last executing test programs: 29m45.228837522s ago: executing program 2 (id=11): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r1, 0x1) 29m43.389406044s ago: executing program 2 (id=15): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) 29m40.030692909s ago: executing program 2 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 29m39.38508218s ago: executing program 2 (id=19): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) syz_clone(0x5400, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0) 29m37.97677345s ago: executing program 2 (id=20): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 29m35.202554725s ago: executing program 2 (id=24): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 29m19.299920104s ago: executing program 32 (id=24): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 28m46.26420099s ago: executing program 4 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) 28m46.099990724s ago: executing program 4 (id=87): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d0001000000000000000000070000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 28m44.79636439s ago: executing program 4 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x2, 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 28m43.334422151s ago: executing program 4 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000700)='ocfs2_dlmfs\x00', 0x1202001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 28m42.673718057s ago: executing program 4 (id=92): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200"], 0x80}}], 0x1, 0x4000004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 28m42.16984732s ago: executing program 4 (id=95): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mprotect(&(0x7f0000439000/0x1000)=nil, 0x1000, 0x1000000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 28m26.981720855s ago: executing program 33 (id=95): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mprotect(&(0x7f0000439000/0x1000)=nil, 0x1000, 0x1000000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 26m52.409679824s ago: executing program 3 (id=244): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 26m52.354233262s ago: executing program 3 (id=245): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 26m50.304981067s ago: executing program 3 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000180)=r0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48080}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 26m47.293365045s ago: executing program 3 (id=250): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x68, 0x0, 0xeb, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x10}}}}}}, 0x0) 26m47.03788109s ago: executing program 3 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e2, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 26m46.970850838s ago: executing program 3 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x19}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x404c010}, 0x404001c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x4038a09, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 26m31.680698969s ago: executing program 34 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x19}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x404c010}, 0x404001c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x4038a09, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 9m4.981369996s ago: executing program 1 (id=1368): r0 = syz_open_procfs(0x0, &(0x7f0000001a80)='net/unix\x00') preadv(r0, &(0x7f0000003c00)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1, 0x2, 0x77f83464) 9m4.863819127s ago: executing program 1 (id=1369): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000200), 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x1}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xc, &(0x7f0000000340)={0x3, 0x1000}, 0x0) r6 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x80) fchdir(r7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) 9m3.737054593s ago: executing program 1 (id=1371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a2", 0xa) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$alg(r3, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) close(0x3) 9m1.919244893s ago: executing program 1 (id=1373): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xee) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x200, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_usb_connect$uac1(0x3, 0xad, 0x0, 0x0) 9m1.03751467s ago: executing program 1 (id=1374): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m59.65384212s ago: executing program 1 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 8m44.30101114s ago: executing program 35 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m13.889983901s ago: executing program 5 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0xe8, 0x1170, 0x1170, 0xe8, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}], 0x1) 2m11.903579606s ago: executing program 5 (id=1962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a2", 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000201010400000000000000000200000a0c6d776284000100080e0012100001800c97890100f2b90fd1"], 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) ioprio_get$uid(0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@empty, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 2m1.828294225s ago: executing program 5 (id=1976): socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27fff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 1m53.603591713s ago: executing program 5 (id=1988): openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) 1m52.472547739s ago: executing program 5 (id=1990): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x40011) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYBLOB="0500060003000000050007000000000005000300df00000008000200", @ANYRES64=r9], 0x68}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 1m49.636625463s ago: executing program 5 (id=1992): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m34.101331072s ago: executing program 36 (id=1992): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 36.977628485s ago: executing program 0 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000300)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f00000006c0)="d5f19c6cc9141bd28e5531170099ab0e9c81e2bf96ba3ee12859f45a", 0x1c}, {&(0x7f0000000700)="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", 0xfa}, {&(0x7f0000000800)}], 0x4, &(0x7f0000000c00)=[{0x40, 0xff, 0xfffffffb, "2c794534560c0d74550583c0da5ddc632c87d0fa3f2de25d68f46eadcb6dfd579c47ee0155d02312d7e031cda047ea91"}, {0x548, 0x29, 0x7, "84d54a1aa6d279e5c08549bae81d0ff8f242d862d174737cbf298f098e45942832f4c09eed7b4c037ee6a74c5d5d280a9cb50f15c0a1cc74298624e0c7892d3c5053a10097c8292d5ed2f3da6607d6e013f9a12ba57053476c27e6901230d158ecf652aa424d8fe51b677490f0381636d93d21f3e21ab20b5e8db8e6ac7aa25165e26acc6dbe5924b38b5f1b9ee118460d9236a3f6592ba6c60d4e38558599cb074af633f0e1c66ddaaa28b036bfb4062a8132e7cf038ad806be2b6d95823b67d96bacfac34bd84e42ed772971ba27d328070b3bf79dbe35499827dcceb94ae9686b444e58e997a63a09e95a50571ce54503ff448f8501a46a53af5fe0f235832f788318b7005877e8df5115fdfa1d24de8a85a903498f28d160f5a4a6518f555886a0d153c5a682b658dedef54276faf8b67c1579ed45ebdf3b8d9adffc90b6a11a3254007c49c6d310820d114f5fdd3c2813dff5b12a27d3148ee854c700ee022998255d5764867a2a83293e242d4eaac94ba61f3504e8769c09d31b001b9c2b567df9e7e5ba971800a6cd7263819402933557a1e0df464757bd2a4d0f83de87d31acc2dfa20da0b7faf940d6ac44346e424a3065de18114b784abdc7cca474427ac5210a55a0bc94072db864c2a17012746f3fb568053c7bd7082501a5bf0f5b02bd5116d4ccbead7de11f4b701fd265c7bfdbbd169fadbf0a1d2b91c32352671258bebf25d5392b1336a2fabb22a20f6ff38b021690f08ccb6fbc63426976913e091b6789f95ab913b52800a7d172552c6ceb3b02d9af064244cdb4cdfbde9fa0c4c388cc4261cacdbd485713d60b127c047c5a14ec54811d375e2694fe4b38642bab16f96ebad1cce760664bff230db8b699ad1d423b00a34116fd34c5f426a6739216b3883ce1ee86631430ab7523a6b3d9bb459e31e3ce16d57a0a0d1e7a493cc1fcb0e3e183a32233223ef97d728ffbf3d81428c02f20fc1c5dec3b139988e66f19542fce9884774e4f2b3a385661b8f6dc2b0b89981271e56299d8ff96bf3b4b2557a34de27d80e64686168832c54222f3d1412d8380f33978e8309481d906bdf823e44a404a1d8926e235cb75859f48e75cb6311be1ec9ec6a138b96ccf0c2848870acfc7ff628b5ed074f9e744ed82f75ade92dd36e0a0ccaf4e5826aa01eb74a5668a4d9bf74a4f83224c0e83f9bd23a302f7acc0cbbc6baf46cd9353f78481d1936a59a26d06fff8e2e6e393046044197674ca3c075c796b91778d1acde2f40538b7c8ee82a54e5ce4515bf80e126675617be5bb8c763c1faabd1858e6cbae57a2cf4a049f3bcb77dddf9fb83897e49f2e152a72386ea3211f2c06f4e5c16a207bdb7861c4ee5f22d6d7a853eae9bf57eb999f35c6274ff8fdffa025f0274275ac8b93f4f9a82d7bda0232ec29595929cc28b9c52261de746e83c9ef9811d4f18209187cd1d9e5cd2c9ed6cc096c9c00453fc29b07d555cb6688463ab699ae98194a48399a515168214b2ddc0eb1904dc38696c02464311defd00ca4960467c4197c00ce463c20dc81b42fd675cf02144325946ac7891d62e5895e6732a8d308dc3e0ad363b6778e51462d86df09ab12d22035c95ec059696f7414fcbe7bea3d742f987f5418045addf6a3f9f608f5dda44f0a0dbc47733a2b73f210bb86dea8e73c499303e38a122abd392cc540e08abc33dc7162b5c0b9b31633cb634f81535a0fd211e2aebaa2442ce4cd9e82debc6b7c8ec988b2131516fd8e2be5f19d4784cd782598da67fb7e1196540fbb6ce0a78059aada73a23a9a544b6fbe160a3d0b5fdbdbf844a0d7e1e113c5d360360dc1a12a14892fb610d0c627cd3b12c0cbdeedb449d957008003bce9ff2182b4b"}, {0x10, 0x3a}, {0x10, 0x0, 0x9}, {0x28, 0x88, 0x1, "7dfe26bc8a5fbb6377642b5c266a330318d9bcda"}, {0xd8, 0x115, 0x8, "11006cb1421243706bb297b0f19d4decfee8d58cf129bf64580cbc48fa8ea7f7f18f1cfd2f66084678211c62614d38b75e6dc7b6a73634585fc5d407949676c071823effa3bb56b657e4d9627be9f157697a0bb15bc5424a21f38cd163501ee2302ea9ba5bff85db986dcaf8da7abc85d547a9d16ca071e4c00da23ae74289ffb197f16128b333f0212be17470ac61b4922599504cc8a3dae58686df7cb7e78508f506286507fc087c59496fed41f210eac527adf1fddd74dc975c3be428eb943b3a"}, {0x88, 0xff, 0xfdf0, "930bb78648a5a10e60955bd8cbb77dbc6ecb3abe2bd6de5f6281f464f4303bb9da9863b35723d989c1e5eccef4ed2ba995f4cd441c9e9a03e9daa532efedb006779d389507083e8662977b00b2c123e8eb6f9eb96e8220ea4d5194cf72d3567c6e2076027662f6532b488693267d86e0b736710e743a3931"}], 0x730}}], 0x2, 0x0) 33.348525439s ago: executing program 0 (id=2094): socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 29.091808914s ago: executing program 0 (id=2100): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100002fc7000000000000000000b025495789"], 0x14}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x17) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x67) waitid(0x2, 0x0, &(0x7f0000002ff9), 0xe0000009, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="180000008100000000000000e09c0000852000000400000018400000fcffffff00000000000000001837000001000000000000000000000018250000", @ANYRES32=r6, @ANYBLOB="00000000070000008520000001000000186e2e51d599c9d898c9110000", @ANYRES32=r3], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 26.505746385s ago: executing program 6 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) 24.60858138s ago: executing program 8 (id=2106): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 22.471616573s ago: executing program 8 (id=2109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, 0x0, 0x4044040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="14e8ffff1700010000000000000000"], 0x14}}, 0x4004854) getpid() 21.963530479s ago: executing program 6 (id=2110): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100002fc7000000000000000000b025495789"], 0x14}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x17) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x67) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="180000008100000000000000e09c0000852000000400000018400000fcffffff00000000000000001837000001000000000000000000000018250000", @ANYRES32=r6, @ANYBLOB="00000000070000008520000001000000186e2e51d599c9d898c9110000", @ANYRES32=r3], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 20.777372464s ago: executing program 7 (id=2111): setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f00000004c0)='net/nfsfs\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@sha1={0x1, "1ca081ef3513c98fda46645b61a99bfc3a87a614"}, 0x15, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x54}, 0x8404) 18.947729746s ago: executing program 7 (id=2112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.573428016s ago: executing program 0 (id=2113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 17.232609075s ago: executing program 0 (id=2114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x10000, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000340)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57", 0x3) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) 17.186085823s ago: executing program 6 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000700)='ocfs2_dlmfs\x00', 0x1202001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000001240)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x2a7a7bc183b31a3c}, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x78, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc6ef}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2334}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001800c00028001000100000000001400000200ac1e0001240000018008000100ac1414bb08000200ac1e00010c000280050001000000000008000740000000000c0018800800014000"/109], 0x70}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15.109875234s ago: executing program 8 (id=2117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.551170758s ago: executing program 8 (id=2118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 13.25533314s ago: executing program 7 (id=2119): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x54}, 0x8404) 11.867099559s ago: executing program 7 (id=2122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000000006", @ANYRES32=r2, @ANYRES32], 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 11.538221988s ago: executing program 7 (id=2123): socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27fff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 11.227525241s ago: executing program 6 (id=2124): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.225036086s ago: executing program 9 (id=2125): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) read$FUSE(r6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x40011) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYBLOB="0500060003000000050007000000000005000300df00000008000200", @ANYRES64=r8], 0x68}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 9.153709839s ago: executing program 9 (id=2126): socket$inet6(0xa, 0x80003, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27fff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8.618169323s ago: executing program 8 (id=2127): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r3, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x40011) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYBLOB="0500060003000000050007000000000005000300df00000008000200", @ANYRES64=r9], 0x68}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 7.064914341s ago: executing program 6 (id=2128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000201010400000000000000000200000a0c6d776284000100080e0012100001800c97890100f2b90fd1"], 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) read$FUSE(r5, 0x0, 0x0) sendmsg$alg(r4, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@empty, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 6.795215145s ago: executing program 0 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.787295046s ago: executing program 8 (id=2130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.913941475s ago: executing program 6 (id=2131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000700)='ocfs2_dlmfs\x00', 0x1202001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000001240)) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x2a7a7bc183b31a3c}, 0x24000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x78, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc6ef}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2334}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001800c00028001000100000000001400000200ac1e0001240000018008000100ac1414bb08000200ac1e00010c000280050001000000000008000740000000000c0018800800014000"/109], 0x70}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.355223483s ago: executing program 9 (id=2132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.353972001s ago: executing program 7 (id=2133): syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100002fc7000000000000000000b025495789"], 0x14}}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)}, 0x17) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x30, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x67) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="180000008100000000000000e09c0000852000000400000018400000fcffffff00000000000000001837000001000000000000000000000018250000", @ANYRES32=r6, @ANYBLOB="00000000070000008520000001000000186e2e51d599c9d898c9110000", @ANYRES32=r3], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 1.95865705s ago: executing program 9 (id=2134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000140)) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$kcm(0x10, 0x2, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) 560.321916ms ago: executing program 9 (id=2135): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) 0s ago: executing program 9 (id=2136): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r3, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x40011) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYBLOB="0500060003000000050007000000000005000300df00000008000200", @ANYRES64=r9], 0x68}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) kernel console output (not intermixed with test programs): e_slave_1: entered promiscuous mode [ 1168.624675][T11299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1168.946699][T11299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1169.210997][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.212791][T11299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1170.606412][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.606789][T11299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1176.091518][T11299] kthread_run failed with err -4 [ 1176.350419][T11442] team0: Port device team_slave_0 added [ 1176.370143][T11442] team0: Port device team_slave_1 added [ 1179.609805][T10661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.621734][T10661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.628749][T10661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.632875][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.632912][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.632949][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.635389][T10661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.651939][T10661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.071278][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.071293][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.071317][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.675413][T11442] hsr_slave_0: entered promiscuous mode [ 1180.677031][T11442] hsr_slave_1: entered promiscuous mode [ 1180.678183][T11442] debugfs: 'hsr0' already exists in 'hsr' [ 1180.678203][T11442] Cannot create hsr debugfs directory [ 1181.874420][T10661] Bluetooth: hci0: command tx timeout [ 1182.022249][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1182.042457][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1182.043822][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1182.062967][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1182.064055][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1182.640994][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.641075][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.222820][ T62] Bluetooth: hci0: command tx timeout [ 1186.265061][ T62] Bluetooth: hci3: command tx timeout [ 1188.235586][ T62] Bluetooth: hci0: command tx timeout [ 1188.315039][ T62] Bluetooth: hci3: command tx timeout [ 1190.354550][ T62] Bluetooth: hci0: command tx timeout [ 1190.395024][ T62] Bluetooth: hci3: command tx timeout [ 1191.560959][T11677] chnl_net:caif_netlink_parms(): no params data found [ 1192.480576][ T62] Bluetooth: hci3: command tx timeout [ 1193.171185][T10661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1193.184659][T10661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1193.195577][T10661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1193.231415][T10661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1193.232474][T10661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1193.598769][ T6350] bridge_slave_1: left allmulticast mode [ 1193.598805][ T6350] bridge_slave_1: left promiscuous mode [ 1193.599101][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.301366][T10661] Bluetooth: hci5: command tx timeout [ 1195.462746][ T6350] bridge_slave_0: left allmulticast mode [ 1195.462779][ T6350] bridge_slave_0: left promiscuous mode [ 1195.507983][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.604152][ T6350] bridge_slave_1: left allmulticast mode [ 1195.604185][ T6350] bridge_slave_1: left promiscuous mode [ 1195.604433][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.968340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.972942][ T6350] bridge_slave_0: left allmulticast mode [ 1195.972975][ T6350] bridge_slave_0: left promiscuous mode [ 1195.997515][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.397072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.667571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.846024][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.935974][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.027263][ T6350] bond0 (unregistering): Released all slaves [ 1197.373358][T10661] Bluetooth: hci5: command tx timeout [ 1197.490759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.579872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.663106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.727277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.037403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.173155][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.771413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.548280][T10661] Bluetooth: hci5: command tx timeout [ 1199.701476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.787428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.007119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.166989][T11783] ieee802154 phy0 wpan0: encryption failed: -22 [ 1200.602756][T11786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 1201.587383][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.625078][T10661] Bluetooth: hci5: command tx timeout [ 1201.666052][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.708054][ T6350] bond0 (unregistering): Released all slaves [ 1201.988360][T11692] chnl_net:caif_netlink_parms(): no params data found [ 1202.602472][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.602605][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.602819][T11677] bridge_slave_0: entered allmulticast mode [ 1202.632675][T11677] bridge_slave_0: entered promiscuous mode [ 1204.707740][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.707909][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.708162][T11677] bridge_slave_1: entered allmulticast mode [ 1204.735910][T11677] bridge_slave_1: entered promiscuous mode [ 1206.097644][T11803] ieee802154 phy0 wpan0: encryption failed: -22 [ 1206.571291][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.714981][ T6350] hsr_slave_0: left promiscuous mode [ 1206.734958][ T6350] hsr_slave_1: left promiscuous mode [ 1206.735819][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.786411][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.146512][ T6350] hsr_slave_0: left promiscuous mode [ 1207.185293][ T6350] hsr_slave_1: left promiscuous mode [ 1207.186531][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.209976][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.646602][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1209.866662][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1215.877057][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1216.375683][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1217.118049][T11843] ieee802154 phy0 wpan0: encryption failed: -22 [ 1220.025744][T11857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1222'. [ 1220.576691][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.194035][T11865] Bluetooth: MGMT ver 1.23 [ 1222.547854][T11677] team0: Port device team_slave_0 added [ 1222.548331][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.548500][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.548635][T11692] bridge_slave_0: entered allmulticast mode [ 1222.554344][T11692] bridge_slave_0: entered promiscuous mode [ 1223.687832][T11677] team0: Port device team_slave_1 added [ 1223.692652][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.692811][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.693051][T11692] bridge_slave_1: entered allmulticast mode [ 1223.723021][T11692] bridge_slave_1: entered promiscuous mode [ 1224.460515][T11877] ieee802154 phy0 wpan0: encryption failed: -22 [ 1224.581079][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.581109][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.581140][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.647869][T11692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.652463][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.652483][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.652513][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.704368][T11692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.429988][T11692] team0: Port device team_slave_0 added [ 1225.836113][T11692] team0: Port device team_slave_1 added [ 1226.201532][T11677] hsr_slave_0: entered promiscuous mode [ 1226.202562][T11677] hsr_slave_1: entered promiscuous mode [ 1226.729475][T11888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1229'. [ 1226.845942][T11692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.845962][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.845996][T11692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.059041][T11692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.059061][T11692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.059091][T11692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.394356][T11751] chnl_net:caif_netlink_parms(): no params data found [ 1227.405570][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 1229.374078][T11692] hsr_slave_0: entered promiscuous mode [ 1229.381944][T11692] hsr_slave_1: entered promiscuous mode [ 1229.398267][T11692] debugfs: 'hsr0' already exists in 'hsr' [ 1229.398352][T11692] Cannot create hsr debugfs directory [ 1232.656342][T11924] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.235421][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.235524][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.235693][T11751] bridge_slave_0: entered allmulticast mode [ 1233.237638][T11751] bridge_slave_0: entered promiscuous mode [ 1233.271844][ T6350] bridge_slave_1: left allmulticast mode [ 1233.271866][ T6350] bridge_slave_1: left promiscuous mode [ 1233.272086][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.325047][ T6350] bridge_slave_0: left allmulticast mode [ 1233.325080][ T6350] bridge_slave_0: left promiscuous mode [ 1233.328685][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.398184][ T6350] bridge_slave_1: left allmulticast mode [ 1233.398210][ T6350] bridge_slave_1: left promiscuous mode [ 1233.398387][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.516357][ T6350] bridge_slave_0: left allmulticast mode [ 1233.516382][ T6350] bridge_slave_0: left promiscuous mode [ 1233.516580][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.245974][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.550096][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.609443][ T6350] bond0 (unregistering): Released all slaves [ 1237.152750][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.179671][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.246989][ T6350] bond0 (unregistering): Released all slaves [ 1238.341291][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.341424][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.341630][T11751] bridge_slave_1: entered allmulticast mode [ 1238.371416][T11751] bridge_slave_1: entered promiscuous mode [ 1238.556770][T11948] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.118310][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1242'. [ 1239.206852][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.671041][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.954583][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.197177][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1240.984139][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1240.990254][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1240.995211][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1241.962324][ T6350] hsr_slave_0: left promiscuous mode [ 1241.995159][ T6350] hsr_slave_1: left promiscuous mode [ 1241.996004][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.025722][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.185006][ T6350] hsr_slave_0: left promiscuous mode [ 1242.205045][ T6350] hsr_slave_1: left promiscuous mode [ 1242.205908][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.265847][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.012619][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1243.035047][T10661] Bluetooth: hci2: command tx timeout [ 1243.506091][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1244.119452][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.119525][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.214326][T11971] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.675046][T11326] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1244.808932][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1244.824901][T11326] usb 2-1: Using ep0 maxpacket: 8 [ 1244.830590][T11326] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1244.830614][T11326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.830629][T11326] usb 2-1: Product: syz [ 1244.830640][T11326] usb 2-1: Manufacturer: syz [ 1244.830651][T11326] usb 2-1: SerialNumber: syz [ 1244.845156][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1244.921699][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1244.924655][T11326] usb 2-1: config 0 descriptor?? [ 1245.002561][T11326] gspca_main: se401-2.14.0 probing 047d:5003 [ 1245.012756][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.043071][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1245.116754][T10661] Bluetooth: hci2: command tx timeout [ 1245.404365][T11326] gspca_se401: Wrong descriptor type [ 1245.689222][ T5867] usb 2-1: USB disconnect, device number 15 [ 1247.597353][T10661] Bluetooth: hci0: command tx timeout [ 1247.597699][T10661] Bluetooth: hci2: command tx timeout [ 1247.606345][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 1247.679350][T11984] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1248'. [ 1247.690037][T11984] overlayfs: failed to resolve './file0': -2 [ 1248.388490][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1248.675164][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1249.682075][ T62] Bluetooth: hci2: command tx timeout [ 1249.682113][ T62] Bluetooth: hci0: command tx timeout [ 1249.719950][T11751] team0: Port device team_slave_0 added [ 1249.961490][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 1251.292645][T11751] team0: Port device team_slave_1 added [ 1251.363947][T12000] ieee802154 phy0 wpan0: encryption failed: -22 [ 1251.588188][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 1251.716972][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.716994][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.717029][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.754841][ T62] Bluetooth: hci0: command tx timeout [ 1251.796168][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.796190][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.796223][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.376730][T12008] 9pnet_fd: Insufficient options for proto=fd [ 1253.834979][ T62] Bluetooth: hci0: command tx timeout [ 1254.034206][T11954] chnl_net:caif_netlink_parms(): no params data found [ 1254.082803][T11977] chnl_net:caif_netlink_parms(): no params data found [ 1254.482434][T12024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1255'. [ 1254.885324][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.885503][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.885759][T11954] bridge_slave_0: entered allmulticast mode [ 1254.890192][T11954] bridge_slave_0: entered promiscuous mode [ 1255.175481][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.175673][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.176073][T11954] bridge_slave_1: entered allmulticast mode [ 1255.182078][T11954] bridge_slave_1: entered promiscuous mode [ 1255.392870][T10661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1255.409295][T10661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1255.414335][T10661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1255.431874][T10661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1255.433988][T10661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1255.684647][T12033] ieee802154 phy0 wpan0: encryption failed: -22 [ 1255.740196][ T6350] bridge_slave_1: left allmulticast mode [ 1255.740220][ T6350] bridge_slave_1: left promiscuous mode [ 1255.740422][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.796077][ T6350] bridge_slave_0: left allmulticast mode [ 1255.796102][ T6350] bridge_slave_0: left promiscuous mode [ 1255.796338][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.911121][ T6350] bridge_slave_1: left allmulticast mode [ 1255.911148][ T6350] bridge_slave_1: left promiscuous mode [ 1255.911357][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.969683][ T6350] bridge_slave_0: left allmulticast mode [ 1255.969718][ T6350] bridge_slave_0: left promiscuous mode [ 1255.969925][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.031811][ T6350] bridge_slave_1: left allmulticast mode [ 1256.031838][ T6350] bridge_slave_1: left promiscuous mode [ 1256.032046][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.096693][ T6350] bridge_slave_0: left allmulticast mode [ 1256.096725][ T6350] bridge_slave_0: left promiscuous mode [ 1256.097051][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.609649][ T62] Bluetooth: hci3: command tx timeout [ 1258.037751][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.245498][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.318326][ T6350] bond0 (unregistering): Released all slaves [ 1259.535932][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.615738][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.685135][ T62] Bluetooth: hci3: command tx timeout [ 1259.703813][ T6350] bond0 (unregistering): Released all slaves [ 1259.945625][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.005639][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.047642][ T6350] bond0 (unregistering): Released all slaves [ 1260.088283][T12043] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1260.420681][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.420835][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.421084][T11977] bridge_slave_0: entered allmulticast mode [ 1260.460686][T11977] bridge_slave_0: entered promiscuous mode [ 1261.113915][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 1261.972073][ T62] Bluetooth: hci3: command tx timeout [ 1261.982283][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.982431][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.982623][T11977] bridge_slave_1: entered allmulticast mode [ 1261.985716][T11977] bridge_slave_1: entered promiscuous mode [ 1262.021191][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.272877][T12057] 9pnet_fd: Insufficient options for proto=fd [ 1262.291135][T12059] ieee802154 phy0 wpan0: encryption failed: -22 [ 1262.457854][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.576276][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1262'. [ 1263.282197][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.542173][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.552057][T11954] team0: Port device team_slave_0 added [ 1263.669004][T11954] team0: Port device team_slave_1 added [ 1263.912232][T11977] team0: Port device team_slave_0 added [ 1263.926373][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.945741][T12068] Bluetooth: MGMT ver 1.23 [ 1263.965662][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.995043][ T62] Bluetooth: hci3: command tx timeout [ 1264.145218][ T6350] hsr_slave_0: left promiscuous mode [ 1264.164962][ T6350] hsr_slave_1: left promiscuous mode [ 1264.165890][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.215716][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.365082][ T6350] hsr_slave_0: left promiscuous mode [ 1264.385051][ T6350] hsr_slave_1: left promiscuous mode [ 1264.385911][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.435870][ T6350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.925619][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1266.096491][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1267.642640][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1268.030183][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1269.307160][T12091] 9pnet_fd: Insufficient options for proto=fd [ 1269.805866][ T6350] team0 (unregistering): Port device team_slave_1 removed [ 1269.979958][ T6350] team0 (unregistering): Port device team_slave_0 removed [ 1270.198617][T12093] ieee802154 phy0 wpan0: encryption failed: -22 [ 1270.436372][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 1271.283715][T11977] team0: Port device team_slave_1 added [ 1271.607776][T12099] ieee802154 phy0 wpan0: encryption failed: -22 [ 1272.044072][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 1272.221565][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.221581][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.221602][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.264899][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1272.425236][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1272.463044][ T9] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1272.463074][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.463089][ T9] usb 2-1: Product: syz [ 1272.463100][ T9] usb 2-1: Manufacturer: syz [ 1272.463111][ T9] usb 2-1: SerialNumber: syz [ 1272.478054][ T9] usb 2-1: config 0 descriptor?? [ 1272.489376][ T9] usb 2-1: bad CDC descriptors [ 1272.780340][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.783303][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.789622][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.790307][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.422028][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.422044][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.422065][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.573584][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.573599][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.573620][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.639523][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.639538][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.639560][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.647107][T11954] hsr_slave_0: entered promiscuous mode [ 1274.648342][T11954] hsr_slave_1: entered promiscuous mode [ 1275.272847][T11977] hsr_slave_0: entered promiscuous mode [ 1275.273947][T11977] hsr_slave_1: entered promiscuous mode [ 1275.274669][T11977] debugfs: 'hsr0' already exists in 'hsr' [ 1275.274690][T11977] Cannot create hsr debugfs directory [ 1276.743213][T11326] usb 2-1: USB disconnect, device number 16 [ 1277.599486][T12126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1278'. [ 1278.777642][T12126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.870457][T12126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.915915][T12126] bond0 (unregistering): Released all slaves [ 1279.624672][T12030] chnl_net:caif_netlink_parms(): no params data found [ 1281.663136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1282.024965][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1282.104114][T12030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.104336][T12030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.104537][T12030] bridge_slave_0: entered allmulticast mode [ 1282.109236][T12030] bridge_slave_0: entered promiscuous mode [ 1282.215124][T12030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.215225][T12030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.229009][T12030] bridge_slave_1: entered allmulticast mode [ 1282.232412][T12030] bridge_slave_1: entered promiscuous mode [ 1282.250878][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1282.277265][ T9] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1282.277300][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.277321][ T9] usb 2-1: Product: syz [ 1282.277336][ T9] usb 2-1: Manufacturer: syz [ 1282.277352][ T9] usb 2-1: SerialNumber: syz [ 1282.322861][ T9] usb 2-1: config 0 descriptor?? [ 1282.350224][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1282.750987][T12030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.764897][ T9] gspca_se401: Wrong descriptor type [ 1282.780763][T12030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.982480][T11326] usb 2-1: USB disconnect, device number 17 [ 1283.164287][T12030] team0: Port device team_slave_0 added [ 1283.246561][T12030] team0: Port device team_slave_1 added [ 1283.493795][T12030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.493812][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.493843][T12030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.499728][T12030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.499750][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.499783][T12030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.077017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.282041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1285.370766][T12030] hsr_slave_0: entered promiscuous mode [ 1285.390445][T12030] hsr_slave_1: entered promiscuous mode [ 1285.402108][T12030] debugfs: 'hsr0' already exists in 'hsr' [ 1285.402139][T12030] Cannot create hsr debugfs directory [ 1285.403553][T11954] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1285.534859][T11954] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1286.665852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1286.742620][T11954] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1287.217621][T11954] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1288.555978][T12173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 1290.386147][T12180] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1291.149352][T11977] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1292.835279][T11977] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1293.495078][T11977] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1293.647210][T11977] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1294.780137][T12030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1294.833933][T12030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1294.884099][T12030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1295.256971][T12030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1295.642730][T11954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.621239][T11954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.657483][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.703642][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.713595][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.768487][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.768731][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.843304][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.899178][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.899390][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.999602][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.999769][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.428691][T12030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.591478][T12030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.809271][T12250] blktrace: Concurrent blktraces are not allowed on loop0 [ 1299.950427][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.951055][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.991215][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.017875][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.947823][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 1302.434299][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.109851][T10661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1303.112990][T10661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1303.115216][T10661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1303.128360][T10661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1303.140611][T10661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1304.762252][T12030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.194917][ T62] Bluetooth: hci2: command tx timeout [ 1305.314596][T12290] chnl_net:caif_netlink_parms(): no params data found [ 1305.530090][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.530174][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.063471][T10661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1307.076906][T10661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1307.079208][T10661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1307.082132][T10661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1307.082999][T10661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1307.285441][ T62] Bluetooth: hci2: command tx timeout [ 1308.755277][T12336] program syz.1.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1308.959556][ T6241] bridge_slave_1: left allmulticast mode [ 1308.959578][ T6241] bridge_slave_1: left promiscuous mode [ 1308.959757][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.021906][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.023476][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.023576][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.023640][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.023701][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.023761][ T6350] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.076031][ T6241] bridge_slave_0: left allmulticast mode [ 1309.076056][ T6241] bridge_slave_0: left promiscuous mode [ 1309.076271][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.195878][T10661] Bluetooth: hci0: command tx timeout [ 1309.355530][T10661] Bluetooth: hci2: command tx timeout [ 1311.045978][ T62] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1311.275914][T10661] Bluetooth: hci0: command tx timeout [ 1311.434950][T10661] Bluetooth: hci2: command tx timeout [ 1311.485976][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.546678][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.568128][ T6241] bond0 (unregistering): Released all slaves [ 1311.615686][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.615825][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.616093][T12290] bridge_slave_0: entered allmulticast mode [ 1311.618340][T12290] bridge_slave_0: entered promiscuous mode [ 1311.684352][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.684652][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.691637][T12290] bridge_slave_1: entered allmulticast mode [ 1311.696098][T12290] bridge_slave_1: entered promiscuous mode [ 1312.034334][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.157207][ T6241] hsr_slave_0: left promiscuous mode [ 1312.175480][ T6241] hsr_slave_1: left promiscuous mode [ 1312.176513][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.217693][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.354874][T10661] Bluetooth: hci0: command tx timeout [ 1313.395593][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 1313.649927][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 1315.365085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.434881][T10661] Bluetooth: hci0: command tx timeout [ 1315.484341][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.548110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.568232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.669247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.716603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1316.770318][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.115196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.201931][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.664996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.253893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1320.817291][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1320.841658][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1320.843453][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1320.859990][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1320.860967][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1320.971354][T12371] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1323.075092][ T62] Bluetooth: hci5: command tx timeout [ 1323.336582][T12290] team0: Port device team_slave_0 added [ 1323.357788][T12290] team0: Port device team_slave_1 added [ 1324.760349][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 1324.911036][T12397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1322'. [ 1325.118371][ T62] Bluetooth: hci5: command tx timeout [ 1325.418710][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.418730][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.418761][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.501362][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.501381][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.501413][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.142706][T12290] hsr_slave_0: entered promiscuous mode [ 1326.143817][T12290] hsr_slave_1: entered promiscuous mode [ 1326.226195][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 1326.307752][T12404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1325'. [ 1327.195249][ T62] Bluetooth: hci5: command tx timeout [ 1327.879344][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'. [ 1327.881697][T12327] chnl_net:caif_netlink_parms(): no params data found [ 1327.993660][T12432] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1329'. [ 1328.511291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.421685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.423464][ T62] Bluetooth: hci5: command tx timeout [ 1329.550824][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'. [ 1330.970381][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.426518][T12449] ieee802154 phy0 wpan0: encryption failed: -22 [ 1331.691423][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1334'. [ 1332.582976][T12374] chnl_net:caif_netlink_parms(): no params data found [ 1334.562441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.599058][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.605837][T12471] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.658852][T12465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 1334.659559][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.659787][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.660053][T12327] bridge_slave_0: entered allmulticast mode [ 1334.663022][T12327] bridge_slave_0: entered promiscuous mode [ 1334.833088][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 1334.941559][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.941677][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.941839][T12327] bridge_slave_1: entered allmulticast mode [ 1334.954204][T12327] bridge_slave_1: entered promiscuous mode [ 1335.111176][T12478] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1340'. [ 1336.397260][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.590563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.077068][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.286523][T12374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.286708][T12374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.286956][T12374] bridge_slave_0: entered allmulticast mode [ 1339.289959][T12374] bridge_slave_0: entered promiscuous mode [ 1340.577690][T12374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.577787][T12374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.577982][T12374] bridge_slave_1: entered allmulticast mode [ 1340.580064][T12374] bridge_slave_1: entered promiscuous mode [ 1340.601015][T12327] team0: Port device team_slave_0 added [ 1340.941235][T12327] team0: Port device team_slave_1 added [ 1345.522958][T12511] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1345.693091][T12374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.131759][T12374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.148014][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.148031][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.148055][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.446526][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.446547][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.446593][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.411299][T12528] ieee802154 phy0 wpan0: encryption failed: -22 [ 1347.690848][T12374] team0: Port device team_slave_0 added [ 1347.706421][T12374] team0: Port device team_slave_1 added [ 1348.868064][T12290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1348.896181][T12327] hsr_slave_0: entered promiscuous mode [ 1348.897318][T12327] hsr_slave_1: entered promiscuous mode [ 1348.898039][T12327] debugfs: 'hsr0' already exists in 'hsr' [ 1348.898058][T12327] Cannot create hsr debugfs directory [ 1348.898326][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 1348.898359][T12541] bridge_slave_0: default FDB implementation only supports local addresses [ 1348.899312][T12374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.899327][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.899357][T12374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.903511][T12290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1349.021468][T12374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.021487][T12374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.021513][T12374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.022840][T12290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1349.261706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.360757][T12290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1350.366315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.543785][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.959610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.388756][T12374] hsr_slave_0: entered promiscuous mode [ 1351.390073][T12374] hsr_slave_1: entered promiscuous mode [ 1351.391480][T12374] debugfs: 'hsr0' already exists in 'hsr' [ 1351.391501][T12374] Cannot create hsr debugfs directory [ 1351.421912][T12560] ieee802154 phy0 wpan0: encryption failed: -22 [ 1352.216255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.562253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.775481][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 1353.778557][ T1131] bridge_slave_1: left allmulticast mode [ 1353.778585][ T1131] bridge_slave_1: left promiscuous mode [ 1353.778855][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.076654][ T1131] bridge_slave_0: left allmulticast mode [ 1354.076680][ T1131] bridge_slave_0: left promiscuous mode [ 1354.076869][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.988102][ T1131] bridge_slave_1: left allmulticast mode [ 1354.988128][ T1131] bridge_slave_1: left promiscuous mode [ 1354.988308][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.056080][ T1131] bridge_slave_0: left allmulticast mode [ 1355.056115][ T1131] bridge_slave_0: left promiscuous mode [ 1355.056353][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.865574][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.946010][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.970960][ T1131] bond0 (unregistering): Released all slaves [ 1358.696601][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.776798][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.799627][ T1131] bond0 (unregistering): Released all slaves [ 1358.856796][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 1358.856823][T12585] bridge_slave_0: default FDB implementation only supports local addresses [ 1360.356286][T12600] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.874978][ T1131] hsr_slave_0: left promiscuous mode [ 1361.915002][ T1131] hsr_slave_1: left promiscuous mode [ 1361.916075][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.956285][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.109759][T12609] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.224945][ T1131] hsr_slave_0: left promiscuous mode [ 1362.332980][ T1131] hsr_slave_1: left promiscuous mode [ 1362.334119][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.447066][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.527138][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 1364.682667][T10661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1364.703463][T10661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1364.705515][T10661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1364.706887][T10661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1364.707755][T10661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1366.795129][T10661] Bluetooth: hci2: command tx timeout [ 1366.962240][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.962329][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.265681][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1367.525694][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1368.574368][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.770249][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.813022][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.857541][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.893091][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1369.274928][T10661] Bluetooth: hci2: command tx timeout [ 1370.862899][T12642] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.114973][T10661] Bluetooth: hci3: command tx timeout [ 1371.384850][T10661] Bluetooth: hci2: command tx timeout [ 1373.194944][T10661] Bluetooth: hci3: command tx timeout [ 1373.434819][T10661] Bluetooth: hci2: command tx timeout [ 1373.825592][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1374.296625][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1375.275142][T10661] Bluetooth: hci3: command tx timeout [ 1377.836438][T10661] Bluetooth: hci3: command tx timeout [ 1379.365831][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 1379.365855][T12621] bridge_slave_0: default FDB implementation only supports local addresses [ 1379.986905][T12685] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1386'. [ 1381.409337][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1381.414090][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1381.439564][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1381.463424][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1381.464352][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1381.790589][T10661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1381.795076][T10661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1381.809116][T10661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1381.855452][T10661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1381.856401][T10661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1383.197880][T12616] chnl_net:caif_netlink_parms(): no params data found [ 1383.227531][T12632] chnl_net:caif_netlink_parms(): no params data found [ 1383.605291][ T62] Bluetooth: hci0: command tx timeout [ 1383.924914][T10661] Bluetooth: hci1: command tx timeout [ 1385.006227][T12616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.006460][T12616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.006690][T12616] bridge_slave_0: entered allmulticast mode [ 1385.009750][T12616] bridge_slave_0: entered promiscuous mode [ 1385.065039][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.065181][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.065470][T12632] bridge_slave_0: entered allmulticast mode [ 1385.068434][T12632] bridge_slave_0: entered promiscuous mode [ 1385.109684][T12616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.109821][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.110537][T12616] bridge_slave_1: entered allmulticast mode [ 1385.113510][T12616] bridge_slave_1: entered promiscuous mode [ 1385.153870][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.154029][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.154275][T12632] bridge_slave_1: entered allmulticast mode [ 1385.177833][T12632] bridge_slave_1: entered promiscuous mode [ 1385.651590][T12616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.658832][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.681062][T12616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.684828][T10661] Bluetooth: hci0: command tx timeout [ 1385.690198][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.001375][T10661] Bluetooth: hci1: command tx timeout [ 1386.803471][T12616] team0: Port device team_slave_0 added [ 1386.923616][T12632] team0: Port device team_slave_0 added [ 1386.935872][T12616] team0: Port device team_slave_1 added [ 1387.014173][T12632] team0: Port device team_slave_1 added [ 1387.689334][T12616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.689354][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.689385][T12616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.754999][T10661] Bluetooth: hci0: command tx timeout [ 1387.783394][T12632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.783407][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.783430][T12632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.789691][T12616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.789716][T12616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.789753][T12616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.046252][T12632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.046271][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.046302][T12632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.075194][T10661] Bluetooth: hci1: command tx timeout [ 1388.128018][T12699] chnl_net:caif_netlink_parms(): no params data found [ 1388.535696][T12696] chnl_net:caif_netlink_parms(): no params data found [ 1388.704145][T12616] hsr_slave_0: entered promiscuous mode [ 1388.706207][T12616] hsr_slave_1: entered promiscuous mode [ 1388.707417][T12616] debugfs: 'hsr0' already exists in 'hsr' [ 1388.707457][T12616] Cannot create hsr debugfs directory [ 1388.994361][T12632] hsr_slave_0: entered promiscuous mode [ 1389.000610][T12632] hsr_slave_1: entered promiscuous mode [ 1389.001697][T12632] debugfs: 'hsr0' already exists in 'hsr' [ 1389.001718][T12632] Cannot create hsr debugfs directory [ 1389.498161][T12699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.498344][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.498507][T12699] bridge_slave_0: entered allmulticast mode [ 1389.500627][T12699] bridge_slave_0: entered promiscuous mode [ 1389.706180][T12699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.706328][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.706587][T12699] bridge_slave_1: entered allmulticast mode [ 1389.709016][T12699] bridge_slave_1: entered promiscuous mode [ 1389.835206][T10661] Bluetooth: hci0: command tx timeout [ 1389.944174][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.944286][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.945714][T12696] bridge_slave_0: entered allmulticast mode [ 1389.949018][T12696] bridge_slave_0: entered promiscuous mode [ 1390.066763][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.067013][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.067284][T12696] bridge_slave_1: entered allmulticast mode [ 1390.073275][T12745] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1393'. [ 1390.088697][T12696] bridge_slave_1: entered promiscuous mode [ 1390.162984][T10661] Bluetooth: hci1: command tx timeout [ 1390.228739][T12699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.379397][T12699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.711814][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.859399][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.023914][T12699] team0: Port device team_slave_0 added [ 1391.165778][T12699] team0: Port device team_slave_1 added [ 1391.346176][ T1131] bridge_slave_1: left allmulticast mode [ 1391.346209][ T1131] bridge_slave_1: left promiscuous mode [ 1391.346413][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.396051][ T1131] bridge_slave_0: left allmulticast mode [ 1391.396077][ T1131] bridge_slave_0: left promiscuous mode [ 1391.396293][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.472521][ T1131] bridge_slave_1: left allmulticast mode [ 1391.472545][ T1131] bridge_slave_1: left promiscuous mode [ 1391.472738][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.526193][ T1131] bridge_slave_0: left allmulticast mode [ 1391.526219][ T1131] bridge_slave_0: left promiscuous mode [ 1391.526424][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.604489][ T1131] bridge_slave_1: left allmulticast mode [ 1391.604514][ T1131] bridge_slave_1: left promiscuous mode [ 1391.605252][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.668135][ T1131] bridge_slave_0: left allmulticast mode [ 1391.668165][ T1131] bridge_slave_0: left promiscuous mode [ 1391.668358][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.128329][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.205835][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.270171][ T1131] bond0 (unregistering): Released all slaves [ 1392.475699][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.556251][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.638400][ T1131] bond0 (unregistering): Released all slaves [ 1392.738180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.007158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.073438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.257606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.406006][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.515113][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.587643][ T1131] bond0 (unregistering): Released all slaves [ 1393.702973][T12696] team0: Port device team_slave_0 added [ 1393.826376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.039395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.275212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.332857][T12696] team0: Port device team_slave_1 added [ 1394.354032][T12699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.354050][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.354080][T12699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.442989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.491364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.657405][T12699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.657427][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.657448][T12699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.819427][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.819442][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.819464][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.988310][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.988325][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.988346][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.115066][ T1215] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1395.256120][ T1131] hsr_slave_0: left promiscuous mode [ 1395.266594][ T1215] usb 1-1: Using ep0 maxpacket: 16 [ 1395.288862][ T1131] hsr_slave_1: left promiscuous mode [ 1395.291071][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.293307][ T1215] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1395.293330][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.293344][ T1215] usb 1-1: Product: syz [ 1395.293355][ T1215] usb 1-1: Manufacturer: syz [ 1395.293366][ T1215] usb 1-1: SerialNumber: syz [ 1395.303205][ T1215] usb 1-1: config 0 descriptor?? [ 1395.358060][ T1215] usb 1-1: bad CDC descriptors [ 1395.381529][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.545161][ T1131] hsr_slave_0: left promiscuous mode [ 1395.565090][ T1131] hsr_slave_1: left promiscuous mode [ 1395.565879][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.587723][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.588370][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.622984][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.775179][ T1131] hsr_slave_0: left promiscuous mode [ 1395.795072][ T1131] hsr_slave_1: left promiscuous mode [ 1395.798893][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.848946][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.757705][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1396.917005][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1398.205645][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1398.365446][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1398.503642][ T5789] usb 1-1: USB disconnect, device number 24 [ 1401.006017][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1401.165775][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1401.964129][T12699] hsr_slave_0: entered promiscuous mode [ 1401.979114][T12699] hsr_slave_1: entered promiscuous mode [ 1402.382777][T12696] hsr_slave_0: entered promiscuous mode [ 1402.384150][T12696] hsr_slave_1: entered promiscuous mode [ 1402.387218][T12696] debugfs: 'hsr0' already exists in 'hsr' [ 1402.387253][T12696] Cannot create hsr debugfs directory [ 1403.384454][T12632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1403.487901][T12632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1403.557616][T12632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1403.611476][T12632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1403.725649][T12616] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1403.780428][T12616] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1403.824166][T12616] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1403.903652][T12616] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1404.082803][T12699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1404.141457][T12699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1404.182281][T12699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1404.298354][T12699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1404.569674][T12696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1404.615588][T12696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1404.657999][T12696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1404.722932][T12696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1404.873363][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.018244][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.052709][T12616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.059241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.094469][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.102102][ T9665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.163225][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.179178][ T9665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.301164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.435160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.118025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.206328][T12616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.272751][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.283986][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.351642][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.351821][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.422469][T12699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.602372][T12699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.610202][T12696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.696442][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.698152][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.756820][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.757016][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.800292][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.010896][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.023841][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.169695][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.169883][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.701251][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.914331][T12616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.781645][T12699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.991731][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.449292][T12632] veth0_vlan: entered promiscuous mode [ 1409.588223][T12632] veth1_vlan: entered promiscuous mode [ 1409.890589][T12616] veth0_vlan: entered promiscuous mode [ 1409.898446][T12632] veth0_macvtap: entered promiscuous mode [ 1409.966871][T12632] veth1_macvtap: entered promiscuous mode [ 1409.993169][T12616] veth1_vlan: entered promiscuous mode [ 1410.213228][T12632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.299149][T12632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.394255][ T1131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.418406][ T1131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.424497][ T1131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.456499][ T1131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.546276][T12616] veth0_macvtap: entered promiscuous mode [ 1410.551079][T12699] veth0_vlan: entered promiscuous mode [ 1410.649188][T12696] veth0_vlan: entered promiscuous mode [ 1410.665203][T12616] veth1_macvtap: entered promiscuous mode [ 1410.732717][T12699] veth1_vlan: entered promiscuous mode [ 1410.791690][T12696] veth1_vlan: entered promiscuous mode [ 1410.940677][T12616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.980305][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.980329][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.032670][T12616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.132896][ T9665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.145471][ T9665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.152526][ T9665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.152733][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.152751][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.163700][ T9665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.255330][T12699] veth0_macvtap: entered promiscuous mode [ 1411.315388][T12696] veth0_macvtap: entered promiscuous mode [ 1411.395905][T12699] veth1_macvtap: entered promiscuous mode [ 1411.427670][T12696] veth1_macvtap: entered promiscuous mode [ 1411.670661][T12699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.864071][T12699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.781674][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.788543][ T6353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.788570][ T6353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.921321][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.935488][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.010527][T12904] program syz.6.1407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1414.136471][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.146068][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.248257][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.253386][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.253902][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.254602][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.294781][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.453703][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.453824][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.407978][T12918] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1410'. [ 1417.693576][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.693601][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.902585][T12937] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.951667][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.951691][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.084606][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.084631][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.409564][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1414'. [ 1423.182819][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.182837][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.367223][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1416'. [ 1423.570994][T12952] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1416'. [ 1423.755001][T12953] bridge_slave_1: left allmulticast mode [ 1423.755035][T12953] bridge_slave_1: left promiscuous mode [ 1423.755326][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.205791][T12953] bridge_slave_0: left allmulticast mode [ 1425.205825][T12953] bridge_slave_0: left promiscuous mode [ 1425.206133][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.415730][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.415818][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.509928][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1430.529834][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1430.531495][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1430.533926][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1431.495682][T12619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1434.962273][T10661] Bluetooth: hci5: command tx timeout [ 1435.987505][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 1437.034866][T10661] Bluetooth: hci5: command tx timeout [ 1437.078561][T13012] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1439.166366][T10661] Bluetooth: hci5: command tx timeout [ 1439.574305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.659453][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.820221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.063079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.695304][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.930166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.208453][T10661] Bluetooth: hci5: command tx timeout [ 1441.287898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.484195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.627696][ C1] vkms_vblank_simulate: vblank timer overrun [ 1442.301010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.646409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.083188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1448.229539][T13089] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1446'. [ 1448.563933][T12995] chnl_net:caif_netlink_parms(): no params data found [ 1449.033031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.630285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.421747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.035072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.218865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.425907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.485201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.792281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.817046][T13117] capability: warning: `syz.6.1453' uses deprecated v2 capabilities in a way that may be insecure [ 1464.086290][T13153] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1462'. [ 1466.901821][T12995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.901921][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.902132][T12995] bridge_slave_0: entered allmulticast mode [ 1466.914360][T12995] bridge_slave_0: entered promiscuous mode [ 1467.025348][T12995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.025581][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.025888][T12995] bridge_slave_1: entered allmulticast mode [ 1467.088793][T12995] bridge_slave_1: entered promiscuous mode [ 1468.770162][T12995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.799219][T13176] ieee802154 phy0 wpan0: encryption failed: -22 [ 1469.003287][T13182] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1468'. [ 1469.142001][ T1174] hsr_slave_0: left promiscuous mode [ 1469.182968][ T1174] hsr_slave_1: left promiscuous mode [ 1469.183980][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.687883][T13187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1471'. [ 1469.689976][T13187] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1471'. [ 1469.695816][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.209037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.214018][T13194] Bluetooth: MGMT ver 1.23 [ 1470.288695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.439586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.627283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.497951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.052322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.934033][T12619] Bluetooth: hci5: command 0x0405 tx timeout [ 1473.027422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.191836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.568177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.780315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.341648][T13227] ieee802154 phy0 wpan0: encryption failed: -22 [ 1476.757309][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1483'. [ 1483.396992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.613781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.868552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.169087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.371852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.492025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1485.674829][ T1003] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1485.840323][ T1003] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1485.840368][ T1003] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1485.840413][ T1003] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1485.840439][ T1003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.147656][T13268] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1486.183871][ T1003] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.591043][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.796091][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.939184][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1498'. [ 1486.940342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.052879][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.736607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.921176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.065478][ C0] vkms_vblank_simulate: vblank timer overrun [ 1488.265299][ T1003] usb 9-1: USB disconnect, device number 2 [ 1488.893677][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 1489.268188][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 1489.305181][T10661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1489.351274][T10661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1489.352651][T10661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1489.353947][T10661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1489.357546][T10661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1489.881062][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.881162][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.521365][T10661] Bluetooth: hci4: command tx timeout [ 1491.927105][T10661] Bluetooth: hci2: command 0x0406 tx timeout [ 1491.927247][T10661] Bluetooth: hci3: command 0x0406 tx timeout [ 1492.668881][T12995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.650998][T12619] Bluetooth: hci4: command tx timeout [ 1494.893412][T13326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.737508][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1510'. [ 1495.790507][T12619] Bluetooth: hci4: command tx timeout [ 1496.375616][T13292] chnl_net:caif_netlink_parms(): no params data found [ 1496.945457][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.345207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.648855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.843600][T12619] Bluetooth: hci4: command tx timeout [ 1498.424197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.710591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1499.094725][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.097319][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.097616][T13292] bridge_slave_0: entered allmulticast mode [ 1499.169749][T13292] bridge_slave_0: entered promiscuous mode [ 1499.196620][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.196819][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.197103][T13292] bridge_slave_1: entered allmulticast mode [ 1499.203336][T13292] bridge_slave_1: entered promiscuous mode [ 1499.749517][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.780390][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.476184][T13292] team0: Port device team_slave_0 added [ 1500.493078][T13292] team0: Port device team_slave_1 added [ 1500.866411][ T1174] bridge_slave_1: left allmulticast mode [ 1500.866442][ T1174] bridge_slave_1: left promiscuous mode [ 1500.866696][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.061975][ T1174] bridge_slave_0: left allmulticast mode [ 1501.062008][ T1174] bridge_slave_0: left promiscuous mode [ 1501.062330][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.946942][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.190714][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.768174][ T1174] bond0 (unregistering): Released all slaves [ 1505.335978][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.336010][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.336039][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.374846][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.374865][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.374890][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.800523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.179319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.348947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.646384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.888406][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.288260][T10661] Bluetooth: hci0: command 0x0406 tx timeout [ 1507.288303][T10661] Bluetooth: hci1: command 0x0406 tx timeout [ 1507.296402][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.495140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.743079][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.910680][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.614381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.717590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.132322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.368112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1511.898102][T13292] hsr_slave_0: entered promiscuous mode [ 1511.899639][T13292] hsr_slave_1: entered promiscuous mode [ 1511.900687][T13292] debugfs: 'hsr0' already exists in 'hsr' [ 1511.900713][T13292] Cannot create hsr debugfs directory [ 1515.327867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1515.454032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.237260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.504281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.955057][T12808] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1517.267915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.103944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.288308][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.521520][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.538972][T12808] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1519.539014][T12808] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1519.539059][T12808] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1519.539086][T12808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.603212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1519.708370][T13478] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1519.786587][T12808] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1520.069974][T12808] usb 9-1: USB disconnect, device number 3 [ 1532.090873][T13292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1532.186241][T13292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1532.277944][T13292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1532.375992][T13292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1533.061352][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.127605][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.155559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.155905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.187344][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.202175][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1535.521890][T13630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1574'. [ 1538.125484][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.400783][T13292] veth0_vlan: entered promiscuous mode [ 1539.429651][T13657] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1539.431870][T13292] veth1_vlan: entered promiscuous mode [ 1540.698998][T13292] veth0_macvtap: entered promiscuous mode [ 1540.717284][T13292] veth1_macvtap: entered promiscuous mode [ 1540.824532][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1540.900094][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.976885][ T1174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.988108][ T1174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.992251][ T1174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.010124][ T1174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.397395][T13691] ALSA: mixer_oss: invalid OSS volume '' [ 1543.635855][T13693] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1586'. [ 1543.908061][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.908085][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.364484][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.364505][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.063163][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.658009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.307633][T13726] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1547.927603][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.625575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.894293][ C0] vkms_vblank_simulate: vblank timer overrun [ 1551.674957][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.675024][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.709534][T13774] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1555.003875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.942696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.293140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.595748][T13797] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 1558.929030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.671017][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1612'. [ 1560.834923][T12256] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1561.965483][T12256] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1561.965512][T12256] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1561.965542][T12256] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1561.965560][T12256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.056336][T13815] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1562.160348][T12256] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1563.228277][T12808] usb 7-1: USB disconnect, device number 2 [ 1565.253912][T13839] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 1565.358001][T13842] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1620'. [ 1566.397286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.819773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.022746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.255767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.427103][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.513693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.676691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.867738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.460852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.663625][T13879] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 1570.944802][ T1215] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1571.104762][ T1215] usb 6-1: Using ep0 maxpacket: 16 [ 1571.122617][ T1215] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1571.122657][ T1215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.122683][ T1215] usb 6-1: Product: syz [ 1571.122702][ T1215] usb 6-1: Manufacturer: syz [ 1571.122719][ T1215] usb 6-1: SerialNumber: syz [ 1571.134073][ T1215] usb 6-1: config 0 descriptor?? [ 1571.169459][ T1215] usb 6-1: bad CDC descriptors [ 1571.172978][T13885] ieee802154 phy0 wpan0: encryption failed: -22 [ 1571.545349][T13887] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1634'. [ 1575.353348][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1638'. [ 1576.591784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.903983][T12804] usb 6-1: USB disconnect, device number 2 [ 1577.603864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.637937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.001257][T13937] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.411349][T13937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1650'. [ 1583.720909][T13968] ieee802154 phy0 wpan0: encryption failed: -22 [ 1587.014361][T13984] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1661'. [ 1587.449271][T13988] team0: No ports can be present during mode change [ 1589.587981][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1666'. [ 1592.458752][T14015] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1672'. [ 1592.795204][T14013] ieee802154 phy0 wpan0: encryption failed: -22 [ 1594.129662][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1671'. [ 1601.891496][T14067] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1684'. [ 1606.352463][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1689'. [ 1606.644533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.555719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.616505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.746939][T14110] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1697'. [ 1608.989405][T14112] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.263732][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1698'. [ 1610.352243][T14124] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1611.638342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.671127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.796198][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.838634][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.840277][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.034855][T12619] Bluetooth: hci4: command 0x0406 tx timeout [ 1616.975631][T14158] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1710'. [ 1617.207067][T14163] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.613310][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.441992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.528541][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1711'. [ 1618.853572][T14178] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1619.814207][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.712586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.478331][T14194] program syz.7.1719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1623.308208][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.479242][ C1] vkms_vblank_simulate: vblank timer overrun [ 1623.622759][T14203] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1723'. [ 1624.157531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1624.407975][T14212] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1624.837625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.051410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1625.255846][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1728'. [ 1625.970614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1626.277237][ C1] vkms_vblank_simulate: vblank timer overrun [ 1627.477416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.023509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.123347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.223634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.418072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.329990][T14247] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1737'. [ 1630.478766][T14249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1630.552238][T14250] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1630.682366][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1738'. [ 1632.419223][ C1] vkms_vblank_simulate: vblank timer overrun [ 1633.301862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.479250][T14286] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1749'. [ 1636.739049][T14288] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1637.014748][T12804] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1638.047016][T12804] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1638.047056][T12804] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1638.047099][T12804] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1638.047126][T12804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.098497][T14290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1638.122992][T12804] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1639.048720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.516773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.901991][T12804] usb 1-1: USB disconnect, device number 25 [ 1640.436580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1640.480374][T14319] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1759'. [ 1640.502417][T14320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1641.207467][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.494813][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.790279][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1760'. [ 1644.191955][T14340] syz.6.1764 uses obsolete (PF_INET,SOCK_PACKET) [ 1650.742686][ T5867] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1651.833252][ T5867] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1651.833294][ T5867] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1651.833340][ T5867] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1651.833367][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.907377][T14367] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1651.941966][ T5867] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1652.374882][ T5867] usb 8-1: USB disconnect, device number 2 [ 1652.775209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.097390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.704946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1655.079279][T14394] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1655.308758][T14398] ieee802154 phy0 wpan0: encryption failed: -22 [ 1656.385139][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1779'. [ 1658.565945][ C0] vkms_vblank_simulate: vblank timer overrun [ 1659.629570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1660.037833][ C0] vkms_vblank_simulate: vblank timer overrun [ 1660.555541][T14427] warning: `syz.6.1786' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1660.893928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.311941][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 1669.535034][T14481] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1800'. [ 1672.409076][T14495] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1803'. [ 1673.010628][T14500] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.626505][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1806'. [ 1674.172514][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.172591][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.528564][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1822'. [ 1683.718439][T14566] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1686.289316][T14575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1827'. [ 1686.434067][T14582] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1829'. [ 1686.456288][T14583] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1828'. [ 1686.625981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1687.896738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.280008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.298648][T14596] ieee802154 phy0 wpan0: encryption failed: -22 [ 1688.434224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.578804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.710744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.854451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1688.894665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.349620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1689.591954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.192656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.265949][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.801760][T14582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.414875][T14582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.601871][T14613] blktrace: Concurrent blktraces are not allowed on loop10 [ 1693.094122][T14582] bond0 (unregistering): Released all slaves [ 1693.463663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1693.544980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1693.735130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.502764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.564691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.903252][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.955730][T14616] kthread_run failed with err -4 [ 1695.035862][T14627] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1840'. [ 1695.509514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.159358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.398021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.445476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1696.521499][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.703321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.964756][T14651] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1699.488809][T14657] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1849'. [ 1703.597046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.328647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.650131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.014790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.777870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.953029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.129026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1706.412087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.414727][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.451761][ C1] vkms_vblank_simulate: vblank timer overrun [ 1707.465178][T14686] ieee802154 phy0 wpan0: encryption failed: -22 [ 1707.767192][T14692] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1708.004205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1709.454749][T13820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1709.734944][T13820] usb 6-1: Using ep0 maxpacket: 16 [ 1709.777500][T13820] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1709.777529][T13820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.777544][T13820] usb 6-1: Product: syz [ 1709.777555][T13820] usb 6-1: Manufacturer: syz [ 1709.777571][T13820] usb 6-1: SerialNumber: syz [ 1709.806582][T13820] usb 6-1: config 0 descriptor?? [ 1709.835449][T13820] usb 6-1: bad CDC descriptors [ 1710.172123][T14702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.172867][T14702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.435834][ T5867] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1711.801961][ T5867] usb 9-1: Using ep0 maxpacket: 8 [ 1711.814680][ T5867] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1711.825175][ T5867] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1711.825220][ T5867] usb 9-1: can't read configurations, error -71 [ 1714.274911][T14729] blktrace: Concurrent blktraces are not allowed on loop0 [ 1715.868007][T14738] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1716.242888][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1873'. [ 1718.560702][T14755] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1878'. [ 1718.805448][ T5789] usb 6-1: USB disconnect, device number 3 [ 1720.368007][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1877'. [ 1723.305552][T14792] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1725.434882][ T1215] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1726.408170][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1887'. [ 1726.427671][ T1215] usb 8-1: Using ep0 maxpacket: 8 [ 1726.442719][ T1215] usb 8-1: config 0 has an invalid interface number: 122 but max is 0 [ 1726.442753][ T1215] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.442775][ T1215] usb 8-1: config 0 has no interface number 0 [ 1726.442832][ T1215] usb 8-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1727.413493][ T1215] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1727.413519][ T1215] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.413534][ T1215] usb 8-1: Product: syz [ 1727.413545][ T1215] usb 8-1: Manufacturer: syz [ 1727.413557][ T1215] usb 8-1: SerialNumber: syz [ 1727.456632][ T1215] usb 8-1: config 0 descriptor?? [ 1727.699435][ T1215] usb 8-1: NFC: intf ffff88804fbbf000 id ffffffff8de98420 [ 1727.735619][ T1215] usb 8-1: USB disconnect, device number 3 [ 1731.344107][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1896'. [ 1732.482040][T14840] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1732.482062][T14840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1732.522772][T14840] vhci_hcd vhci_hcd.0: Device attached [ 1732.638099][T14843] IPVS: set_ctl: invalid protocol: 29546 172.20.20.187:20002 [ 1732.694887][ T5867] vhci_hcd: vhci_device speed not set [ 1732.764789][ T5867] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1733.235182][T14841] vhci_hcd: connection reset by peer [ 1733.268184][ T13] vhci_hcd: stop threads [ 1733.269210][ T13] vhci_hcd: release socket [ 1733.320263][ T13] vhci_hcd: disconnect device [ 1735.646906][T14872] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1906'. [ 1735.765531][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.765617][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.424843][ T5867] vhci_hcd: vhci_device speed not set [ 1740.406919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1742.406654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1744.040326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.248047][T14928] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1746.248069][T14928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1746.248297][T14928] vhci_hcd vhci_hcd.0: Device attached [ 1746.293090][T14929] vhci_hcd: cannot find a urb of seqnum 65535 max seqnum 0 [ 1746.319840][ T1131] vhci_hcd: stop threads [ 1746.319855][ T1131] vhci_hcd: release socket [ 1746.319892][ T1131] vhci_hcd: disconnect device [ 1746.491468][T14925] IPVS: set_ctl: invalid protocol: 29546 172.20.20.187:20002 [ 1747.914756][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1748.255344][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 1748.354084][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1929'. [ 1748.370379][T12808] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1749.342462][ T5867] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1749.342507][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.342531][ T5867] usb 6-1: Product: syz [ 1749.342548][ T5867] usb 6-1: Manufacturer: syz [ 1749.342565][ T5867] usb 6-1: SerialNumber: syz [ 1749.393199][ T5867] usb 6-1: config 0 descriptor?? [ 1749.458068][ T5867] usb 6-1: bad CDC descriptors [ 1749.812364][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.846993][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.853114][T12808] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1750.853159][T12808] usb 7-1: can't read configurations, error -71 [ 1752.884154][T14960] 9pnet_fd: Insufficient options for proto=fd [ 1756.563305][T14982] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1938'. [ 1757.635321][ T1215] usb 6-1: USB disconnect, device number 4 [ 1766.555306][T15031] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1767.768807][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 1768.023508][T15042] bridge_slave_1: left allmulticast mode [ 1768.023540][T15042] bridge_slave_1: left promiscuous mode [ 1768.023811][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.381714][T15042] bridge_slave_0: left allmulticast mode [ 1768.381761][T15042] bridge_slave_0: left promiscuous mode [ 1768.382036][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.231325][T15064] ieee802154 phy0 wpan0: encryption failed: -22 [ 1772.622008][T15066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1773.160479][T15069] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1963'. [ 1778.064775][T15069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.489830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.335009][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.487890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.596933][T15069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1780.703287][T15069] bond0 (unregistering): Released all slaves [ 1780.917219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1781.092748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1781.558090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1781.860112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1781.990784][T15110] ieee802154 phy0 wpan0: encryption failed: -22 [ 1782.954408][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.623353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.933630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1785.407593][T15137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1980'. [ 1791.546589][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1986'. [ 1792.566175][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1990'. [ 1795.654833][ T5867] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1795.824815][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 1795.877023][ T5867] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1795.877058][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.877081][ T5867] usb 1-1: Product: syz [ 1795.877098][ T5867] usb 1-1: Manufacturer: syz [ 1795.877114][ T5867] usb 1-1: SerialNumber: syz [ 1795.935601][ T5867] usb 1-1: config 0 descriptor?? [ 1795.952316][ T5867] usb 1-1: bad CDC descriptors [ 1797.754166][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.754245][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.444389][T15202] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1798.444474][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1802.017841][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2001'. [ 1807.345964][ T1215] usb 1-1: USB disconnect, device number 26 [ 1808.879648][T15252] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2013'. [ 1811.216997][T15252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1812.772896][T15252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1812.874147][T15272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1812.917294][T15252] bond0 (unregistering): Released all slaves [ 1814.211689][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2021'. [ 1816.033613][T15284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1816.052680][T15284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1816.053973][T15284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1816.069873][T15284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1816.087969][T15284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1818.922798][T13001] Bluetooth: hci1: command tx timeout [ 1820.954990][T13001] Bluetooth: hci1: command tx timeout [ 1822.190733][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2031'. [ 1823.044688][T13001] Bluetooth: hci1: command tx timeout [ 1823.367409][T15282] chnl_net:caif_netlink_parms(): no params data found [ 1824.804703][T15336] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1824.804734][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1824.804838][T15336] vhci_hcd vhci_hcd.0: Device attached [ 1824.810911][T15338] vhci_hcd: cannot find a urb of seqnum 65535 max seqnum 0 [ 1824.815433][ T9666] vhci_hcd: stop threads [ 1824.815447][ T9666] vhci_hcd: release socket [ 1824.815483][ T9666] vhci_hcd: disconnect device [ 1825.114697][T13001] Bluetooth: hci1: command tx timeout [ 1825.176203][T15336] IPVS: set_ctl: invalid protocol: 29546 172.20.20.187:20002 [ 1826.218996][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.219141][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.219396][T15282] bridge_slave_0: entered allmulticast mode [ 1826.222443][T15282] bridge_slave_0: entered promiscuous mode [ 1826.256469][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.256704][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.256992][T15282] bridge_slave_1: entered allmulticast mode [ 1826.264332][T15282] bridge_slave_1: entered promiscuous mode [ 1826.461242][T15282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.480543][T15282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.525479][ T1215] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1826.687140][T15282] team0: Port device team_slave_0 added [ 1826.691304][T15282] team0: Port device team_slave_1 added [ 1826.817989][ T1215] usb 7-1: Using ep0 maxpacket: 16 [ 1826.836555][ T1215] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1826.836590][ T1215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.836613][ T1215] usb 7-1: Product: syz [ 1826.836628][ T1215] usb 7-1: Manufacturer: syz [ 1826.836644][ T1215] usb 7-1: SerialNumber: syz [ 1826.851174][ T1215] usb 7-1: config 0 descriptor?? [ 1826.859364][ T1215] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1835.782883][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2041'. [ 1835.924596][ T1215] usb 7-1: USB disconnect, device number 5 [ 1835.964681][T15282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1835.964700][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1835.964732][T15282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.041712][T15282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.041732][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1836.041765][T15282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.551902][T15282] hsr_slave_0: entered promiscuous mode [ 1837.570136][T15282] hsr_slave_1: entered promiscuous mode [ 1837.616399][T15282] debugfs: 'hsr0' already exists in 'hsr' [ 1837.616429][T15282] Cannot create hsr debugfs directory [ 1838.065840][T15388] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2047'. [ 1840.519480][T15282] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1840.585463][T15282] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1840.611938][T15282] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1840.659671][T15282] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1841.099775][T15282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.174404][T15282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.211345][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.225123][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.501925][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.502096][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.797757][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2053'. [ 1845.423309][T15430] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1845.616153][T15432] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2057'. [ 1845.896125][T15282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1849.111225][T15282] veth0_vlan: entered promiscuous mode [ 1849.137047][T15282] veth1_vlan: entered promiscuous mode [ 1849.303101][T15282] veth0_macvtap: entered promiscuous mode [ 1849.314207][T15282] veth1_macvtap: entered promiscuous mode [ 1849.353813][T15282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.414176][T15282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.474094][T13131] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.479813][T13131] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.489476][T13470] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.489539][T13470] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.734300][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'. [ 1851.885184][T15482] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1852.206805][T13470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.206829][T13470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.522491][T12899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1852.522514][T12899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1853.466444][T15493] 9pnet_fd: Insufficient options for proto=fd [ 1853.473510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1853.680859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1854.114230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.248930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1857.567156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1857.598032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.665922][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.666103][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.087269][T15526] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2077'. [ 1861.416681][T15538] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2082'. [ 1861.886774][T15541] 9pnet_fd: Insufficient options for proto=fd [ 1864.354698][ T1215] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1864.504714][ T1215] usb 10-1: Using ep0 maxpacket: 32 [ 1864.507693][ T1215] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1864.507722][ T1215] usb 10-1: config 0 has no interface number 0 [ 1864.507781][ T1215] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1864.510975][ T1215] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1864.511008][ T1215] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.511031][ T1215] usb 10-1: Product: syz [ 1864.511048][ T1215] usb 10-1: Manufacturer: syz [ 1864.511065][ T1215] usb 10-1: SerialNumber: syz [ 1865.680084][ T1215] usb 10-1: config 0 descriptor?? [ 1865.711238][ T1215] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1865.711299][ T1215] em28xx 10-1:0.132: Video interface 132 found: [ 1866.181936][ T1215] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1867.405461][ T1215] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1867.405568][ T1215] em28xx 10-1:0.132: board has no eeprom [ 1867.624620][ T1215] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1867.624661][ T1215] em28xx 10-1:0.132: analog set to bulk mode. [ 1867.633768][ T5867] em28xx 10-1:0.132: Registering V4L2 extension [ 1868.197205][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1868.234574][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1868.285773][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1868.324789][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1868.579062][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1868.579440][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1868.579850][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1868.580243][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1868.854998][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1868.874069][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1868.874784][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1868.876424][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1868.881464][ T5867] em28xx 10-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1868.892847][ T5867] em28xx 10-1:0.132: Config register raw data: 0xfffffffb [ 1868.894337][ T5867] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1868.894362][ T5867] em28xx 10-1:0.132: No AC97 audio processor [ 1869.424033][ T5867] usb 10-1: Decoder not found [ 1869.424057][ T5867] em28xx 10-1:0.132: failed to create media graph [ 1869.424130][ T5867] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1869.619299][ T5867] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1870.609599][ T1003] usb 10-1: USB disconnect, device number 2 [ 1870.611972][ T1003] em28xx 10-1:0.132: Disconnecting em28xx [ 1870.612490][ T1003] em28xx 10-1:0.132: Closing input extension [ 1870.830499][ T1003] em28xx 10-1:0.132: Freeing device [ 1875.539641][T15609] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2100'. [ 1882.385575][T15640] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2110'. [ 1883.260149][T15609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.372339][T15609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.486990][T15609] bond0 (unregistering): Released all slaves [ 1886.994688][T15666] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2114'. [ 1888.085998][T15672] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2115'. [ 1891.173292][T15688] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2120'. [ 1892.269864][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2122'. [ 1892.269905][T15692] lo: entered promiscuous mode [ 1892.269926][T15692] lo: entered allmulticast mode [ 1893.517837][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2125'. [ 1893.519779][T15699] 9pnet_fd: Insufficient options for proto=fd [ 1895.258495][T15703] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1895.948043][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2127'. [ 1897.139305][T15715] ieee802154 phy0 wpan0: encryption failed: -22 [ 1900.667219][T15732] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2131'. [ 1900.746993][T15737] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2133'. [ 1903.646848][T15749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1904.677121][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2136'. [ 1905.482888][ C0] ------------[ cut here ]------------ [ 1905.482902][ C0] refcount_t: addition on 0; use-after-free. [ 1905.483496][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1905.483638][ C0] Modules linked in: [ 1905.483678][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1905.483702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1905.483718][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1905.483746][ C0] Code: 00 00 e8 79 5a 45 fd 5b 41 5e c3 cc cc cc cc cc e8 6b 5a 45 fd c6 05 3f 24 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 4b 5a 45 fd c6 05 20 24 47 0a 01 90 48 c7 c7 [ 1905.483766][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1905.483784][ C0] RAX: 8853f029dd577500 RBX: 0000000000000002 RCX: ffff88801b2dda00 [ 1905.483800][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1905.483813][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1905.483825][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1905.483840][ C0] R13: ffff88805cbc5e60 R14: ffff88805cbc5a80 R15: dffffc0000000000 [ 1905.483858][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1905.483877][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1905.483892][ C0] CR2: 0000001b2ee13ff8 CR3: 0000000056192000 CR4: 00000000003526f0 [ 1905.483911][ C0] Call Trace: [ 1905.483926][ C0] [ 1905.483938][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1905.484062][ C0] mptcp_tout_timer+0x21/0xa0 [ 1905.484122][ C0] call_timer_fn+0x17e/0x5f0 [ 1905.484197][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1905.484229][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1905.484262][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1905.484307][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1905.484398][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1905.484511][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1905.484548][ C0] __run_timer_base+0x648/0x970 [ 1905.484597][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1905.484647][ C0] run_timer_softirq+0xb7/0x180 [ 1905.484680][ C0] handle_softirqs+0x22f/0x710 [ 1905.484738][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1905.484780][ C0] run_ktimerd+0xcf/0x190 [ 1905.484813][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1905.484844][ C0] ? schedule+0x91/0x360 [ 1905.484884][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1905.484913][ C0] smpboot_thread_fn+0x542/0xa60 [ 1905.484938][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1905.484967][ C0] kthread+0x711/0x8a0 [ 1905.484995][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1905.485016][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.485039][ C0] ? rt_spin_unlock+0x150/0x200 [ 1905.485062][ C0] ? rt_spin_unlock+0x161/0x200 [ 1905.485079][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.485105][ C0] ret_from_fork+0x4bc/0x870 [ 1905.485137][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1905.485163][ C0] ? __switch_to_asm+0x39/0x70 [ 1905.485196][ C0] ? __switch_to_asm+0x33/0x70 [ 1905.485211][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.485237][ C0] ret_from_fork_asm+0x1a/0x30 [ 1905.485268][ C0] [ 1905.485281][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1905.485294][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1905.485313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1905.485323][ C0] Call Trace: [ 1905.485330][ C0] [ 1905.485336][ C0] dump_stack_lvl+0x99/0x250 [ 1905.485369][ C0] ? __asan_memcpy+0x40/0x70 [ 1905.485407][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1905.485433][ C0] ? __pfx__printk+0x10/0x10 [ 1905.485464][ C0] vpanic+0x237/0x6d0 [ 1905.485480][ C0] ? __pfx_vpanic+0x10/0x10 [ 1905.485504][ C0] panic+0xb9/0xc0 [ 1905.485520][ C0] ? __pfx_panic+0x10/0x10 [ 1905.485549][ C0] __warn+0x31b/0x4b0 [ 1905.485564][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1905.485585][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1905.485603][ C0] report_bug+0x2be/0x4f0 [ 1905.485673][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1905.485692][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1905.485710][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 1905.485729][ C0] handle_bug+0x84/0x160 [ 1905.485745][ C0] exc_invalid_op+0x1a/0x50 [ 1905.485761][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1905.485791][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1905.485810][ C0] Code: 00 00 e8 79 5a 45 fd 5b 41 5e c3 cc cc cc cc cc e8 6b 5a 45 fd c6 05 3f 24 47 0a 01 90 48 c7 c7 80 2e 3d 8b e8 57 a1 09 fd 90 <0f> 0b 90 90 eb d7 e8 4b 5a 45 fd c6 05 20 24 47 0a 01 90 48 c7 c7 [ 1905.485825][ C0] RSP: 0018:ffffc90000157830 EFLAGS: 00010246 [ 1905.485840][ C0] RAX: 8853f029dd577500 RBX: 0000000000000002 RCX: ffff88801b2dda00 [ 1905.485852][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1905.485862][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1905.485872][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af18 [ 1905.485885][ C0] R13: ffff88805cbc5e60 R14: ffff88805cbc5a80 R15: dffffc0000000000 [ 1905.485914][ C0] mptcp_schedule_work+0x164/0x1a0 [ 1905.485935][ C0] mptcp_tout_timer+0x21/0xa0 [ 1905.485960][ C0] call_timer_fn+0x17e/0x5f0 [ 1905.485983][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1905.486005][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1905.486028][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1905.486059][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1905.486083][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1905.486105][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 1905.486130][ C0] __run_timer_base+0x648/0x970 [ 1905.486163][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1905.486198][ C0] run_timer_softirq+0xb7/0x180 [ 1905.486221][ C0] handle_softirqs+0x22f/0x710 [ 1905.486249][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1905.486279][ C0] run_ktimerd+0xcf/0x190 [ 1905.486302][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1905.486324][ C0] ? schedule+0x91/0x360 [ 1905.486412][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1905.486450][ C0] smpboot_thread_fn+0x542/0xa60 [ 1905.486478][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1905.486507][ C0] kthread+0x711/0x8a0 [ 1905.486535][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1905.486556][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.486583][ C0] ? rt_spin_unlock+0x150/0x200 [ 1905.486606][ C0] ? rt_spin_unlock+0x161/0x200 [ 1905.486624][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.486650][ C0] ret_from_fork+0x4bc/0x870 [ 1905.486673][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1905.486700][ C0] ? __switch_to_asm+0x39/0x70 [ 1905.486716][ C0] ? __switch_to_asm+0x33/0x70 [ 1905.486732][ C0] ? __pfx_kthread+0x10/0x10 [ 1905.486757][ C0] ret_from_fork_asm+0x1a/0x30 [ 1905.486789][ C0] [ 1905.487154][ C0] Kernel Offset: disabled