last executing test programs: 13m33.397438655s ago: executing program 4 (id=1322): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) 13m32.932214083s ago: executing program 4 (id=1330): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x4001f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 13m32.471282293s ago: executing program 4 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db9", 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m31.821907783s ago: executing program 4 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x9) 13m30.529653266s ago: executing program 4 (id=1340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 13m28.175403345s ago: executing program 4 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m27.955061572s ago: executing program 32 (id=1349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m42.26075006s ago: executing program 1 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) syz_open_pts(r3, 0x20800) 11m37.518725114s ago: executing program 1 (id=1633): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0)={0x2, 0x0, [{0x0, 0xd8, &(0x7f0000000a80)=""/216}, {0x4, 0x1, &(0x7f00000009c0)=""/1}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 11m33.471194367s ago: executing program 1 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)={r2, 0x2, 0x13e, "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"}, 0x146) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 11m29.122749382s ago: executing program 1 (id=1646): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 11m26.737932824s ago: executing program 1 (id=1650): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x80ff, 0x88) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 11m20.565171989s ago: executing program 1 (id=1657): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000400)={0x5, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) 11m4.74002056s ago: executing program 33 (id=1657): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000400)={0x5, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) 10m13.366581386s ago: executing program 3 (id=1744): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000080)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) io_pgetevents(r3, 0x8, 0x9, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000640)={&(0x7f0000000600), 0x8}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') 10m10.904170483s ago: executing program 3 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c841, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) shutdown(r2, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) sendmsg$nl_route(r0, 0x0, 0x40) 10m7.745730357s ago: executing program 3 (id=1750): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 10m4.916207899s ago: executing program 3 (id=1757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m0.994311348s ago: executing program 3 (id=1761): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0xd, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0xffffffff, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x0, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0x1, 0x2, 0x1, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m57.51529817s ago: executing program 2 (id=1766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20044000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) ioprio_get$uid(0x3, 0x0) 9m54.112295366s ago: executing program 3 (id=1770): socket(0x16, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, 0x0, 0x0, 0x20044000) connect$inet(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 9m46.044642763s ago: executing program 2 (id=1779): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 9m44.629243029s ago: executing program 2 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) bind$inet6(r5, 0x0, 0x0) 9m40.650528778s ago: executing program 2 (id=1785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x400400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 9m37.680192689s ago: executing program 34 (id=1770): socket(0x16, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, 0x0, 0x0, 0x20044000) connect$inet(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 9m36.633444796s ago: executing program 2 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 9m35.164678674s ago: executing program 2 (id=1792): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0xffffffffffffffff) 9m19.902651777s ago: executing program 35 (id=1792): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0xffffffffffffffff) 9m19.848219982s ago: executing program 5 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) setitimer(0x1, 0x0, &(0x7f0000000300)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000702, r5, 0x0) 9m18.099197749s ago: executing program 5 (id=1811): openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x410080, 0xdf) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000740)={0x20c100, 0x93, 0x9}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 9m16.918694834s ago: executing program 5 (id=1812): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) 9m14.477476147s ago: executing program 5 (id=1814): clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x80000001, 0x800000000b, 0xff, 0x4, 0x20000000008, 0x79800000, 0xffff, 0x6, 0x6, 0xffffffffffffffff, 0x5, 0x810f, 0x2, 0xfffffffffffffffc, 0xe6b, 0xfffffffffffffff0, 0x4, 0x5, 0x800, 0x1, 0x9, 0x0, 0x4, 0x7, 0x8}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x6, 0x58, 0x0, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 9m8.542367256s ago: executing program 5 (id=1824): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0x1}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 9m6.90831331s ago: executing program 5 (id=1827): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff}, 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 8m51.421526077s ago: executing program 36 (id=1827): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff}, 0x2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 18.186095121s ago: executing program 0 (id=2211): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 14.317717681s ago: executing program 0 (id=2213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x400400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 12.904302665s ago: executing program 0 (id=2216): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 9.93246645s ago: executing program 6 (id=2217): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 9.866449881s ago: executing program 0 (id=2218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 7.580100248s ago: executing program 6 (id=2219): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 5.597995976s ago: executing program 6 (id=2220): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 5.457139955s ago: executing program 0 (id=2221): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 3.863721472s ago: executing program 6 (id=2222): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 1.774169818s ago: executing program 6 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x400400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 1.587620987s ago: executing program 0 (id=2224): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd2400", 0x11}], 0x1, 0x2) socket$inet(0x2, 0x3, 0x7f) 0s ago: executing program 6 (id=2225): getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r0, r0, r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000019400)) stat(&(0x7f00000193c0)='./file1\x00', &(0x7f0000019480)) lstat(&(0x7f0000019500)='./file0\x00', &(0x7f0000019540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000019600)={{}, {0x1, 0x3}, [], {0x4, 0x2}, [{0x8, 0x5, r1}, {0x8, 0x6}], {0x10, 0x4}, {0x20, 0x1}}, 0x34, 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = fcntl$dupfd(r3, 0x0, r3) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000080)={0xa, {0x2, 0x7f, 0x3}}, 0xa) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) kernel console output (not intermixed with test programs): ing VLAN 0 to HW filter on device bond0 [ 304.354544][ T5889] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 304.354576][ T5889] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 304.354591][ T5889] em28xx 2-1:0.89: No AC97 audio processor [ 304.356075][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.372251][ T5889] usb 2-1: Decoder not found [ 304.372276][ T5889] em28xx 2-1:0.89: failed to create media graph [ 304.372313][ T5889] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 304.395669][ T5889] em28xx 2-1:0.89: Registering snapshot button... [ 304.425107][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.425233][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.456965][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.457082][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.351907][ T5889] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input28 [ 305.683704][ T5889] em28xx 2-1:0.89: Remote control support is not available for this card. [ 305.689384][ T5793] em28xx 2-1:0.89: Closing input extension [ 305.709666][ T5793] em28xx 2-1:0.89: Deregistering snapshot button [ 306.235611][ T5793] em28xx 2-1:0.89: Freeing device [ 307.405856][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.808312][ T9301] veth0_vlan: entered promiscuous mode [ 308.865861][ T9301] veth1_vlan: entered promiscuous mode [ 309.078446][ T9301] veth0_macvtap: entered promiscuous mode [ 309.105692][ T9301] veth1_macvtap: entered promiscuous mode [ 309.261921][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.323394][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.391969][ T7705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.419679][ T7705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.439670][ T7705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.473041][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.636229][ T9649] binder: 9648:9649 ioctl c0306201 200000000640 returned -14 [ 309.889832][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1447'. [ 309.889864][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1447'. [ 309.948060][ T7705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.948082][ T7705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.165963][ T7729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.165986][ T7729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.539632][ T5793] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.694835][ T5793] usb 4-1: Using ep0 maxpacket: 32 [ 310.732430][ T5793] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 310.732461][ T5793] usb 4-1: config 0 has no interface number 0 [ 310.732495][ T5793] usb 4-1: config 0 interface 184 has no altsetting 0 [ 310.772673][ T5793] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.772697][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.772712][ T5793] usb 4-1: Product: syz [ 310.772722][ T5793] usb 4-1: Manufacturer: syz [ 310.772733][ T5793] usb 4-1: SerialNumber: syz [ 310.846310][ T5793] usb 4-1: config 0 descriptor?? [ 310.866479][ T5793] smsc75xx v1.0.0 [ 310.866495][ T5793] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 310.866685][ T5793] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 311.019650][ T1879] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 311.309747][ T1879] usb 2-1: Using ep0 maxpacket: 16 [ 311.336832][ T1879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.336886][ T1879] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 311.336912][ T1879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.353978][ T1879] usb 2-1: config 0 descriptor?? [ 312.332690][ T1879] hkems 0003:2006:0118.001A: unknown main item tag 0x0 [ 312.332732][ T1879] hkems 0003:2006:0118.001A: unknown main item tag 0x0 [ 312.332762][ T1879] hkems 0003:2006:0118.001A: unknown main item tag 0x0 [ 312.332799][ T1879] hkems 0003:2006:0118.001A: unknown main item tag 0x0 [ 312.332828][ T1879] hkems 0003:2006:0118.001A: unknown main item tag 0x0 [ 312.433953][ T31] usb 4-1: USB disconnect, device number 17 [ 312.474465][ T1879] hkems 0003:2006:0118.001A: hidraw0: USB HID v10.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 312.474502][ T1879] hkems 0003:2006:0118.001A: no inputs found [ 312.474518][ T1879] hkems 0003:2006:0118.001A: force feedback init failed [ 313.820862][ T31] usb 2-1: USB disconnect, device number 21 [ 314.576602][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 314.719688][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 314.726921][ T31] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 314.727071][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.727094][ T31] usb 6-1: Product: syz [ 314.727110][ T31] usb 6-1: Manufacturer: syz [ 314.727125][ T31] usb 6-1: SerialNumber: syz [ 314.743751][ T31] usb 6-1: config 0 descriptor?? [ 314.754489][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 315.903849][ T31] gspca_stk1135: reg_w 0x2 err -110 [ 315.904902][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.904916][ T31] gspca_stk1135: Sensor write failed [ 315.904952][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.904962][ T31] gspca_stk1135: Sensor write failed [ 315.904996][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905006][ T31] gspca_stk1135: Sensor read failed [ 315.905038][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905048][ T31] gspca_stk1135: Sensor read failed [ 315.905056][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 315.905097][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905106][ T31] gspca_stk1135: Sensor read failed [ 315.905140][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905149][ T31] gspca_stk1135: Sensor read failed [ 315.905182][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905191][ T31] gspca_stk1135: Sensor write failed [ 315.905226][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 315.905235][ T31] gspca_stk1135: Sensor write failed [ 315.905323][ T31] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 317.798478][ T5904] usb 6-1: USB disconnect, device number 2 [ 321.291848][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 321.291867][ T38] audit: type=1326 audit(1760947257.930:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.291917][ T38] audit: type=1326 audit(1760947257.930:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.292192][ T38] audit: type=1326 audit(1760947257.930:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.293473][ T38] audit: type=1326 audit(1760947257.930:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.293887][ T38] audit: type=1326 audit(1760947257.930:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.580429][ T38] audit: type=1326 audit(1760947257.930:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.580922][ T38] audit: type=1326 audit(1760947257.930:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.581313][ T38] audit: type=1326 audit(1760947257.970:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.581655][ T38] audit: type=1326 audit(1760947257.970:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 321.582046][ T38] audit: type=1326 audit(1760947257.970:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9784 comm="syz.2.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7ffc0000 [ 322.227109][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032650800: rx timeout, send abort [ 322.586398][ T9795] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 322.607295][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.730224][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032650800: abort rx timeout. Force session deactivation [ 323.209673][ T5793] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 323.374175][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 323.376526][ T5793] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 323.376548][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.407883][ T5793] usb 3-1: config 0 descriptor?? [ 323.430471][ T5793] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 325.120923][ T5793] gspca_sonixj: reg_w1 err -110 [ 325.121027][ T5793] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 326.891336][ T1879] usb 3-1: USB disconnect, device number 19 [ 329.623822][ T9844] tipc: Started in network mode [ 329.623848][ T9844] tipc: Node identity 4, cluster identity 4711 [ 329.623864][ T9844] tipc: Node number set to 4 [ 331.269662][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 331.310231][ T1879] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 331.441159][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 331.443971][ T31] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 331.444002][ T31] usb 3-1: config 0 has no interface number 0 [ 331.444054][ T31] usb 3-1: config 0 interface 12 has no altsetting 0 [ 331.471629][ T1879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.471672][ T1879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.471721][ T1879] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 331.471749][ T1879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.477120][ T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 331.477163][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.477187][ T31] usb 3-1: Product: syz [ 331.477205][ T31] usb 3-1: Manufacturer: syz [ 331.477222][ T31] usb 3-1: SerialNumber: syz [ 331.515530][ T1879] usb 2-1: config 0 descriptor?? [ 331.535107][ T31] usb 3-1: config 0 descriptor?? [ 332.560640][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.560688][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.560951][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.560983][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.561013][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.561041][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.561288][ T1879] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 332.594271][ T1879] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 332.666407][ T1879] cp2112 0003:10C4:EA90.001B: Part Number: 0xE8 Device Version: 0x5E [ 332.947324][ T1879] cp2112 0003:10C4:EA90.001B: error requesting SMBus config [ 332.964985][ T1879] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 333.160474][ T1879] usb 2-1: USB disconnect, device number 22 [ 334.370228][ T31] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 334.370291][ T31] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 334.370310][ T31] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 334.370405][ T31] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 334.455288][ T31] usb 3-1: USB disconnect, device number 20 [ 338.611478][ T9921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.769640][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 344.393396][ T5918] usb 3-1: device not accepting address 21, error -71 [ 350.389669][ T1879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 350.541550][ T1879] usb 3-1: Using ep0 maxpacket: 16 [ 350.543962][ T1879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.547762][ T1879] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 350.547782][ T1879] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 350.547796][ T1879] usb 3-1: config 13 has no interface number 0 [ 350.547833][ T1879] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 350.547851][ T1879] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.547871][ T1879] usb 3-1: config 13 interface 50 has no altsetting 0 [ 350.602133][ T1879] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 350.602158][ T1879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.602173][ T1879] usb 3-1: Product: syz [ 350.602183][ T1879] usb 3-1: Manufacturer: syz [ 350.602193][ T1879] usb 3-1: SerialNumber: syz [ 350.670828][T10001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 351.210138][ T1879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.210193][ T1879] usb 3-1: MIDIStreaming interface descriptor not found [ 352.733677][ T1879] usb 3-1: USB disconnect, device number 23 [ 352.893147][T10020] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 353.923559][T10023] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.927875][T10023] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 354.179664][T10025] gretap1: entered promiscuous mode [ 354.888465][T10025] bond1: (slave gretap1): making interface the new active one [ 354.905950][T10025] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 355.379692][ T1879] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 356.122294][ T1879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.122356][ T1879] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 356.122382][ T1879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.436733][ T1879] usb 2-1: config 0 descriptor?? [ 356.446443][ T1879] pwc: Askey VC010 type 2 USB webcam detected. [ 356.449677][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 357.288933][ T1879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 357.293502][ T1879] pwc: recv_control_msg error -32 req 02 val 2700 [ 357.294776][ T1879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 357.295957][ T1879] pwc: recv_control_msg error -32 req 04 val 1000 [ 357.296821][ T1879] pwc: recv_control_msg error -32 req 04 val 1300 [ 357.298130][ T1879] pwc: recv_control_msg error -32 req 04 val 1400 [ 357.299549][ T1879] pwc: recv_control_msg error -32 req 02 val 2000 [ 357.300421][ T1879] pwc: recv_control_msg error -32 req 02 val 2100 [ 357.301444][ T1879] pwc: recv_control_msg error -32 req 04 val 1500 [ 357.504659][ T1879] pwc: recv_control_msg error -71 req 02 val 2400 [ 357.519172][ T1879] pwc: recv_control_msg error -71 req 02 val 2600 [ 357.530117][ T1879] pwc: recv_control_msg error -71 req 02 val 2900 [ 357.533786][ T1879] pwc: recv_control_msg error -71 req 02 val 2800 [ 357.534550][ T1879] pwc: recv_control_msg error -71 req 04 val 1100 [ 357.535576][ T1879] pwc: recv_control_msg error -71 req 04 val 1200 [ 357.751289][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.752021][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 357.753527][ T9] usb 4-1: config 4 has an invalid interface number: 32 but max is 0 [ 357.753550][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 357.753568][ T9] usb 4-1: config 4 has no interface number 0 [ 357.756337][ T9] usb 4-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 357.756363][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.756381][ T9] usb 4-1: Product: syz [ 357.756393][ T9] usb 4-1: Manufacturer: syz [ 357.756406][ T9] usb 4-1: SerialNumber: syz [ 357.946830][ T1879] pwc: Registered as video103. [ 358.352666][ T5888] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 358.370521][ T1879] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 358.400203][ T1879] usb 2-1: USB disconnect, device number 23 [ 358.693454][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 358.699675][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 358.699706][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 358.741456][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 358.741484][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.741501][ T5888] usb 6-1: Product: syz [ 358.741512][ T5888] usb 6-1: Manufacturer: syz [ 358.741525][ T5888] usb 6-1: SerialNumber: syz [ 358.819738][ T5888] usb 6-1: config 0 descriptor?? [ 358.844082][ T5888] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 358.844119][ T5888] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 359.384040][ T9] uvcvideo 4-1:4.32: probe with driver uvcvideo failed with error -22 [ 359.413558][ T9] usb 4-1: USB disconnect, device number 18 [ 359.666318][ T5888] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 359.677513][ T5888] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 360.349363][ T5888] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 360.357658][T10076] bridge1: entered allmulticast mode [ 360.378487][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 360.387171][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 360.388008][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 360.668696][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 360.669098][ T5888] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 360.691255][ T5888] usb 6-1: USB disconnect, device number 3 [ 362.393189][T10095] IPv6: Can't replace route, no match found [ 366.113444][ T5888] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 366.122309][T10118] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 366.138360][ T5888] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.919590][ T1232] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 370.137183][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 370.143102][ T1232] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 370.143139][ T1232] usb 6-1: config 0 has no interface number 0 [ 370.154337][ T1232] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 370.154374][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.154401][ T1232] usb 6-1: Product: syz [ 370.154419][ T1232] usb 6-1: Manufacturer: syz [ 370.154437][ T1232] usb 6-1: SerialNumber: syz [ 370.166258][ T1232] usb 6-1: config 0 descriptor?? [ 370.176151][ T1232] hub 6-1:0.217: bad descriptor, ignoring hub [ 370.176200][ T1232] hub 6-1:0.217: probe with driver hub failed with error -5 [ 371.831780][T10147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.069606][ T1232] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 372.226220][T10157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.226238][T10157] IPv6: NLM_F_CREATE should be set when creating new route [ 372.308381][ T1232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.340125][ T1232] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 372.340191][ T1232] usb 6-1: media controller created [ 373.635298][ T1232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.459777][ T1232] DVB: Unable to find symbol dib7000p_attach() [ 375.459798][ T1232] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 375.620777][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1605'. [ 375.732926][T10175] vlan2: entered promiscuous mode [ 375.733061][T10175] bridge0: entered promiscuous mode [ 376.289594][ T1232] rc_core: IR keymap rc-dib0700-rc5 not found [ 376.289617][ T1232] Registered IR keymap rc-empty [ 376.290079][ T1232] dvb-usb: could not initialize remote control. [ 376.290087][ T1232] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 376.560839][ T1232] usb 6-1: USB disconnect, device number 4 [ 377.382403][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 377.382426][ T38] audit: type=1326 audit(1760947314.010:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.384032][ T38] audit: type=1326 audit(1760947314.020:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.438882][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'. [ 377.479327][ T1232] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 377.488094][ T38] audit: type=1326 audit(1760947314.120:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.488164][ T38] audit: type=1326 audit(1760947314.120:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.488229][ T38] audit: type=1326 audit(1760947314.120:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.488283][ T38] audit: type=1326 audit(1760947314.120:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.488339][ T38] audit: type=1326 audit(1760947314.120:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.488391][ T38] audit: type=1326 audit(1760947314.120:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.500182][ T38] audit: type=1326 audit(1760947314.130:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 377.500257][ T38] audit: type=1326 audit(1760947314.130:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10178 comm="syz.2.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a700efc9 code=0x7fc00000 [ 384.967429][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.965021][T10298] syzkaller0: entered promiscuous mode [ 393.965051][T10298] syzkaller0: entered allmulticast mode [ 394.061893][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.189844][T10305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 394.189875][T10305] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.260388][T10305] vhci_hcd vhci_hcd.0: Device attached [ 394.512999][T10310] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 394.513109][T10310] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.515822][T10310] vhci_hcd vhci_hcd.0: Device attached [ 394.644248][ T1232] vhci_hcd: vhci_device speed not set [ 394.739791][ T1232] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 395.461762][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.644646][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.877321][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.425998][T10311] vhci_hcd: connection closed [ 396.468980][T10307] vhci_hcd: connection reset by peer [ 396.503992][ T7729] vhci_hcd: stop threads [ 396.505431][ T7729] vhci_hcd: release socket [ 396.523876][ T7729] vhci_hcd: disconnect device [ 396.531424][ T7729] vhci_hcd: stop threads [ 396.531491][ T7729] vhci_hcd: release socket [ 396.631712][ T7729] vhci_hcd: disconnect device [ 398.611535][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.670015][ T5888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 399.323357][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 399.326120][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.326156][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.326197][ T5888] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 399.326222][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.381640][ T5888] usb 4-1: config 0 descriptor?? [ 399.769874][ T1879] IPVS: starting estimator thread 0... [ 400.065957][ T5888] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 400.184967][ T1232] vhci_hcd: vhci_device speed not set [ 400.240375][T10336] IPVS: using max 7 ests per chain, 16800 per kthread [ 400.325128][T10340] tipc: Started in network mode [ 400.325179][T10340] tipc: Node identity 924df384e0a5, cluster identity 4711 [ 400.325688][T10340] tipc: Enabled bearer , priority 0 [ 400.328594][T10340] syzkaller0: entered promiscuous mode [ 400.328619][T10340] syzkaller0: entered allmulticast mode [ 400.736057][ T9876] usb 4-1: USB disconnect, device number 19 [ 400.997128][T10342] tipc: Resetting bearer [ 401.608928][ T5889] tipc: Node number set to 1927869316 [ 404.604571][T10339] tipc: Resetting bearer [ 406.676138][T10359] Bluetooth: hci3: command 0x0406 tx timeout [ 406.800530][T10339] tipc: Disabling bearer [ 413.241932][T10405] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 413.241979][T10405] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 413.242014][T10405] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 413.242014][T10405] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 413.242057][T10405] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 413.242090][T10405] CUSE: DEVNAME unspecified [ 414.383896][T10416] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 414.383963][ T7738] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.384005][ T7738] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.384041][ T7738] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.384072][ T7738] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.866449][T10460] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 422.830695][T10467] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 425.155984][T10359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.169845][T10359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.179283][T10359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.193610][T10359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.195594][T10359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.977937][ T5817] Bluetooth: hci5: command tx timeout [ 428.345158][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 430.472141][ T5817] Bluetooth: hci5: command tx timeout [ 432.633031][ T5817] Bluetooth: hci5: command tx timeout [ 432.647632][T10507] lo: entered allmulticast mode [ 432.807252][T10507] tunl0: entered allmulticast mode [ 432.881593][T10507] gre0: entered allmulticast mode [ 433.490587][T10507] gretap0: entered allmulticast mode [ 433.781427][T10507] erspan0: entered allmulticast mode [ 434.622202][T10507] ip_vti0: entered allmulticast mode [ 434.626390][T10507] ip6_vti0: entered allmulticast mode [ 434.662143][T10507] sit0: entered allmulticast mode [ 434.669139][T10507] ip6tnl0: entered allmulticast mode [ 434.670372][ T5817] Bluetooth: hci5: command tx timeout [ 434.724783][T10507] ip6gre0: entered allmulticast mode [ 434.981533][T10507] ip6gretap0: entered allmulticast mode [ 435.922142][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.922577][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.926138][T10507] bridge0: entered allmulticast mode [ 436.009051][T10507] vcan0: entered allmulticast mode [ 436.028058][T10507] bond0: entered allmulticast mode [ 436.028088][T10507] bond_slave_0: entered allmulticast mode [ 436.028108][T10507] bond_slave_1: entered allmulticast mode [ 440.125467][T10507] team0: entered allmulticast mode [ 440.125533][T10507] team_slave_0: entered allmulticast mode [ 440.125605][T10507] team_slave_1: entered allmulticast mode [ 441.087282][T10507] dummy0: entered allmulticast mode [ 441.168288][T10507] nlmon0: entered allmulticast mode [ 441.186398][T10507] caif0: entered allmulticast mode [ 441.187472][T10507] batadv0: entered allmulticast mode [ 441.202447][T10507] vxcan0: entered allmulticast mode [ 441.221067][T10507] vxcan1: entered allmulticast mode [ 441.223128][T10507] veth0: entered allmulticast mode [ 441.243809][T10507] veth1: entered allmulticast mode [ 441.392990][T10507] wg0: entered allmulticast mode [ 441.551041][T10507] wg1: entered allmulticast mode [ 442.150114][T10507] wg2: entered allmulticast mode [ 442.183867][T10507] veth0_to_bridge: entered allmulticast mode [ 442.216854][T10507] veth1_to_bridge: entered allmulticast mode [ 442.318120][T10507] veth0_to_bond: entered allmulticast mode [ 442.372597][T10507] veth1_to_bond: entered allmulticast mode [ 442.410534][T10507] veth0_to_team: entered allmulticast mode [ 442.428575][T10507] veth1_to_team: entered allmulticast mode [ 442.669266][T10507] veth0_to_batadv: entered allmulticast mode [ 442.677819][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.678786][T10507] batadv_slave_0: entered allmulticast mode [ 442.694769][T10507] veth1_to_batadv: entered allmulticast mode [ 442.709740][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.710730][T10507] batadv_slave_1: entered allmulticast mode [ 442.715271][T10507] xfrm0: entered allmulticast mode [ 442.740087][T10507] veth0_to_hsr: entered allmulticast mode [ 442.766140][T10507] hsr_slave_0: entered allmulticast mode [ 442.780542][T10507] veth1_to_hsr: entered allmulticast mode [ 442.785726][T10507] hsr_slave_1: entered allmulticast mode [ 442.805534][T10507] hsr0: entered allmulticast mode [ 442.811589][T10507] veth1_virt_wifi: entered allmulticast mode [ 442.816738][T10507] veth0_virt_wifi: entered allmulticast mode [ 442.840004][T10507] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 442.841295][T10507] veth1_vlan: entered allmulticast mode [ 442.847967][T10507] veth0_vlan: entered allmulticast mode [ 442.868221][T10507] vlan0: entered allmulticast mode [ 442.868462][T10507] vlan1: entered allmulticast mode [ 443.099723][T10507] macvlan0: entered allmulticast mode [ 443.139797][T10507] macvlan1: entered allmulticast mode [ 443.145899][T10507] ipvlan0: entered allmulticast mode [ 443.146126][T10507] ipvlan1: entered allmulticast mode [ 443.147371][T10507] veth1_macvtap: entered allmulticast mode [ 443.186565][T10507] veth0_macvtap: entered allmulticast mode [ 443.281687][T10507] macvtap0: entered allmulticast mode [ 443.333900][T10507] macsec0: entered allmulticast mode [ 443.453978][T10507] geneve0: entered allmulticast mode [ 443.532777][T10507] geneve1: entered allmulticast mode [ 443.610207][T10507] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 443.712178][T10507] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 443.759937][T10507] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 443.859908][T10507] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 443.973995][T10507] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 444.097502][T10507] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 444.107717][T10507] batman_adv: batadv0: Interface deactivated: macvtap1 [ 444.169799][T10507] macvtap1: entered allmulticast mode [ 445.475763][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.509198][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.561170][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.600959][T10565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.601263][T10565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.609673][T10565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 445.609990][T10565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.610086][T10565] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 446.076662][T10565] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 446.639623][T10565] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 446.956599][T10565] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 446.998198][ T7705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.619500][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.638801][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 447.639125][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 447.639160][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.639193][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.666165][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.032866][T10359] Bluetooth: hci5: command 0x0c1a tx timeout [ 449.358731][ T7705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.765347][T10600] overlayfs: failed to clone upperpath [ 450.463075][T10359] Bluetooth: hci3: command 0x0406 tx timeout [ 450.463205][T10359] Bluetooth: hci5: command 0x0c1a tx timeout [ 452.510142][ T5817] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.896943][ T7705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.819602][T10526] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 457.994183][T10526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.994221][T10526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.994263][T10526] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 457.994296][T10526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.052729][T10526] usb 6-1: config 0 descriptor?? [ 458.211701][ T7705] bond0: (slave netdevsim0): Releasing backup interface [ 458.238001][ T7705] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 458.385836][ T7705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.450825][T10646] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 458.732458][T10476] chnl_net:caif_netlink_parms(): no params data found [ 459.773992][T10526] hid-led 0003:27B8:01ED.001E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 459.785290][T10526] hid-led 0003:27B8:01ED.001E: ThingM blink(1) v1 initialized [ 460.031820][ T5888] usb 6-1: USB disconnect, device number 5 [ 461.869701][T10359] Bluetooth: hci4: unexpected event for opcode 0x202f [ 465.871270][T10687] overlayfs: failed to resolve './file0': -2 [ 467.583446][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.583582][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.583840][T10476] bridge_slave_0: entered allmulticast mode [ 467.587140][T10476] bridge_slave_0: entered promiscuous mode [ 467.610643][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.610863][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.611117][T10476] bridge_slave_1: entered allmulticast mode [ 467.619653][T10476] bridge_slave_1: entered promiscuous mode [ 469.374654][T10694] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1730'. [ 469.598114][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.624166][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.617245][T10476] team0: Port device team_slave_0 added [ 471.652432][T10476] team0: Port device team_slave_1 added [ 472.933111][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.748128][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.247719][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.250849][ T7705] bridge_slave_1: left allmulticast mode [ 475.250879][ T7705] bridge_slave_1: left promiscuous mode [ 475.251145][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.504938][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.640655][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.067960][ T7705] bridge_slave_0: left allmulticast mode [ 476.067994][ T7705] bridge_slave_0: left promiscuous mode [ 476.068283][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.329894][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.353980][T10736] Process accounting resumed [ 476.663816][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.708763][T10755] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 480.199882][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 485.723334][T10774] Process accounting resumed [ 487.087380][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.106254][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.108217][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.109673][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.111829][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.526793][ T5817] Bluetooth: hci1: command tx timeout [ 493.022779][T10833] kvm: kvm [10832]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x516 [ 493.028469][T10833] kvm: kvm [10832]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd936 [ 493.036496][T10833] kvm: kvm [10832]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 493.845347][ T38] kauditd_printk_skb: 199 callbacks suppressed [ 493.845367][ T38] audit: type=1326 audit(1760947430.480:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.847746][ T38] audit: type=1326 audit(1760947430.480:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.891305][ T38] audit: type=1326 audit(1760947430.530:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.891376][ T38] audit: type=1326 audit(1760947430.530:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.899953][ T38] audit: type=1326 audit(1760947430.530:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.900034][ T38] audit: type=1326 audit(1760947430.530:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.900088][ T38] audit: type=1326 audit(1760947430.530:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.900143][ T38] audit: type=1326 audit(1760947430.530:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.901867][ T38] audit: type=1326 audit(1760947430.540:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 493.901930][ T38] audit: type=1326 audit(1760947430.540:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10844 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6463cefc9 code=0x7ffc0000 [ 494.188044][T10845] 9pnet_fd: Insufficient options for proto=fd [ 494.329676][ T5817] Bluetooth: hci1: command tx timeout [ 497.011822][ T5817] Bluetooth: hci1: command tx timeout [ 499.248024][ T5817] Bluetooth: hci1: command tx timeout [ 502.560126][ T7705] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 502.560152][ T7705] bridge1 (unregistering): left promiscuous mode [ 505.960692][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.709255][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.932614][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.223026][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.533311][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.583172][T10908] overlayfs: failed to clone upperpath [ 510.263521][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.628213][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.792750][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.302522][T10359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.308081][T10359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.310187][T10359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.311408][T10359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.312233][T10359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 515.416110][ T5817] Bluetooth: hci6: command tx timeout [ 516.392544][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.600344][ T7705] bond_slave_0: left allmulticast mode [ 516.811262][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.860657][ T7705] bond_slave_1: left allmulticast mode [ 516.862778][ T7705] bond0 (unregistering): Released all slaves [ 518.046898][ T5817] Bluetooth: hci6: command tx timeout [ 520.521449][ T5817] Bluetooth: hci6: command tx timeout [ 522.286974][ T7705] bond1 (unregistering): Released all slaves [ 523.283417][ T5817] Bluetooth: hci6: command tx timeout [ 523.616068][T10975] overlayfs: missing 'lowerdir' [ 523.885980][ T7705] tipc: Disabling bearer [ 523.886765][ T7705] tipc: Left network mode [ 527.979766][T11001] syz.5.1809 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 528.880340][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.910022][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.919674][T10359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.922651][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.923468][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.883610][ T5817] Bluetooth: hci2: command tx timeout [ 535.325035][ T5817] Bluetooth: hci2: command tx timeout [ 535.980922][ T7705] hsr_slave_0: left promiscuous mode [ 536.029640][ T7705] hsr_slave_1: left promiscuous mode [ 536.030791][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.030812][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.093655][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.093687][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.389632][ T5817] Bluetooth: hci2: command tx timeout [ 537.521584][ T7705] veth1_macvtap: left promiscuous mode [ 537.521702][ T7705] veth0_macvtap: left promiscuous mode [ 537.521973][ T7705] veth1_vlan: left promiscuous mode [ 537.522180][ T7705] veth0_vlan: left promiscuous mode [ 540.356797][ T5817] Bluetooth: hci2: command tx timeout [ 546.226088][T10359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 546.244016][T10359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 546.245485][T10359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 546.247543][T10359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 546.248867][T10359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.472602][T10359] Bluetooth: hci0: command tx timeout [ 549.280314][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 549.451966][T11105] netlink: 'syz.0.1838': attribute type 29 has an invalid length. [ 549.451985][T11105] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 549.451994][T11105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1838'. [ 549.794086][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 550.509582][T10359] Bluetooth: hci0: command tx timeout [ 552.592906][T10359] Bluetooth: hci0: command tx timeout [ 555.131812][T10359] Bluetooth: hci0: command tx timeout [ 556.556508][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 556.579009][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 556.588971][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.208308][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.209150][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.350928][T10359] Bluetooth: hci5: command tx timeout [ 561.975797][T10359] Bluetooth: hci5: command tx timeout [ 563.250113][T11068] vxcan1: entered allmulticast mode [ 567.166277][T10359] Bluetooth: hci5: command tx timeout [ 568.354746][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.616074][T10931] chnl_net:caif_netlink_parms(): no params data found [ 568.704392][ T7705] IPVS: stop unused estimator thread 0... [ 569.399890][T10359] Bluetooth: hci5: command tx timeout [ 570.363673][T10999] chnl_net:caif_netlink_parms(): no params data found [ 572.071942][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.088300][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.090048][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.092544][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.129774][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 574.189662][T10359] Bluetooth: hci1: command tx timeout [ 576.839426][T10359] Bluetooth: hci1: command tx timeout [ 578.909599][T10359] Bluetooth: hci1: command tx timeout [ 580.367197][T11090] chnl_net:caif_netlink_parms(): no params data found [ 580.989611][T10359] Bluetooth: hci1: command tx timeout [ 582.348255][ T7705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.348284][ T7705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.587706][T11138] chnl_net:caif_netlink_parms(): no params data found [ 582.610643][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.610916][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.611153][T10999] bridge_slave_0: entered allmulticast mode [ 582.613474][T10999] bridge_slave_0: entered promiscuous mode [ 582.806047][ T7705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.806076][ T7705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.865381][T10999] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.865506][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.865699][T10999] bridge_slave_1: entered allmulticast mode [ 582.867799][T10999] bridge_slave_1: entered promiscuous mode [ 583.356319][ T7705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.356359][ T7705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.496788][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.526547][T11090] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.526711][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.527157][T11090] bridge_slave_0: entered allmulticast mode [ 583.529678][T11090] bridge_slave_0: entered promiscuous mode [ 583.539288][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.672327][ T7705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.672356][ T7705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.694784][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.694945][T11090] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.695259][T11090] bridge_slave_1: entered allmulticast mode [ 583.698745][T11090] bridge_slave_1: entered promiscuous mode [ 584.476276][T10999] team0: Port device team_slave_0 added [ 584.477080][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.477219][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.477427][T11138] bridge_slave_0: entered allmulticast mode [ 584.492391][T11138] bridge_slave_0: entered promiscuous mode [ 584.525391][T11090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.526515][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.526675][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.526880][T11138] bridge_slave_1: entered allmulticast mode [ 584.529210][T11138] bridge_slave_1: entered promiscuous mode [ 584.591304][T10999] team0: Port device team_slave_1 added [ 584.597649][T11090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.277162][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.744475][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.744491][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.744513][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.748003][T11090] team0: Port device team_slave_0 added [ 586.756819][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.768288][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.768311][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.768347][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.773746][T11090] team0: Port device team_slave_1 added [ 587.105141][T11138] team0: Port device team_slave_0 added [ 587.130571][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.130587][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.130607][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.133557][T11138] team0: Port device team_slave_1 added [ 587.242049][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.242068][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.242100][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.946044][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.078219][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.105409][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.138853][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.160731][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.862389][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.862411][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.862443][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.983858][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.983879][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.983913][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.334315][ T7705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.829574][T10359] Bluetooth: hci3: command tx timeout [ 590.918166][ T7705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.984769][T11090] hsr_slave_0: entered promiscuous mode [ 590.986436][T11090] hsr_slave_1: entered promiscuous mode [ 590.987453][T11090] debugfs: 'hsr0' already exists in 'hsr' [ 590.987480][T11090] Cannot create hsr debugfs directory [ 591.021358][T11204] chnl_net:caif_netlink_parms(): no params data found [ 593.413174][T10359] Bluetooth: hci3: command tx timeout [ 593.873074][ T7705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.012837][T11304] veth0_to_team: entered promiscuous mode [ 595.217437][T11138] hsr_slave_0: entered promiscuous mode [ 595.229838][T11138] hsr_slave_1: entered promiscuous mode [ 595.232319][T11138] debugfs: 'hsr0' already exists in 'hsr' [ 595.232356][T11138] Cannot create hsr debugfs directory [ 595.469963][ T5817] Bluetooth: hci3: command tx timeout [ 597.550287][ T5817] Bluetooth: hci3: command tx timeout [ 597.932092][ T7705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.689654][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.689795][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.690074][T11204] bridge_slave_0: entered allmulticast mode [ 601.693029][T11204] bridge_slave_0: entered promiscuous mode [ 601.760372][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.760640][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.760965][T11204] bridge_slave_1: entered allmulticast mode [ 601.764355][T11204] bridge_slave_1: entered promiscuous mode [ 603.288675][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.409439][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 603.715352][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.877851][T11204] team0: Port device team_slave_0 added [ 605.946947][T11204] team0: Port device team_slave_1 added [ 606.312679][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.337203][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.340761][T10359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.349169][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.372814][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 606.383900][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.383920][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.383955][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.457579][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.457598][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.457626][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.687547][ T7705] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.027968][ T7705] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.151970][T11279] chnl_net:caif_netlink_parms(): no params data found [ 607.493211][ T7705] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.591826][T11204] hsr_slave_0: entered promiscuous mode [ 607.594650][T11204] hsr_slave_1: entered promiscuous mode [ 607.595692][T11204] debugfs: 'hsr0' already exists in 'hsr' [ 607.595722][T11204] Cannot create hsr debugfs directory [ 608.994172][ T5817] Bluetooth: hci2: command tx timeout [ 610.579889][ T7705] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.793788][ T5817] Bluetooth: hci2: command tx timeout [ 612.032922][T11365] batman_adv: batadv0: Removing interface: macvtap1 [ 612.871983][T11279] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.872188][T11279] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.872437][T11279] bridge_slave_0: entered allmulticast mode [ 612.875808][T11279] bridge_slave_0: entered promiscuous mode [ 612.962880][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.963017][T11279] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.963282][T11279] bridge_slave_1: entered allmulticast mode [ 612.965589][T11279] bridge_slave_1: entered promiscuous mode [ 613.084535][T11138] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 613.242280][T11138] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 613.387766][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.507833][T11138] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 613.567633][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.568614][T11138] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 613.870642][ T5817] Bluetooth: hci2: command tx timeout [ 615.354489][T11279] team0: Port device team_slave_0 added [ 615.376568][T11279] team0: Port device team_slave_1 added [ 616.218715][ T5817] Bluetooth: hci2: command tx timeout [ 616.221918][ T7705] bridge_slave_1: left allmulticast mode [ 616.221950][ T7705] bridge_slave_1: left promiscuous mode [ 616.222216][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.501650][ T7705] bridge_slave_0: left allmulticast mode [ 616.501682][ T7705] bridge_slave_0: left promiscuous mode [ 616.504936][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.695620][ T7705] bridge_slave_1: left allmulticast mode [ 616.695654][ T7705] bridge_slave_1: left promiscuous mode [ 616.695908][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.761090][ T7705] bridge_slave_0: left allmulticast mode [ 616.761123][ T7705] bridge_slave_0: left promiscuous mode [ 616.761379][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.855559][ T7705] bridge_slave_1: left allmulticast mode [ 616.855592][ T7705] bridge_slave_1: left promiscuous mode [ 616.855846][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.026801][T10359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.063291][T10359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.065245][T10359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.067130][T10359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.068562][T10359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.137717][ T7705] bridge_slave_0: left allmulticast mode [ 617.137748][ T7705] bridge_slave_0: left promiscuous mode [ 617.242498][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.272925][ T7705] bridge_slave_1: left promiscuous mode [ 618.273108][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.530745][ T7705] bridge_slave_0: left promiscuous mode [ 618.530948][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.839292][T11401] netlink: 'syz.0.1903': attribute type 21 has an invalid length. [ 619.599115][ T5817] Bluetooth: hci0: command tx timeout [ 619.671934][ T7705] batman_adv: batadv0: Interface deactivated: gretap1 [ 621.640079][T11411] overlayfs: failed to clone upperpath [ 621.642698][ T5817] Bluetooth: hci0: command tx timeout [ 624.151754][ T5817] Bluetooth: hci0: command tx timeout [ 626.190347][T10359] Bluetooth: hci0: command tx timeout [ 627.380205][ T7705] bond1 (unregistering): (slave gretap1): Releasing active interface [ 627.464615][T11436] overlayfs: failed to resolve './file0': -2 [ 627.911384][ T7705] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 629.430462][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.510528][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.534572][ T7705] bond0 (unregistering): Released all slaves [ 629.555897][ T7705] bond1 (unregistering): Released all slaves [ 629.824217][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.438122][ T7705] batman_adv: batadv0: Removing interface: gretap1 [ 631.475180][T11451] 9pnet: Could not find request transport: fd0x00000000000000060x000000000000000800000000000000000000 [ 632.851157][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 632.878289][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 632.926685][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 632.931335][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 632.933767][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 633.323008][T11458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1917'. [ 635.520195][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.601263][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.627097][ T7705] bond0 (unregistering): Released all slaves [ 635.790675][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.870455][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.942322][ T7705] bond0 (unregistering): Released all slaves [ 635.955743][T10359] Bluetooth: hci6: command tx timeout [ 637.650547][ T7705] tipc: Left network mode [ 637.743774][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.743794][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.743824][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.827385][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.827404][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.827433][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.828011][ T7705] tipc: Left network mode [ 638.075660][T10359] Bluetooth: hci6: command tx timeout [ 639.128721][T11279] hsr_slave_0: entered promiscuous mode [ 639.136564][T11279] hsr_slave_1: entered promiscuous mode [ 639.137513][T11279] debugfs: 'hsr0' already exists in 'hsr' [ 639.137540][T11279] Cannot create hsr debugfs directory [ 639.169261][T11350] chnl_net:caif_netlink_parms(): no params data found [ 640.111038][T10359] Bluetooth: hci6: command tx timeout [ 640.313191][T11481] xt_l2tp: missing protocol rule (udp|l2tpip) [ 640.366813][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 642.445290][T10359] Bluetooth: hci6: command tx timeout [ 642.841481][T10359] Bluetooth: hci4: SCO packet too small [ 643.243057][T11497] overlayfs: failed to clone upperpath [ 643.972000][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.972141][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.972451][T11350] bridge_slave_0: entered allmulticast mode [ 644.015277][T11350] bridge_slave_0: entered promiscuous mode [ 644.052413][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.052563][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.052931][T11350] bridge_slave_1: entered allmulticast mode [ 644.056055][T11350] bridge_slave_1: entered promiscuous mode [ 649.652235][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.676729][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.678987][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.705153][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.706057][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.232290][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.239669][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.978439][T10359] Bluetooth: hci1: command tx timeout [ 654.029711][T10359] Bluetooth: hci1: command tx timeout [ 654.119138][T11350] team0: Port device team_slave_0 added [ 654.176995][T11350] team0: Port device team_slave_1 added [ 654.456365][T11350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.456380][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.456401][T11350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.468930][T11392] chnl_net:caif_netlink_parms(): no params data found [ 654.495558][T11350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.495593][T11350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.495625][T11350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.521478][T11455] chnl_net:caif_netlink_parms(): no params data found [ 654.756063][ T7705] hsr_slave_0: left promiscuous mode [ 654.789656][ T7705] hsr_slave_1: left promiscuous mode [ 654.790545][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.790569][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.841035][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.841067][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.059843][ T7705] hsr_slave_0: left promiscuous mode [ 655.079898][ T7705] hsr_slave_1: left promiscuous mode [ 655.080814][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.080835][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.141077][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.141108][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.299666][ T7705] hsr_slave_0: left promiscuous mode [ 655.319823][ T7705] hsr_slave_1: left promiscuous mode [ 655.320679][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.320699][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.370710][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.370741][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.578195][ T7705] veth1_macvtap: left promiscuous mode [ 655.578285][ T7705] veth0_macvtap: left promiscuous mode [ 655.578461][ T7705] veth1_vlan: left promiscuous mode [ 655.578585][ T7705] veth0_vlan: left promiscuous mode [ 655.719830][ T7705] veth1_macvtap: left promiscuous mode [ 655.719905][ T7705] veth0_macvtap: left promiscuous mode [ 655.723052][ T7705] veth1_vlan: left promiscuous mode [ 655.723115][ T7705] veth0_vlan: left promiscuous mode [ 655.935139][ T7705] veth1_macvtap: left promiscuous mode [ 655.935274][ T7705] veth0_macvtap: left promiscuous mode [ 655.935532][ T7705] veth1_vlan: left promiscuous mode [ 655.935713][ T7705] veth0_vlan: left promiscuous mode [ 656.109574][T10359] Bluetooth: hci1: command tx timeout [ 658.266088][T10359] Bluetooth: hci1: command tx timeout [ 661.736302][T11573] trusted_key: encrypted_key: insufficient parameters specified [ 664.280907][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 666.674866][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 668.496850][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 668.508648][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.520247][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.528324][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.529204][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.709559][ T5817] Bluetooth: hci3: command tx timeout [ 672.758558][ T5817] Bluetooth: hci3: command tx timeout [ 674.829677][ T5817] Bluetooth: hci3: command tx timeout [ 675.670258][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 675.930956][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 676.903113][T10359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 676.912311][T10359] Bluetooth: hci3: command tx timeout [ 676.912510][T10359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 676.939802][T10359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 676.941010][T10359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 676.941746][T10359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.930551][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 679.069909][T10359] Bluetooth: hci5: command tx timeout [ 679.071730][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 681.149674][ T5817] Bluetooth: hci5: command tx timeout [ 681.820384][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 682.070227][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 683.229608][ T5817] Bluetooth: hci5: command tx timeout [ 685.310483][ T5817] Bluetooth: hci5: command tx timeout [ 687.728104][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.728292][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.728572][T11455] bridge_slave_0: entered allmulticast mode [ 687.732930][T11455] bridge_slave_0: entered promiscuous mode [ 689.255039][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.255855][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.256116][T11455] bridge_slave_1: entered allmulticast mode [ 689.259039][T11455] bridge_slave_1: entered promiscuous mode [ 690.945939][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.023391][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.264589][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.441521][T11455] team0: Port device team_slave_0 added [ 691.455208][T11455] team0: Port device team_slave_1 added [ 691.743174][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.743189][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.743209][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.754455][T11523] chnl_net:caif_netlink_parms(): no params data found [ 691.776851][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.776875][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.776912][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.366864][T11592] chnl_net:caif_netlink_parms(): no params data found [ 692.423169][T11455] hsr_slave_0: entered promiscuous mode [ 692.424283][T11455] hsr_slave_1: entered promiscuous mode [ 692.425671][T11609] chnl_net:caif_netlink_parms(): no params data found [ 692.965723][T11523] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.965893][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.966097][T11523] bridge_slave_0: entered allmulticast mode [ 692.973033][T10359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.976097][T11523] bridge_slave_0: entered promiscuous mode [ 692.994948][T10359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.001155][T10359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.003208][T10359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.004084][T10359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.211031][T11523] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.211169][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.211421][T11523] bridge_slave_1: entered allmulticast mode [ 693.213450][T11523] bridge_slave_1: entered promiscuous mode [ 693.905381][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.108031][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.230710][T11592] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.230961][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.231225][T11592] bridge_slave_0: entered allmulticast mode [ 694.233460][T11592] bridge_slave_0: entered promiscuous mode [ 694.326792][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.326909][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.327154][T11609] bridge_slave_0: entered allmulticast mode [ 694.329171][T11609] bridge_slave_0: entered promiscuous mode [ 694.334452][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.334606][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.334860][T11592] bridge_slave_1: entered allmulticast mode [ 694.338162][T11592] bridge_slave_1: entered promiscuous mode [ 694.560724][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.560875][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.561121][T11609] bridge_slave_1: entered allmulticast mode [ 694.563689][T11609] bridge_slave_1: entered promiscuous mode [ 694.708856][T11523] team0: Port device team_slave_0 added [ 694.848712][T11523] team0: Port device team_slave_1 added [ 694.925817][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.024364][T11609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.028271][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.113699][T11609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.149842][ T5817] Bluetooth: hci0: command tx timeout [ 695.230688][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.230702][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.230722][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.431195][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.431209][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.431231][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.682728][T11592] team0: Port device team_slave_0 added [ 695.711517][T11609] team0: Port device team_slave_0 added [ 695.722470][T11592] team0: Port device team_slave_1 added [ 695.763564][T11609] team0: Port device team_slave_1 added [ 696.101573][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.101593][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.101622][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.203341][T11609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.203361][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.203391][T11609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.206130][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.206146][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.206174][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.352885][T11609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.352898][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.352919][T11609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.400526][T11523] hsr_slave_0: entered promiscuous mode [ 696.402434][T11523] hsr_slave_1: entered promiscuous mode [ 696.403730][T11523] debugfs: 'hsr0' already exists in 'hsr' [ 696.403756][T11523] Cannot create hsr debugfs directory [ 696.951991][T11592] hsr_slave_0: entered promiscuous mode [ 696.953353][T11592] hsr_slave_1: entered promiscuous mode [ 696.954101][T11592] debugfs: 'hsr0' already exists in 'hsr' [ 696.954120][T11592] Cannot create hsr debugfs directory [ 697.027306][T11609] hsr_slave_0: entered promiscuous mode [ 697.028383][T11609] hsr_slave_1: entered promiscuous mode [ 697.029125][T11609] debugfs: 'hsr0' already exists in 'hsr' [ 697.029145][T11609] Cannot create hsr debugfs directory [ 697.229936][ T5817] Bluetooth: hci0: command tx timeout [ 697.881485][T11647] chnl_net:caif_netlink_parms(): no params data found [ 699.036199][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.036355][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.036532][T11647] bridge_slave_0: entered allmulticast mode [ 699.038637][T11647] bridge_slave_0: entered promiscuous mode [ 699.113277][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.113390][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.113834][T11647] bridge_slave_1: entered allmulticast mode [ 699.115831][T11647] bridge_slave_1: entered promiscuous mode [ 699.309766][ T5817] Bluetooth: hci0: command tx timeout [ 699.388878][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.402466][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.590935][T11523] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 699.619834][T11647] team0: Port device team_slave_0 added [ 699.621686][T11523] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 699.778038][T11647] team0: Port device team_slave_1 added [ 699.778793][T11523] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 699.901880][T11523] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 700.101806][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.101825][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.101856][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.115061][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.115083][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.115118][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.695228][T11647] hsr_slave_0: entered promiscuous mode [ 700.696379][T11647] hsr_slave_1: entered promiscuous mode [ 700.697094][T11647] debugfs: 'hsr0' already exists in 'hsr' [ 700.697113][T11647] Cannot create hsr debugfs directory [ 701.389889][ T5817] Bluetooth: hci0: command tx timeout [ 702.004636][T11523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.037300][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.056097][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.057057][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.070623][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.070790][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.368928][ T7705] bridge_slave_1: left allmulticast mode [ 702.368951][ T7705] bridge_slave_1: left promiscuous mode [ 702.369142][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.434231][ T7705] bridge_slave_0: left allmulticast mode [ 702.434263][ T7705] bridge_slave_0: left promiscuous mode [ 702.434894][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.521107][ T7705] bridge_slave_1: left allmulticast mode [ 702.521139][ T7705] bridge_slave_1: left promiscuous mode [ 702.521395][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.601003][ T7705] bridge_slave_0: left allmulticast mode [ 702.601028][ T7705] bridge_slave_0: left promiscuous mode [ 702.601217][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.664926][ T7705] bridge_slave_1: left allmulticast mode [ 702.664950][ T7705] bridge_slave_1: left promiscuous mode [ 702.665129][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.721025][ T7705] bridge_slave_0: left allmulticast mode [ 702.721050][ T7705] bridge_slave_0: left promiscuous mode [ 702.721245][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.792721][ T7705] bridge_slave_1: left allmulticast mode [ 702.792747][ T7705] bridge_slave_1: left promiscuous mode [ 702.792924][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.880791][ T7705] bridge_slave_0: left allmulticast mode [ 702.880815][ T7705] bridge_slave_0: left promiscuous mode [ 702.881027][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.948829][ T7705] bridge_slave_1: left allmulticast mode [ 702.948854][ T7705] bridge_slave_1: left promiscuous mode [ 702.949063][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.010934][ T7705] bridge_slave_0: left allmulticast mode [ 703.010958][ T7705] bridge_slave_0: left promiscuous mode [ 703.011175][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.082729][ T7705] bridge_slave_1: left allmulticast mode [ 703.082754][ T7705] bridge_slave_1: left promiscuous mode [ 703.082931][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.151786][ T7705] bridge_slave_0: left allmulticast mode [ 703.151811][ T7705] bridge_slave_0: left promiscuous mode [ 703.152004][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.233856][ T7705] bridge_slave_1: left allmulticast mode [ 703.233881][ T7705] bridge_slave_1: left promiscuous mode [ 703.234072][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.311677][ T7705] bridge_slave_0: left allmulticast mode [ 703.311703][ T7705] bridge_slave_0: left promiscuous mode [ 703.311895][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.630905][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.710266][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.772220][ T7705] bond0 (unregistering): Released all slaves [ 704.010333][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.130544][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.193921][ T7705] bond0 (unregistering): Released all slaves [ 704.327326][ T7705] bond0 (unregistering): Released all slaves [ 704.570299][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.660518][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.722904][ T7705] bond0 (unregistering): Released all slaves [ 704.970303][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.081515][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.152926][ T7705] bond0 (unregistering): Released all slaves [ 705.380811][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.460493][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.523184][ T7705] bond0 (unregistering): Released all slaves [ 705.770300][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.910703][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.971981][ T7705] bond0 (unregistering): Released all slaves [ 706.210462][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.290787][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.371916][ T7705] bond0 (unregistering): Released all slaves [ 706.544716][ T7705] bond0 (unregistering): Released all slaves [ 707.297071][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.849060][T11592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 708.022051][T11592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 708.130129][T11592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 708.165637][T11592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 708.456913][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.475814][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.481605][T10359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.483817][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.484812][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.869598][ T7705] hsr_slave_0: left promiscuous mode [ 708.910905][ T7705] hsr_slave_1: left promiscuous mode [ 708.915438][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.970334][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.020581][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.071236][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.289862][ T7705] hsr_slave_0: left promiscuous mode [ 709.359895][ T7705] hsr_slave_1: left promiscuous mode [ 709.360789][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.420701][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.630263][ T7705] hsr_slave_0: left promiscuous mode [ 709.669580][ T7705] hsr_slave_1: left promiscuous mode [ 709.670498][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.693690][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.859765][ T7705] hsr_slave_0: left promiscuous mode [ 709.919649][ T7705] hsr_slave_1: left promiscuous mode [ 709.920783][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.950608][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.110007][ T7705] hsr_slave_0: left promiscuous mode [ 710.130905][ T7705] hsr_slave_1: left promiscuous mode [ 710.132703][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.170245][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.190910][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.230400][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.509734][T10359] Bluetooth: hci2: command tx timeout [ 710.690536][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 710.890287][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 711.650316][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 711.800387][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 712.589608][T10359] Bluetooth: hci2: command tx timeout [ 712.990680][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 713.150943][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 714.390272][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 714.531514][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 714.669582][T10359] Bluetooth: hci2: command tx timeout [ 715.743975][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 715.900181][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 716.752220][T10359] Bluetooth: hci2: command tx timeout [ 717.120374][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 717.280386][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 718.100243][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 718.250177][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 719.754025][T11685] chnl_net:caif_netlink_parms(): no params data found [ 719.815834][T11609] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 719.907744][T11592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.954044][T11609] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 720.072616][T11609] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 720.207424][T11609] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 720.629246][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.630145][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.630428][T11685] bridge_slave_0: entered allmulticast mode [ 720.633780][T11685] bridge_slave_0: entered promiscuous mode [ 720.646263][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.646422][T11685] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.646725][T11685] bridge_slave_1: entered allmulticast mode [ 720.655739][T11685] bridge_slave_1: entered promiscuous mode [ 720.816214][T11592] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.825035][T11647] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.953238][T11647] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 721.000235][T11685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.001380][T11647] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 721.080350][T11685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.082921][T11647] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 721.242310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.242475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.481006][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.481133][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.484723][T11685] team0: Port device team_slave_0 added [ 721.502760][T11685] team0: Port device team_slave_1 added [ 721.750000][T11685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.750015][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.750035][T11685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.782531][T11685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.782555][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.782590][T11685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.083516][T11685] hsr_slave_0: entered promiscuous mode [ 722.084544][T11685] hsr_slave_1: entered promiscuous mode [ 722.934570][T11609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.309258][T11609] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.343875][T11647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.346002][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.346215][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.353798][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.698970][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.699073][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.737334][T11647] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.778381][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.778747][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.124654][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.124864][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.567406][T11647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.843790][T11592] veth0_vlan: entered promiscuous mode [ 724.960183][T11592] veth1_vlan: entered promiscuous mode [ 725.385664][T11685] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 725.486945][T11685] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 725.547120][T11609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.560157][T11685] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 725.635298][T11685] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 725.698972][T11647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.715122][T11592] veth0_macvtap: entered promiscuous mode [ 725.814552][T11592] veth1_macvtap: entered promiscuous mode [ 725.977667][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.065989][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.085150][ T7744] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.088242][ T7744] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.107660][ T7744] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.123136][ T7744] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.720506][ T7744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.720531][ T7744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.848068][T11609] veth0_vlan: entered promiscuous mode [ 726.852713][ T7715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.852742][ T7715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.875564][T11647] veth0_vlan: entered promiscuous mode [ 726.893996][T11685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.992116][T11609] veth1_vlan: entered promiscuous mode [ 727.021137][T11647] veth1_vlan: entered promiscuous mode [ 727.204538][T11685] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.449010][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.449238][ T7715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.505993][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.506147][ T7715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.583795][T11609] veth0_macvtap: entered promiscuous mode [ 728.001497][T11647] veth0_macvtap: entered promiscuous mode [ 728.009986][T11609] veth1_macvtap: entered promiscuous mode [ 728.038749][T11647] veth1_macvtap: entered promiscuous mode [ 728.206663][T11609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.224585][T11647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.243954][T11647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.257527][T11609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.408539][ T1166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.438338][ T1166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.453346][ T1166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.480512][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.482513][ T1166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.522413][ T1166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.528211][ T1166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.546946][ T1166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.925288][ T7705] bridge_slave_1: left allmulticast mode [ 728.925313][ T7705] bridge_slave_1: left promiscuous mode [ 728.925503][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.031066][ T7705] bridge_slave_0: left allmulticast mode [ 729.031098][ T7705] bridge_slave_0: left promiscuous mode [ 729.031386][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.341031][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.348102][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.379674][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.420139][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.420960][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.488173][ T5817] Bluetooth: hci1: command tx timeout [ 743.574428][ T5817] Bluetooth: hci1: command tx timeout [ 745.474976][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.629565][ T5817] Bluetooth: hci1: command tx timeout [ 745.645493][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.874649][ T7705] bond0 (unregistering): Released all slaves [ 748.359436][ T5817] Bluetooth: hci1: command tx timeout [ 751.651501][ T7705] hsr_slave_0: left promiscuous mode [ 755.645009][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.667712][ T7705] hsr_slave_1: left promiscuous mode [ 755.668746][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.976844][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.818953][T10359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 758.862935][T10359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 758.866051][T10359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.194326][T10359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.236759][T10359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 761.949624][ T5817] Bluetooth: hci5: command tx timeout [ 764.128606][ T5817] Bluetooth: hci5: command tx timeout [ 766.880243][ T5817] Bluetooth: hci5: command tx timeout [ 769.121001][ T5817] Bluetooth: hci5: command tx timeout [ 773.251894][T10359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 773.364711][T10359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 773.387808][T10359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 773.406021][T10359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 773.409631][T10359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 774.080265][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 775.655143][T10359] Bluetooth: hci6: command tx timeout [ 777.022979][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 778.417642][T10359] Bluetooth: hci6: command tx timeout [ 781.273789][T10359] Bluetooth: hci6: command tx timeout [ 784.023850][T10359] Bluetooth: hci6: command tx timeout [ 796.564102][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 803.440713][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 803.460608][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 803.477167][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 803.489463][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 803.490341][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 807.581304][ T5817] Bluetooth: hci7: command tx timeout [ 809.872340][ T5817] Bluetooth: hci7: command tx timeout [ 812.923594][ T5817] Bluetooth: hci7: command tx timeout [ 814.989551][T10359] Bluetooth: hci7: command tx timeout [ 817.202679][T10359] Bluetooth: hci0: command 0x0406 tx timeout [ 819.985691][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 823.100379][T10359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.118173][T10359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.145754][T10359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.148378][T10359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.149570][T10359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 826.936989][ T5817] Bluetooth: hci0: command tx timeout [ 829.305528][ T5817] Bluetooth: hci0: command tx timeout [ 833.003388][ T5817] Bluetooth: hci0: command tx timeout [ 835.122173][T10359] Bluetooth: hci0: command tx timeout [ 835.736663][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.762615][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.769041][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 836.160973][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 836.355778][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 838.382595][T12012] chnl_net:caif_netlink_parms(): no params data found [ 838.556317][T10359] Bluetooth: hci1: command tx timeout [ 840.667549][T10359] Bluetooth: hci1: command tx timeout [ 842.872768][T10359] Bluetooth: hci1: command tx timeout [ 845.523715][T10359] Bluetooth: hci1: command tx timeout [ 845.699610][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.700271][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.700525][T12012] bridge_slave_0: entered allmulticast mode [ 845.703355][T12012] bridge_slave_0: entered promiscuous mode [ 845.867348][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.867477][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.867677][T12012] bridge_slave_1: entered allmulticast mode [ 845.895551][T12012] bridge_slave_1: entered promiscuous mode [ 848.261614][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.215741][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.072919][T12012] team0: Port device team_slave_0 added [ 858.929438][ T7705] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.191748][T12012] team0: Port device team_slave_1 added [ 861.928612][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 861.951886][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 861.953847][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 861.956106][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 861.957223][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 862.748141][ T7705] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.331608][ T7705] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.040026][T10359] Bluetooth: hci2: command tx timeout [ 864.215987][T12085] chnl_net:caif_netlink_parms(): no params data found [ 865.732449][ T7705] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.382298][T10359] Bluetooth: hci2: command tx timeout [ 866.440112][T12131] chnl_net:caif_netlink_parms(): no params data found [ 868.402136][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.402335][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.402571][T12085] bridge_slave_0: entered allmulticast mode [ 868.405539][T12085] bridge_slave_0: entered promiscuous mode [ 868.429963][T10359] Bluetooth: hci2: command tx timeout [ 868.440564][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.440722][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.441027][T12131] bridge_slave_0: entered allmulticast mode [ 868.447240][T12131] bridge_slave_0: entered promiscuous mode [ 868.493098][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.493259][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.493517][T12131] bridge_slave_1: entered allmulticast mode [ 868.496447][T12131] bridge_slave_1: entered promiscuous mode [ 868.530778][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.530912][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.531159][T12085] bridge_slave_1: entered allmulticast mode [ 868.534154][T12085] bridge_slave_1: entered promiscuous mode [ 869.091082][T12131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.095734][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.192610][T12131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.196383][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.038085][T12131] team0: Port device team_slave_0 added [ 870.043574][T12085] team0: Port device team_slave_0 added [ 870.113240][T12085] team0: Port device team_slave_1 added [ 870.131589][T12131] team0: Port device team_slave_1 added [ 870.523473][T10359] Bluetooth: hci2: command tx timeout [ 873.634970][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.634990][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.635018][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.952685][T12131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.952705][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.952737][T12131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.020059][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.020080][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.020112][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.021664][T12131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.021680][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.021710][T12131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.022977][T12255] chnl_net:caif_netlink_parms(): no params data found [ 881.399711][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.472266][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.478088][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 881.482081][T12131] hsr_slave_0: entered promiscuous mode [ 881.483880][T12131] hsr_slave_1: entered promiscuous mode [ 881.485041][T12131] debugfs: 'hsr0' already exists in 'hsr' [ 881.485068][T12131] Cannot create hsr debugfs directory [ 881.506665][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 881.532194][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 881.550212][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.059511][T10359] Bluetooth: hci5: command tx timeout [ 885.752927][T12255] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.753135][T12255] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.753412][T12255] bridge_slave_0: entered allmulticast mode [ 885.756427][T12255] bridge_slave_0: entered promiscuous mode [ 886.109727][T10359] Bluetooth: hci5: command tx timeout [ 886.116976][T12255] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.117116][T12255] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.117463][T12255] bridge_slave_1: entered allmulticast mode [ 886.156644][T12255] bridge_slave_1: entered promiscuous mode [ 886.998727][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.111554][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.964472][ T7705] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.122441][T12255] team0: Port device team_slave_0 added [ 888.189633][T10359] Bluetooth: hci5: command tx timeout [ 888.295252][T12255] team0: Port device team_slave_1 added [ 890.148821][ T7705] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.332697][T10359] Bluetooth: hci5: command tx timeout [ 890.477898][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.477917][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.477948][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.905033][ T7705] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.901004][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.901024][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.901054][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.677070][ T7705] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.997344][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.021583][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.023281][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.045382][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.134301][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 900.239638][ T5817] Bluetooth: hci0: command tx timeout [ 900.524380][T12255] hsr_slave_0: entered promiscuous mode [ 900.525982][T12255] hsr_slave_1: entered promiscuous mode [ 900.527112][T12255] debugfs: 'hsr0' already exists in 'hsr' [ 900.527140][T12255] Cannot create hsr debugfs directory [ 902.279565][ T5817] Bluetooth: hci0: command tx timeout [ 903.113525][T12349] chnl_net:caif_netlink_parms(): no params data found [ 903.515325][ T7705] bridge_slave_1: left allmulticast mode [ 903.515366][ T7705] bridge_slave_1: left promiscuous mode [ 903.515636][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.941146][ T7705] bridge_slave_0: left allmulticast mode [ 903.941179][ T7705] bridge_slave_0: left promiscuous mode [ 903.941487][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.083811][ T7705] bridge_slave_1: left allmulticast mode [ 904.083845][ T7705] bridge_slave_1: left promiscuous mode [ 904.084094][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.291206][ T7705] bridge_slave_0: left allmulticast mode [ 904.291239][ T7705] bridge_slave_0: left promiscuous mode [ 904.291505][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.364374][ T5817] Bluetooth: hci0: command tx timeout [ 904.404306][ T7705] bridge_slave_1: left allmulticast mode [ 904.404339][ T7705] bridge_slave_1: left promiscuous mode [ 904.404593][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.490941][ T7705] bridge_slave_0: left allmulticast mode [ 904.490980][ T7705] bridge_slave_0: left promiscuous mode [ 904.491229][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.429787][ T5817] Bluetooth: hci0: command tx timeout [ 908.857382][ T7705] bond0 (unregistering): Released all slaves [ 916.930442][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.990283][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.033347][ T7705] bond0 (unregistering): Released all slaves [ 920.862184][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.940389][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.986232][ T7705] bond0 (unregistering): Released all slaves [ 924.353550][T10359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 924.358780][T10359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 924.364894][T10359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 924.616327][T10359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 924.617775][T10359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.092669][ T7705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.150660][ T7705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.194422][ T7705] bond0 (unregistering): Released all slaves [ 926.791900][ T171] kworker/u8:8 (171) used greatest stack depth: 15720 bytes left [ 926.795221][ T5817] Bluetooth: hci1: command tx timeout [ 928.193111][T12505] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2105'. [ 928.943876][ T5817] Bluetooth: hci1: command tx timeout [ 930.991533][ T5817] Bluetooth: hci1: command tx timeout [ 933.056506][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.057273][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.069709][ T5817] Bluetooth: hci1: command tx timeout [ 933.086659][T12349] bridge_slave_0: entered allmulticast mode [ 933.100844][T12349] bridge_slave_0: entered promiscuous mode [ 933.156299][T12349] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.166990][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.167270][T12349] bridge_slave_1: entered allmulticast mode [ 933.185655][T12349] bridge_slave_1: entered promiscuous mode [ 934.646094][T12349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.749066][T12349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.919661][ T7705] hsr_slave_0: left promiscuous mode [ 934.959521][ T7705] hsr_slave_1: left promiscuous mode [ 934.960572][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.960599][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.000793][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.000824][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.603087][ T7705] hsr_slave_0: left promiscuous mode [ 936.679737][ T7705] hsr_slave_1: left promiscuous mode [ 936.680902][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.742660][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.299418][ T7705] hsr_slave_0: left promiscuous mode [ 938.479329][ T7705] hsr_slave_1: left promiscuous mode [ 938.480359][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.480412][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.655865][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.655896][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.065463][ T7705] veth1_macvtap: left promiscuous mode [ 939.065581][ T7705] veth0_macvtap: left promiscuous mode [ 939.065857][ T7705] veth1_vlan: left promiscuous mode [ 939.066048][ T7705] veth0_vlan: left promiscuous mode [ 939.219914][ T7705] veth1_macvtap: left promiscuous mode [ 939.220029][ T7705] veth0_macvtap: left promiscuous mode [ 939.220313][ T7705] veth1_vlan: left promiscuous mode [ 939.220518][ T7705] veth0_vlan: left promiscuous mode [ 941.923480][T10359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.938145][T10359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.951113][T10359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.953078][T10359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.953975][T10359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.116528][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.029513][T10359] Bluetooth: hci2: command tx timeout [ 949.283228][ T5817] Bluetooth: hci2: command tx timeout [ 951.326077][T10359] Bluetooth: hci2: command tx timeout [ 953.464679][T10359] Bluetooth: hci2: command tx timeout [ 957.595923][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 957.616437][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 957.618883][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 957.628503][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 957.629823][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 957.970552][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 958.370274][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 960.249619][ T5817] Bluetooth: hci6: command tx timeout [ 963.300396][ T5817] Bluetooth: hci6: command tx timeout [ 965.342350][T10359] Bluetooth: hci6: command tx timeout [ 967.416278][T10359] Bluetooth: hci6: command tx timeout [ 988.048179][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 988.827341][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 988.829997][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 988.831172][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 988.832021][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 994.524634][ T5817] Bluetooth: hci7: command tx timeout [ 997.685351][ T5817] Bluetooth: hci7: command tx timeout [ 1002.654713][ T5817] Bluetooth: hci7: command tx timeout [ 1004.153309][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.669396][T10359] Bluetooth: hci7: command tx timeout [ 1004.944136][T12825] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1005.917237][T12825] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1005.918771][T12825] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1005.920131][T12825] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1005.921002][T12825] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1008.200695][T10359] Bluetooth: hci5: command 0x0406 tx timeout [ 1008.231207][T10359] Bluetooth: hci8: command tx timeout [ 1011.049781][ T5817] Bluetooth: hci8: command tx timeout [ 1013.073497][ T5817] Bluetooth: hci8: command tx timeout [ 1013.899818][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 1015.149377][ T5817] Bluetooth: hci8: command tx timeout [ 1016.590313][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 1021.883905][T10359] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1021.890057][T10359] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1021.908819][T10359] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1021.910831][T10359] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1021.912271][T10359] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1024.239275][T10359] Bluetooth: hci0: command 0x0406 tx timeout [ 1024.856087][ T5817] Bluetooth: hci9: command tx timeout [ 1026.939497][ T5817] Bluetooth: hci9: command tx timeout [ 1028.989547][ T5817] Bluetooth: hci9: command tx timeout [ 1031.912096][ T5817] Bluetooth: hci9: command tx timeout [ 1051.356471][T12825] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1051.366915][T12825] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1051.369006][T12825] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1051.370577][T12825] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1051.371917][T12825] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1051.949597][T12825] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.424800][ T5817] Bluetooth: hci10: command tx timeout [ 1056.658843][ T5817] Bluetooth: hci10: command tx timeout [ 1059.237763][ T5817] Bluetooth: hci10: command tx timeout [ 1062.536938][ T5817] Bluetooth: hci10: command tx timeout [ 1065.999617][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.052966][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1073.262125][ T5817] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1073.273464][ T5817] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1073.275034][ T5817] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1073.276257][ T5817] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1073.277114][ T5817] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1076.645285][ T5817] Bluetooth: hci11: command tx timeout [ 1078.830964][ T5817] Bluetooth: hci11: command tx timeout [ 1081.209862][ T5817] Bluetooth: hci11: command tx timeout [ 1081.596289][T10359] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1081.611094][T10359] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1081.613182][T10359] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1081.614474][T10359] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1081.615290][T10359] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1081.710471][ T7705] team0 (unregistering): Port device team_slave_1 removed [ 1083.239514][T11611] Bluetooth: hci6: command 0x0406 tx timeout [ 1083.251963][T12825] Bluetooth: hci11: command tx timeout [ 1083.855607][ T5817] Bluetooth: hci12: command tx timeout [ 1083.920152][ T7705] team0 (unregistering): Port device team_slave_0 removed [ 1086.314254][ T5817] Bluetooth: hci12: command tx timeout [ 1087.506942][ T39] INFO: task kworker/u8:33:7738 blocked for more than 146 seconds. [ 1087.507244][ T39] Not tainted syzkaller #0 [ 1087.507258][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.507269][ T39] task:kworker/u8:33 state:D stack:20520 pid:7738 tgid:7738 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1087.507332][ T39] Workqueue: events_unbound linkwatch_event [ 1087.507467][ T39] Call Trace: [ 1087.507532][ T39] [ 1087.507637][ T39] __schedule+0x16f3/0x4c20 [ 1087.507990][ T39] ? __pfx___schedule+0x10/0x10 [ 1087.508248][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.508289][ T39] rt_mutex_schedule+0x77/0xf0 [ 1087.508348][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1087.508448][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1087.508683][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1087.508795][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1087.508879][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1087.509053][ T39] ? linkwatch_event+0xe/0x60 [ 1087.531372][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.531511][ T39] ? linkwatch_event+0xe/0x60 [ 1087.531563][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1087.531619][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.531682][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.531773][ T39] linkwatch_event+0xe/0x60 [ 1087.531822][ T39] process_scheduled_works+0xae1/0x17b0 [ 1087.531942][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1087.531998][ T39] worker_thread+0x8a0/0xda0 [ 1087.532497][ T39] kthread+0x711/0x8a0 [ 1087.532618][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1087.532668][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.532718][ T39] ? rt_spin_unlock+0x150/0x200 [ 1087.532832][ T39] ? rt_spin_unlock+0x161/0x200 [ 1087.532887][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.532916][ T39] ret_from_fork+0x4bc/0x870 [ 1087.532955][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.533104][ T39] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1087.533282][ T39] ? __switch_to_asm+0x33/0x70 [ 1087.533338][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.533437][ T39] ret_from_fork_asm+0x1a/0x30 [ 1087.533683][ T39] [ 1087.533748][ T39] INFO: task kworker/u8:39:7757 blocked for more than 146 seconds. [ 1087.533793][ T39] Not tainted syzkaller #0 [ 1087.533832][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.533843][ T39] task:kworker/u8:39 state:D stack:19624 pid:7757 tgid:7757 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1087.533905][ T39] Workqueue: ipv6_addrconf addrconf_dad_work [ 1087.533931][ T39] Call Trace: [ 1087.533966][ T39] [ 1087.534044][ T39] __schedule+0x16f3/0x4c20 [ 1087.534556][ T39] ? __pfx___schedule+0x10/0x10 [ 1087.534822][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.534861][ T39] rt_mutex_schedule+0x77/0xf0 [ 1087.534892][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1087.534976][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 1087.535259][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1087.535537][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1087.535622][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1087.535796][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.535836][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1087.535883][ T39] ? addrconf_dad_work+0x119/0x15a0 [ 1087.535934][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1087.535988][ T39] ? addrconf_dad_work+0x119/0x15a0 [ 1087.536083][ T39] addrconf_dad_work+0x119/0x15a0 [ 1087.536191][ T39] ? __lock_acquire+0xab9/0xd20 [ 1087.536328][ T39] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1087.536408][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.536670][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.536734][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.536769][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1087.536859][ T39] process_scheduled_works+0xae1/0x17b0 [ 1087.537242][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1087.537499][ [ 1087.537499][ T39] worker_thread+0x8a0/0xda0 [ 1087.537701][ T39] kthread+0x711/0x8a0 [ 1087.537733][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1087.537784][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.537836][ T39] ? rt_spin_unlock+0x150/0x200 [ 1087.537951][ T39] ? rt_spin_unlock+0x161/0x200 [ 1087.538005][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.538086][ T39] ret_from_fork+0x4bc/0x870 [ 1087.538202][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.538350][ T39] ? __switch_to_asm+0x39/0x70 [ 1087.538406][ T39] ? __switch_to_asm+0x33/0x70 [ 1087.538470][ T39] ? __pfx_kthread+0x10/0x10 [ 1087.538550][ T39] ret_from_fork_asm+0x1a/0x30 [ 1087.538602][ T39] [ 1087.539082][ T39] INFO: task syz-executor:12349 blocked for more than 146 seconds. [ 1088.315285][ T39] Not tainted syzkaller #0 [ 1088.315304][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1088.315318][ T39] task:syz-executor state:D stack:22216 pid:12349 tgid:12349 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1088.315373][ T39] Call Trace: [ 1088.315380][ T39] [ 1088.315393][ T39] __schedule+0x16f3/0x4c20 [ 1088.315441][ T39] ? kernel_text_address+0xa5/0xe0 [ 1088.315483][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1088.315524][ T39] ? __pfx___schedule+0x10/0x10 [ 1088.315594][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.315636][ T39] rt_mutex_schedule+0x77/0xf0 [ 1088.315670][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1088.315701][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1088.315754][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1088.315790][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1088.315824][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1088.315855][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.315895][ T39] ? rtnl_newlink+0x8e9/0x1c80 [ 1088.315932][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 1088.315967][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1088.316001][ T39] ? security_capable+0x7e/0x2e0 [ 1088.316041][ T39] ? rtnl_newlink+0x8e9/0x1c80 [ 1088.316072][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1088.316110][ T39] rtnl_newlink+0x8e9/0x1c80 [ 1088.316160][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1088.316208][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.316315][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.316369][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1088.316403][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1088.316435][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.316463][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1088.316497][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.316552][ T39] netlink_rcv_skb+0x208/0x470 [ 1088.316593][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.316618][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.316654][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1088.316703][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.316749][ T39] netlink_unicast+0x846/0xa10 [ 1088.316793][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 1088.316828][ T39] ? netlink_sendmsg+0x642/0xb30 [ 1088.316862][ T39] ? skb_put+0x11b/0x210 [ 1088.316904][ T39] netlink_sendmsg+0x805/0xb30 [ 1088.316953][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.317000][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.317028][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.317075][ T39] __sock_sendmsg+0x21c/0x270 [ 1088.317111][ T39] __sys_sendto+0x3c7/0x520 [ 1088.317151][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1088.317202][ T39] ? fput_close_sync+0x119/0x200 [ 1088.317269][ T39] __x64_sys_sendto+0xde/0x100 [ 1088.317320][ T39] do_syscall_64+0xfa/0xfa0 [ 1088.317342][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.317386][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.317443][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1088.317488][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.317536][ T39] RIP: 0033:0x7f152e740e5c [ 1088.317564][ T39] RSP: 002b:00007ffdbece8bc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1088.317597][ T39] RAX: ffffffffffffffda RBX: 00007f152f4c4620 RCX: 00007f152e740e5c [ 1088.317623][ T39] RDX: 0000000000000068 RSI: 00007f152f4c4670 RDI: 0000000000000003 [ 1088.317640][ T39] RBP: 0000000000000000 R08: 00007ffdbece8c14 R09: 000000000000000c [ 1088.317655][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1088.317671][ T39] R13: 0000000000000000 R14: 00007f152f4c4670 R15: 0000000000000000 [ 1088.317709][ T39] [ 1088.317727][ T39] INFO: task syz-executor:12429 blocked for more than 147 seconds. [ 1088.317745][ T39] Not tainted syzkaller #0 [ 1088.317757][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1088.317770][ T39] task:syz-executor state:D stack:21480 pid:12429 tgid:12429 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1088.317835][ T39] Call Trace: [ 1088.317843][ T39] [ 1088.317857][ T39] __schedule+0x16f3/0x4c20 [ 1088.317910][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1088.317963][ T39] ? __pfx___schedule+0x10/0x10 [ 1088.318020][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.318062][ T39] rt_mutex_schedule+0x77/0xf0 [ 1088.318092][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1088.318123][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1088.318177][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1088.318211][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1088.318245][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1088.318274][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.318313][ T39] ? rtnl_newlink+0x8e9/0x1c80 [ 1088.318347][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 1088.318381][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1088.318412][ T39] ? security_capable+0x7e/0x2e0 [ 1088.318454][ T39] ? rtnl_newlink+0x8e9/0x1c80 [ 1088.318483][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1088.318520][ T39] rtnl_newlink+0x8e9/0x1c80 [ 1088.318560][ T39] ? rtnl_newlink+0x8b1/0x1c80 [ 1088.318607][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1088.318654][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.318683][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.318720][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.318771][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1088.318810][ T39] ? is_bpf_text_address+0x292/0x2b0 [ 1088.318838][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 1088.318879][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.318933][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 1088.318965][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1088.318999][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.319026][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1088.319058][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.321538][ T39] netlink_rcv_skb+0x208/0x470 [ 1088.321582][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.321607][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1088.321640][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1088.321685][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 1088.321726][ T39] netlink_unicast+0x846/0xa10 [ 1088.321765][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 1088.321796][ T39] ? netlink_sendmsg+0x642/0xb30 [ 1088.321826][ T39] ? skb_put+0x11b/0x210 [ 1088.321863][ T39] netlink_sendmsg+0x805/0xb30 [ 1088.321906][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.321948][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1088.321974][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1088.322007][ T39] __sock_sendmsg+0x21c/0x270 [ 1088.322039][ T39] __sys_sendto+0x3c7/0x520 [ 1088.322082][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 1088.322130][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 1088.322185][ T39] __x64_sys_sendto+0xde/0x100 [ 1088.322222][ T39] do_syscall_64+0xfa/0xfa0 [ 1088.322243][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.322276][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.322299][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1088.322326][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.322348][ T39] RIP: 0033:0x7efdec350e5c [ 1088.322367][ T39] RSP: 002b:00007ffd84e4f3d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1088.322390][ T39] RAX: ffffffffffffffda RBX: 00007efded0d4620 RCX: 00007efdec350e5c [ 1088.322407][ T39] RDX: 000000000000003c RSI: 00007efded0d4670 RDI: 0000000000000003 [ 1088.322421][ T39] RBP: 0000000000000000 R08: 00007ffd84e4f424 R09: 000000000000000c [ 1088.322436][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1088.322449][ T39] R13: 0000000000000000 R14: 00007efded0d4670 R15: 0000000000000000 [ 1088.322484][ T39] [ 1088.322495][ T39] INFO: task syz-executor:12534 blocked for more than 147 seconds. [ 1088.322512][ T39] Not tainted syzkaller #0 [ 1088.322522][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1088.322533][ T39] task:syz-executor state:D stack:25864 pid:12534 tgid:12534 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1088.322602][ T39] Call Trace: [ 1088.322609][ T39] [ 1088.322622][ T39] __schedule+0x16f3/0x4c20 [ 1088.322681][ T39] ? __pfx___schedule+0x10/0x10 [ 1088.322732][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.322770][ T39] rt_mutex_schedule+0x77/0xf0 [ 1088.322805][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1088.322833][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1088.322881][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1088.322912][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1088.322942][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1088.322968][ T39] ? __lock_acquire+0xab9/0xd20 [ 1088.323002][ T39] ? ip_tunnel_init_net+0x2ab/0x800 [ 1088.323045][ T39] ? ip_tunnel_init_net+0x2ab/0x800 [ 1088.323070][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1088.323103][ T39] ip_tunnel_init_net+0x2ab/0x800 [ 1088.323139][ T39] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1088.323174][ T39] ? rcu_is_watching+0x15/0xb0 [ 1088.323209][ T39] vti_init_net+0x2f/0x100 [ 1088.323245][ T39] ops_init+0x35c/0x5c0 [ 1088.323288][ T39] setup_net+0xfe/0x320 [ 1088.323320][ T39] ? __pfx_setup_net+0x10/0x10 [ 1088.323353][ T39] ? __mutex_rt_init+0x3b/0x50 [ 1088.323385][ T39] ? preinit_net+0x4ab/0x770 [ 1088.323417][ T39] copy_net_ns+0x34e/0x4e0 [ 1088.323451][ T39] create_new_namespaces+0x3f3/0x720 [ 1088.323490][ T39] ? security_capable+0x7e/0x2e0 [ 1088.323530][ T39] unshare_nsproxy_namespaces+0x11c/0x170 [ 1088.323569][ T39] ksys_unshare+0x4c8/0x8c0 [ 1088.323637][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 1088.323658][ T39] ? dnotify_flush+0x1e8/0x5c0 [ 1088.323684][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 1088.323728][ T39] __x64_sys_unshare+0x38/0x50 [ 1088.323757][ T39] do_syscall_64+0xfa/0xfa0 [ 1088.323780][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.323818][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.323844][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1088.323874][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.323899][ T39] RIP: 0033:0x7f46394a07c7 [ 1088.323919][ T39] RSP: 002b:00007ffca7277c78 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1088.323944][ T39] RAX: ffffffffffffffda RBX: 00007f46396f5f40 RCX: 00007f46394a07c7 [ 1088.323963][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1088.323980][ T39] RBP: 00007f46396f67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1088.323995][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1088.324011][ T39] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1088.324049][ T39] [ 1088.324094][ T39] [ 1088.324094][ T39] Showing all locks held in the system: [ 1088.324112][ T39] 6 locks held by kworker/u8:0/12: [ 1088.324128][ T39] 4 locks held by pr/legacy/17: [ 1088.324144][ T39] 1 lock held by khungtaskd/39: [ 1088.324158][ T39] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1088.324222][ T39] 4 locks held by kworker/1:1/44: [ 1088.324270][ T39] 2 locks held by getty/5562: [ 1088.324283][ T39] #0: ffff88823bf780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1088.324344][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1088.324416][ T39] 1 lock held by syz-executor/5790: [ 1088.324434][ T39] 4 locks held by kworker/u8:17/7705: [ 1088.324448][ T39] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1088.324519][ T39] #1: ffffc90003b67ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1088.324599][ T39] #2: ffffffff8ea694a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1088.324663][ T39] #3: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 1088.324732][ T39] 3 locks held by kworker/u8:33/7738: [ 1088.324747][ T39] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1088.324823][ T39] #1: ffffc90008a87ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1088.324892][ T39] #2: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1088.324951][ T39] 3 locks held by kworker/u8:39/7757: [ 1088.324965][ T39] #0: ffff88802fad1138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1088.325036][ T39] #1: ffffc90006257ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1088.325106][ T39] #2: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1088.325170][ T39] 3 locks held by kworker/0:13/10555: [ 1088.325184][ T39] #0: ffff88813fe19138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1088.325257][ T39] #1: ffffc9000526fba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1088.325325][ T39] #2: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1088.325394][ T39] 2 locks held by syz-executor/12349: [ 1088.325409][ T39] #0: ffffffff8e201220 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1088.325482][ T39] #1: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1088.325548][ T39] 1 lock held by syz-executor/12429: [ 1088.325576][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1088.325641][ T39] 2 locks held by syz-executor/12534: [ 1088.325655][ T39] #0: ffffffff8ea694a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1088.325719][ T39] #1: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1088.325784][ T39] 1 lock held by syz-executor/12612: [ 1088.325799][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.325860][ T39] 1 lock held by syz-executor/12673: [ 1088.325874][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.325932][ T39] 1 lock held by syz-executor/12776: [ 1088.325947][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326006][ T39] 1 lock held by syz-executor/12824: [ 1088.326021][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326080][ T39] 1 lock held by syz-executor/12887: [ 1088.326095][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326154][ T39] 1 lock held by syz-executor/12996: [ 1088.326169][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326227][ T39] 1 lock held by syz-executor/13061: [ 1088.326242][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326301][ T39] 1 lock held by syz-executor/13096: [ 1088.326316][ T39] #0: ffffffff8ea763b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1088.326374][ T39] 1 lock held by syz-executor/13122: [ 1088.326388][ T39] [ 1088.326395][ T39] ============================================= [ 1088.326395][ T39] [ 1088.326407][ T39] NMI backtrace for cpu 0 [ 1088.326436][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1088.326463][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.326478][ T39] Call Trace: [ 1088.326488][ T39] [ 1088.326497][ T39] dump_stack_lvl+0x189/0x250 [ 1088.326533][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.326564][ T39] ? __pfx__printk+0x10/0x10 [ 1088.326617][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1088.326651][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1088.326685][ T39] ? __pfx__printk+0x10/0x10 [ 1088.326720][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.326757][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1088.326792][ T39] watchdog+0xf60/0xfa0 [ 1088.326824][ T39] ? watchdog+0x1e2/0xfa0 [ 1088.326858][ T39] kthread+0x711/0x8a0 [ 1088.326889][ T39] ? __pfx_watchdog+0x10/0x10 [ 1088.326915][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.326938][ T39] ? rt_spin_unlock+0x150/0x200 [ 1088.326975][ T39] ? rt_spin_unlock+0x161/0x200 [ 1088.327039][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.327068][ T39] ret_from_fork+0x4bc/0x870 [ 1088.327107][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.327152][ T39] ? __switch_to_asm+0x39/0x70 [ 1088.327184][ T39] ? __switch_to_asm+0x33/0x70 [ 1088.327213][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.327242][ T39] ret_from_fork_asm+0x1a/0x30 [ 1088.327295][ T39] [ 1088.327304][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1088.327419][ C1] NMI backtrace for cpu 1 [ 1088.327435][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1088.327456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.327467][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1088.327495][ C1] Code: e8 3e a0 b2 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cf 57 14 fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 22 be 05 cc 44 89 f9 80 e1 07 [ 1088.327512][ C1] RSP: 0018:ffffc90000167870 EFLAGS: 00000202 [ 1088.327528][ C1] RAX: 1ffffffff3217f00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1088.327541][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1088.327552][ C1] RBP: ffffffff990c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.327564][ C1] R10: dffffc0000000000 R11: ffffffff850c6c80 R12: dffffc0000000000 [ 1088.327579][ C1] R13: 0000000000000000 R14: ffffffff990bff40 R15: 0000000000000000 [ 1088.327591][ C1] FS: 0000000000000000(0000) GS:ffff888126cc8000(0000) knlGS:0000000000000000 [ 1088.327607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.327619][ C1] CR2: 00007f06dc2e7d60 CR3: 000000004b4fc000 CR4: 00000000003526f0 [ 1088.327636][ C1] Call Trace: [ 1088.327643][ C1] [ 1088.327653][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1088.327686][ C1] serial8250_console_write+0x1341/0x1b40 [ 1088.327721][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1088.327746][ C1] ? console_flush_all+0x13a/0xb40 [ 1088.327777][ C1] ? console_flush_all+0x476/0xb40 [ 1088.327805][ C1] console_flush_all+0x666/0xb40 [ 1088.327832][ C1] ? console_flush_all+0x13a/0xb40 [ 1088.327862][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1088.327887][ C1] ? preempt_schedule+0xae/0xc0 [ 1088.327924][ C1] __console_flush_and_unlock+0x9b/0x160 [ 1088.327949][ C1] ? legacy_kthread_func+0x136/0x1a0 [ 1088.327968][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 1088.327993][ C1] ? schedule+0x91/0x360 [ 1088.328024][ C1] legacy_kthread_func+0x13b/0x1a0 [ 1088.328042][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1088.328059][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1088.328089][ C1] ? __kthread_parkme+0x7b/0x200 [ 1088.328106][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1088.328128][ C1] kthread+0x711/0x8a0 [ 1088.328150][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1088.328167][ C1] ? __pfx_kthread+0x10/0x10 [ 1088.328186][ C1] ? rt_spin_unlock+0x150/0x200 [ 1088.328212][ C1] ? rt_spin_unlock+0x161/0x200 [ 1088.328233][ C1] ? __pfx_kthread+0x10/0x10 [ 1088.328254][ C1] ret_from_fork+0x4bc/0x870 [ 1088.328283][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.328314][ C1] ? __switch_to_asm+0x39/0x70 [ 1088.328344][ C1] ? __switch_to_asm+0x33/0x70 [ 1088.328368][ C1] ? __pfx_kthread+0x10/0x10 [ 1088.328389][ C1] ret_from_fork_asm+0x1a/0x30 [ 1088.328424][ C1] [ 1088.334897][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.334923][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1088.334952][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.334968][ T39] Call Trace: [ 1088.334978][ T39] [ 1088.334988][ T39] dump_stack_lvl+0x99/0x250 [ 1088.335025][ T39] ? __asan_memcpy+0x40/0x70 [ 1088.335061][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.335090][ T39] ? __pfx__printk+0x10/0x10 [ 1088.335135][ T39] vpanic+0x237/0x6d0 [ 1088.335178][ T39] ? __pfx_vpanic+0x10/0x10 [ 1088.335201][ T39] ? preempt_schedule_common+0x83/0xd0 [ 1088.335247][ T39] panic+0xb9/0xc0 [ 1088.335270][ T39] ? __pfx_panic+0x10/0x10 [ 1088.335294][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1088.335340][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1088.335376][ T39] watchdog+0xf9f/0xfa0 [ 1088.335409][ T39] ? watchdog+0x1e2/0xfa0 [ 1088.335443][ T39] kthread+0x711/0x8a0 [ 1088.335475][ T39] ? __pfx_watchdog+0x10/0x10 [ 1088.335501][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.335527][ T39] ? rt_spin_unlock+0x150/0x200 [ 1088.335565][ T39] ? rt_spin_unlock+0x161/0x200 [ 1088.335601][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.335630][ T39] ret_from_fork+0x4bc/0x870 [ 1088.335670][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.335715][ T39] ? __switch_to_asm+0x39/0x70 [ 1088.335746][ T39] ? __switch_to_asm+0x33/0x70 [ 1088.335776][ T39] ? __pfx_kthread+0x10/0x10 [ 1088.335806][ T39] ret_from_fork_asm+0x1a/0x30 [ 1088.335858][ T39] [ 1088.336190][ T39] Kernel Offset: disabled