last executing test programs: 22m51.84081657s ago: executing program 32 (id=11): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xee01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 22m36.635826194s ago: executing program 33 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 22m28.845874932s ago: executing program 34 (id=25): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22m21.091068514s ago: executing program 35 (id=29): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3e, 0xfffd, 0x4000, 0x1, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x40, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}]}}, {"7871edb5bd2531a06454"}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) sync() ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 19m18.76277794s ago: executing program 36 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1ac, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff80}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc3}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x44, 0x8, "85f1166eaece9b3dfdb9cf60b3c54ee9792d35fcc7379235ec27ef494308fbc88be2d97834cab8ba10d99f68b24362b332ff1f9ddbd5bd20a4208ba7ef17b028"}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0xd, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xb3e9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x344}, 0x1, 0x0, 0x0, 0x40}, 0x24004890) 18m49.147151537s ago: executing program 37 (id=179): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x34}, 0x28) 18m37.793906478s ago: executing program 38 (id=181): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) close_range(r0, 0xffffffffffffffff, 0x0) 17m15.817974492s ago: executing program 6 (id=233): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x14, ""/20}) 17m13.187897465s ago: executing program 6 (id=234): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[], 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44060) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17m12.499310231s ago: executing program 39 (id=228): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000180), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0xffff, 0x1000, @empty}, 0x1c) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0xffffffff}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800010a03000000000000000400000089"], 0xa0}, 0x1, 0x0, 0x0, 0x200080c1}, 0x80) 17m12.380737262s ago: executing program 6 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x35) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 16m57.241343908s ago: executing program 40 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x35) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 16m18.522979053s ago: executing program 9 (id=240): ioperm(0x0, 0x2, 0x7e) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x2, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x1, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe}) clock_adjtime(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x500, 0x0) readv(r4, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/76, 0x4c}, {0x0}], 0x2) 16m15.763747794s ago: executing program 9 (id=242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 16m9.52080694s ago: executing program 9 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x200000, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32], 0x8, 0x221, &(0x7f0000002080)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x9, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0xfffffffffffffcb8, 0x1, 0x0) r3 = msgget$private(0x0, 0x4df) msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000f53ffe0f4a80527c479da402d1c6da7f43e68d68391b87cf915b4b0447bbb0cbb58feb8f7ad7549906d25d"], 0x26, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x1800) socket$inet(0x2, 0xa, 0x5) creat(&(0x7f0000000000)='./file1\x00', 0x40) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400"], 0x48) msgctl$IPC_RMID(r3, 0x0) unshare(0x62040200) 16m3.439923845s ago: executing program 41 (id=239): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x6, 0x62400) r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) r3 = msgget$private(0x0, 0x790) msgctl$IPC_STAT(r3, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='debugfs\x00', &(0x7f0000000100)='./file0\x00', r1) 15m53.666130446s ago: executing program 42 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x200000, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32], 0x8, 0x221, &(0x7f0000002080)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={0x0, 0x9, 0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0xfffffffffffffcb8, 0x1, 0x0) r3 = msgget$private(0x0, 0x4df) msgsnd(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000f53ffe0f4a80527c479da402d1c6da7f43e68d68391b87cf915b4b0447bbb0cbb58feb8f7ad7549906d25d"], 0x26, 0x0) msgrcv(r3, 0x0, 0x0, 0x2, 0x1800) socket$inet(0x2, 0xa, 0x5) creat(&(0x7f0000000000)='./file1\x00', 0x40) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400"], 0x48) msgctl$IPC_RMID(r3, 0x0) unshare(0x62040200) 14m33.554567479s ago: executing program 43 (id=274): syz_usb_connect(0x2, 0x36, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000ac0)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 13m6.6296816s ago: executing program 44 (id=320): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_io_uring_setup(0x4953, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setpipe(r2, 0x407, 0x8001a0) splice(r2, 0x0, r4, 0x0, 0x200002, 0x0) 8m46.233986806s ago: executing program 5 (id=566): mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$eJzslL9KA0EQxr/diwkROztBLAwYi1zuLio2IsEXCPgPO6M5Q/RiQnKCiZXY+gC2tr5CGsEXUSsRUlpH9naTWyV/RNAgzq+Y+/Z2dm52Dj4QBPFveX56e7x+bV0YAKaQQEy9fzHCHK7ln+XiB9OpjbvWzcPVenW20q9mp/P170cA3GcN+L2zH08n1HMLvKe3wbGo9C4YTKX3wbGjtAuGPaWPNV0R+aZ5VPJc87DiFYSwRLBFcETIfO6vfclQ0Ppj2n690TzJe55b+0Exan7tLMea1p/+v7qzsbT52eCwlc6AYVPpVcS6s5Ej0e4/EwnrG798fxIkSPw1EfpT55ZhQfOniOYfab9cTdcbzVSpnC+6RffUcTIr1pJlLTvpwIhkHOJ/8cCfJrX6EwNyoyyK87zv12wZe2tHxn6OywP/40jOy7Xw/ujAbuQ+U+dYoJLGkHSCIIixMQcWeOYInNy4GyUIgiAIgiAIgiAI4tu8BwAA//9iEXZY") unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m45.552435783s ago: executing program 5 (id=567): r0 = socket(0x2b, 0x800, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x1f}}], 0x2, 0x8005) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0xd, 'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0xc8240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8m44.24775867s ago: executing program 5 (id=568): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40084d02, &(0x7f0000000180)={0x1, 0xffff0100, 0x0, 0x0}) 8m43.671161874s ago: executing program 5 (id=569): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) syz_emit_vhci(0x0, 0x7) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @remote}, 0x1c) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x58}, @l2cap_cid_signaling={{0x54}, [@l2cap_move_chan_rsp={{0xf, 0x10, 0x4}, {0x9, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x9, 0xfff}}, @l2cap_disconn_req={{0x6, 0x19, 0x4}, {0x0, 0x5}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x7, 0xff, 0x4, 0x1}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x7, 0xde4, 0x9a}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x9, 0x2, 0xc2e3}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0xfff, 0x9}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0xc, 0x62c4, 0x7fff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0xff}}]}}, 0x5d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x388, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_init(0x200, 0x0) 8m41.444142849s ago: executing program 5 (id=570): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 8m39.263053781s ago: executing program 5 (id=571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 8m31.130585884s ago: executing program 45 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 8m23.750315742s ago: executing program 46 (id=571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 7m50.094760727s ago: executing program 6 (id=572): syz_open_dev$dri(0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x98f910, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000100)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x1, 0x4}, 0x75, 0x7f, 0x2, 0x9, 0x14, 'syz0\x00', "0dc8c957e3a0354f1d556ca93a4f50e038f7d97fc2e1b11003f06d4c32fa400d", "3559a5860fe073b810f002afe1e5e01c98de66447358791e672ed3fbb5506dcc", [{0xfffc, 0xbd75, {0x3, 0x3b2e}}, {0x800, 0x2, {0x3, 0x3}}, {0x4, 0x2, {0x1, 0x6e4}}, {0x3ff, 0x2, {0x0, 0x1ff}}, {0x1, 0x8, {0x2, 0x7}}, {0x3, 0x7, {0x0, 0x80000000}}, {0x3, 0x0, {0x3, 0x1}}, {0x9, 0x74b, {0x1, 0x5}}, {0x9, 0x3, {0x2, 0x9}}, {0x800, 0x88e, {0x0, 0x1}}, {0x7, 0xea8d, {0x0, 0x5}}, {0x0, 0x6, {0xa7678e7f685eda2b, 0x48e}}, {0x5, 0x1, {0x0, 0xaf1b}}, {0x8, 0x3, {0x0, 0x2}}, {0x1, 0x37, {0x2, 0xffffffb5}}, {0x2fe4, 0xf41, {0x2, 0x530}}, {0xdd9, 0x6, {0x3, 0x8}}, {0x5eb, 0x7, {0x3, 0x1}}, {0x400, 0x1ff, {0x1, 0x4}}, {0xff, 0xbe, {0x3, 0x6}}, {0x6, 0xa, {0x1, 0x80000001}}, {0x2, 0x5, {0x0, 0xa}}, {0x200, 0x0, {0x1, 0x200}}, {0xa2b1, 0x200, {0x3, 0x8001}}, {0x3, 0x8, {0x1, 0x9}}, {0xaa1e, 0x4, {0x0, 0x1}}, {0x2, 0x0, {0x3, 0x2}}, {0x3, 0x8000, {0x2, 0x9}}, {0x2, 0x4, {0x0, 0xc}}, {0x800, 0x8, {0x3, 0x5}}, {0x1, 0xab97, {0x3, 0x3}}, {0xcb, 0x7, {0x0, 0x3}}, {0x6, 0x5d55, {0x0, 0x7fffffff}}, {0x6, 0xd, {0x1, 0x1}}, {0x8, 0x81, {0x3, 0x6}}, {0x400, 0x3ff, {0x1}}, {0x7, 0x5, {0x3, 0xb}}, {0x5, 0xfff, {0x0, 0x9}}, {0x5d, 0x9, {0x4cbbfbc150c1a20d, 0x4}}, {0x6, 0x40, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x43b}, 0x2, 0x0, 0x6, 0xff8b, 0x28, 'syz1\x00', "3622fbd72701c8ca70212a71cddebf152a530d5294c2dadc885a07428a482cb3", "fab363d514db4d20c4c2d69c2963632a6301423fe48e70c50b3b416de25d2ff5", [{0xee8b, 0x80, {0x1, 0xcedd}}, {0x3, 0x0, {0x2, 0xff}}, {0x6, 0x100, {0x2, 0xc000}}, {0x0, 0x5, {0x1, 0x2cd}}, {0x5ed, 0x5, {0x0, 0x3}}, {0x80, 0xd0d, {0x2, 0x9}}, {0x2, 0x1ff, {0x3, 0x80000000}}, {0x2, 0x101, {0x0, 0xfffffffd}}, {0x68b0, 0x4, {0x1, 0x5}}, {0x101, 0x5, {0x1, 0x7}}, {0x5, 0xfffc, {0x0, 0x2}}, {0x80, 0x38}, {0xffff, 0x3, {0x2, 0x1000}}, {0xfe00, 0xa, {0x1, 0xa}}, {0x5, 0x8, {0x2, 0x3}}, {0xd8, 0x2, {0x1, 0x93}}, {0xa, 0xbd, {0x0, 0x9e7}}, {0xbd, 0x7, {0x3, 0x7}}, {0x1, 0x8, {0x3, 0x4}}, {0x8, 0x9, {0x2, 0x2}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x0, {0x0, 0x8}}, {0x3, 0x0, {0x0, 0x2}}, {0xf, 0x7, {0x2, 0x8}}, {0xc6, 0x12f, {0x0, 0x9}}, {0xc0, 0x1}, {0x4, 0x7f, {0x2, 0xff}}, {0x2, 0x3, {0x2, 0x1ff}}, {0x3, 0x5, {0x2, 0x6}}, {0x3, 0x5, {0x2, 0x9}}, {0x9, 0x2, {0x3, 0x1fa7}}, {0x1, 0x7, {0x3, 0x6}}, {0x111f, 0x2, {0x0, 0xb}}, {0x3cd1, 0x722c, {0x0, 0x1}}, {0xc, 0x1, {0x1, 0x8000}}, {0x4, 0x4, {0x1, 0x9}}, {0x7, 0x5a, {0x0, 0x1ff}}, {0x6, 0x3ff, {0x2}}, {0x1000, 0x10, {0x2, 0x2}}, {0x3, 0xfffa, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x9f, 0x8001, 0x0, 0x10, 'syz1\x00', "df4e92831ec65b5d2c5df6366ac9bd669ff5b0933b93ea0c5f272e7e35f68316", "759d4e002a359611d547ce4a12fcad7ed7bf0cdd98c36d131a29c4666c7b8866", [{0x2, 0x4, {0x0, 0x8}}, {0x9, 0x7, {0x2, 0xf}}, {0x9, 0x3, {0x1, 0x80000000}}, {0xa, 0x7, {0x0, 0xfffff001}}, {0x6, 0x7, {0x2, 0x7f}}, {0x71d, 0x40, {0x1, 0xfffffffa}}, {0x4, 0x4, {0x2, 0x6}}, {0x3ff, 0x1, {0x0, 0x6}}, {0x3, 0xa, {0x3, 0x3}}, {0xfff7, 0x5e5a, {0x1, 0x7}}, {0x80, 0x7, {0x0, 0x2}}, {0x8, 0xb, {0x2}}, {0xb, 0x8, {0x2, 0xfffffffe}}, {0xfff, 0x9251, {0x0, 0x7}}, {0xf, 0x3, {0x1, 0xdc00}}, {0x2, 0x5, {0x0, 0x3}}, {0x8001, 0x9, {0x0, 0x7}}, {0xfa7b, 0x8, {0x3, 0x3}}, {0xffb6, 0x2, {0x0, 0x7}}, {0x4, 0x5, {0x1, 0x1}}, {0x1000, 0x8, {0x0, 0x1}}, {0x4, 0x4, {0x1, 0x399}}, {0x480, 0x0, {0x3, 0xcc}}, {0x4, 0xc43e, {0x3, 0x8}}, {0x800, 0x7, {0x2, 0xffff}}, {0x91f5, 0x6, {0x3, 0x979d}}, {0x100, 0x4, {0x0, 0x1}}, {0xe, 0x4, {0x1}}, {0x4, 0x65, {0x2, 0x6}}, {0x0, 0x7, {0x1, 0xffffffff}}, {0x7, 0xfff5, {0x0, 0x2}}, {0x57, 0x8001, {0x3, 0x2}}, {0x7f, 0x53, {0x0, 0xd0b2}}, {0x8000, 0x8, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x5}}, {0x0, 0x2e93, {0x2, 0xa67d}}, {0x5, 0xde5f, {0x1, 0x3}}, {0xc2c, 0xab, {0x3, 0x241f}}, {0xd3, 0x6, {0x2, 0x2}}, {0x58, 0x5, {0x1, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 7m46.451181182s ago: executing program 6 (id=578): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 7m39.803542941s ago: executing program 6 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 7m39.435425187s ago: executing program 4 (id=582): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r5, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r5, 0x0, 0x0, 0x2022, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)={0x6, 0x1}) 7m36.48745733s ago: executing program 4 (id=584): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000480)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x29000, 0x4, 0x9, 0x143, 0x0, [{0x4, 0x5, 0x1, '\x00', 0x7b}, {0x5, 0x9, 0x0, '\x00', 0x6}, {0x2, 0x5, 0xc5, '\x00', 0x6}, {0xfe, 0x72, 0xa, '\x00', 0xff}, {0x3, 0x3, 0x5, '\x00', 0xe}, {0xf, 0x0, 0xe, '\x00', 0x8}, {0x8, 0x0, 0x1}, {0x3, 0x1, 0x1}, {0x4, 0x7f, 0x1, '\x00', 0x6}, {0x5, 0x6, 0x3f, '\x00', 0x7a}, {0x7, 0x5, 0x5, '\x00', 0x2}, {0xf7, 0x99, 0x1, '\x00', 0x1}, {0xb1, 0x3, 0x48, '\x00', 0xe9}, {0x0, 0x40, 0x7, '\x00', 0x4}, {0x80, 0x1, 0x5, '\x00', 0x47}, {0x3d, 0x6, 0x9d, '\x00', 0x34}, {0x50, 0x9, 0x7}, {0x6, 0xd, 0x8, '\x00', 0xfe}, {0x7, 0x2, 0x1, '\x00', 0xff}, {0x10, 0xe, 0x8, '\x00', 0x8}, {0x9, 0xc, 0xf7, '\x00', 0x3e}, {0x6, 0x5, 0x0, '\x00', 0x8}, {0x9, 0x5, 0xf7, '\x00', 0x9}, {0x6, 0x8, 0x26, '\x00', 0x1}]}}) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m23.321141573s ago: executing program 47 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 7m23.267693162s ago: executing program 4 (id=593): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r5, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r5, 0x0, 0x0, 0x2022, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)={0x6, 0x1}) 7m20.116523266s ago: executing program 4 (id=596): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0xffffffff, 0x1}, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000002c0)={0xe, 0x3, 0x1, 'queue0\x00', 0x9}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32={[0x0, 0x400000]}}], 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006) 7m16.075467519s ago: executing program 4 (id=600): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 7m8.788060646s ago: executing program 4 (id=601): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000480)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x29000, 0x4, 0x9, 0x143, 0x0, [{0x4, 0x5, 0x1, '\x00', 0x7b}, {0x5, 0x9, 0x0, '\x00', 0x6}, {0x2, 0x5, 0xc5, '\x00', 0x6}, {0xfe, 0x72, 0xa, '\x00', 0xff}, {0x3, 0x3, 0x5, '\x00', 0xe}, {0xf, 0x0, 0xe, '\x00', 0x8}, {0x8, 0x0, 0x1}, {0x3, 0x1, 0x1}, {0x4, 0x7f, 0x1, '\x00', 0x6}, {0x5, 0x6, 0x3f, '\x00', 0x7a}, {0x7, 0x5, 0x5, '\x00', 0x2}, {0xf7, 0x99, 0x1, '\x00', 0x1}, {0xb1, 0x3, 0x48, '\x00', 0xe9}, {0x0, 0x40, 0x7, '\x00', 0x4}, {0x80, 0x1, 0x5, '\x00', 0x47}, {0x3d, 0x6, 0x9d, '\x00', 0x34}, {0x50, 0x9, 0x7}, {0x6, 0xd, 0x8, '\x00', 0xfe}, {0x7, 0x2, 0x1, '\x00', 0xff}, {0x10, 0xe, 0x8, '\x00', 0x8}, {0x9, 0xc, 0xf7, '\x00', 0x3e}, {0x6, 0x5, 0x0, '\x00', 0x8}, {0x9, 0x5, 0xf7, '\x00', 0x9}, {0x6, 0x8, 0x26, '\x00', 0x1}]}}) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m54.991377455s ago: executing program 2 (id=610): r0 = socket(0x2b, 0x800, 0x4) sendmmsg$sock(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x1f}}], 0x2, 0x8005) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0xd, 'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0xc8240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 6m51.846991886s ago: executing program 48 (id=601): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000480)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0x29000, 0x4, 0x9, 0x143, 0x0, [{0x4, 0x5, 0x1, '\x00', 0x7b}, {0x5, 0x9, 0x0, '\x00', 0x6}, {0x2, 0x5, 0xc5, '\x00', 0x6}, {0xfe, 0x72, 0xa, '\x00', 0xff}, {0x3, 0x3, 0x5, '\x00', 0xe}, {0xf, 0x0, 0xe, '\x00', 0x8}, {0x8, 0x0, 0x1}, {0x3, 0x1, 0x1}, {0x4, 0x7f, 0x1, '\x00', 0x6}, {0x5, 0x6, 0x3f, '\x00', 0x7a}, {0x7, 0x5, 0x5, '\x00', 0x2}, {0xf7, 0x99, 0x1, '\x00', 0x1}, {0xb1, 0x3, 0x48, '\x00', 0xe9}, {0x0, 0x40, 0x7, '\x00', 0x4}, {0x80, 0x1, 0x5, '\x00', 0x47}, {0x3d, 0x6, 0x9d, '\x00', 0x34}, {0x50, 0x9, 0x7}, {0x6, 0xd, 0x8, '\x00', 0xfe}, {0x7, 0x2, 0x1, '\x00', 0xff}, {0x10, 0xe, 0x8, '\x00', 0x8}, {0x9, 0xc, 0xf7, '\x00', 0x3e}, {0x6, 0x5, 0x0, '\x00', 0x8}, {0x9, 0x5, 0xf7, '\x00', 0x9}, {0x6, 0x8, 0x26, '\x00', 0x1}]}}) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m48.938280428s ago: executing program 2 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x70}}, 0x0) 6m48.090936705s ago: executing program 2 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x110}}, 0x0) 6m47.684333218s ago: executing program 2 (id=617): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0xffffffff, 0x1}, 0x7}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006) 6m47.128792354s ago: executing program 2 (id=618): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 6m43.161157391s ago: executing program 2 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mknodat$loop(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) socket$tipc(0x1e, 0x2, 0x0) 6m22.676447562s ago: executing program 49 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socket$alg(0x26, 0x5, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) mknodat$loop(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) socket$tipc(0x1e, 0x2, 0x0) 3m14.330208657s ago: executing program 7 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) dup3(r1, r0, 0x80000) finit_module(r1, 0x0, 0x0) 3m10.616577324s ago: executing program 7 (id=728): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000008100000003", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendfile(r4, r5, 0x0, 0x20000023892) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x210) 3m6.297204316s ago: executing program 7 (id=729): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.036715817s ago: executing program 7 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) lsetxattr$security_ima(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) finit_module(0xffffffffffffffff, 0x0, 0x0) 2m52.497283716s ago: executing program 7 (id=736): socket$inet6(0xa, 0x1, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000008100000003", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) socket$inet6(0xa, 0x80002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendfile(r4, r5, 0x0, 0x20000023892) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x210) 2m47.846996411s ago: executing program 7 (id=738): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0, 0x10000}, {r0, 0x8210}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socket(0x23, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@upd={0xf0, 0x12, 0x300, 0x70bd2a, 0x25dfdbfe, {{'aegis256-aesni\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x5b}]}, 0xf0}, 0x1, 0x0, 0x0, 0x440c6}, 0x20040011) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r7 = semget$private(0x0, 0x6, 0x40d) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) semop(r7, 0x0, 0x0) semop(r7, &(0x7f0000001240)=[{0x2, 0x1ff, 0x1000}], 0x1) semctl$GETZCNT(r7, 0x1, 0xf, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x0, {r0}}, 0x20) 2m31.413829531s ago: executing program 50 (id=738): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0, 0x10000}, {r0, 0x8210}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socket(0x23, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@upd={0xf0, 0x12, 0x300, 0x70bd2a, 0x25dfdbfe, {{'aegis256-aesni\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x5b}]}, 0xf0}, 0x1, 0x0, 0x0, 0x440c6}, 0x20040011) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r7 = semget$private(0x0, 0x6, 0x40d) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) semop(r7, 0x0, 0x0) semop(r7, &(0x7f0000001240)=[{0x2, 0x1ff, 0x1000}], 0x1) semctl$GETZCNT(r7, 0x1, 0xf, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x0, {r0}}, 0x20) 1m8.500769923s ago: executing program 9 (id=592): r0 = fsopen(&(0x7f0000000040)='iso9660\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) read$FUSE(r1, &(0x7f0000006280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1m6.149643582s ago: executing program 9 (id=771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x1, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ftruncate(0xffffffffffffffff, 0x80079a0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) 1m1.147956526s ago: executing program 9 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 43.59315102s ago: executing program 51 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 30.554115299s ago: executing program 1 (id=800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e000000000000000800080003"], 0x34}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)='id:cb2e\xbbj\xd3\xa2\xf8O&K\xa8\x1f\xb9c%\xe3\xcf\xd7u\x81\xd1mr2\xd1#\xd1*\x102KI\x87YR7q\xc5{\x04\x03\x00\x00\x00\x97\xd9\xf9\x00\x00\x00\x00\x00\x00\x00\x00') keyctl$setperm(0x5, 0x0, 0x180400) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x2c, 0x0, [{0xeeee8000, 0x76, &(0x7f0000000180)=""/127}]}) 20.306865956s ago: executing program 1 (id=812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x1, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ftruncate(0xffffffffffffffff, 0x80079a0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 15.625461037s ago: executing program 0 (id=818): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.897091161s ago: executing program 0 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e000000000000000800080003"], 0x34}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)='id:cb2e\xbbj\xd3\xa2\xf8O&K\xa8\x1f\xb9c%\xe3\xcf\xd7u\x81\xd1mr2\xd1#\xd1*\x102KI\x87YR7q\xc5{\x04\x03\x00\x00\x00\x97\xd9\xf9\x00\x00\x00\x00\x00\x00\x00\x00') keyctl$setperm(0x5, 0x0, 0x180400) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x2c, 0x0, [{0xeeee8000, 0x76, &(0x7f0000000180)=""/127}]}) 12.749752466s ago: executing program 1 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 10.064404481s ago: executing program 3 (id=825): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000080000001410", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r1, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) syz_emit_vhci(0x0, 0x7) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @remote}, 0x1c) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x50}, @l2cap_cid_signaling={{0x4c}, [@l2cap_move_chan_rsp={{0xf, 0x10, 0x4}, {0x9, 0x200}}, @l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x9, 0xfff}}, @l2cap_disconn_req={{0x6, 0x19, 0x4}, {0x0, 0x5}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x7, 0xff, 0x4, 0x1}}, @l2cap_create_chan_req={{0xc, 0x3f, 0x5}, {0x7, 0xde4, 0x9a}}, @l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x9, 0x2, 0xc2e3}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0xc, 0x62c4, 0x7fff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0xff}}]}}, 0x55) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x388, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800100b, r0, 0x0) 9.655145692s ago: executing program 8 (id=826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @random="18c45d9979c9", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 7.059869796s ago: executing program 3 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0x4) r2 = inotify_init1(0x800) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x44000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.696315614s ago: executing program 1 (id=828): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.627995323s ago: executing program 8 (id=829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) 6.303344852s ago: executing program 0 (id=830): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(0x0, 0xed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000005c0)={{0x7, 0x7}, {0xffffffff, 0x200}, 0x3, 0x1}) socket$inet(0x2, 0x2, 0x0) personality(0x400000a) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r4) io_getevents(r4, 0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.213737002s ago: executing program 3 (id=831): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.82305243s ago: executing program 8 (id=832): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xe0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.668311365s ago: executing program 3 (id=833): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x800000000000) 3.75864452s ago: executing program 0 (id=834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) 3.429169641s ago: executing program 3 (id=835): io_setup(0x5, &(0x7f0000000000)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x2c, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0xc, 0xffff, 0x46, "000000a316c6c139"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x5f) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f0000000380)='i', 0x1, 0x7}]) 3.365697433s ago: executing program 1 (id=836): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000800000001008faa00000c000480060001008a9500000900010073797a30"], 0x118}}, 0x0) 3.262432647s ago: executing program 0 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3.156673414s ago: executing program 8 (id=838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @random="18c45d9979c9", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) 2.500138832s ago: executing program 0 (id=839): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc0, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c1a5000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r4 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r4, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r4, 0x0, 0x0, 0x2022, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0x6, 0x1}) 2.391751027s ago: executing program 8 (id=840): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) 557.841538ms ago: executing program 8 (id=841): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) 551.874948ms ago: executing program 3 (id=842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e000000000000000800080003"], 0x34}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$clear(0x7, 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000100), 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0xa931) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)='id:cb2e\xbbj\xd3\xa2\xf8O&K\xa8\x1f\xb9c%\xe3\xcf\xd7u\x81\xd1mr2\xd1#\xd1*\x102KI\x87YR7q\xc5{\x04\x03\x00\x00\x00\x97\xd9\xf9\x00\x00\x00\x00\x00\x00\x00\x00') keyctl$setperm(0x5, 0x0, 0x180400) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x2c, 0x0, [{0xeeee8000, 0x76, &(0x7f0000000180)=""/127}]}) 0s ago: executing program 1 (id=843): pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.281440][T10712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.337328][T10712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.344413][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.483294][T10712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.807084][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1180.526591][ T49] Bluetooth: hci4: command tx timeout [ 1180.534902][ T7129] Bluetooth: hci3: command tx timeout [ 1182.806952][ C0] sched: DL replenish lagged too much [ 1182.823320][ T7129] Bluetooth: hci3: command tx timeout [ 1182.829052][ T49] Bluetooth: hci4: command tx timeout [ 1185.847591][ T7129] Bluetooth: hci3: command tx timeout [ 1185.853157][ T7129] Bluetooth: hci4: command tx timeout [ 1187.725912][T10712] hsr_slave_0: entered promiscuous mode [ 1187.781652][T10712] hsr_slave_1: entered promiscuous mode [ 1187.918017][T10712] debugfs: 'hsr0' already exists in 'hsr' [ 1187.942429][T10712] Cannot create hsr debugfs directory [ 1190.239862][T10811] chnl_net:caif_netlink_parms(): no params data found [ 1190.871401][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.7.621'. [ 1191.774904][ T12] bridge_slave_1: left allmulticast mode [ 1191.787779][ T12] bridge_slave_1: left promiscuous mode [ 1191.804716][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.836375][ T12] bridge_slave_0: left allmulticast mode [ 1192.419010][ T12] bridge_slave_0: left promiscuous mode [ 1192.425462][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.377585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.478397][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.512706][ T12] bond0 (unregistering): Released all slaves [ 1195.949687][ T12] hsr_slave_0: left promiscuous mode [ 1196.001646][ T12] hsr_slave_1: left promiscuous mode [ 1196.039889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.099433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.840736][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1203.938793][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1204.581826][T10188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1204.596404][T10188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1204.615729][T10188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.650347][T10188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.664047][T10188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1204.789790][T10808] chnl_net:caif_netlink_parms(): no params data found [ 1204.923948][T10188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1204.939337][T10188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1204.959251][T10188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1205.043802][T10188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1205.077956][T10188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1205.843137][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.871831][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.890665][T10811] bridge_slave_0: entered allmulticast mode [ 1205.914353][T10811] bridge_slave_0: entered promiscuous mode [ 1205.943026][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.967932][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.975464][T10811] bridge_slave_1: entered allmulticast mode [ 1206.021497][T10811] bridge_slave_1: entered promiscuous mode [ 1206.506719][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.706424][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.730453][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.735167][T10188] Bluetooth: hci0: command tx timeout [ 1206.829811][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.847287][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.854823][T10808] bridge_slave_0: entered allmulticast mode [ 1206.917336][T10808] bridge_slave_0: entered promiscuous mode [ 1207.091921][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.138706][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.167253][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.174812][T10808] bridge_slave_1: entered allmulticast mode [ 1207.209219][T10188] Bluetooth: hci1: command tx timeout [ 1207.237134][T10808] bridge_slave_1: entered promiscuous mode [ 1207.474363][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.487096][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.616034][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.843728][T10811] team0: Port device team_slave_0 added [ 1207.898778][T10811] team0: Port device team_slave_1 added [ 1207.931879][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.008295][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.248872][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1208.458184][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.465285][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.558272][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.759581][T10808] team0: Port device team_slave_0 added [ 1208.769216][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.797366][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.824433][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.828976][ T7129] Bluetooth: hci0: command tx timeout [ 1208.974351][T10808] team0: Port device team_slave_1 added [ 1209.078853][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.086684][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.113718][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.130031][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.137302][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.164642][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.196012][T10910] chnl_net:caif_netlink_parms(): no params data found [ 1209.287417][ T7129] Bluetooth: hci1: command tx timeout [ 1209.336247][T10811] hsr_slave_0: entered promiscuous mode [ 1209.345278][T10811] hsr_slave_1: entered promiscuous mode [ 1209.531391][ T7129] Bluetooth: hci5: command 0x0406 tx timeout [ 1209.813915][ T12] bridge_slave_1: left allmulticast mode [ 1209.820668][ T12] bridge_slave_1: left promiscuous mode [ 1209.827901][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.843395][ T12] bridge_slave_0: left allmulticast mode [ 1209.850700][ T12] bridge_slave_0: left promiscuous mode [ 1209.862952][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.663027][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.683027][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.713015][ T12] bond0 (unregistering): Released all slaves [ 1210.909780][T10188] Bluetooth: hci0: command tx timeout [ 1210.939524][T10808] hsr_slave_0: entered promiscuous mode [ 1210.960959][T10808] hsr_slave_1: entered promiscuous mode [ 1211.006257][T10808] debugfs: 'hsr0' already exists in 'hsr' [ 1211.017255][T10808] Cannot create hsr debugfs directory [ 1211.367159][T10188] Bluetooth: hci1: command tx timeout [ 1211.508008][T10916] chnl_net:caif_netlink_parms(): no params data found [ 1212.533197][ T12] hsr_slave_0: left promiscuous mode [ 1212.574391][ T12] hsr_slave_1: left promiscuous mode [ 1212.583220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.593932][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.606017][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.614527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.638248][ T12] veth1_macvtap: left promiscuous mode [ 1212.643903][ T12] veth0_macvtap: left promiscuous mode [ 1212.649948][ T12] veth1_vlan: left promiscuous mode [ 1212.655420][ T12] veth0_vlan: left promiscuous mode [ 1212.967280][T10188] Bluetooth: hci0: command tx timeout [ 1213.394453][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1213.446102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1213.454410][T10188] Bluetooth: hci1: command tx timeout [ 1214.299503][T10910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.325625][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.381272][T10910] bridge_slave_0: entered allmulticast mode [ 1214.417849][T10910] bridge_slave_0: entered promiscuous mode [ 1214.453246][T10910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.485483][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.495373][T10910] bridge_slave_1: entered allmulticast mode [ 1214.505972][T10910] bridge_slave_1: entered promiscuous mode [ 1214.827920][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.835417][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.852995][T10916] bridge_slave_0: entered allmulticast mode [ 1214.863457][T10916] bridge_slave_0: entered promiscuous mode [ 1214.949947][T10910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.968193][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.993653][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.013155][T10916] bridge_slave_1: entered allmulticast mode [ 1215.043808][T10916] bridge_slave_1: entered promiscuous mode [ 1215.263121][T10910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.678201][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.698349][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.833428][T10910] team0: Port device team_slave_0 added [ 1223.522343][T10910] team0: Port device team_slave_1 added [ 1223.799248][T10916] team0: Port device team_slave_0 added [ 1223.827522][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.962274][T10916] team0: Port device team_slave_1 added [ 1223.992848][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.020061][T10910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.038317][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.064702][T10910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.105260][T10811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1224.264190][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.297559][T10910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.308240][T10910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.345580][T10910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.414890][T10811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1224.452547][T10811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1224.511432][T10916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.526485][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.572280][T10916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.629782][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.744511][T10811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1224.829174][T10916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.836253][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.864872][T10916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.031506][T10910] hsr_slave_0: entered promiscuous mode [ 1225.043066][T10910] hsr_slave_1: entered promiscuous mode [ 1225.059505][T10910] debugfs: 'hsr0' already exists in 'hsr' [ 1225.065368][T10910] Cannot create hsr debugfs directory [ 1226.733556][T10916] hsr_slave_0: entered promiscuous mode [ 1226.751749][T10916] hsr_slave_1: entered promiscuous mode [ 1226.762256][T10916] debugfs: 'hsr0' already exists in 'hsr' [ 1226.777372][T10916] Cannot create hsr debugfs directory [ 1227.804167][ T12] bridge_slave_1: left allmulticast mode [ 1227.811383][ T12] bridge_slave_1: left promiscuous mode [ 1227.819670][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.836628][ T12] bridge_slave_0: left allmulticast mode [ 1227.844481][ T12] bridge_slave_0: left promiscuous mode [ 1227.852880][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.885234][ T12] bridge_slave_1: left allmulticast mode [ 1227.897597][ T12] bridge_slave_1: left promiscuous mode [ 1227.903980][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.963824][ T12] bridge_slave_0: left allmulticast mode [ 1227.977004][ T12] bridge_slave_0: left promiscuous mode [ 1227.985320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.250475][ T7129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1228.278381][ T7129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1228.302844][ T7129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1228.368669][ T7129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1228.397761][ T7129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1228.788219][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.830287][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.871389][ T12] bond0 (unregistering): Released all slaves [ 1229.255694][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.285065][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.302687][ T12] bond0 (unregistering): Released all slaves [ 1230.501193][T10188] Bluetooth: hci2: command tx timeout [ 1230.549391][ T12] hsr_slave_0: left promiscuous mode [ 1230.590737][ T12] hsr_slave_1: left promiscuous mode [ 1230.644026][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.708355][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.841727][ T12] hsr_slave_0: left promiscuous mode [ 1230.902720][ T12] hsr_slave_1: left promiscuous mode [ 1230.929717][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.966132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.019606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.032652][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.085005][ T12] veth1_macvtap: left promiscuous mode [ 1231.092768][ T12] veth0_macvtap: left promiscuous mode [ 1231.101576][ T12] veth1_vlan: left promiscuous mode [ 1232.280976][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1232.362619][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1232.577226][T10188] Bluetooth: hci2: command tx timeout [ 1233.202206][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1233.228313][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1234.020948][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.142081][T10910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1234.176268][T10910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1234.331904][T10910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1234.435953][T10910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1234.677339][T10188] Bluetooth: hci2: command tx timeout [ 1234.985724][T10916] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1235.567554][T10916] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1235.598714][T10916] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1235.668778][ T7129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1235.679192][ T7129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1235.689704][ T7129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1235.703653][ T7129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1235.715926][ T7129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.764466][T10916] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1235.844039][T10983] chnl_net:caif_netlink_parms(): no params data found [ 1236.728490][ T7129] Bluetooth: hci2: command tx timeout [ 1237.581727][ T990] bridge_slave_1: left allmulticast mode [ 1237.594673][ T990] bridge_slave_1: left promiscuous mode [ 1237.603055][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.629807][ T990] bridge_slave_0: left allmulticast mode [ 1237.635605][ T990] bridge_slave_0: left promiscuous mode [ 1237.668376][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.767420][ T7129] Bluetooth: hci3: command tx timeout [ 1238.058232][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.096197][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.120451][ T29] audit: type=1804 audit(2000000607.210:6): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.638" name="/newroot/29/bus/bus" dev="overlay" ino=183 res=1 errno=0 [ 1238.122254][ T990] bond0 (unregistering): Released all slaves [ 1238.153828][T11021] Invalid ELF header magic: != ELF [ 1238.479698][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.499237][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.464424][T10983] bridge_slave_0: entered allmulticast mode [ 1239.472642][T10983] bridge_slave_0: entered promiscuous mode [ 1239.867306][ T7129] Bluetooth: hci3: command tx timeout [ 1242.480386][ T7129] Bluetooth: hci3: command tx timeout [ 1243.538944][ T990] hsr_slave_0: left promiscuous mode [ 1244.487952][ T7129] Bluetooth: hci3: command tx timeout [ 1245.525923][ T990] hsr_slave_1: left promiscuous mode [ 1245.548116][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.597868][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.374645][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1246.399691][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1246.516661][T11037] xt_socket: unknown flags 0x4 [ 1246.681982][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.690904][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.718768][T10983] bridge_slave_1: entered allmulticast mode [ 1246.753277][T10983] bridge_slave_1: entered promiscuous mode [ 1246.807306][T10916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.229444][T10916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.304898][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.367802][T10910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.510435][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.675010][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.682517][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.828583][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.836020][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.916249][T10983] team0: Port device team_slave_0 added [ 1247.942978][T10983] team0: Port device team_slave_1 added [ 1247.997595][T11007] chnl_net:caif_netlink_parms(): no params data found [ 1248.364258][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.377363][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.412660][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.433671][T10910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.629960][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.647593][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.717143][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.962547][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.970073][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.142431][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.149908][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.512502][T10983] hsr_slave_0: entered promiscuous mode [ 1249.562493][T10983] hsr_slave_1: entered promiscuous mode [ 1249.581190][T10983] debugfs: 'hsr0' already exists in 'hsr' [ 1249.602909][T10983] Cannot create hsr debugfs directory [ 1249.683632][T10916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.192251][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.220290][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.249206][T11007] bridge_slave_0: entered allmulticast mode [ 1250.265198][T11007] bridge_slave_0: entered promiscuous mode [ 1250.535428][T10910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1250.546520][T10910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.734893][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.801460][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.813358][T11007] bridge_slave_1: entered allmulticast mode [ 1251.075359][T11007] bridge_slave_1: entered promiscuous mode [ 1251.773271][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.870450][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.959143][ T990] bridge_slave_1: left allmulticast mode [ 1251.964952][ T990] bridge_slave_1: left promiscuous mode [ 1251.976123][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.990108][ T990] bridge_slave_0: left allmulticast mode [ 1251.996166][ T990] bridge_slave_0: left promiscuous mode [ 1252.006652][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.430490][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.461610][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.514846][ T990] bond0 (unregistering): Released all slaves [ 1253.049820][ T990] hsr_slave_0: left promiscuous mode [ 1253.059206][ T990] hsr_slave_1: left promiscuous mode [ 1253.067931][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.089351][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.129241][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1254.192877][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1254.900934][T11007] team0: Port device team_slave_0 added [ 1255.054047][T11007] team0: Port device team_slave_1 added [ 1255.401444][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.424182][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.483410][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.567698][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.574788][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.677155][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.905545][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.945973][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.965514][ T7531] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1256.137056][ T7531] usb 8-1: Using ep0 maxpacket: 16 [ 1256.155733][ T7531] usb 8-1: config 0 has no interfaces? [ 1256.190843][ T7531] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1256.217864][ T7531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.230874][T11007] hsr_slave_0: entered promiscuous mode [ 1256.251123][T11007] hsr_slave_1: entered promiscuous mode [ 1256.258179][ T7531] usb 8-1: Product: syz [ 1256.262487][ T7531] usb 8-1: Manufacturer: syz [ 1256.270564][ T7531] usb 8-1: SerialNumber: syz [ 1256.302659][ T7531] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1256.318576][ T7531] r8152-cfgselector 8-1: config 0 descriptor?? [ 1256.827869][ T6906] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 1257.137457][T10983] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1257.213361][T10983] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1257.240305][T10983] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1257.304440][T10983] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1257.588962][T10910] veth0_vlan: entered promiscuous mode [ 1257.953160][T10910] veth1_vlan: entered promiscuous mode [ 1259.359504][T10916] veth0_vlan: entered promiscuous mode [ 1259.748563][T10916] veth1_vlan: entered promiscuous mode [ 1260.493129][T10910] veth0_macvtap: entered promiscuous mode [ 1260.534343][T11007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1260.615368][T10910] veth1_macvtap: entered promiscuous mode [ 1260.629975][T11007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1260.673077][T11007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1260.767966][T11007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.872115][T10916] veth0_macvtap: entered promiscuous mode [ 1260.945941][T10916] veth1_macvtap: entered promiscuous mode [ 1261.042315][T10983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.099343][T10910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.271401][T10910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.392441][T10916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.401848][ T7010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.425811][ T7010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.440535][ T7010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.475987][ T7010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.595042][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.853762][T10916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.956557][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.964055][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.291617][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.343723][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.520799][T11007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1262.531684][T11007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1262.696406][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.703932][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.731348][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.738962][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.016682][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.024286][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.786764][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.833429][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.003754][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.051239][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.110299][T11007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.923918][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.934582][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.312978][T10188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1269.381543][T10188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1269.442236][T10188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1269.530204][T10188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1269.619479][T10188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.759750][T11007] veth0_vlan: entered promiscuous mode [ 1271.931282][ T7129] Bluetooth: hci4: command tx timeout [ 1272.002459][T11007] veth1_vlan: entered promiscuous mode [ 1272.034726][T10188] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1272.069736][T10188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1272.097763][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1272.119343][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1272.131806][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1272.918622][T11007] veth0_macvtap: entered promiscuous mode [ 1274.913269][ T49] Bluetooth: hci4: command tx timeout [ 1274.917820][ T7129] Bluetooth: hci6: command tx timeout [ 1275.174617][T11007] veth1_macvtap: entered promiscuous mode [ 1275.721388][T11007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.901862][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.033138][T11007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.434194][ T1145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.528011][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.547681][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.689202][ T1145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.776972][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.856529][ T1145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.911331][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.968172][ T7129] Bluetooth: hci4: command tx timeout [ 1276.973736][ T7129] Bluetooth: hci6: command tx timeout [ 1277.123517][ T1145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.382304][T11173] chnl_net:caif_netlink_parms(): no params data found [ 1277.902295][T11178] chnl_net:caif_netlink_parms(): no params data found [ 1278.422694][ T1145] bridge_slave_1: left allmulticast mode [ 1278.442348][ T1145] bridge_slave_1: left promiscuous mode [ 1278.462877][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.483264][ T1145] bridge_slave_0: left allmulticast mode [ 1278.503078][ T1145] bridge_slave_0: left promiscuous mode [ 1278.515255][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.991883][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.018046][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.032015][ T1145] bond0 (unregistering): Released all slaves [ 1279.047513][ T7129] Bluetooth: hci6: command tx timeout [ 1279.053049][ T7129] Bluetooth: hci4: command tx timeout [ 1279.277249][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.307356][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.337586][T11173] bridge_slave_0: entered allmulticast mode [ 1279.345693][T11173] bridge_slave_0: entered promiscuous mode [ 1279.399349][T10983] veth0_vlan: entered promiscuous mode [ 1279.519372][ T1145] hsr_slave_0: left promiscuous mode [ 1279.558281][ T1145] hsr_slave_1: left promiscuous mode [ 1279.565968][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.582388][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.636697][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.644408][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.714366][ T1145] veth1_macvtap: left promiscuous mode [ 1279.721420][ T1145] veth0_macvtap: left promiscuous mode [ 1279.741764][ T1145] veth1_vlan: left promiscuous mode [ 1279.747720][ T1145] veth0_vlan: left promiscuous mode [ 1281.151369][ T7129] Bluetooth: hci6: command tx timeout [ 1281.265051][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1281.308880][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1281.706235][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.747803][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.761800][T11173] bridge_slave_1: entered allmulticast mode [ 1281.772272][T11173] bridge_slave_1: entered promiscuous mode [ 1282.356040][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.407300][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.414887][T11178] bridge_slave_0: entered allmulticast mode [ 1282.423990][T11178] bridge_slave_0: entered promiscuous mode [ 1282.528863][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.771078][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.783148][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.819515][T11178] bridge_slave_1: entered allmulticast mode [ 1284.901434][T11178] bridge_slave_1: entered promiscuous mode [ 1285.493740][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.724058][T10983] veth1_vlan: entered promiscuous mode [ 1285.751009][T11173] team0: Port device team_slave_0 added [ 1285.768233][T11173] team0: Port device team_slave_1 added [ 1285.785225][T11178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.811690][T11178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.899284][ T6906] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1285.979199][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.025794][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.043028][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.071924][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.087112][ T6906] usb 8-1: Using ep0 maxpacket: 32 [ 1286.099120][ T6906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1286.112787][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.120516][ T6906] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1286.133707][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.161243][ T6906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1286.176074][ T6906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1286.187425][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.205930][ T6906] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1286.226048][T11178] team0: Port device team_slave_0 added [ 1286.226202][ T6906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.244833][T11178] team0: Port device team_slave_1 added [ 1286.257190][ T6906] usb 8-1: Product: syz [ 1286.267179][ T6906] usb 8-1: Manufacturer: syz [ 1286.295258][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.309604][ T6906] usb 8-1: SerialNumber: syz [ 1286.319592][ T6906] usb 8-1: config 0 descriptor?? [ 1286.396389][ T6906] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input5 [ 1286.570586][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.588242][ T7483] usb 8-1: USB disconnect, device number 3 [ 1286.702784][T11178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.715136][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.742525][T11178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.764782][T11178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.781905][T11178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.822215][T11178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.903388][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.990495][T11173] hsr_slave_0: entered promiscuous mode [ 1286.999939][T11173] hsr_slave_1: entered promiscuous mode [ 1287.007965][T11173] debugfs: 'hsr0' already exists in 'hsr' [ 1287.013815][T11173] Cannot create hsr debugfs directory [ 1287.200999][T11178] hsr_slave_0: entered promiscuous mode [ 1287.223349][T11178] hsr_slave_1: entered promiscuous mode [ 1287.231971][T11178] debugfs: 'hsr0' already exists in 'hsr' [ 1287.238764][T11178] Cannot create hsr debugfs directory [ 1287.370383][T10983] veth0_macvtap: entered promiscuous mode [ 1287.383374][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.393743][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.394209][T10983] veth1_macvtap: entered promiscuous mode [ 1287.977938][T10731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.007940][T10731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.534961][ T1145] bridge_slave_1: left allmulticast mode [ 1288.554997][ T1145] bridge_slave_1: left promiscuous mode [ 1288.587839][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.621303][ T1145] bridge_slave_0: left allmulticast mode [ 1289.184162][ T1145] bridge_slave_0: left promiscuous mode [ 1289.192391][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.201610][ T7483] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1289.218943][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1289.242818][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.256647][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.278957][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.407382][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1290.387431][ T7483] usb 8-1: Using ep0 maxpacket: 16 [ 1290.399118][ T7483] usb 8-1: config 0 has no interfaces? [ 1290.418878][ T7483] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1290.428249][ T7483] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.436411][ T7483] usb 8-1: Product: syz [ 1290.442481][ T7483] usb 8-1: Manufacturer: syz [ 1290.742414][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.778279][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.794697][ T1145] bond0 (unregistering): Released all slaves [ 1291.140694][ T1145] hsr_slave_0: left promiscuous mode [ 1291.168602][ T1145] hsr_slave_1: left promiscuous mode [ 1291.184627][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.193916][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.210637][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.228082][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.253145][ T1145] veth1_macvtap: left promiscuous mode [ 1291.263570][ T1145] veth0_macvtap: left promiscuous mode [ 1291.270959][ T1145] veth1_vlan: left promiscuous mode [ 1291.279137][ T1145] veth0_vlan: left promiscuous mode [ 1291.310720][ T7483] usb 8-1: SerialNumber: syz [ 1291.356639][ T7483] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1291.363249][ T7483] r8152-cfgselector 8-1: config 0 descriptor?? [ 1291.870790][ T7483] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 1292.167712][ T7129] Bluetooth: hci0: command tx timeout [ 1292.237091][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1292.262231][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1294.247711][ T7129] Bluetooth: hci0: command tx timeout [ 1296.327451][ T7129] Bluetooth: hci0: command tx timeout [ 1298.224048][T11253] chnl_net:caif_netlink_parms(): no params data found [ 1298.253510][T11178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1298.320215][T11178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1298.358704][T11288] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1298.375420][T11178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1298.385192][T11288] block device autoloading is deprecated and will be removed. [ 1298.407238][ T7129] Bluetooth: hci0: command tx timeout [ 1298.457485][ T7483] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1298.635267][T11178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1299.136295][ T1145] bridge_slave_1: left allmulticast mode [ 1299.161554][ T1145] bridge_slave_1: left promiscuous mode [ 1299.180716][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.196502][ T1145] bridge_slave_0: left allmulticast mode [ 1299.211675][ T1145] bridge_slave_0: left promiscuous mode [ 1299.220377][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.258772][ T7483] usb 2-1: Using ep0 maxpacket: 16 [ 1299.281685][ T7483] usb 2-1: config 0 has no interfaces? [ 1299.303336][ T7483] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1300.103525][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.126192][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.155692][ T1145] bond0 (unregistering): Released all slaves [ 1300.193055][T11173] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1300.260608][ T7483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.270232][ T7483] usb 2-1: Product: syz [ 1300.274559][ T7483] usb 2-1: Manufacturer: syz [ 1300.279452][ T7483] usb 2-1: SerialNumber: syz [ 1300.313101][ T7483] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1300.354369][T11173] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1300.411099][T11173] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1300.482720][T11173] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1301.158371][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.181385][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.202618][T11253] bridge_slave_0: entered allmulticast mode [ 1301.243086][T11253] bridge_slave_0: entered promiscuous mode [ 1301.278670][ T7483] r8152-cfgselector 2-1: config 0 descriptor?? [ 1301.334015][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.361741][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.370867][ T7483] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1301.395232][T11253] bridge_slave_1: entered allmulticast mode [ 1301.395937][ T7483] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 1301.459754][T11253] bridge_slave_1: entered promiscuous mode [ 1301.631087][ T1145] hsr_slave_0: left promiscuous mode [ 1305.797308][ T1145] hsr_slave_1: left promiscuous mode [ 1305.907628][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.056615][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.306337][ T1145] veth1_macvtap: left promiscuous mode [ 1306.404954][ T1145] veth0_macvtap: left promiscuous mode [ 1306.509194][ T1145] veth1_vlan: left promiscuous mode [ 1306.588765][ T1145] veth0_vlan: left promiscuous mode [ 1308.314270][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1308.341760][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1308.879350][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.069743][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.097062][T11314] netlink: 44 bytes leftover after parsing attributes in process `syz.7.677'. [ 1309.106101][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.677'. [ 1309.282830][T11253] team0: Port device team_slave_0 added [ 1309.434126][T11253] team0: Port device team_slave_1 added [ 1309.569264][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.584233][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.613324][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.676579][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.693364][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.726725][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.761203][ T29] audit: type=1326 audit(2000000678.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11315 comm="syz.7.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09b0f9bf79 code=0x0 [ 1309.969387][T11253] hsr_slave_0: entered promiscuous mode [ 1309.981168][T11253] hsr_slave_1: entered promiscuous mode [ 1309.990010][T11253] debugfs: 'hsr0' already exists in 'hsr' [ 1309.995872][T11253] Cannot create hsr debugfs directory [ 1310.330589][T11178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.683456][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.720310][T11178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.813522][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.821033][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.869746][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.877348][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.940898][T11173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.961979][ T7483] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1311.019726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.027266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.106292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.113726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.151445][ T7483] usb 2-1: Using ep0 maxpacket: 16 [ 1311.181811][ T7483] usb 2-1: config 0 has no interfaces? [ 1311.198581][ T7483] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1311.218451][ T7483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.228322][ T7483] usb 2-1: Product: syz [ 1311.232650][ T7483] usb 2-1: Manufacturer: syz [ 1311.240793][ T7483] usb 2-1: SerialNumber: syz [ 1311.284681][ T7483] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1311.316266][ T7483] r8152-cfgselector 2-1: config 0 descriptor?? [ 1311.645084][T11253] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1311.743786][T11253] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1311.811992][T11253] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1311.899357][T11253] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1311.975467][ T7531] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 1312.943599][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.269275][ T793] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1313.382608][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.480536][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 1313.506237][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.558540][ T793] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1314.557692][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.640311][ T793] usb 2-1: config 0 descriptor?? [ 1317.847112][T11253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.081609][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.815609][T11178] veth0_vlan: entered promiscuous mode [ 1318.887467][ T793] usbhid 2-1:0.0: can't add hid device: -71 [ 1318.893961][ T793] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1318.904688][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.912205][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.985467][ T793] usb 2-1: USB disconnect, device number 6 [ 1319.134236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.141784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.252259][T11178] veth1_vlan: entered promiscuous mode [ 1319.760735][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 1319.777817][T11178] veth0_macvtap: entered promiscuous mode [ 1319.860538][T11178] veth1_macvtap: entered promiscuous mode [ 1320.102014][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.238967][T11178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.365462][T10731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.455039][T10731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.495099][T10731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.538170][T10731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.460061][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.517256][ T7395] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1321.550901][T11173] veth0_vlan: entered promiscuous mode [ 1321.691474][T11173] veth1_vlan: entered promiscuous mode [ 1321.700090][ T7395] usb 2-1: Using ep0 maxpacket: 16 [ 1321.747120][ T7395] usb 2-1: config 0 has no interfaces? [ 1321.770927][ T7395] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1321.827283][ T7395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.835467][ T7395] usb 2-1: Product: syz [ 1321.878400][ T7395] usb 2-1: Manufacturer: syz [ 1321.883167][ T7395] usb 2-1: SerialNumber: syz [ 1321.988711][ T7395] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1322.016959][ T7395] r8152-cfgselector 2-1: config 0 descriptor?? [ 1322.158881][T11173] veth0_macvtap: entered promiscuous mode [ 1322.273996][T11173] veth1_macvtap: entered promiscuous mode [ 1322.476406][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.562715][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.676779][ T990] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.700231][ T990] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.749270][ T990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.781548][ T990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.902430][ T5836] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 1330.370151][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.376750][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1332.359865][T11253] veth0_vlan: entered promiscuous mode [ 1335.662893][T11253] veth1_vlan: entered promiscuous mode [ 1337.408000][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1337.422324][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1337.431715][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1337.450049][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1337.462539][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1337.514071][T11253] veth0_macvtap: entered promiscuous mode [ 1337.573711][T11253] veth1_macvtap: entered promiscuous mode [ 1339.477599][T11253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.505322][T11253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.514632][ T7129] Bluetooth: hci1: command tx timeout [ 1342.929762][ T7129] Bluetooth: hci1: command tx timeout [ 1343.637588][ T3006] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.713307][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1343.726597][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1343.735917][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1343.749270][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1343.760084][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1343.797729][ T3006] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.808438][ T3006] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.820195][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.968748][ T49] Bluetooth: hci1: command tx timeout [ 1345.741851][ T990] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.830299][T11426] chnl_net:caif_netlink_parms(): no params data found [ 1345.857060][ T49] Bluetooth: hci2: command tx timeout [ 1346.090684][ T990] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.361924][ T990] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.782449][ T990] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.055839][ T49] Bluetooth: hci1: command tx timeout [ 1347.690231][T11440] chnl_net:caif_netlink_parms(): no params data found [ 1347.762980][T11426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.807634][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.815259][T11426] bridge_slave_0: entered allmulticast mode [ 1347.860758][T11426] bridge_slave_0: entered promiscuous mode [ 1347.865008][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 1347.894122][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.927941][ T49] Bluetooth: hci2: command tx timeout [ 1347.942420][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.951247][T11426] bridge_slave_1: entered allmulticast mode [ 1347.971435][T11426] bridge_slave_1: entered promiscuous mode [ 1348.332573][ T990] bridge_slave_1: left allmulticast mode [ 1348.432163][ T990] bridge_slave_1: left promiscuous mode [ 1348.460871][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.650208][ T990] bridge_slave_0: left allmulticast mode [ 1348.656038][ T990] bridge_slave_0: left promiscuous mode [ 1348.699935][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.127216][ T6906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1349.287721][ T6906] usb 2-1: Using ep0 maxpacket: 16 [ 1349.303870][ T6906] usb 2-1: config 0 has no interfaces? [ 1349.329286][ T6906] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1349.346986][ T6906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.389804][ T6906] usb 2-1: Product: syz [ 1349.394132][ T6906] usb 2-1: Manufacturer: syz [ 1349.411061][ T6906] usb 2-1: SerialNumber: syz [ 1349.450540][ T6906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1349.478628][ T6906] r8152-cfgselector 2-1: config 0 descriptor?? [ 1349.731312][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.818494][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.865382][ T990] bond0 (unregistering): Released all slaves [ 1350.008193][ T49] Bluetooth: hci2: command tx timeout [ 1350.116638][T11426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.181718][T11426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.362020][ T5836] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 1350.422112][ T990] hsr_slave_0: left promiscuous mode [ 1350.495357][ T990] hsr_slave_1: left promiscuous mode [ 1350.528927][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.570184][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.601473][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.627314][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.688408][ T990] veth1_macvtap: left promiscuous mode [ 1350.694088][ T990] veth0_macvtap: left promiscuous mode [ 1350.711154][ T990] veth1_vlan: left promiscuous mode [ 1350.729761][ T990] veth0_vlan: left promiscuous mode [ 1351.036169][ T7129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1351.062714][ T7129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1351.072161][ T7129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1351.098151][ T7129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1351.116038][ T7129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1352.088423][ T7129] Bluetooth: hci2: command tx timeout [ 1353.258547][ T7129] Bluetooth: hci4: command tx timeout [ 1355.288326][ T7129] Bluetooth: hci4: command tx timeout [ 1355.538943][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1355.672502][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1356.686672][T11426] team0: Port device team_slave_0 added [ 1356.962610][T11426] team0: Port device team_slave_1 added [ 1357.346206][T11426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.367148][ T49] Bluetooth: hci4: command tx timeout [ 1357.381075][T11426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.423664][T11426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.544393][T11426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.559210][T11426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.596375][T11426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.020180][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1358.361177][T11426] hsr_slave_0: entered promiscuous mode [ 1358.396439][T11426] hsr_slave_1: entered promiscuous mode [ 1358.437722][T11426] debugfs: 'hsr0' already exists in 'hsr' [ 1358.445218][T11426] Cannot create hsr debugfs directory [ 1358.521677][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.535630][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.451490][ T7129] Bluetooth: hci4: command tx timeout [ 1359.493659][T11440] bridge_slave_0: entered allmulticast mode [ 1359.503712][T11440] bridge_slave_0: entered promiscuous mode [ 1359.518940][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.526356][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.535357][T11440] bridge_slave_1: entered allmulticast mode [ 1359.545341][T11440] bridge_slave_1: entered promiscuous mode [ 1359.612629][ T990] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.762989][ T990] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.795244][ T990] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.959647][T11440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.992928][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 1361.224702][T11440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.335960][ T990] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.558337][ T7531] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1362.747390][ T7531] usb 8-1: Using ep0 maxpacket: 16 [ 1362.771666][ T7531] usb 8-1: config 0 has no interfaces? [ 1362.801354][ T7531] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1362.827222][ T7531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.851653][ T7531] usb 8-1: Product: syz [ 1362.867372][ T7531] usb 8-1: Manufacturer: syz [ 1362.877622][ T7531] usb 8-1: SerialNumber: syz [ 1362.915474][ T7531] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1362.937794][ T7531] r8152-cfgselector 8-1: config 0 descriptor?? [ 1363.552613][T11440] team0: Port device team_slave_0 added [ 1363.662555][T11440] team0: Port device team_slave_1 added [ 1364.019948][ T793] r8152-cfgselector 8-1: USB disconnect, device number 5 [ 1364.295973][T11440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.307245][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.357479][T11440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.886229][T11440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.921395][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.995391][T11440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.480057][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.707'. [ 1367.838379][ T990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.217698][ T29] audit: type=1804 audit(2000000737.300:8): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.708" name="/newroot/24/bus/bus" dev="overlay" ino=157 res=1 errno=0 [ 1368.454997][ T990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.566150][T11440] hsr_slave_0: entered promiscuous mode [ 1368.611801][T11440] hsr_slave_1: entered promiscuous mode [ 1368.629017][T11440] debugfs: 'hsr0' already exists in 'hsr' [ 1368.634877][T11440] Cannot create hsr debugfs directory [ 1368.800615][ T990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.184789][T11426] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1369.620197][ T990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.770319][T11426] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1372.019881][T11508] chnl_net:caif_netlink_parms(): no params data found [ 1372.162848][T11426] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1372.395442][T11426] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1373.866331][ T990] bridge_slave_1: left allmulticast mode [ 1373.915826][ T990] bridge_slave_1: left promiscuous mode [ 1373.927817][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.005547][ T990] bridge_slave_0: left allmulticast mode [ 1374.047017][ T990] bridge_slave_0: left promiscuous mode [ 1374.068261][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.130891][T11635] netlink: 184 bytes leftover after parsing attributes in process `syz.7.713'. [ 1374.209332][ T990] bridge_slave_1: left allmulticast mode [ 1374.224080][ T990] bridge_slave_1: left promiscuous mode [ 1374.240282][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.300268][ T990] bridge_slave_0: left allmulticast mode [ 1374.322663][ T990] bridge_slave_0: left promiscuous mode [ 1374.356746][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.939916][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.463247][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.556717][ T990] bond0 (unregistering): Released all slaves [ 1379.167324][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.200483][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.254610][ T990] bond0 (unregistering): Released all slaves [ 1379.332047][T11633] warning: `syz.7.713' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1379.767979][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.787150][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.794601][T11508] bridge_slave_0: entered allmulticast mode [ 1379.840266][T11508] bridge_slave_0: entered promiscuous mode [ 1379.876081][T11667] overlayfs: failed to clone upperpath [ 1380.027783][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.045855][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.067979][T11508] bridge_slave_1: entered allmulticast mode [ 1380.116451][T11508] bridge_slave_1: entered promiscuous mode [ 1380.296151][ T990] hsr_slave_0: left promiscuous mode [ 1380.321959][ T990] hsr_slave_1: left promiscuous mode [ 1380.740012][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.757234][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.250932][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.265370][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.378284][ T990] hsr_slave_0: left promiscuous mode [ 1382.405304][ T990] hsr_slave_1: left promiscuous mode [ 1382.639344][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.667125][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.700649][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.717048][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.851684][ T990] veth1_macvtap: left promiscuous mode [ 1382.863222][ T990] veth0_macvtap: left promiscuous mode [ 1382.892009][ T990] veth1_vlan: left promiscuous mode [ 1382.917154][ T990] veth0_vlan: left promiscuous mode [ 1382.929117][ T990] veth1_macvtap: left promiscuous mode [ 1382.945287][ T990] veth0_macvtap: left promiscuous mode [ 1382.967878][ T990] veth1_vlan: left promiscuous mode [ 1383.007166][ T990] veth0_vlan: left promiscuous mode [ 1386.049213][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1386.135961][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1387.628679][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1387.728297][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1388.021060][T11700] trusted_key: syz.7.722 sent an empty control message without MSG_MORE. [ 1389.133119][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.318836][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.309841][T11508] team0: Port device team_slave_0 added [ 1391.255122][T11508] team0: Port device team_slave_1 added [ 1391.808757][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.815339][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.167768][T11727] overlayfs: failed to clone upperpath [ 1392.217375][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.232591][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.277867][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.457505][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.464625][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.910501][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.922559][T11440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1395.125251][T11508] hsr_slave_0: entered promiscuous mode [ 1395.188483][T11508] hsr_slave_1: entered promiscuous mode [ 1395.212778][T11508] debugfs: 'hsr0' already exists in 'hsr' [ 1395.266965][T11508] Cannot create hsr debugfs directory [ 1395.317481][T11440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1399.808366][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1399.828317][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1399.837381][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1399.849994][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1399.874626][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1400.746887][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1400.774686][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1400.795317][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1400.837786][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1400.867694][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1401.927102][ T49] Bluetooth: hci0: command tx timeout [ 1402.968319][ T49] Bluetooth: hci6: command tx timeout [ 1404.019107][ T49] Bluetooth: hci0: command tx timeout [ 1404.518645][T11508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1404.627600][T11741] chnl_net:caif_netlink_parms(): no params data found [ 1404.797261][T11508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1404.888939][T11508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1405.047178][ T49] Bluetooth: hci6: command tx timeout [ 1405.473746][T11508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1406.453735][ T49] Bluetooth: hci0: command tx timeout [ 1407.138110][ T49] Bluetooth: hci6: command tx timeout [ 1407.522432][T11755] chnl_net:caif_netlink_parms(): no params data found [ 1407.650761][ T7009] bridge_slave_1: left allmulticast mode [ 1407.656501][ T7009] bridge_slave_1: left promiscuous mode [ 1407.675814][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.720512][ T7009] bridge_slave_0: left allmulticast mode [ 1407.726319][ T7009] bridge_slave_0: left promiscuous mode [ 1407.797857][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.487150][ T49] Bluetooth: hci0: command tx timeout [ 1408.654572][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.718969][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.781527][ T7009] bond0 (unregistering): Released all slaves [ 1409.207067][ T49] Bluetooth: hci6: command tx timeout [ 1409.281448][ T7009] hsr_slave_0: left promiscuous mode [ 1409.367139][ T7009] hsr_slave_1: left promiscuous mode [ 1409.381532][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.978083][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.882490][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 1411.076486][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 1412.358177][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.365634][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.439922][T11741] bridge_slave_0: entered allmulticast mode [ 1412.460842][T11741] bridge_slave_0: entered promiscuous mode [ 1412.537110][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.563193][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.609805][T11741] bridge_slave_1: entered allmulticast mode [ 1412.669329][T11741] bridge_slave_1: entered promiscuous mode [ 1412.729686][T11830] overlayfs: failed to clone upperpath [ 1413.201487][ T7129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1413.210790][ T7129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1413.221324][ T7129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1413.236527][ T7129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1413.258642][ T7129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1413.345255][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.461455][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.972822][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.993398][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.014744][T11755] bridge_slave_0: entered allmulticast mode [ 1414.041082][T11755] bridge_slave_0: entered promiscuous mode [ 1415.407695][ T7129] Bluetooth: hci1: command tx timeout [ 1416.440660][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.541496][ T7129] Bluetooth: hci1: command tx timeout [ 1417.553332][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.676399][T11755] bridge_slave_1: entered allmulticast mode [ 1417.723342][T11755] bridge_slave_1: entered promiscuous mode [ 1417.875524][T11741] team0: Port device team_slave_0 added [ 1418.194317][T11741] team0: Port device team_slave_1 added [ 1418.863101][T11755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.407577][T11755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.607097][ T7129] Bluetooth: hci1: command tx timeout [ 1419.759872][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.789740][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.882471][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.916391][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.947142][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.008784][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.768534][T11755] team0: Port device team_slave_0 added [ 1420.872985][T11741] hsr_slave_0: entered promiscuous mode [ 1420.890888][T11741] hsr_slave_1: entered promiscuous mode [ 1420.899401][T11741] debugfs: 'hsr0' already exists in 'hsr' [ 1420.905264][T11741] Cannot create hsr debugfs directory [ 1420.958142][T11755] team0: Port device team_slave_1 added [ 1421.427812][T11755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.438014][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.526962][T11755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.687160][ T7129] Bluetooth: hci1: command tx timeout [ 1421.858932][T11755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.866039][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.981695][T11755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.289347][T11755] hsr_slave_0: entered promiscuous mode [ 1423.359583][T11755] hsr_slave_1: entered promiscuous mode [ 1423.391751][T11755] debugfs: 'hsr0' already exists in 'hsr' [ 1423.398976][T11755] Cannot create hsr debugfs directory [ 1423.489885][T11837] chnl_net:caif_netlink_parms(): no params data found [ 1423.591374][ T7009] bridge_slave_1: left allmulticast mode [ 1423.617382][ T7009] bridge_slave_1: left promiscuous mode [ 1423.623866][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.713377][ T7009] bridge_slave_0: left allmulticast mode [ 1423.749199][ T7009] bridge_slave_0: left promiscuous mode [ 1423.770120][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.338621][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.358654][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.411737][ T7009] bond0 (unregistering): Released all slaves [ 1425.149052][ T7009] hsr_slave_0: left promiscuous mode [ 1425.182028][ T7009] hsr_slave_1: left promiscuous mode [ 1425.213843][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.293167][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.149166][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 1426.254528][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 1430.627432][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.634899][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.692413][T11837] bridge_slave_0: entered allmulticast mode [ 1430.727496][T11837] bridge_slave_0: entered promiscuous mode [ 1431.009411][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.059668][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.121097][T11837] bridge_slave_1: entered allmulticast mode [ 1431.150044][T11837] bridge_slave_1: entered promiscuous mode [ 1434.471868][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.569379][T11741] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1434.720579][T11741] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1435.073118][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.196721][T11741] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1435.298510][T11741] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1435.553934][T11837] team0: Port device team_slave_0 added [ 1435.712209][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1435.728099][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1435.737628][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1435.818277][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1435.835027][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1435.835521][T11837] team0: Port device team_slave_1 added [ 1436.298881][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.305906][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.407360][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.488147][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.496096][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.557301][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.770898][T11837] hsr_slave_0: entered promiscuous mode [ 1437.800765][T11837] hsr_slave_1: entered promiscuous mode [ 1437.839644][T11837] debugfs: 'hsr0' already exists in 'hsr' [ 1437.845513][T11837] Cannot create hsr debugfs directory [ 1437.962524][ T7009] bridge_slave_1: left allmulticast mode [ 1438.011301][ T7009] bridge_slave_1: left promiscuous mode [ 1438.018460][ T7129] Bluetooth: hci2: command tx timeout [ 1438.037310][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.087863][ T7009] bridge_slave_0: left allmulticast mode [ 1438.093593][ T7009] bridge_slave_0: left promiscuous mode [ 1438.128626][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.568732][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.677356][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.721332][ T7009] bond0 (unregistering): Released all slaves [ 1439.401956][ T7009] hsr_slave_0: left promiscuous mode [ 1439.449946][ T7009] hsr_slave_1: left promiscuous mode [ 1439.458787][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.470744][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.087481][ T7129] Bluetooth: hci2: command tx timeout [ 1440.279189][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 1440.522668][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 1440.609957][T11957] overlayfs: failed to clone upperpath [ 1442.167401][ T7129] Bluetooth: hci2: command tx timeout [ 1442.803592][T11755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1443.113359][T11755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1443.272828][T11755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1443.627889][T11755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1444.016459][ T7009] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.247365][ T7129] Bluetooth: hci2: command tx timeout [ 1444.679532][ T7009] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.102019][ T7009] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.439987][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.633933][ T7009] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.668888][T11931] chnl_net:caif_netlink_parms(): no params data found [ 1446.443119][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.534793][T11837] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1446.698343][T11837] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1446.843972][T11837] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1446.960675][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.968199][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.022532][ T7009] bridge_slave_1: left allmulticast mode [ 1447.048824][ T7009] bridge_slave_1: left promiscuous mode [ 1447.055246][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.188112][ T7009] bridge_slave_0: left allmulticast mode [ 1447.193937][ T7009] bridge_slave_0: left promiscuous mode [ 1447.217668][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.215062][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.337125][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.363511][ T7009] bond0 (unregistering): Released all slaves [ 1448.550549][T11837] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1448.968335][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.975802][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.329530][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.338512][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.346233][T11931] bridge_slave_0: entered allmulticast mode [ 1449.367672][T11931] bridge_slave_0: entered promiscuous mode [ 1449.394917][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.416588][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.425058][T11931] bridge_slave_1: entered allmulticast mode [ 1449.449844][T11931] bridge_slave_1: entered promiscuous mode [ 1450.071185][ T7009] hsr_slave_0: left promiscuous mode [ 1450.087977][ T7009] hsr_slave_1: left promiscuous mode [ 1450.109858][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.136959][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.189874][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.206974][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.304117][ T7009] veth1_macvtap: left promiscuous mode [ 1450.317066][ T7009] veth0_macvtap: left promiscuous mode [ 1450.342150][ T7009] veth1_vlan: left promiscuous mode [ 1450.357284][ T7009] veth0_vlan: left promiscuous mode [ 1451.450328][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 1451.514149][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 1452.084533][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.253883][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.740817][T11931] team0: Port device team_slave_0 added [ 1452.780606][T11741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.859104][T11931] team0: Port device team_slave_1 added [ 1453.127182][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.134208][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.168211][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.227785][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.234346][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.318013][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.325096][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.375925][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.445087][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.822999][T11931] hsr_slave_0: entered promiscuous mode [ 1453.850678][T11931] hsr_slave_1: entered promiscuous mode [ 1453.875346][T11931] debugfs: 'hsr0' already exists in 'hsr' [ 1453.890924][T11931] Cannot create hsr debugfs directory [ 1454.034287][T11755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.361149][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.368633][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.451845][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.459160][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.996096][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.132370][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.558667][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.566008][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.829994][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.837476][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.157563][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1462.182823][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1462.194609][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1462.210655][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1462.237470][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1462.612318][T12079] overlayfs: failed to clone upperpath [ 1462.695202][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1462.711697][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1462.738486][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1462.768431][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1462.788744][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1464.338475][ T49] Bluetooth: hci4: command tx timeout [ 1464.417209][T11931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1464.441796][T11931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1464.682080][T11931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1464.897427][ T49] Bluetooth: hci5: command tx timeout [ 1464.940651][T11931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1465.892189][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.197899][T12080] chnl_net:caif_netlink_parms(): no params data found [ 1466.407060][ T49] Bluetooth: hci4: command tx timeout [ 1466.538111][T12075] chnl_net:caif_netlink_parms(): no params data found [ 1466.967237][ T49] Bluetooth: hci5: command tx timeout [ 1467.455141][ T57] bridge_slave_1: left allmulticast mode [ 1467.478168][ T57] bridge_slave_1: left promiscuous mode [ 1467.484646][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.519678][ T57] bridge_slave_0: left allmulticast mode [ 1467.525478][ T57] bridge_slave_0: left promiscuous mode [ 1467.553174][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.487217][ T49] Bluetooth: hci4: command tx timeout [ 1468.886368][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.923568][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.971990][ T57] bond0 (unregistering): Released all slaves [ 1469.064057][ T49] Bluetooth: hci5: command tx timeout [ 1469.454942][ T57] hsr_slave_0: left promiscuous mode [ 1469.477375][ T57] hsr_slave_1: left promiscuous mode [ 1469.484332][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.509162][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.745172][ T7129] Bluetooth: hci5: command tx timeout [ 1471.750912][ T49] Bluetooth: hci4: command tx timeout [ 1476.102810][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1476.228560][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1477.368467][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.375755][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.407708][T12080] bridge_slave_0: entered allmulticast mode [ 1477.416739][T12080] bridge_slave_0: entered promiscuous mode [ 1477.483026][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.503583][T12151] overlayfs: failed to clone upperpath [ 1477.528098][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.535463][T12080] bridge_slave_1: entered allmulticast mode [ 1477.590130][T12080] bridge_slave_1: entered promiscuous mode [ 1477.728344][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.027491][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.034927][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.118924][T12075] bridge_slave_0: entered allmulticast mode [ 1478.182222][T12075] bridge_slave_0: entered promiscuous mode [ 1478.240096][ T7129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1478.253117][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.276146][ T7129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1478.286575][ T7129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1478.300599][ T7129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1478.321005][ T7129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1478.347183][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.354736][T12075] bridge_slave_1: entered allmulticast mode [ 1478.389999][T12075] bridge_slave_1: entered promiscuous mode [ 1478.699739][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.785336][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.854732][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.059151][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.775085][T12075] team0: Port device team_slave_0 added [ 1479.875562][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.945975][T12080] team0: Port device team_slave_0 added [ 1479.996210][T12080] team0: Port device team_slave_1 added [ 1480.176266][T12075] team0: Port device team_slave_1 added [ 1480.268560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.276104][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.408169][ T49] Bluetooth: hci0: command tx timeout [ 1480.973379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.980923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.207498][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.214600][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.291971][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.413614][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.450025][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.507462][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.562315][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.588861][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.666978][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.820628][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.829102][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.917101][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.441984][T12075] hsr_slave_0: entered promiscuous mode [ 1482.461010][T12075] hsr_slave_1: entered promiscuous mode [ 1482.470743][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 1482.476607][T12075] Cannot create hsr debugfs directory [ 1482.487845][ T49] Bluetooth: hci0: command tx timeout [ 1482.734549][T12080] hsr_slave_0: entered promiscuous mode [ 1482.771401][T12080] hsr_slave_1: entered promiscuous mode [ 1482.802189][T12080] debugfs: 'hsr0' already exists in 'hsr' [ 1482.820487][T12080] Cannot create hsr debugfs directory [ 1483.887586][ T57] bridge_slave_1: left allmulticast mode [ 1483.895432][ T57] bridge_slave_1: left promiscuous mode [ 1483.928180][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.971230][ T57] bridge_slave_0: left allmulticast mode [ 1483.987309][ T57] bridge_slave_0: left promiscuous mode [ 1483.996039][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.576529][ T49] Bluetooth: hci0: command tx timeout [ 1484.658652][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.698295][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.721976][ T57] bond0 (unregistering): Released all slaves [ 1485.219194][ T57] hsr_slave_0: left promiscuous mode [ 1485.240281][ T57] hsr_slave_1: left promiscuous mode [ 1485.259035][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.316979][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.045756][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1486.129456][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1486.647312][ T49] Bluetooth: hci0: command tx timeout [ 1487.581949][T12158] chnl_net:caif_netlink_parms(): no params data found [ 1487.863118][T11931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.171966][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.195357][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.204575][T12158] bridge_slave_0: entered allmulticast mode [ 1489.231598][T12158] bridge_slave_0: entered promiscuous mode [ 1489.347370][T11931] veth0_vlan: entered promiscuous mode [ 1489.397295][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.404729][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.437674][T12158] bridge_slave_1: entered allmulticast mode [ 1489.446584][T12158] bridge_slave_1: entered promiscuous mode [ 1489.737139][T12075] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1489.838744][T12075] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1489.910250][T12075] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1489.986616][T12075] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1490.184290][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.339694][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.363648][ T57] bridge_slave_1: left allmulticast mode [ 1490.377525][ T57] bridge_slave_1: left promiscuous mode [ 1490.389096][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.421611][ T57] bridge_slave_0: left allmulticast mode [ 1490.437000][ T57] bridge_slave_0: left promiscuous mode [ 1490.443639][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.935098][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.965882][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.999565][ T57] bond0 (unregistering): Released all slaves [ 1495.773240][ T57] hsr_slave_0: left promiscuous mode [ 1495.800236][ T57] hsr_slave_1: left promiscuous mode [ 1495.828164][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.845193][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.336645][ T7129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1496.346085][ T7129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1496.355987][ T7129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1496.382098][ T7129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1496.398346][ T7129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1496.673156][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1496.731705][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1497.081720][T11931] veth1_vlan: entered promiscuous mode [ 1497.155115][T12158] team0: Port device team_slave_0 added [ 1497.345462][T12158] team0: Port device team_slave_1 added [ 1497.667458][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.675123][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.724718][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.777700][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.784791][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1497.831603][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.481494][T12158] hsr_slave_0: entered promiscuous mode [ 1498.494617][T12158] hsr_slave_1: entered promiscuous mode [ 1498.497117][ T49] Bluetooth: hci1: command tx timeout [ 1498.510141][T12158] debugfs: 'hsr0' already exists in 'hsr' [ 1498.516013][T12158] Cannot create hsr debugfs directory [ 1498.643914][T12080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1498.822132][T12080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1499.083842][T12080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1499.386072][T12080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1499.978731][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.383709][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.443128][T12225] chnl_net:caif_netlink_parms(): no params data found [ 1500.569141][ T49] Bluetooth: hci1: command tx timeout [ 1501.064848][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.072351][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.349660][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.357177][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.388155][ T12] bridge_slave_1: left allmulticast mode [ 1501.393963][ T12] bridge_slave_1: left promiscuous mode [ 1501.412226][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.426363][ T12] bridge_slave_0: left allmulticast mode [ 1501.432680][ T12] bridge_slave_0: left promiscuous mode [ 1501.439228][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.902082][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.924651][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.946555][ T12] bond0 (unregistering): Released all slaves [ 1502.276517][ T12] hsr_slave_0: left promiscuous mode [ 1502.297211][ T12] hsr_slave_1: left promiscuous mode [ 1502.304757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.327935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.378059][ T12] veth1_vlan: left promiscuous mode [ 1502.383536][ T12] veth0_vlan: left promiscuous mode [ 1502.647156][ T49] Bluetooth: hci1: command tx timeout [ 1503.251751][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1503.286106][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1503.901440][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.917375][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.925592][T12225] bridge_slave_0: entered allmulticast mode [ 1503.945522][T12225] bridge_slave_0: entered promiscuous mode [ 1504.031889][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.049528][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.064444][T12225] bridge_slave_1: entered allmulticast mode [ 1504.073698][T12225] bridge_slave_1: entered promiscuous mode [ 1504.246082][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.327244][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.350566][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.403001][T12158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1504.504505][T12158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1504.548854][T12158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1504.595635][T12158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1504.739573][ T49] Bluetooth: hci1: command tx timeout [ 1504.825125][T12225] team0: Port device team_slave_0 added [ 1504.854590][T12225] team0: Port device team_slave_1 added [ 1505.158200][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.165303][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.208628][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.233531][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.247383][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1505.295691][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.331313][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.565065][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.572545][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.673044][T12225] hsr_slave_0: entered promiscuous mode [ 1505.691162][T12225] hsr_slave_1: entered promiscuous mode [ 1505.704568][T12225] debugfs: 'hsr0' already exists in 'hsr' [ 1505.711563][T12225] Cannot create hsr debugfs directory [ 1505.858232][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.865649][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.289116][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.198914][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.446542][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.562525][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.570033][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.779723][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.787198][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.089817][T12225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1508.179565][T12225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1508.213940][T12225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1508.263552][T12225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1508.308649][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.728689][T12075] veth0_vlan: entered promiscuous mode [ 1508.951435][T12075] veth1_vlan: entered promiscuous mode [ 1509.283040][T12080] veth0_vlan: entered promiscuous mode [ 1509.411150][T12080] veth1_vlan: entered promiscuous mode [ 1509.565673][T12075] veth0_macvtap: entered promiscuous mode [ 1509.650400][T12075] veth1_macvtap: entered promiscuous mode [ 1509.836002][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.992082][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.021204][T12080] veth0_macvtap: entered promiscuous mode [ 1510.056056][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.172143][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.201553][T12080] veth1_macvtap: entered promiscuous mode [ 1510.293296][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.367160][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.434929][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.482814][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.516271][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.546554][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.554066][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.631343][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.694887][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.702406][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.818350][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.920493][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.957159][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.966100][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.038418][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.371944][T12158] veth0_vlan: entered promiscuous mode [ 1512.466101][T12158] veth1_vlan: entered promiscuous mode [ 1513.502996][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.597717][T12158] veth0_macvtap: entered promiscuous mode [ 1513.655140][T12158] veth1_macvtap: entered promiscuous mode [ 1513.922308][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.114332][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.321480][ T990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.357043][ T990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.366001][ T990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.509277][ T990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.699684][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.706274][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.764975][T12225] veth0_vlan: entered promiscuous mode [ 1514.964231][T12225] veth1_vlan: entered promiscuous mode [ 1515.389626][T12225] veth0_macvtap: entered promiscuous mode [ 1515.514736][T12225] veth1_macvtap: entered promiscuous mode [ 1515.908182][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1516.021237][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1516.198486][ T7009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.272047][ T3006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.349039][ T3006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.399244][ T3006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.534495][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.636930][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.965595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.036098][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.391292][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.476999][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.329883][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.307065][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.640720][T12365] input: syz1 as /devices/virtual/input/input6 [ 1520.782777][T12365] netlink: 'syz.9.771': attribute type 10 has an invalid length. [ 1520.894905][T12365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.963262][T12365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1521.017178][T12365] netlink: 'syz.9.771': attribute type 10 has an invalid length. [ 1521.025572][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.9.771'. [ 1521.035292][T12365] batadv0: entered promiscuous mode [ 1521.041414][T12365] batadv0: entered allmulticast mode [ 1521.152143][T12365] bond0: (slave batadv0): Releasing backup interface [ 1521.302944][T12365] bridge0: port 3(batadv0) entered blocking state [ 1521.311703][T12365] bridge0: port 3(batadv0) entered disabled state [ 1521.770787][ T5997] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1521.781709][ T5997] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1525.496134][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'. [ 1530.607046][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.615074][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.346543][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.382056][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.942934][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.983431][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.320178][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.366292][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.280987][T12457] input: syz1 as /devices/virtual/input/input7 [ 1538.600926][T12457] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 1538.713699][T12457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.777546][T12457] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1538.811965][T12457] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 1538.820433][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 1538.830264][T12457] batadv0: entered promiscuous mode [ 1538.839713][T12457] batadv0: entered allmulticast mode [ 1539.043819][T12457] bond0: (slave batadv0): Releasing backup interface [ 1539.901363][T12457] bridge0: port 3(batadv0) entered blocking state [ 1540.047334][T12457] bridge0: port 3(batadv0) entered disabled state [ 1542.302528][ T7010] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1542.314625][ T7010] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1549.230467][ T7129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1549.257149][ T7129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1549.318300][ T7129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1549.452844][ T7129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1549.571911][ T7129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1551.942444][ T49] Bluetooth: hci2: command tx timeout [ 1552.920355][T12486] chnl_net:caif_netlink_parms(): no params data found [ 1553.425141][T12513] Illegal XDP return value 4294967274 on prog (id 36) dev N/A, expect packet loss! [ 1554.027069][ T49] Bluetooth: hci2: command tx timeout [ 1554.666576][T12523] input: syz1 as /devices/virtual/input/input8 [ 1554.895390][T12523] netlink: 'syz.8.799': attribute type 10 has an invalid length. [ 1555.015154][T12523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.082826][T12523] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1555.128975][T12523] netlink: 'syz.8.799': attribute type 10 has an invalid length. [ 1555.137803][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.8.799'. [ 1555.147485][T12523] batadv0: entered promiscuous mode [ 1555.154376][T12523] batadv0: entered allmulticast mode [ 1556.404338][ T49] Bluetooth: hci2: command tx timeout [ 1557.833099][T12523] bond0: (slave batadv0): Releasing backup interface [ 1558.650284][ T49] Bluetooth: hci2: command tx timeout [ 1560.365123][T12523] bridge0: port 3(batadv0) entered blocking state [ 1560.378151][T12523] bridge0: port 3(batadv0) entered disabled state [ 1560.724973][ T3006] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1560.736584][ T3006] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1561.237819][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.277718][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.285569][T12486] bridge_slave_0: entered allmulticast mode [ 1561.374920][T12486] bridge_slave_0: entered promiscuous mode [ 1561.489920][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.547536][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.555498][T12486] bridge_slave_1: entered allmulticast mode [ 1564.058338][T12486] bridge_slave_1: entered promiscuous mode [ 1564.329051][T12543] syzkaller0: entered promiscuous mode [ 1564.341497][T12543] syzkaller0: entered allmulticast mode [ 1564.619538][T12543] tipc: Started in network mode [ 1564.647664][T12543] tipc: Node identity 866af395e41a, cluster identity 4711 [ 1564.688187][T12543] tipc: Enabled bearer , priority 0 [ 1564.799326][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.878021][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.963056][T12539] tipc: Resetting bearer [ 1565.099338][T12539] tipc: Disabling bearer [ 1565.804355][T12486] team0: Port device team_slave_0 added [ 1565.901374][T12486] team0: Port device team_slave_1 added [ 1566.343257][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.726462][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.286011][T12565] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 1568.317388][T12567] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 1568.370467][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.906140][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.971222][T12567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'. [ 1569.026930][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.244997][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.345951][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.501494][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.584010][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.599481][T12565] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1569.712315][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.778548][T12567] batadv0: entered promiscuous mode [ 1569.787688][T11775] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1569.818620][T12567] batadv0: entered allmulticast mode [ 1569.894559][T12567] bond0: (slave batadv0): Releasing backup interface [ 1569.972347][T11775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1570.848719][T11775] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1571.916117][T12567] bridge0: port 3(batadv0) entered blocking state [ 1571.960273][T11775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.983532][T12567] bridge0: port 3(batadv0) entered disabled state [ 1572.037439][T11775] usb 4-1: Product: syz [ 1572.041773][T11775] usb 4-1: Manufacturer: syz [ 1572.046512][T11775] usb 4-1: SerialNumber: syz [ 1572.107738][T11775] usb 4-1: config 0 descriptor?? [ 1572.147429][T11775] hub 4-1:0.0: bad descriptor, ignoring hub [ 1572.177289][T11775] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1572.280323][T11775] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 1572.511559][T11775] usb 4-1: USB disconnect, device number 2 [ 1572.605139][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.631747][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1572.644907][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1573.505549][T12486] hsr_slave_0: entered promiscuous mode [ 1573.524443][T12486] hsr_slave_1: entered promiscuous mode [ 1573.554888][T12486] debugfs: 'hsr0' already exists in 'hsr' [ 1573.598632][T12486] Cannot create hsr debugfs directory [ 1576.105947][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.114737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.602897][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1578.367025][ T49] Bluetooth: Wrong link type (-22) [ 1578.372579][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1578.380079][ T49] Bluetooth: Wrong link type (-22) [ 1578.387185][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 1578.394055][ T49] Bluetooth: Wrong link type (-22) [ 1578.400590][ T49] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1578.411616][ T49] Bluetooth: Wrong link type (-22) [ 1578.419269][ T49] Bluetooth: hci1: link tx timeout [ 1578.424696][ T49] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1579.083177][ T13] bridge0: port 3(batadv0) entered disabled state [ 1579.242298][ T13] bridge_slave_1: left allmulticast mode [ 1579.273391][ T13] bridge_slave_1: left promiscuous mode [ 1579.317400][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.359671][T12627] fuse: Bad value for 'fd' [ 1579.386030][ T13] bridge_slave_0: left allmulticast mode [ 1579.447279][ T13] bridge_slave_0: left promiscuous mode [ 1579.453907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.649462][T12623] Bluetooth: hci1: command 0x0406 tx timeout [ 1582.753876][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.875219][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.945364][ T13] bond0 (unregistering): Released all slaves [ 1583.499066][T12655] bridge_slave_0: default FDB implementation only supports local addresses [ 1583.854496][T12665] netlink: 'syz.1.836': attribute type 8 has an invalid length. [ 1585.194315][T12671] blktrace: Concurrent blktraces are not allowed on loop0 [ 1586.050044][T12676] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1586.082876][T12676] ===================================================== [ 1586.093937][T12676] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 1586.102604][T12676] dvbdmx_release_ts_feed+0x198/0x290 [ 1586.108446][T12676] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1586.113695][T12676] dvb_demux_do_ioctl+0x78b/0xc80 [ 1586.119136][T12676] dvb_usercopy+0x263/0x500 [ 1586.123950][T12676] dvb_demux_ioctl+0x46/0x70 [ 1586.129010][T12676] __se_sys_ioctl+0x23c/0x400 [ 1586.133915][T12676] __x64_sys_ioctl+0x97/0xe0 [ 1586.138745][T12676] x64_sys_call+0x1975/0x3ea0 [ 1586.144138][T12676] do_syscall_64+0x134/0xf80 [ 1586.149260][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.155341][T12676] [ 1586.157823][T12676] Uninit was created at: [ 1586.162318][T12676] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 1586.168475][T12676] alloc_pages_mpol+0x328/0x860 [ 1586.175754][T12676] alloc_pages_noprof+0x101/0x280 [ 1586.181120][T12676] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1586.188916][T12676] __vmalloc_noprof+0x128/0x1f0 [ 1586.194571][T12676] vmalloc_array_noprof+0x48/0x80 [ 1586.199881][T12676] dvb_dmx_init+0x121/0x930 [ 1586.204517][T12676] vidtv_bridge_probe+0x1b1f/0x2690 [ 1586.210005][T12676] platform_probe+0x213/0x370 [ 1586.214856][T12676] really_probe+0x4d5/0xe40 [ 1586.220517][T12676] __driver_probe_device+0x25e/0x370 [ 1586.226034][T12676] driver_probe_device+0x70/0x8f0 [ 1586.231349][T12676] __driver_attach+0x859/0xad0 [ 1586.236296][T12676] bus_for_each_dev+0x33b/0x580 [ 1586.241373][T12676] driver_attach+0x51/0x70 [ 1586.246384][T12676] bus_add_driver+0x54f/0xdb0 [ 1586.251500][T12676] driver_register+0x42e/0x6a0 [ 1586.256423][T12676] __platform_driver_register+0x65/0x80 [ 1586.262285][T12676] vidtv_bridge_init+0x73/0x100 [ 1586.267457][T12676] do_one_initcall+0x22e/0xad0 [ 1586.272393][T12676] do_initcall_level+0x157/0x2e0 [ 1586.277562][T12676] do_initcalls+0x176/0x310 [ 1586.282244][T12676] do_basic_setup+0x1d/0x30 [ 1586.288030][T12676] kernel_init_freeable+0x213/0x430 [ 1586.294494][T12676] kernel_init+0x2f/0x5e0 [ 1586.299446][T12676] ret_from_fork+0x20f/0x910 [ 1586.304193][T12676] ret_from_fork_asm+0x1a/0x30 [ 1586.309215][T12676] [ 1586.311664][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.8.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.322889][T12676] Tainted: [L]=SOFTLOCKUP [ 1586.327571][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1586.338121][T12676] ===================================================== [ 1586.345205][T12676] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1586.537051][T12676] Kernel panic - not syncing: kmsan.panic set ... [ 1586.543570][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.8.841 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1586.554541][T12676] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1586.560173][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1586.570348][T12676] Call Trace: [ 1586.573707][T12676] [ 1586.576710][T12676] __dump_stack+0x26/0x30 [ 1586.581188][T12676] dump_stack_lvl+0x50/0x1c0 [ 1586.585863][T12676] ? dump_stack+0x12/0x25 [ 1586.590293][T12676] dump_stack+0x1e/0x25 [ 1586.594607][T12676] vpanic+0x435/0xd40 [ 1586.598749][T12676] panic+0x15d/0x160 [ 1586.602755][T12676] kmsan_report+0x31a/0x320 [ 1586.607340][T12676] ? __msan_warning+0x1b/0x30 [ 1586.612075][T12676] ? dvbdmx_release_ts_feed+0x198/0x290 [ 1586.617694][T12676] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 1586.622988][T12676] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 1586.628275][T12676] ? dvb_usercopy+0x263/0x500 [ 1586.633032][T12676] ? dvb_demux_ioctl+0x46/0x70 [ 1586.637888][T12676] ? __se_sys_ioctl+0x23c/0x400 [ 1586.642798][T12676] ? __x64_sys_ioctl+0x97/0xe0 [ 1586.647620][T12676] ? x64_sys_call+0x1975/0x3ea0 [ 1586.652555][T12676] ? do_syscall_64+0x134/0xf80 [ 1586.657410][T12676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.663560][T12676] ? kmsan_get_metadata+0xf1/0x160 [ 1586.668750][T12676] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1586.675190][T12676] ? kmsan_get_metadata+0xf1/0x160 [ 1586.680375][T12676] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1586.686266][T12676] ? preempt_schedule_common+0x5b/0x80 [ 1586.691814][T12676] ? preempt_schedule+0x30/0x40 [ 1586.696756][T12676] ? preempt_schedule_thunk+0x16/0x30 [ 1586.702322][T12676] ? _raw_spin_unlock_irq+0x47/0x50 [ 1586.707674][T12676] ? kmsan_get_metadata+0x146/0x160 [ 1586.712958][T12676] __msan_warning+0x1b/0x30 [ 1586.717520][T12676] dvbdmx_release_ts_feed+0x198/0x290 [ 1586.722973][T12676] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1586.728103][T12676] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 1586.734089][T12676] dvb_demux_do_ioctl+0x78b/0xc80 [ 1586.739216][T12676] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1586.744867][T12676] dvb_usercopy+0x263/0x500 [ 1586.749460][T12676] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1586.755124][T12676] ? kmsan_get_metadata+0xf1/0x160 [ 1586.760318][T12676] dvb_demux_ioctl+0x46/0x70 [ 1586.764999][T12676] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1586.770380][T12676] __se_sys_ioctl+0x23c/0x400 [ 1586.775129][T12676] __x64_sys_ioctl+0x97/0xe0 [ 1586.779786][T12676] x64_sys_call+0x1975/0x3ea0 [ 1586.784553][T12676] do_syscall_64+0x134/0xf80 [ 1586.789237][T12676] ? clear_bhb_loop+0x50/0xa0 [ 1586.793991][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.799966][T12676] RIP: 0033:0x7ff2b879bf79 [ 1586.804431][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.824106][T12676] RSP: 002b:00007ff2b9585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1586.832599][T12676] RAX: ffffffffffffffda RBX: 00007ff2b8a15fa0 RCX: 00007ff2b879bf79 [ 1586.840624][T12676] RDX: 00002000000000c0 RSI: 0000000040026f33 RDI: 0000000000000003 [ 1586.848645][T12676] RBP: 00007ff2b88327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.856661][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.864681][T12676] R13: 00007ff2b8a16038 R14: 00007ff2b8a15fa0 R15: 00007fffdee42008 [ 1586.872728][T12676] [ 1586.876141][T12676] Kernel Offset: disabled [ 1586.880505][T12676] Rebooting in 86400 seconds..