timeout [ 107.061638][ T5802] Bluetooth: hci0: command tx timeout [ 107.084567][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.084711][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.084943][ T5794] bridge_slave_1: entered allmulticast mode [ 107.088039][ T5794] bridge_slave_1: entered promiscuous mode [ 107.219310][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.296576][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.305692][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.328126][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.336722][ T5793] team0: Port device team_slave_0 added [ 107.354288][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.389815][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.405106][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.407223][ T5793] team0: Port device team_slave_1 added [ 107.410516][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.515790][ T5795] team0: Port device team_slave_0 added [ 107.585735][ T5795] team0: Port device team_slave_1 added [ 107.588122][ T5791] team0: Port device team_slave_0 added [ 107.590567][ T5792] team0: Port device team_slave_0 added [ 107.609033][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.609048][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.609068][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.622573][ T5794] team0: Port device team_slave_0 added [ 107.671659][ T5791] team0: Port device team_slave_1 added [ 107.673984][ T5792] team0: Port device team_slave_1 added [ 107.676316][ T5794] team0: Port device team_slave_1 added [ 107.677220][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.677233][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.677253][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.805429][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.805444][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.805464][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.894959][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.894977][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.894997][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.896123][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.896135][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.896155][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.897795][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.897812][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.897840][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.899520][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.899536][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.899564][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.969627][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.969703][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.969795][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.977857][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.977910][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.977985][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.050292][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.050346][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.050442][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.626563][ T5793] hsr_slave_0: entered promiscuous mode [ 108.627914][ T5793] hsr_slave_1: entered promiscuous mode [ 108.726493][ T5795] hsr_slave_0: entered promiscuous mode [ 108.727649][ T5795] hsr_slave_1: entered promiscuous mode [ 108.728553][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 108.728644][ T5795] Cannot create hsr debugfs directory [ 108.820106][ T5791] hsr_slave_0: entered promiscuous mode [ 108.821170][ T5791] hsr_slave_1: entered promiscuous mode [ 108.825862][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 108.825951][ T5791] Cannot create hsr debugfs directory [ 108.847944][ T5792] hsr_slave_0: entered promiscuous mode [ 108.849009][ T5792] hsr_slave_1: entered promiscuous mode [ 108.849694][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 108.849717][ T5792] Cannot create hsr debugfs directory [ 108.891861][ T5794] hsr_slave_0: entered promiscuous mode [ 108.892958][ T5794] hsr_slave_1: entered promiscuous mode [ 108.893652][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 108.893766][ T5794] Cannot create hsr debugfs directory [ 108.983315][ T5802] Bluetooth: hci2: command tx timeout [ 109.062031][ T5802] Bluetooth: hci1: command tx timeout [ 109.062048][ T60] Bluetooth: hci3: command tx timeout [ 109.141668][ T60] Bluetooth: hci4: command tx timeout [ 109.141704][ T60] Bluetooth: hci0: command tx timeout [ 109.967410][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.014774][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.062509][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.114947][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.234954][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.280210][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.326626][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.375453][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.534919][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.580520][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.619894][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.666371][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.810049][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.850114][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.881178][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.930682][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.062533][ T5802] Bluetooth: hci2: command tx timeout [ 111.116947][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.142026][ T5802] Bluetooth: hci3: command tx timeout [ 111.142066][ T5802] Bluetooth: hci1: command tx timeout [ 111.155454][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.176970][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.219545][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.231497][ T60] Bluetooth: hci0: command tx timeout [ 111.231535][ T60] Bluetooth: hci4: command tx timeout [ 111.275289][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.394598][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.428323][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.455724][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.456647][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.510680][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.510774][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.586667][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.625366][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.648096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.648265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.698571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.698771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.766520][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.802395][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.822800][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.824156][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.875172][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.875291][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.968594][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.035657][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.035818][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.093879][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.113154][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.113370][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.249418][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.313737][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.313846][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.387652][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.387793][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.509450][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.652757][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.847480][ T5793] veth0_vlan: entered promiscuous mode [ 112.916716][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.962612][ T5793] veth1_vlan: entered promiscuous mode [ 113.003499][ T5795] veth0_vlan: entered promiscuous mode [ 113.075151][ T5795] veth1_vlan: entered promiscuous mode [ 113.142422][ T5802] Bluetooth: hci2: command tx timeout [ 113.224255][ T5802] Bluetooth: hci1: command tx timeout [ 113.224294][ T5802] Bluetooth: hci3: command tx timeout [ 113.254907][ T5793] veth0_macvtap: entered promiscuous mode [ 113.290780][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.302682][ T60] Bluetooth: hci4: command tx timeout [ 113.302721][ T60] Bluetooth: hci0: command tx timeout [ 113.309020][ T5793] veth1_macvtap: entered promiscuous mode [ 113.378740][ T5795] veth0_macvtap: entered promiscuous mode [ 113.441616][ T5795] veth1_macvtap: entered promiscuous mode [ 113.468568][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.513555][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.534042][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.578608][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.579070][ T1414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.610429][ T1414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.629927][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.650816][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.664778][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.767406][ T5792] veth0_vlan: entered promiscuous mode [ 113.768530][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.774460][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.803543][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.853073][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.988109][ T5792] veth1_vlan: entered promiscuous mode [ 114.117185][ T5791] veth0_vlan: entered promiscuous mode [ 114.203700][ T5794] veth0_vlan: entered promiscuous mode [ 114.220437][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.220467][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.267216][ T5791] veth1_vlan: entered promiscuous mode [ 114.338336][ T5794] veth1_vlan: entered promiscuous mode [ 114.357508][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.357530][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.449606][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.449628][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.470362][ T5792] veth0_macvtap: entered promiscuous mode [ 114.536666][ T5792] veth1_macvtap: entered promiscuous mode [ 114.564382][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.564405][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.634476][ T5791] veth0_macvtap: entered promiscuous mode [ 114.665147][ T5794] veth0_macvtap: entered promiscuous mode [ 114.667563][ T5791] veth1_macvtap: entered promiscuous mode [ 114.676634][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.706011][ T5794] veth1_macvtap: entered promiscuous mode [ 114.734199][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.792270][ T1414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.794410][ T1414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.801087][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.829803][ T1414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.863916][ T1414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.884390][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.932635][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.995648][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.025056][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.050769][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.114471][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.130557][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.250687][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.271818][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.280617][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.350181][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.542637][ T5913] nbd0: detected capacity change from 0 to 63 [ 115.560453][ T5914] block nbd0: NBD_DISCONNECT [ 115.585267][ T5914] block nbd0: Disconnected due to user request. [ 115.614602][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.614628][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.618309][ T5914] block nbd0: shutting down sockets [ 115.662934][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.663085][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.663291][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.663320][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.663404][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.663523][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.663607][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.663635][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.705325][ T5801] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.705425][ T5801] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.705757][ T5801] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.705826][ T5801] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.705973][ T5801] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.706053][ T5801] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.706201][ T5801] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.706265][ T5801] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.706401][ T5801] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.706466][ T5801] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.706598][ T5801] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.706664][ T5801] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.709729][ T5801] ldm_validate_partition_table(): Disk read failed. [ 115.783866][ T5801] Dev nbd0: unable to read RDB block 0 [ 115.784967][ T5801] nbd0: unable to read partition table [ 115.971706][ T5801] ldm_validate_partition_table(): Disk read failed. [ 115.972332][ T5801] Dev nbd0: unable to read RDB block 0 [ 115.996611][ T5801] nbd0: unable to read partition table [ 116.229277][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.229301][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.493972][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.493996][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.608949][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.979189][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.979215][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.339608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.372162][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.372184][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.611315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.651281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.751281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.821280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.125154][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.125178][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.557532][ T5882] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.651545][ T5882] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.137071][ T5946] fido_id[5946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.386900][ T5954] Illegal XDP return value 32768 on prog (id 3) dev syz_tun, expect packet loss! [ 122.432533][ T5949] nbd1: detected capacity change from 0 to 63 [ 122.433067][ T5951] block nbd1: NBD_DISCONNECT [ 122.433206][ T5951] block nbd1: Disconnected due to user request. [ 122.433224][ T5951] block nbd1: shutting down sockets [ 122.693674][ T5956] loop5: detected capacity change from 0 to 7 [ 122.820124][ T5956] Dev loop5: unable to read RDB block 7 [ 122.820164][ T5956] loop5: AHDI p1 [ 122.820204][ T5956] loop5: partition table partially beyond EOD, truncated [ 123.721946][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 123.840147][ T5974] dummy0: entered promiscuous mode [ 123.840469][ T5974] macvtap1: entered promiscuous mode [ 123.840749][ T5974] macvtap1: entered allmulticast mode [ 123.840766][ T5974] dummy0: entered allmulticast mode [ 123.922608][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 124.378151][ T5981] input: syz1 as /devices/virtual/input/input5 [ 124.633673][ T5985] 9pnet_virtio: no channels available for device syz [ 125.299094][ T5994] nbd1: detected capacity change from 0 to 63 [ 125.364576][ T5996] block nbd1: NBD_DISCONNECT [ 125.385223][ T5996] block nbd1: Disconnected due to user request. [ 125.385768][ T5996] block nbd1: shutting down sockets [ 125.431793][ T5810] blk_print_req_error: 138 callbacks suppressed [ 125.431817][ T5810] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.431847][ T5810] buffer_io_error: 138 callbacks suppressed [ 125.431859][ T5810] Buffer I/O error on dev nbd1, logical block 0, async page read [ 125.537804][ T6001] loop5: detected capacity change from 0 to 7 [ 125.565554][ T32] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 125.565592][ T32] Buffer I/O error on dev nbd1, logical block 1, async page read [ 125.565630][ T32] Buffer I/O error on dev nbd1, logical block 2, async page read [ 125.565648][ T32] Buffer I/O error on dev nbd1, logical block 3, async page read [ 125.569046][ T5810] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569083][ T5810] Buffer I/O error on dev nbd1, logical block 0, async page read [ 125.569145][ T5810] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569176][ T5810] Buffer I/O error on dev nbd1, logical block 1, async page read [ 125.569215][ T5810] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569232][ T5810] Buffer I/O error on dev nbd1, logical block 2, async page read [ 125.569275][ T5810] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569292][ T5810] Buffer I/O error on dev nbd1, logical block 3, async page read [ 125.569337][ T5810] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569354][ T5810] Buffer I/O error on dev nbd1, logical block 0, async page read [ 125.569389][ T5810] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569406][ T5810] Buffer I/O error on dev nbd1, logical block 1, async page read [ 125.569475][ T5810] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.569546][ T5810] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.570245][ T5810] ldm_validate_partition_table(): Disk read failed. [ 125.570775][ T5810] Dev nbd1: unable to read RDB block 0 [ 125.614845][ T5810] nbd1: unable to read partition table [ 125.857565][ T5810] ldm_validate_partition_table(): Disk read failed. [ 125.858258][ T5810] Dev nbd1: unable to read RDB block 0 [ 125.859110][ T5810] nbd1: unable to read partition table [ 125.951834][ T5801] Dev loop5: unable to read RDB block 7 [ 125.951866][ T5801] loop5: AHDI p1 [ 125.951901][ T5801] loop5: partition table partially beyond EOD, truncated [ 126.007420][ T6001] Dev loop5: unable to read RDB block 7 [ 126.007457][ T6001] loop5: AHDI p1 [ 126.007617][ T6001] loop5: partition table partially beyond EOD, truncated [ 126.171292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.331045][ T5979] binder: 5976:5979 ioctl 0 200000000040 returned -22 [ 129.239013][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 129.321370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.372908][ T6016] gretap0: entered promiscuous mode [ 129.373302][ T6016] macvtap1: entered promiscuous mode [ 129.373500][ T6016] macvtap1: entered allmulticast mode [ 129.373514][ T6016] gretap0: entered allmulticast mode [ 129.901338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.901647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.945935][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.383950][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 130.819182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.866870][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.645175][ T6058] Zero length message leads to an empty skb [ 134.654014][ T6062] team0 (unregistering): Port device team_slave_0 removed [ 134.863230][ T6062] team0 (unregistering): Port device team_slave_1 removed [ 136.011509][ T6073] could not allocate digest TFM handle sha256-neon [ 138.216412][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.216537][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.413479][ T6112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.66'. [ 138.676879][ T6115] netlink: 72 bytes leftover after parsing attributes in process `syz.4.66'. [ 138.870809][ T6121] netlink: 56 bytes leftover after parsing attributes in process `syz.3.72'. [ 139.060450][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 143.264802][ T6145] loop5: detected capacity change from 0 to 7 [ 143.287740][ T6145] Dev loop5: unable to read RDB block 7 [ 143.287766][ T6145] loop5: AHDI p1 [ 143.287789][ T6145] loop5: partition table partially beyond EOD, truncated [ 143.325738][ T5774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.564497][ T5774] usb 2-1: Using ep0 maxpacket: 8 [ 143.656574][ T5774] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.656601][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 143.656621][ T5774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 143.708432][ T5774] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 143.708467][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.708497][ T5774] usb 2-1: Product: syz [ 143.708512][ T5774] usb 2-1: Manufacturer: syz [ 143.708527][ T5774] usb 2-1: SerialNumber: syz [ 143.844026][ T5774] usb 2-1: config 0 descriptor?? [ 144.121432][ T5774] rc_core: IR keymap rc-streamzap not found [ 144.121455][ T5774] Registered IR keymap rc-empty [ 144.184801][ T5774] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 144.244773][ T5774] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 144.586173][ T5774] usb 2-1: USB disconnect, device number 2 [ 145.200192][ T6159] ªªªªªª: renamed from lo (while UP) [ 146.932623][ T6172] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 147.959640][ T6193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.95'. [ 147.959667][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 147.959685][ T6193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.95'. [ 147.959726][ T6193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.95'. [ 148.151154][ T6195] binder: 6194:6195 ioctl c0306201 0 returned -14 [ 150.062456][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 150.453601][ T37] audit: type=1800 audit(1770744487.678:2): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.96" name="bus" dev="overlay" ino=123 res=0 errno=0 [ 150.553171][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 150.625851][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 150.641436][ T37] audit: type=1804 audit(1770744487.848:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.96" name="/newroot/19/bus/file0" dev="overlay" ino=124 res=1 errno=0 [ 150.833015][ T37] audit: type=1804 audit(1770744488.038:4): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.96" name="/newroot/19/bus/file0" dev="overlay" ino=124 res=1 errno=0 [ 150.838855][ T6207] evm: overlay not supported [ 152.094957][ T6217] binder: 6206:6217 ioctl 0 200000000040 returned -22 [ 153.041887][ T6230] binder: 6227:6230 ioctl c0306201 0 returned -14 [ 153.163419][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.109'. [ 153.163437][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 153.163450][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.109'. [ 153.163492][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.109'. [ 155.294043][ T6246] netlink: 2 bytes leftover after parsing attributes in process `syz.1.111'. [ 155.342587][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.526867][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 155.530040][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.530065][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 155.530085][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 155.560684][ T5873] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 155.560780][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.560835][ T5873] usb 4-1: Product: syz [ 155.560880][ T5873] usb 4-1: Manufacturer: syz [ 155.560915][ T5873] usb 4-1: SerialNumber: syz [ 156.087510][ T5873] usb 4-1: config 0 descriptor?? [ 156.391308][ T5873] rc_core: IR keymap rc-streamzap not found [ 156.391329][ T5873] Registered IR keymap rc-empty [ 156.396576][ T5873] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 156.558805][ T5873] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 157.047761][ T5873] usb 4-1: USB disconnect, device number 2 [ 157.714679][ T6269] ªªªªªª: renamed from lo (while UP) [ 161.141510][ T5802] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 161.244804][ T6239] block nbd1: shutting down sockets [ 161.421441][ T6299] binder: BINDER_SET_CONTEXT_MGR already set [ 161.421458][ T6299] binder: 6298:6299 ioctl 4018620d 200000004a80 returned -16 [ 161.743281][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.128'. [ 162.293798][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 165.526030][ T6322] vivid-000: kernel_thread() failed [ 165.609293][ T6322] vivid-000: kernel_thread() failed [ 168.268230][ T5802] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 170.285169][ T6350] vivid-002: kernel_thread() failed [ 170.337764][ T6350] vivid-002: kernel_thread() failed [ 170.976629][ T6362] random: crng reseeded on system resumption [ 175.582786][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.598540][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.600882][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.661910][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.694956][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.821539][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 179.551321][ T60] Bluetooth: hci5: command tx timeout [ 181.621507][ T60] Bluetooth: hci5: command tx timeout [ 182.026928][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 182.629539][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 183.677664][ T6418] vivid-008: kernel_thread() failed [ 183.760192][ T6418] vivid-008: kernel_thread() failed [ 183.767114][ T60] Bluetooth: hci5: command tx timeout [ 185.782685][ T60] Bluetooth: hci5: command tx timeout [ 185.896946][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.898083][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.898357][ T6387] bridge_slave_0: entered allmulticast mode [ 185.932161][ T6387] bridge_slave_0: entered promiscuous mode [ 185.939494][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.939745][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.940009][ T6387] bridge_slave_1: entered allmulticast mode [ 185.979526][ T6387] bridge_slave_1: entered promiscuous mode [ 186.050677][ T6387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.067579][ T6387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.167286][ T6387] team0: Port device team_slave_0 added [ 186.171017][ T6387] team0: Port device team_slave_1 added [ 186.697796][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.697815][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.697850][ T6387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.774917][ T6387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.774937][ T6387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.774966][ T6387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.406056][ T6387] hsr_slave_0: entered promiscuous mode [ 187.437749][ T6387] hsr_slave_1: entered promiscuous mode [ 187.490492][ T6387] debugfs: 'hsr0' already exists in 'hsr' [ 187.490525][ T6387] Cannot create hsr debugfs directory [ 187.535397][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.176'. [ 187.535421][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.176'. [ 187.535438][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.176'. [ 187.535474][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.176'. [ 188.891949][ T6467] netlink: 2 bytes leftover after parsing attributes in process `syz.3.178'. [ 188.991652][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 193.293092][ T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.695108][ T6494] tipc: Started in network mode [ 193.695132][ T6494] tipc: Node identity fffffffa, cluster identity 4711 [ 193.695147][ T6494] tipc: Node number set to 4294967290 [ 194.432107][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 194.432126][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.189'. [ 194.432139][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 194.432186][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 194.580645][ T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.837387][ T6509] syz.4.190 uses obsolete (PF_INET,SOCK_PACKET) [ 195.215326][ T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.311482][ T6513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 195.311513][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 195.313729][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 195.346871][ T6513] process 'syz.1.188' launched '/dev/fd/9' with NULL argv: empty string added [ 195.714393][ T6514] vhci_hcd: connection closed [ 195.727355][ T6012] vhci_hcd vhci_hcd.1: stop threads [ 195.733838][ T6012] vhci_hcd vhci_hcd.1: release socket [ 195.762274][ T6012] vhci_hcd vhci_hcd.1: disconnect device [ 196.465827][ T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.852631][ T6387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.918989][ T6387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.029637][ T6387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.135422][ T6387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.551333][ T5774] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 197.702149][ T5774] usb 5-1: Using ep0 maxpacket: 8 [ 197.704818][ T5774] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.704852][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 197.704879][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 197.707485][ T5774] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 197.707513][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.707610][ T5774] usb 5-1: Product: syz [ 197.707621][ T5774] usb 5-1: Manufacturer: syz [ 197.707631][ T5774] usb 5-1: SerialNumber: syz [ 197.835101][ T5774] usb 5-1: config 0 descriptor?? [ 198.031434][ T5774] rc_core: IR keymap rc-streamzap not found [ 198.031513][ T5774] Registered IR keymap rc-empty [ 198.097817][ T5774] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 198.153355][ T5774] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 198.292039][ T71] bridge_slave_1: left allmulticast mode [ 198.296660][ T71] bridge_slave_1: left promiscuous mode [ 198.331965][ T5774] usb 5-1: USB disconnect, device number 2 [ 198.334363][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.843059][ T71] bridge_slave_0: left allmulticast mode [ 198.843093][ T71] bridge_slave_0: left promiscuous mode [ 198.843652][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.851809][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 199.631076][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.631979][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.379159][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.200'. [ 201.379179][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 201.379216][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.200'. [ 201.379384][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.200'. [ 203.521299][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.544310][ T71] gretap0 (unregistering): left allmulticast mode [ 203.671260][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 203.695523][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.695544][ T10] usb 5-1: config 1 has no interface number 1 [ 203.708084][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.708108][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 203.708137][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.775290][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.775323][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.775344][ T10] usb 5-1: Product: syz [ 203.775358][ T10] usb 5-1: Manufacturer: syz [ 203.775373][ T10] usb 5-1: SerialNumber: syz [ 212.832932][ T10] usb 5-1: failed to enable PITCH for EP 0x82 [ 212.835567][ T10] usb 5-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 219.062617][ T10] usb 5-1: USB disconnect, device number 3 [ 219.996569][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.022844][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.027196][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.052643][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.063928][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.184048][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.222963][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.242323][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.289153][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.293949][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.435187][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.572543][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.623561][ T71] bond0 (unregistering): Released all slaves [ 220.895226][ T6575] veth0: entered promiscuous mode [ 221.945200][ T6575] veth0: left promiscuous mode [ 222.185645][ T5802] Bluetooth: hci2: command tx timeout [ 222.518689][ T5802] Bluetooth: hci6: command tx timeout [ 223.579076][ T6658] capability: warning: `syz.3.221' uses deprecated v2 capabilities in a way that may be insecure [ 223.807349][ T6661] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 223.807373][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.222'. [ 223.922164][ T6664] overlayfs: missing 'lowerdir' [ 224.269737][ T5802] Bluetooth: hci2: command tx timeout [ 224.583061][ T5802] Bluetooth: hci6: command tx timeout [ 226.341545][ T5802] Bluetooth: hci2: command tx timeout [ 226.467877][ T6685] netlink: 'syz.3.231': attribute type 3 has an invalid length. [ 226.467894][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 226.663456][ T5802] Bluetooth: hci6: command tx timeout [ 226.801692][ T71] hsr_slave_0: left promiscuous mode [ 226.931640][ T71] hsr_slave_1: left promiscuous mode [ 226.937724][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.940166][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.983968][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.984000][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.311388][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 227.312109][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 227.379808][ T71] veth1_macvtap: left promiscuous mode [ 227.389454][ T71] veth0_macvtap: left promiscuous mode [ 227.389765][ T71] veth1_vlan: left promiscuous mode [ 227.465087][ T71] veth0_vlan: left promiscuous mode [ 228.436074][ T5804] Bluetooth: hci2: command tx timeout [ 228.741504][ T5804] Bluetooth: hci6: command tx timeout [ 231.422301][ T71] team0 (unregistering): Port device team_slave_1 removed [ 231.683128][ T71] team0 (unregistering): Port device team_slave_0 removed [ 232.280944][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.306492][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.308786][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.309988][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.310815][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.441292][ T5804] Bluetooth: hci1: command tx timeout [ 235.944082][ T6738] netlink: 'syz.4.245': attribute type 3 has an invalid length. [ 235.944106][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 236.501598][ T5804] Bluetooth: hci1: command tx timeout [ 237.772067][ T6744] mkiss: ax0: crc mode is auto. [ 238.256207][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 238.269592][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 238.572841][ T6764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 238.572863][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.581512][ T5804] Bluetooth: hci1: command tx timeout [ 238.617956][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 238.629324][ T6765] vhci_hcd: connection closed [ 238.650831][ T1461] vhci_hcd vhci_hcd.3: stop threads [ 238.650866][ T1461] vhci_hcd vhci_hcd.3: release socket [ 238.650895][ T1461] vhci_hcd vhci_hcd.3: disconnect device [ 238.878878][ T6772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 238.878915][ T6772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.880123][ T6772] vhci_hcd vhci_hcd.0: Device attached [ 239.157749][ T5873] usb 42-1: SetAddress Request (2) to port 0 [ 239.157842][ T5873] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 239.216808][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.216903][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.217052][ T6637] bridge_slave_0: entered allmulticast mode [ 239.219235][ T6637] bridge_slave_0: entered promiscuous mode [ 240.669821][ T5804] Bluetooth: hci1: command tx timeout [ 240.789639][ T5804] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 240.803691][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.803803][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.803995][ T6637] bridge_slave_1: entered allmulticast mode [ 240.806317][ T6637] bridge_slave_1: entered promiscuous mode [ 240.807600][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.807735][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.807930][ T6635] bridge_slave_0: entered allmulticast mode [ 240.811068][ T6635] bridge_slave_0: entered promiscuous mode [ 241.169130][ T6774] vhci_hcd: connection reset by peer [ 241.190128][ T6015] vhci_hcd vhci_hcd.4: stop threads [ 241.190158][ T6015] vhci_hcd vhci_hcd.4: release socket [ 241.190243][ T6015] vhci_hcd vhci_hcd.4: disconnect device [ 241.378382][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.378527][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.379075][ T6635] bridge_slave_1: entered allmulticast mode [ 241.418443][ T6635] bridge_slave_1: entered promiscuous mode [ 241.460606][ T6793] netlink: 'syz.4.253': attribute type 3 has an invalid length. [ 241.460630][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 244.273998][ T5873] usb 42-1: device descriptor read/8, error -110 [ 244.886022][ T5873] usb usb42-port1: attempt power cycle [ 245.148196][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.279917][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.299446][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.363802][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.568265][ T5873] usb usb42-port1: unable to enumerate USB device [ 245.750972][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.256'. [ 245.823615][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 246.135139][ T6637] team0: Port device team_slave_0 added [ 246.862929][ T6637] team0: Port device team_slave_1 added [ 246.867339][ T6635] team0: Port device team_slave_0 added [ 246.928988][ T5804] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 247.028755][ T6635] team0: Port device team_slave_1 added [ 250.941768][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.941787][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.941816][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.104516][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.104693][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.104761][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.342396][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.342415][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.342445][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.422657][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.422735][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.422810][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.486927][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.487091][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.487301][ T6704] bridge_slave_0: entered allmulticast mode [ 251.490822][ T6704] bridge_slave_0: entered promiscuous mode [ 251.580831][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.580966][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.598231][ T6704] bridge_slave_1: entered allmulticast mode [ 251.613186][ T6704] bridge_slave_1: entered promiscuous mode [ 251.955018][ T6848] netlink: 'syz.3.263': attribute type 3 has an invalid length. [ 251.955043][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 252.126728][ T6637] hsr_slave_0: entered promiscuous mode [ 252.141950][ T6637] hsr_slave_1: entered promiscuous mode [ 252.168787][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.479792][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.568626][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 252.705301][ T5804] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 252.785388][ T6635] hsr_slave_0: entered promiscuous mode [ 252.787309][ T6635] hsr_slave_1: entered promiscuous mode [ 252.829931][ T6635] debugfs: 'hsr0' already exists in 'hsr' [ 252.829956][ T6635] Cannot create hsr debugfs directory [ 253.066813][ T6704] team0: Port device team_slave_0 added [ 253.185112][ T6704] team0: Port device team_slave_1 added [ 253.662647][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.662667][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.662696][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.765705][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.765724][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.765753][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.336324][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.015565][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.200219][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.354658][ T6881] netlink: 'syz.3.272': attribute type 3 has an invalid length. [ 256.354681][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 256.357062][ T6704] hsr_slave_0: entered promiscuous mode [ 256.358948][ T6704] hsr_slave_1: entered promiscuous mode [ 256.360382][ T6704] debugfs: 'hsr0' already exists in 'hsr' [ 256.360415][ T6704] Cannot create hsr debugfs directory [ 256.588124][ T5804] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 256.686705][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.564731][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'. [ 258.117017][ T6637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.254094][ T6637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.452696][ T6637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.681380][ T6637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.430034][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.745941][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.789936][ T5804] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 260.849058][ T6635] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.866722][ T6935] netlink: 'syz.3.281': attribute type 3 has an invalid length. [ 260.866746][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 260.933318][ T6635] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.080214][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.080291][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.166893][ T6635] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.624191][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.651466][ T6635] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.705931][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.676701][ T5804] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 267.909131][ T71] bridge_slave_1: left allmulticast mode [ 267.909164][ T71] bridge_slave_1: left promiscuous mode [ 267.910111][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.006024][ T71] bridge_slave_0: left allmulticast mode [ 268.006095][ T71] bridge_slave_0: left promiscuous mode [ 268.011418][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.400148][ T71] bridge_slave_1: left allmulticast mode [ 268.400181][ T71] bridge_slave_1: left promiscuous mode [ 268.414895][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.506694][ T71] bridge_slave_0: left allmulticast mode [ 268.506728][ T71] bridge_slave_0: left promiscuous mode [ 268.507333][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.587806][ T71] bridge_slave_1: left allmulticast mode [ 268.587876][ T71] bridge_slave_1: left promiscuous mode [ 268.588658][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.675521][ T71] bridge_slave_0: left allmulticast mode [ 268.675561][ T71] bridge_slave_0: left promiscuous mode [ 268.676516][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.933254][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.022405][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.085775][ T71] bond0 (unregistering): Released all slaves [ 275.311989][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.372148][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.397409][ T71] bond0 (unregistering): Released all slaves [ 276.552247][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.593687][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.615446][ T71] bond0 (unregistering): Released all slaves [ 276.861038][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 277.110002][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.180690][ T6704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.316360][ T6704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.442261][ T6704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.629951][ T71] tipc: Left network mode [ 277.652005][ T6704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.744833][ T7005] binder: 7003:7005 ioctl 0 200000000040 returned -22 [ 278.490991][ T7015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 278.527258][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.549278][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.155958][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.156120][ T6617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.313777][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.313998][ T6617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.883275][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.887600][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.889728][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.935963][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.939155][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.966487][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.979110][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.002696][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.024334][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.080698][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.882202][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 282.465231][ T7055] binder: 7049:7055 ioctl 0 200000000040 returned -22 [ 283.120194][ T7061] loop5: detected capacity change from 0 to 7 [ 283.144266][ T60] Bluetooth: hci5: command tx timeout [ 283.165068][ T7061] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 283.165116][ T7061] loop5: partition table partially beyond EOD, truncated [ 283.165407][ T7061] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 283.223474][ T60] Bluetooth: hci3: command tx timeout [ 283.308604][ T7037] udevd[7037]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 283.756193][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 284.261317][ T71] hsr_slave_0: left promiscuous mode [ 284.391581][ T71] hsr_slave_1: left promiscuous mode [ 284.392860][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.432904][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.652130][ T71] hsr_slave_0: left promiscuous mode [ 284.691263][ T71] hsr_slave_1: left promiscuous mode [ 284.692495][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.692523][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.726873][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.726904][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.912958][ T71] hsr_slave_0: left promiscuous mode [ 284.952441][ T71] hsr_slave_1: left promiscuous mode [ 284.953342][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.953364][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.012283][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.012315][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.168851][ T71] dummy0: left allmulticast mode [ 285.169270][ T71] veth1_macvtap: left promiscuous mode [ 285.169348][ T71] veth0_macvtap: left promiscuous mode [ 285.169572][ T71] veth1_vlan: left promiscuous mode [ 285.169688][ T71] veth0_vlan: left promiscuous mode [ 285.221318][ T60] Bluetooth: hci5: command tx timeout [ 285.301357][ T60] Bluetooth: hci3: command tx timeout [ 285.323001][ T71] veth1_macvtap: left promiscuous mode [ 285.325606][ T71] veth0_macvtap: left promiscuous mode [ 285.325949][ T71] veth1_vlan: left promiscuous mode [ 285.326066][ T71] veth0_vlan: left promiscuous mode [ 286.442281][ T71] team0 (unregistering): Port device team_slave_1 removed [ 286.592228][ T71] team0 (unregistering): Port device team_slave_0 removed [ 287.306801][ T60] Bluetooth: hci5: command tx timeout [ 287.398836][ T60] Bluetooth: hci3: command tx timeout [ 289.384585][ T60] Bluetooth: hci5: command tx timeout [ 289.471557][ T60] Bluetooth: hci3: command tx timeout [ 289.982946][ T71] team0 (unregistering): Port device team_slave_1 removed [ 290.235110][ T71] team0 (unregistering): Port device team_slave_0 removed [ 292.382695][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.385765][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.418625][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.463316][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.465428][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.502014][ T60] Bluetooth: hci2: command tx timeout [ 295.335856][ T71] team0 (unregistering): Port device team_slave_1 removed [ 295.639456][ T71] team0 (unregistering): Port device team_slave_0 removed [ 296.581443][ T60] Bluetooth: hci2: command tx timeout [ 298.661406][ T60] Bluetooth: hci2: command tx timeout [ 302.425562][ T60] Bluetooth: hci2: command tx timeout [ 302.681670][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 302.796937][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 303.467450][ T7108] binder: 7103:7108 ioctl 0 200000000040 returned -22 [ 303.490598][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.322'. [ 304.810984][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.841782][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.842076][ T7033] bridge_slave_0: entered allmulticast mode [ 304.868592][ T7033] bridge_slave_0: entered promiscuous mode [ 304.934196][ T7034] chnl_net:caif_netlink_parms(): no params data found [ 305.117290][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.117649][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.117982][ T7033] bridge_slave_1: entered allmulticast mode [ 305.121761][ T7033] bridge_slave_1: entered promiscuous mode [ 305.553928][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.601664][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.603101][ T7078] chnl_net:caif_netlink_parms(): no params data found [ 305.940468][ T7033] team0: Port device team_slave_0 added [ 306.178843][ T7033] team0: Port device team_slave_1 added [ 306.307168][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 306.591478][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.600228][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.600448][ T7034] bridge_slave_0: entered allmulticast mode [ 306.633173][ T7034] bridge_slave_0: entered promiscuous mode [ 306.761837][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.761973][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.762298][ T7034] bridge_slave_1: entered allmulticast mode [ 306.822591][ T7034] bridge_slave_1: entered promiscuous mode [ 306.888763][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.888797][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.888826][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.031990][ T7164] binder: 7162:7164 ioctl 0 200000000040 returned -22 [ 307.312039][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.312060][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.312088][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.758746][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.782384][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.782491][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.782742][ T7078] bridge_slave_0: entered allmulticast mode [ 307.787063][ T7078] bridge_slave_0: entered promiscuous mode [ 307.835509][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.843078][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.843507][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.845286][ T7078] bridge_slave_1: entered allmulticast mode [ 307.998258][ T7078] bridge_slave_1: entered promiscuous mode [ 308.451561][ T7034] team0: Port device team_slave_0 added [ 308.485366][ T7033] hsr_slave_0: entered promiscuous mode [ 308.498444][ T7033] hsr_slave_1: entered promiscuous mode [ 308.500399][ T7033] debugfs: 'hsr0' already exists in 'hsr' [ 308.500430][ T7033] Cannot create hsr debugfs directory [ 308.609259][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.628681][ T7034] team0: Port device team_slave_1 added [ 308.739690][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.655055][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.655075][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.655105][ T7034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.730089][ T7078] team0: Port device team_slave_0 added [ 309.739127][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.739146][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.739176][ T7034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.835975][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 309.859267][ T7078] team0: Port device team_slave_1 added [ 310.277326][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.277347][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.277378][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.492466][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.492486][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.492517][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.989289][ T7216] binder: 7210:7216 ioctl 0 200000000040 returned -22 [ 312.540787][ T7034] hsr_slave_0: entered promiscuous mode [ 312.596730][ T7034] hsr_slave_1: entered promiscuous mode [ 312.646646][ T7034] debugfs: 'hsr0' already exists in 'hsr' [ 312.656486][ T7034] Cannot create hsr debugfs directory [ 314.388197][ T7078] hsr_slave_0: entered promiscuous mode [ 314.396481][ T7078] hsr_slave_1: entered promiscuous mode [ 314.399823][ T7078] debugfs: 'hsr0' already exists in 'hsr' [ 314.399922][ T7078] Cannot create hsr debugfs directory [ 323.067475][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.067550][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.547778][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 323.673984][ T7275] team0 (unregistering): Port device team_slave_0 removed [ 323.713496][ T7275] team0 (unregistering): Port device team_slave_1 removed [ 326.727416][ T7276] Set syz1 is full, maxelem 65536 reached [ 330.186070][ T7322] overlayfs: missing 'lowerdir' [ 330.444731][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 330.788247][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 336.045615][ T7371] overlayfs: missing 'lowerdir' [ 336.321993][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 336.420417][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 336.501315][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 336.504454][ T5881] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 336.505049][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.505070][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.505089][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.505106][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.505139][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.505156][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.768361][ T7387] overlayfs: missing 'lowerdir' [ 336.828286][ T5881] usb 4-1: GET_CAPABILITIES returned 0 [ 336.828330][ T5881] usbtmc 4-1:16.0: can't read capabilities [ 336.927691][ T71] bridge_slave_1: left allmulticast mode [ 336.927724][ T71] bridge_slave_1: left promiscuous mode [ 336.928214][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.135034][ T5881] usb 4-1: USB disconnect, device number 3 [ 337.150397][ T71] bridge_slave_0: left allmulticast mode [ 337.150431][ T71] bridge_slave_0: left promiscuous mode [ 337.150733][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.268622][ T71] bridge_slave_1: left allmulticast mode [ 337.268659][ T71] bridge_slave_1: left promiscuous mode [ 337.268956][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.572807][ T71] bridge_slave_0: left allmulticast mode [ 338.572840][ T71] bridge_slave_0: left promiscuous mode [ 338.573096][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.656109][ T71] bridge_slave_1: left allmulticast mode [ 338.656144][ T71] bridge_slave_1: left promiscuous mode [ 338.656445][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.810411][ T71] bridge_slave_0: left allmulticast mode [ 339.810447][ T71] bridge_slave_0: left promiscuous mode [ 339.810711][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.648459][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.664462][ T7427] overlayfs: missing 'lowerdir' [ 340.668300][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.692846][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.701856][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.726625][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.825147][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.853253][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.854711][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.856421][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.857329][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.110400][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 341.653508][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.754448][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.836350][ T71] bond0 (unregistering): Released all slaves [ 342.821516][ T60] Bluetooth: hci1: command tx timeout [ 342.911557][ T60] Bluetooth: hci6: command tx timeout [ 343.015597][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.112321][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.185596][ T71] bond0 (unregistering): Released all slaves [ 344.312061][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.412258][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.473850][ T71] bond0 (unregistering): Released all slaves [ 344.656391][ T7437] overlayfs: missing 'lowerdir' [ 344.909008][ T60] Bluetooth: hci1: command tx timeout [ 344.992091][ T60] Bluetooth: hci6: command tx timeout [ 346.981361][ T60] Bluetooth: hci1: command tx timeout [ 347.061407][ T60] Bluetooth: hci6: command tx timeout [ 349.061476][ T60] Bluetooth: hci1: command tx timeout [ 349.141221][ T60] Bluetooth: hci6: command tx timeout [ 351.091648][ T71] hsr_slave_0: left promiscuous mode [ 351.111850][ T71] hsr_slave_1: left promiscuous mode [ 351.112961][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.133003][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.251384][ T71] hsr_slave_0: left promiscuous mode [ 351.280192][ T71] hsr_slave_1: left promiscuous mode [ 351.281347][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.302972][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.394110][ T7469] overlayfs: missing 'lowerdir' [ 351.431395][ T71] hsr_slave_0: left promiscuous mode [ 351.471516][ T71] hsr_slave_1: left promiscuous mode [ 351.472545][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.502825][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.392682][ T71] team0 (unregistering): Port device team_slave_1 removed [ 352.515927][ T5804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.532244][ T5804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.533598][ T5804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.535118][ T5804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.536793][ T5804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.606548][ T71] team0 (unregistering): Port device team_slave_0 removed [ 353.782215][ T71] team0 (unregistering): Port device team_slave_1 removed [ 353.921989][ T71] team0 (unregistering): Port device team_slave_0 removed [ 354.664121][ T60] Bluetooth: hci7: command tx timeout [ 355.677936][ T71] team0 (unregistering): Port device team_slave_1 removed [ 355.812092][ T71] team0 (unregistering): Port device team_slave_0 removed [ 356.744607][ T60] Bluetooth: hci7: command tx timeout [ 356.917711][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 357.202734][ T7492] overlayfs: missing 'lowerdir' [ 357.616743][ T7497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.987444][ T7507] overlayfs: missing 'lowerdir' [ 358.821493][ T60] Bluetooth: hci7: command tx timeout [ 358.963587][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 359.505572][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 360.385607][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 360.484191][ T7542] overlayfs: missing 'lowerdir' [ 360.877096][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.877207][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.877464][ T7426] bridge_slave_0: entered allmulticast mode [ 360.906324][ T60] Bluetooth: hci7: command tx timeout [ 360.922449][ T7426] bridge_slave_0: entered promiscuous mode [ 360.951762][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'. [ 360.999538][ T7556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 361.156821][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.156917][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.157094][ T7426] bridge_slave_1: entered allmulticast mode [ 361.159096][ T7426] bridge_slave_1: entered promiscuous mode [ 361.676843][ T7565] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 361.676903][ T7565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 361.923937][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.924129][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.924443][ T7429] bridge_slave_0: entered allmulticast mode [ 361.927559][ T7429] bridge_slave_0: entered promiscuous mode [ 362.284863][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.285014][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.285288][ T7429] bridge_slave_1: entered allmulticast mode [ 362.331513][ T7429] bridge_slave_1: entered promiscuous mode [ 362.383970][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.660684][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.926780][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.058510][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.086298][ T7426] team0: Port device team_slave_0 added [ 363.229689][ T7426] team0: Port device team_slave_1 added [ 363.888827][ T7429] team0: Port device team_slave_0 added [ 364.137228][ T7483] chnl_net:caif_netlink_parms(): no params data found [ 364.200119][ T7429] team0: Port device team_slave_1 added [ 364.774904][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.774924][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.774954][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.962372][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.962392][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.962419][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.306472][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.306492][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.306530][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.429280][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.429301][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.429331][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.636712][ T7611] overlayfs: missing 'lowerdir' [ 365.872297][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 366.175046][ T7426] hsr_slave_0: entered promiscuous mode [ 366.176497][ T7426] hsr_slave_1: entered promiscuous mode [ 366.404536][ T7630] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 366.404605][ T7630] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.479016][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.479149][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.479364][ T7483] bridge_slave_0: entered allmulticast mode [ 366.493291][ T7483] bridge_slave_0: entered promiscuous mode [ 366.573820][ T7429] hsr_slave_0: entered promiscuous mode [ 366.588471][ T7429] hsr_slave_1: entered promiscuous mode [ 366.593659][ T7429] debugfs: 'hsr0' already exists in 'hsr' [ 366.593757][ T7429] Cannot create hsr debugfs directory [ 366.594953][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.595328][ T7483] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.596061][ T7483] bridge_slave_1: entered allmulticast mode [ 366.656263][ T7483] bridge_slave_1: entered promiscuous mode [ 367.102111][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 367.462706][ T7483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.609269][ T7483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.280161][ T7672] overlayfs: missing 'lowerdir' [ 368.604836][ T7483] team0: Port device team_slave_0 added [ 368.918876][ T7483] team0: Port device team_slave_1 added [ 369.599527][ T7483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.599547][ T7483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.599576][ T7483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.832673][ T7483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.832692][ T7483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.832722][ T7483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.337731][ T7483] hsr_slave_0: entered promiscuous mode [ 371.348804][ T7483] hsr_slave_1: entered promiscuous mode [ 371.365952][ T7483] debugfs: 'hsr0' already exists in 'hsr' [ 371.365982][ T7483] Cannot create hsr debugfs directory [ 371.539191][ T7699] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.539254][ T7699] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 372.021672][ T71] bridge_slave_1: left allmulticast mode [ 372.021703][ T71] bridge_slave_1: left promiscuous mode [ 372.021968][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.122921][ T7715] overlayfs: missing 'workdir' [ 372.155233][ T71] bridge_slave_0: left allmulticast mode [ 372.155266][ T71] bridge_slave_0: left promiscuous mode [ 372.155555][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.263719][ T71] bridge_slave_1: left allmulticast mode [ 372.263756][ T71] bridge_slave_1: left promiscuous mode [ 372.264028][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.562830][ T71] bridge_slave_0: left allmulticast mode [ 372.562863][ T71] bridge_slave_0: left promiscuous mode [ 372.564166][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.897149][ T71] bridge_slave_1: left allmulticast mode [ 372.897183][ T71] bridge_slave_1: left promiscuous mode [ 372.898134][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.962471][ T71] bridge_slave_0: left allmulticast mode [ 372.962498][ T71] bridge_slave_0: left promiscuous mode [ 372.962728][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.171770][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 373.694629][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.792292][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.877060][ T71] bond0 (unregistering): Released all slaves [ 374.492073][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.547780][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.604462][ T71] bond0 (unregistering): Released all slaves [ 375.137310][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.222192][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.307218][ T71] bond0 (unregistering): Released all slaves [ 376.411402][ T71] hsr_slave_0: left promiscuous mode [ 376.431478][ T71] hsr_slave_1: left promiscuous mode [ 376.432185][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.454882][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.722982][ T71] hsr_slave_0: left promiscuous mode [ 376.761783][ T71] hsr_slave_1: left promiscuous mode [ 376.762778][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.813357][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.283217][ T71] hsr_slave_0: left promiscuous mode [ 377.321973][ T71] hsr_slave_1: left promiscuous mode [ 377.324186][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.374632][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.896917][ T7750] overlayfs: missing 'workdir' [ 378.772481][ T71] team0 (unregistering): Port device team_slave_1 removed [ 379.505235][ T71] team0 (unregistering): Port device team_slave_0 removed [ 380.744588][ T71] team0 (unregistering): Port device team_slave_1 removed [ 380.892009][ T71] team0 (unregistering): Port device team_slave_0 removed [ 381.993007][ T71] team0 (unregistering): Port device team_slave_1 removed [ 382.142531][ T71] team0 (unregistering): Port device team_slave_0 removed [ 382.718040][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 383.259015][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 383.969016][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.969092][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.592632][ T7426] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.814168][ T7426] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.907821][ T7426] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 385.317949][ T7426] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.078193][ T7429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 386.235816][ T7429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 386.367412][ T7795] overlayfs: missing 'lowerdir' [ 386.384966][ T7429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 386.538689][ T7429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 387.539972][ T7483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.613547][ T7483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.730810][ T7483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.785035][ T7483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.508355][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.606784][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.619435][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.665629][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.665845][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.708265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.708488][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.316283][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.369868][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.370043][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.437303][ T7483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.488004][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.488646][ T1539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.590767][ T7483] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.644581][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.644988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.705025][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.707521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.737342][ T7848] overlayfs: missing 'lowerdir' [ 392.812959][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.249654][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.735218][ T7483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.364500][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 395.510023][ T7429] veth0_vlan: entered promiscuous mode [ 395.718295][ T7429] veth1_vlan: entered promiscuous mode [ 396.492746][ T7426] veth0_vlan: entered promiscuous mode [ 396.622197][ T7426] veth1_vlan: entered promiscuous mode [ 396.637206][ T7483] veth0_vlan: entered promiscuous mode [ 396.640712][ T7429] veth0_macvtap: entered promiscuous mode [ 396.756361][ T7429] veth1_macvtap: entered promiscuous mode [ 396.764685][ T7483] veth1_vlan: entered promiscuous mode [ 397.019306][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.122006][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.122448][ T7426] veth0_macvtap: entered promiscuous mode [ 397.230599][ T7426] veth1_macvtap: entered promiscuous mode [ 397.338339][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.353513][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.430898][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.455740][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.497231][ T7483] veth0_macvtap: entered promiscuous mode [ 397.607955][ T7483] veth1_macvtap: entered promiscuous mode [ 397.713045][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.844681][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.048138][ T7483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.050267][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.128509][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.139420][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.286883][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.315166][ T7483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.736244][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.759125][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.770761][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.786987][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.817877][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.817900][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.264570][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.264595][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.531300][ T1539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.531324][ T1539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.033813][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.033835][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.180057][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.180083][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.716572][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.716597][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.637999][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.644902][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.691481][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.733863][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.742013][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.607000][ T7967] 9pnet_virtio: no channels available for device syz [ 402.740701][ T7967] ======================================================= [ 402.740701][ T7967] WARNING: The mand mount option has been deprecated and [ 402.740701][ T7967] and is ignored by this kernel. Remove the mand [ 402.740701][ T7967] option from the mount to silence this warning. [ 402.740701][ T7967] ======================================================= [ 402.756982][ T7967] overlay: Unknown parameter '/' [ 402.993179][ T7968] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.563334][ T60] Bluetooth: hci2: command tx timeout [ 405.072398][ T7977] fuse: Invalid rootmode [ 405.272730][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.464'. [ 405.272749][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.464'. [ 405.272770][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.464'. [ 405.272799][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.464'. [ 405.804498][ T36] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 405.972978][ T36] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 405.973024][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.975706][ T36] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 405.975728][ T36] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 405.975742][ T36] usb 8-1: Manufacturer: syz [ 406.110626][ T36] usb 8-1: config 0 descriptor?? [ 406.334507][ T36] rc_core: IR keymap rc-hauppauge not found [ 406.334530][ T36] Registered IR keymap rc-empty [ 406.361541][ T36] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 406.365052][ T36] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input12 [ 406.461684][ T36] usb 8-1: USB disconnect, device number 2 [ 406.581376][ T60] Bluetooth: hci2: command tx timeout [ 406.779536][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 406.898170][ T60] block nbd0: Receive control failed (result -111) [ 408.446900][ T6013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.599329][ T8017] warning: `syz.3.472' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 408.790655][ T60] Bluetooth: hci2: command tx timeout [ 410.584870][ T6013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.630160][ T8040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 410.630178][ T8040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 410.630190][ T8040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 410.630220][ T8040] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 410.822790][ T60] Bluetooth: hci2: command tx timeout [ 410.827455][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 411.996863][ T6013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.234329][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.234477][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.234744][ T7951] bridge_slave_0: entered allmulticast mode [ 412.304313][ T7951] bridge_slave_0: entered promiscuous mode [ 412.379839][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.379931][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.380130][ T7951] bridge_slave_1: entered allmulticast mode [ 412.413396][ T7951] bridge_slave_1: entered promiscuous mode [ 412.838358][ T6013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.601501][ T8067] 9pnet_virtio: no channels available for device syz [ 414.526939][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.464555][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.864211][ T7951] team0: Port device team_slave_0 added [ 415.868485][ T7951] team0: Port device team_slave_1 added [ 419.371310][ T6608] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 419.422594][ T8075] team0 (unregistering): Port device team_slave_0 removed [ 419.730514][ T8075] team0 (unregistering): Port device team_slave_1 removed [ 421.458828][ T6608] usb 4-1: device descriptor read/all, error -71 [ 422.793449][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.793468][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.793517][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.439137][ T8076] Set syz1 is full, maxelem 65536 reached [ 423.922169][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.922188][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.922218][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.533703][ T7951] hsr_slave_0: entered promiscuous mode [ 425.551998][ T7951] hsr_slave_1: entered promiscuous mode [ 425.751409][ T7951] debugfs: 'hsr0' already exists in 'hsr' [ 425.751443][ T7951] Cannot create hsr debugfs directory [ 425.994641][ T6013] bridge_slave_1: left allmulticast mode [ 425.994667][ T6013] bridge_slave_1: left promiscuous mode [ 425.994871][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.145482][ T6013] bridge_slave_0: left allmulticast mode [ 426.145516][ T6013] bridge_slave_0: left promiscuous mode [ 426.145787][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.081756][ T8152] nbd: must specify at least one socket [ 427.739065][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.505'. [ 427.739085][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.505'. [ 427.739097][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.505'. [ 427.739127][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.505'. [ 431.354978][ T8179] 9pnet_virtio: no channels available for device syz [ 433.744837][ T8188] nbd: must specify at least one socket [ 435.703970][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 435.703990][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 435.704003][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 435.704031][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.517'. [ 435.961980][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.219683][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.245079][ T6013] bond0 (unregistering): Released all slaves [ 436.265542][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 438.238779][ T8234] nbd: must specify at least one socket [ 438.370831][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.7.526'. [ 440.462535][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 441.197775][ T6013] hsr_slave_0: left promiscuous mode [ 441.241656][ T6013] hsr_slave_1: left promiscuous mode [ 441.247132][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.247162][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.345264][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.345295][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.802773][ T6013] veth1_macvtap: left promiscuous mode [ 441.802881][ T6013] veth0_macvtap: left promiscuous mode [ 441.803126][ T6013] veth1_vlan: left promiscuous mode [ 441.803308][ T6013] veth0_vlan: left promiscuous mode [ 442.583134][ T8286] nbd: must specify a size in bytes for the device [ 445.387078][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.387143][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.301831][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 450.592004][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 450.755683][ T8328] nbd: must specify a size in bytes for the device [ 456.979816][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.004824][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.007800][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.009459][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.010336][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.968503][ T8347] Set syz1 is full, maxelem 65536 reached [ 461.036068][ T5804] Bluetooth: hci1: command tx timeout [ 461.632595][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.672869][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.692046][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.709011][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.710740][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.982517][ T8366] nbd: must specify a size in bytes for the device [ 462.487363][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.516880][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.522158][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.529513][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.572508][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.677030][ T8346] team0 (unregistering): Port device team_slave_0 removed [ 462.698339][ T8346] team0 (unregistering): Port device team_slave_1 removed [ 462.742585][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 463.061400][ T60] Bluetooth: hci1: command tx timeout [ 463.950978][ T5804] Bluetooth: hci3: command tx timeout [ 464.216707][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.560'. [ 464.672095][ T60] Bluetooth: hci0: command tx timeout [ 465.142124][ T60] Bluetooth: hci1: command tx timeout [ 466.026675][ T60] Bluetooth: hci3: command tx timeout [ 466.741249][ T60] Bluetooth: hci0: command tx timeout [ 467.221428][ T60] Bluetooth: hci1: command tx timeout [ 469.291216][ T60] Bluetooth: hci6: command 0x0406 tx timeout [ 469.291261][ T60] Bluetooth: hci3: command tx timeout [ 469.291282][ T60] Bluetooth: hci0: command tx timeout [ 471.587220][ T6013] bridge_slave_1: left allmulticast mode [ 471.587254][ T6013] bridge_slave_1: left promiscuous mode [ 471.587957][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.664898][ T8428] nbd1: detected capacity change from 0 to 63 [ 471.667287][ T5804] block nbd1: Receive control failed (result -32) [ 471.677196][ T8423] block nbd1: Dead connection, failed to find a fallback [ 471.691405][ T6013] bridge_slave_0: left allmulticast mode [ 471.691437][ T6013] bridge_slave_0: left promiscuous mode [ 471.691712][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.692179][ T8423] block nbd1: shutting down sockets [ 471.692197][ T8423] blk_print_req_error: 136 callbacks suppressed [ 471.692210][ T8423] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692240][ T8423] buffer_io_error: 138 callbacks suppressed [ 471.692252][ T8423] Buffer I/O error on dev nbd1, logical block 0, async page read [ 471.692406][ T8423] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692432][ T8423] Buffer I/O error on dev nbd1, logical block 1, async page read [ 471.692491][ T8423] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692516][ T8423] Buffer I/O error on dev nbd1, logical block 2, async page read [ 471.692570][ T8423] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692595][ T8423] Buffer I/O error on dev nbd1, logical block 3, async page read [ 471.692663][ T8423] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692689][ T8423] Buffer I/O error on dev nbd1, logical block 0, async page read [ 471.692742][ T8423] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692767][ T8423] Buffer I/O error on dev nbd1, logical block 1, async page read [ 471.692820][ T8423] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692845][ T8423] Buffer I/O error on dev nbd1, logical block 2, async page read [ 471.692898][ T8423] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.692945][ T8423] Buffer I/O error on dev nbd1, logical block 3, async page read [ 471.693008][ T8423] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.693033][ T8423] Buffer I/O error on dev nbd1, logical block 0, async page read [ 471.693086][ T8423] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.693118][ T8423] Buffer I/O error on dev nbd1, logical block 1, async page read [ 471.694219][ T8423] ldm_validate_partition_table(): Disk read failed. [ 471.694983][ T8423] Dev nbd1: unable to read RDB block 0 [ 471.695856][ T8423] nbd1: unable to read partition table [ 471.732593][ T5804] Bluetooth: hci0: command tx timeout [ 471.732628][ T5804] Bluetooth: hci3: command tx timeout [ 471.763376][ T8423] ldm_validate_partition_table(): Disk read failed. [ 471.764076][ T8423] Dev nbd1: unable to read RDB block 0 [ 471.765445][ T8423] nbd1: unable to read partition table [ 474.678684][ T8448] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 474.678715][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.678819][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 474.885613][ T8449] vhci_hcd: connection closed [ 474.926518][ T13] vhci_hcd vhci_hcd.7: stop threads [ 474.926542][ T13] vhci_hcd vhci_hcd.7: release socket [ 474.926595][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 475.132174][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.222867][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.288115][ T6013] bond0 (unregistering): Released all slaves [ 475.302486][ T8352] chnl_net:caif_netlink_parms(): no params data found [ 475.954542][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 476.392783][ T6013] hsr_slave_0: left promiscuous mode [ 476.421329][ T6013] hsr_slave_1: left promiscuous mode [ 476.422115][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.472056][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.143481][ T8464] 9pnet_virtio: no channels available for device syz [ 477.179186][ T8464] overlay: Unknown parameter '/' [ 477.365521][ T8465] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 477.367601][ T8465] overlayfs: overlapping lowerdir path [ 480.916315][ T5797] block nbd2: Receive control failed (result -32) [ 481.179816][ T8476] nbd2: detected capacity change from 0 to 63 [ 481.202264][ T8423] block nbd2: Dead connection, failed to find a fallback [ 481.202291][ T8423] block nbd2: shutting down sockets [ 481.202306][ T8423] blk_print_req_error: 138 callbacks suppressed [ 481.202319][ T8423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202346][ T8423] buffer_io_error: 138 callbacks suppressed [ 481.202358][ T8423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 481.202493][ T8423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202520][ T8423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 481.202576][ T8423] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202601][ T8423] Buffer I/O error on dev nbd2, logical block 2, async page read [ 481.202654][ T8423] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202680][ T8423] Buffer I/O error on dev nbd2, logical block 3, async page read [ 481.202744][ T8423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202770][ T8423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 481.202828][ T8423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202854][ T8423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 481.202907][ T8423] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.202931][ T8423] Buffer I/O error on dev nbd2, logical block 2, async page read [ 481.202983][ T8423] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.203008][ T8423] Buffer I/O error on dev nbd2, logical block 3, async page read [ 481.203068][ T8423] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.203094][ T8423] Buffer I/O error on dev nbd2, logical block 0, async page read [ 481.203177][ T8423] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.203202][ T8423] Buffer I/O error on dev nbd2, logical block 1, async page read [ 481.204266][ T8423] ldm_validate_partition_table(): Disk read failed. [ 481.205056][ T8423] Dev nbd2: unable to read RDB block 0 [ 481.205974][ T8423] nbd2: unable to read partition table [ 481.701345][ T5774] ------------[ cut here ]------------ [ 481.701365][ T5774] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 481.701386][ T5774] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#0: kworker/0:3/5774 [ 481.701475][ T5774] Modules linked in: [ 481.701516][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.701541][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 481.701555][ T5774] Workqueue: events drm_fb_helper_damage_work [ 481.701589][ T5774] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 481.701617][ T5774] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 76 db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 481.701636][ T5774] RSP: 0018:ffffc90004baf8e0 EFLAGS: 00010246 [ 481.701654][ T5774] RAX: 1ffff110048ebe00 RBX: ffffffff8f535760 RCX: 0000000000000000 [ 481.701726][ T5774] RDX: ffffffff8b9f0aa0 RSI: ffffffff8ba0c800 RDI: ffffffff8f535760 [ 481.701782][ T5774] RBP: ffffc90004baf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 481.701796][ T5774] R10: dffffc0000000000 R11: fffffbfff1e9118f R12: ffffffff8ba0c800 [ 481.701811][ T5774] R13: ffff88802475f000 R14: 1ffff92000975f20 R15: ffffffff8b9f0aa0 [ 481.701827][ T5774] FS: 0000000000000000(0000) GS:ffff8881265a9000(0000) knlGS:0000000000000000 [ 481.701843][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.701857][ T5774] CR2: 0000200001000000 CR3: 0000000057190000 CR4: 00000000003526f0 [ 481.701875][ T5774] Call Trace: [ 481.701894][ T5774] [ 481.701910][ T5774] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 481.701941][ T5774] ? rt_spin_unlock+0x14f/0x200 [ 481.701978][ T5774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 481.702008][ T5774] ? rt_spin_unlock+0x160/0x200 [ 481.702056][ T5774] ? drm_vblank_get+0x147/0x260 [ 481.702087][ T5774] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 481.702115][ T5774] drm_fb_helper_damage_work+0x131/0x6f0 [ 481.702147][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.702178][ T5774] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 481.702213][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.702234][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.702261][ T5774] process_scheduled_works+0xaec/0x17a0 [ 481.702319][ T5774] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.702341][ T5774] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.702367][ T5774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.702402][ T5774] worker_thread+0xda6/0x1360 [ 481.702494][ T5774] ? __kthread_parkme+0x19c/0x1f0 [ 481.702531][ T5774] kthread+0x388/0x470 [ 481.702564][ T5774] ? __pfx_worker_thread+0x10/0x10 [ 481.702587][ T5774] ? __pfx_kthread+0x10/0x10 [ 481.702620][ T5774] ret_from_fork+0x51b/0xa40 [ 481.702649][ T5774] ? __pfx_ret_from_fork+0x10/0x10 [ 481.702674][ T5774] ? __switch_to+0xc82/0x1410 [ 481.702712][ T5774] ? __pfx_kthread+0x10/0x10 [ 481.702743][ T5774] ret_from_fork_asm+0x1a/0x30 [ 481.702800][ T5774] [ 481.702821][ T5774] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.702841][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.702868][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 481.702884][ T5774] Workqueue: events drm_fb_helper_damage_work [ 481.702915][ T5774] Call Trace: [ 481.702925][ T5774] [ 481.702934][ T5774] vpanic+0x1e0/0x670 [ 481.702970][ T5774] panic+0xc5/0xd0 [ 481.703004][ T5774] ? __pfx_panic+0x10/0x10 [ 481.703046][ T5774] ? ret_from_fork_asm+0x1a/0x30 [ 481.703086][ T5774] __warn+0x315/0x4a0 [ 481.703118][ T5774] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 481.703148][ T5774] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 481.703176][ T5774] __report_bug+0x29a/0x540 [ 481.703210][ T5774] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 481.703238][ T5774] ? __pfx___report_bug+0x10/0x10 [ 481.703289][ T5774] report_bug_entry+0x19a/0x290 [ 481.703316][ T5774] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 481.703340][ T5774] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 481.703371][ T5774] handle_bug+0xca/0x200 [ 481.703402][ T5774] exc_invalid_op+0x1a/0x50 [ 481.703442][ T5774] asm_exc_invalid_op+0x1a/0x20 [ 481.703465][ T5774] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 481.703493][ T5774] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 76 db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 481.703515][ T5774] RSP: 0018:ffffc90004baf8e0 EFLAGS: 00010246 [ 481.703539][ T5774] RAX: 1ffff110048ebe00 RBX: ffffffff8f535760 RCX: 0000000000000000 [ 481.703557][ T5774] RDX: ffffffff8b9f0aa0 RSI: ffffffff8ba0c800 RDI: ffffffff8f535760 [ 481.703574][ T5774] RBP: ffffc90004baf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 481.703590][ T5774] R10: dffffc0000000000 R11: fffffbfff1e9118f R12: ffffffff8ba0c800 [ 481.703607][ T5774] R13: ffff88802475f000 R14: 1ffff92000975f20 R15: ffffffff8b9f0aa0 [ 481.703648][ T5774] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 481.703673][ T5774] ? rt_spin_unlock+0x14f/0x200 [ 481.703706][ T5774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 481.703734][ T5774] ? rt_spin_unlock+0x160/0x200 [ 481.703773][ T5774] ? drm_vblank_get+0x147/0x260 [ 481.703803][ T5774] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 481.703829][ T5774] drm_fb_helper_damage_work+0x131/0x6f0 [ 481.703861][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.703891][ T5774] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 481.703925][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.703946][ T5774] ? process_scheduled_works+0xa0f/0x17a0 [ 481.703973][ T5774] process_scheduled_works+0xaec/0x17a0 [ 481.704037][ T5774] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.704060][ T5774] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.704085][ T5774] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.704122][ T5774] worker_thread+0xda6/0x1360 [ 481.704165][ T5774] ? __kthread_parkme+0x19c/0x1f0 [ 481.704201][ T5774] kthread+0x388/0x470 [ 481.704231][ T5774] ? __pfx_worker_thread+0x10/0x10 [ 481.704252][ T5774] ? __pfx_kthread+0x10/0x10 [ 481.704281][ T5774] ret_from_fork+0x51b/0xa40 [ 481.704309][ T5774] ? __pfx_ret_from_fork+0x10/0x10 [ 481.704333][ T5774] ? __switch_to+0xc82/0x1410 [ 481.704374][ T5774] ? __pfx_kthread+0x10/0x10 [ 481.704405][ T5774] ret_from_fork_asm+0x1a/0x30 [ 481.704471][ T5774] [ 481.705086][ T5774] Kernel Offset: disabled