last executing test programs: 10m28.02749601s ago: executing program 3 (id=1562): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) syz_open_pts(r0, 0x0) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 10m27.22374773s ago: executing program 3 (id=1565): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) 10m26.0660554s ago: executing program 3 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00030000000000000000000a", @ANYRESHEX=r0], 0x24}}, 0x0) 10m25.143180604s ago: executing program 3 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,fscontext=system']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, 0x0}, 0x44000) 10m23.452147086s ago: executing program 3 (id=1576): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000100)={0x3, 0x1, 0x0, 'queue0\x00', 0x7}) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x93) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0x2c) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x1, 0x9605782d338da745) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000024c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x100, 0x1f, 0x1, 0x200, 0x7, 0xfd, 0x3, 0x20000000, 0xa, 0xf7f8, 0x2, 0xb51, 0x10001, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x28000009, 0x3, 0x7, 0x2, 0x48, 0x0, 0x8, 0x423b, 0x2, 0x7, 0x9]}) syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="130100004cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 10m20.004978804s ago: executing program 3 (id=1582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000000000)=""/205, 0xe6}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0xa3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000001ac0)={0x80, 0x8}, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x4, 0x3d, 0x2, 0x6, 0x6}) 10m1.808660097s ago: executing program 32 (id=1582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000000000)=""/205, 0xe6}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0xa3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000001ac0)={0x80, 0x8}, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x4, 0x3d, 0x2, 0x6, 0x6}) 7m33.867212458s ago: executing program 1 (id=1877): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) unshare(0x6020400) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 7m31.143935337s ago: executing program 1 (id=1880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "f1d401a75435cf85", "0ec1a3bc3fc63cc5b119c2d368cf2658", "e1d2f91b", "e12427414f2be693"}, 0x28) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x81, 0x40, 0x9}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480000, 0x0) write$tun(r3, &(0x7f0000000880)={@val={0x0, 0x200}, @void, @llc={@snap={0x1, 0x1, "c2", "026a1c", 0x888e, "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"}}}, 0x100c) write$tun(r1, &(0x7f00000003c0)={@val={0x70}, @void, @eth={@random="7922fffa9e63", @random="75d9a786f5e8", @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x44, 0x65, 0x0, 0x5, 0x6, 0x0, @remote, @multicast2}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc0, 0x6, 0x0, 0x1, {[@generic={0x13, 0xd, "bbac20065feed39f97f97c"}, @timestamp={0x8, 0xa, 0x401, 0x8}, @window={0x3, 0x3, 0x1e}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x5e) mkdirat(0xffffffffffffffff, 0x0, 0x1ff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7m28.29772619s ago: executing program 1 (id=1884): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) 7m24.798625139s ago: executing program 1 (id=1886): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000300), 0x0) 7m24.374068959s ago: executing program 1 (id=1891): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023896) 7m22.421543489s ago: executing program 1 (id=1893): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 7m7.316752313s ago: executing program 33 (id=1893): socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 6m55.610342651s ago: executing program 5 (id=1937): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x9f, 0x0, &(0x7f0000001580)="ce6c286c2018840b1f6dc85445c6899e10f1c40536af7d99509e02dc55087fa1062209100f8e7b6082149e2153b76247ccda57e0de0b0ed16a37fc888d898ac6afcf02f8739c24fbffffffbb44f9cecd0df51bec33a47aab5137891e17044802c15d7b4f2ee03d63e10aba5f8c5d7aad2e06e02b132fea96aa104b0b4cb24d1a634dfadcb7d8138136929166bc30ddecf8881c5dd57c63894ac49ffda34c9d"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 6m53.730805009s ago: executing program 5 (id=1942): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) 6m51.741659469s ago: executing program 5 (id=1944): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 6m45.933927477s ago: executing program 5 (id=1949): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) 6m40.419877047s ago: executing program 5 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x2) close(r8) 6m33.752001667s ago: executing program 5 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() getpriority(0x2, r3) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) 6m16.671815461s ago: executing program 34 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() getpriority(0x2, r3) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) 47.496401392s ago: executing program 6 (id=2405): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) close(0x3) r2 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) syz_ublk_setup_io_uring(0x1ee0, &(0x7f0000000040)={0x0, 0x7917, 0x400, 0x1, 0x3a1, 0x0, r2}, 0x0, 0x0, 0x0) 38.333847981s ago: executing program 6 (id=2410): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r2, 0x0, 0x0, 0x8040) r3 = syz_io_uring_setup(0x3eb1, &(0x7f00000034c0)={0x0, 0x764a, 0x8000, 0x3, 0x70}, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002080)=[{0x200, 0x0, 0x0}, {0x7fffffff, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/95, 0x5f}, {0x0}]}, {0xd6, 0x0, &(0x7f0000001dc0)}], 0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) 35.649596978s ago: executing program 6 (id=2415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8000000000000000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 34.545382096s ago: executing program 6 (id=2419): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x174, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x128, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x40010) syz_open_procfs(r2, &(0x7f0000000080)='gid_map\x00') r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(r1, 0x0, 0x0) 32.176324045s ago: executing program 6 (id=2425): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r2, 0x0, 0x0, 0x8040) r3 = syz_io_uring_setup(0x3eb1, &(0x7f00000034c0)={0x0, 0x764a, 0x8000, 0x3, 0x70}, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002080)=[{0x200, 0x0, 0x0}, {0x7fffffff, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/95, 0x5f}, {0x0}]}, {0xd6, 0x0, &(0x7f0000001dc0)}], 0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) 25.233314659s ago: executing program 6 (id=2429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @mcast2, 0xa1}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xf0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x6d, &(0x7f0000000340)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010f01", 0x37, 0x11, 0x0, @mcast1, @mcast2, {[], {0x0, 0xe22, 0x37, 0x0, @gue={{0x2, 0x0, 0x2, 0xd}, "397158bc52e828f16407cdf1738af905ae21c5ab3283ac7083ca226f3c742d648a12738fb399dd"}}}}}}}, 0x0) 23.427315134s ago: executing program 4 (id=2433): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0xc, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 19.452406103s ago: executing program 4 (id=2439): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r2, 0x0, 0x0, 0x8040) r3 = syz_io_uring_setup(0x3eb1, &(0x7f00000034c0)={0x0, 0x764a, 0x8000, 0x3, 0x70}, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002080)=[{0x200, 0x0, 0x0}, {0x7fffffff, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/95, 0x5f}, {0x0}]}, {0xd6, 0x0, &(0x7f0000001dc0)}], 0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) 19.437953114s ago: executing program 7 (id=2440): execve(&(0x7f0000000980)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) futex(&(0x7f0000000040)=0x1, 0x7, 0x2, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)=0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffc, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x40000000000009, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x4040080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f00000003c0)={'erspan0\x00', r3, 0x8, 0x10, 0x3, 0x8, {{0x32, 0x4, 0x1, 0xc, 0xc8, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4c, 0xca, 0x1, 0x9, [{@remote, 0x3}, {@private=0xa010102, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x10}, {@remote, 0x10001}, {@loopback, 0x15}, {@local, 0x1000}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}]}, @timestamp_addr={0x44, 0xc, 0x9f, 0x1, 0xf, [{@loopback}]}, @ssrr={0x89, 0x1b, 0x9b, [@private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast, @remote, @empty]}, @lsrr={0x83, 0xb, 0xa0, [@multicast1, @empty]}, @rr={0x7, 0xf, 0xa1, [@multicast1, @private=0xa010102, @loopback]}, @rr={0x7, 0x1f, 0x97, [@loopback, @broadcast, @broadcast, @remote, @empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x0, [0x101]}]}}}}}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r9}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x18, r7, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x20004044) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) 15.645823819s ago: executing program 4 (id=2443): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x1534, &(0x7f0000000180)={0x0, 0xa58c, 0x4, 0x2, 0x2e2, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) syz_ublk_add_dev(r6, r7, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write(r1, &(0x7f0000000600)='stacktrace', 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 13.461533664s ago: executing program 7 (id=2444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000340)={0x3, r6, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x70) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) 11.18382503s ago: executing program 0 (id=2445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf21f1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc000201d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x11}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f000000a100)={0x0, 0x0, 0xc, 0x8, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1234 1111 ffffffff ffffffff 0 0', 0x1f) 10.981665635s ago: executing program 4 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44000) 10.870652838s ago: executing program 2 (id=2447): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 8.719367312s ago: executing program 35 (id=2429): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x0, 0x0, @mcast2, 0xa1}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0xf0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x6d, &(0x7f0000000340)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010f01", 0x37, 0x11, 0x0, @mcast1, @mcast2, {[], {0x0, 0xe22, 0x37, 0x0, @gue={{0x2, 0x0, 0x2, 0xd}, "397158bc52e828f16407cdf1738af905ae21c5ab3283ac7083ca226f3c742d648a12738fb399dd"}}}}}}}, 0x0) 8.695095753s ago: executing program 0 (id=2449): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0xc, 0x7, {"4e31211a40e51c75adce5a1c234e4f87"}, 0x8, 0x2, 0x4}}}, 0x118) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.694880153s ago: executing program 2 (id=2450): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) close(0x3) r2 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) syz_ublk_setup_io_uring(0x1ee0, &(0x7f0000000040)={0x0, 0x7917, 0x400, 0x1, 0x3a1, 0x0, r2}, 0x0, 0x0, 0x0) 8.694454603s ago: executing program 4 (id=2451): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x7) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0x6021}}) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./security/ima/policy\x00') 8.605142754s ago: executing program 7 (id=2452): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7.545998901s ago: executing program 2 (id=2453): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) 7.178970081s ago: executing program 0 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6(0xa, 0x80002, 0x0) r6 = io_uring_setup(0x4053, 0x0) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001028, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], &(0x7f0000000640), 0x10, 0x3}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.849839509s ago: executing program 2 (id=2455): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000240), 0xd2b3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x6677) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r6, 0x0, 0xfdcf, 0x3, 0xca) close(0xffffffffffffffff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c0000130003", 0x7}], 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000019300)=ANY=[], 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) 5.826157164s ago: executing program 7 (id=2456): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x1534, &(0x7f0000000180)={0x0, 0xa58c, 0x4, 0x2, 0x2e2, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000340)) syz_ublk_add_dev(r6, r7, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write(r1, &(0x7f0000000600)='stacktrace', 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 5.044779104s ago: executing program 2 (id=2457): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x20000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 4.923668867s ago: executing program 0 (id=2458): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}, {[0x3, 0x3, 0x8, 0x5]}, 0x8, 0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.873757763s ago: executing program 7 (id=2459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf21f1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc000201d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x11}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe80000000000000000003"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f000000a100)={0x0, 0x0, 0xc, 0x8, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1234 1111 ffffffff ffffffff 0 0', 0x1f) 3.277766308s ago: executing program 0 (id=2460): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) fcntl$getflags(r0, 0x40b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 1.361839276s ago: executing program 7 (id=2461): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005a40), 0x240, 0x0) preadv(r0, &(0x7f000001fcc0)=[{&(0x7f000001fc40)=""/46, 0x2e}], 0x1, 0x80000005, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) recvmmsg(r2, &(0x7f0000000140), 0x0, 0x40002100, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0x50000000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048054}, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000030603000000000000000000010000030900020073797a3100000000050001000700"/48], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x383, 0x2}) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa05009078010000004700000000000000001100000a010101ac1e000144670101ac1414bb4e21000001000000000000000000000000ac1414000000000000000000000000060000000000000000ac1e000100000000ac14140000000000"], 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.146257451s ago: executing program 4 (id=2462): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x801) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x0, 0xb4, @scatter={0x0, 0x100000, 0x0}, 0x0, 0x0, 0x42, 0x10023, 0xfffffffd, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xb, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) 163.609146ms ago: executing program 2 (id=2463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_io_uring_setup(0x5f38, 0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) io_uring_enter(r2, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001280), 0x40, 0x8302) r8 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val={0x6f01, 0x800}, @val={0x2, 0x0, 0x2b83, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0xf, 0x4, 0x0, 0x0, 0x64, 0x68, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local, {[@ssrr={0x89, 0xb, 0xe7, [@multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x16, 0x1, [{0x0, 0xb, "d9d2d992b367959984"}, {0x6, 0x5, "7b896a"}]}, @lsrr={0x83, 0x7, 0x6d, [@multicast1]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@eol, @timestamp={0x5, 0xa, 0xffffff07, 0xffc1}, @generic={0x13, 0x8, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x72) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010ac057d0200000000000109002400010000000b0904000001030002000921ff7e0f0122e3f0dee1770455aef2daf8f871750109058103ee01e30a7079d009edff45749a49c06c9294b4195e185a9de0808ba249b99a4bde00248078ed05031e340a716bc5932c5a99354eb9f57fd651380975d514fb0bb2262a9e723ea2eb4f0ec327bd97d67deabbb553f0f2483c0fbb560132b066ed3b6db432b3868827a17b46"], 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x18) 0s ago: executing program 0 (id=2464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8000000000000000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) kernel console output (not intermixed with test programs): sb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1010.824642][ T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.867537][ T954] usb 1-1: config 0 descriptor?? [ 1010.924645][ T954] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1013.038176][ T954] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1013.258255][ T954] usb 3-1: Using ep0 maxpacket: 8 [ 1013.266139][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1013.450649][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1013.614430][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1013.769323][ T954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1013.902002][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1014.031465][ T954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1015.443801][ T954] usb 3-1: string descriptor 0 read error: -71 [ 1015.445181][ T14] usb 1-1: USB disconnect, device number 34 [ 1015.456169][ T954] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1015.487214][ T954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.500328][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1015.519800][ T954] usb 3-1: config 0 descriptor?? [ 1015.525965][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1015.537688][ T954] usb 3-1: can't set config #0, error -71 [ 1015.553338][T11053] device veth0_vlan entered promiscuous mode [ 1015.561027][ T954] usb 3-1: USB disconnect, device number 26 [ 1015.594408][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1015.615055][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1015.657313][T11053] device veth1_vlan entered promiscuous mode [ 1015.668328][T11377] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1750'. [ 1015.692598][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1015.706968][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1015.962293][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1016.530683][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1016.604171][T11053] device veth0_macvtap entered promiscuous mode [ 1016.639746][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1016.664650][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1016.701075][T11053] device veth1_macvtap entered promiscuous mode [ 1016.729740][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1016.789424][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1016.819803][T11053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.838089][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1016.853811][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1016.879807][T11053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.898481][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.917117][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1017.021884][T11401] overlayfs: failed to resolve './file1/file0': -2 [ 1017.828743][T11053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.837532][T11053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.849110][T11053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.857914][T11053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.340917][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.447562][T11417] o2cb: This node has not been configured. [ 1018.453585][T11417] o2cb: Cluster check failed. Fix errors before retrying. [ 1018.460911][T11417] (syz.1.1761,11417,0):user_dlm_register:674 ERROR: status = -22 [ 1018.468753][T11417] (syz.1.1761,11417,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1019.097949][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.106216][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1019.556907][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.568171][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.588290][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1020.192941][T11439] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1765'. [ 1021.617260][T11469] o2cb: This node has not been configured. [ 1021.623254][T11469] o2cb: Cluster check failed. Fix errors before retrying. [ 1021.630648][T11469] (syz.5.1772,11469,0):user_dlm_register:674 ERROR: status = -22 [ 1021.638515][T11469] (syz.5.1772,11469,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1023.914084][T11492] tmpfs: Unknown parameter 'grpquota' [ 1024.194053][T11500] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1782'. [ 1025.739143][T11534] o2cb: This node has not been configured. [ 1025.745141][T11534] o2cb: Cluster check failed. Fix errors before retrying. [ 1025.752516][T11534] (syz.2.1788,11534,0):user_dlm_register:674 ERROR: status = -22 [ 1025.760601][T11534] (syz.2.1788,11534,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1026.804360][T11541] tmpfs: Unknown parameter 'grpquota' [ 1027.138913][T11551] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1799'. [ 1028.659078][T11580] o2cb: This node has not been configured. [ 1028.665297][T11580] o2cb: Cluster check failed. Fix errors before retrying. [ 1028.672707][T11580] (syz.4.1807,11580,0):user_dlm_register:674 ERROR: status = -22 [ 1028.680554][T11580] (syz.4.1807,11580,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1029.854155][T11590] tmpfs: Unknown parameter 'grpquota' [ 1031.916791][T11615] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1033.120632][T11628] o2cb: This node has not been configured. [ 1033.126573][T11628] o2cb: Cluster check failed. Fix errors before retrying. [ 1033.134009][T11628] (syz.2.1820,11628,0):user_dlm_register:674 ERROR: status = -22 [ 1033.141921][T11628] (syz.2.1820,11628,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1040.136492][T11708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1844'. [ 1042.058402][ T6053] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1042.312198][ T6053] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.538089][ T6053] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1042.639534][ T6053] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1042.729760][ T6053] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1042.936941][ T6053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1042.947576][ T6053] usb 3-1: Product: syz [ 1042.952888][ T6053] usb 3-1: Manufacturer: syz [ 1042.957628][ T6053] usb 3-1: SerialNumber: syz [ 1043.110944][ T6053] usb 3-1: config 0 descriptor?? [ 1044.085439][ T6053] usb 3-1: can't set config #0, error -71 [ 1045.683975][ T6053] usb 3-1: USB disconnect, device number 27 [ 1048.549174][T11781] o2cb: This node has not been configured. [ 1048.555126][T11781] o2cb: Cluster check failed. Fix errors before retrying. [ 1048.563207][T11781] (syz.2.1861,11781,0):user_dlm_register:674 ERROR: status = -22 [ 1048.571074][T11781] (syz.2.1861,11781,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1049.340788][T11783] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1859'. [ 1050.538100][ T954] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1050.916117][T11797] syz.4.1866 (11797): drop_caches: 2 [ 1052.544471][ T954] usb 6-1: device descriptor read/all, error -71 [ 1052.907908][T11810] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1054.321167][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.385053][T11831] o2cb: This node has not been configured. [ 1054.391077][T11831] o2cb: Cluster check failed. Fix errors before retrying. [ 1054.398409][T11831] (syz.4.1874,11831,0):user_dlm_register:674 ERROR: status = -22 [ 1054.406227][T11831] (syz.4.1874,11831,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1055.341200][T11839] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1878'. [ 1059.738231][ T6051] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1060.528102][ T6051] usb 1-1: Using ep0 maxpacket: 8 [ 1060.543271][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1060.670973][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1060.792779][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1063.906042][ T6051] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1063.916405][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1063.926723][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1064.030925][ T6051] usb 1-1: string descriptor 0 read error: -71 [ 1064.037223][ T6051] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1064.105254][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.158974][ T6051] usb 1-1: config 0 descriptor?? [ 1064.198134][ T6051] usb 1-1: can't set config #0, error -71 [ 1064.226761][ T6051] usb 1-1: USB disconnect, device number 35 [ 1064.605939][T11884] o2cb: This node has not been configured. [ 1064.611925][T11884] o2cb: Cluster check failed. Fix errors before retrying. [ 1064.619327][T11884] (syz.0.1888,11884,1):user_dlm_register:674 ERROR: status = -22 [ 1064.627147][T11884] (syz.0.1888,11884,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1067.942152][T11907] syz.2.1894 (11907): drop_caches: 2 [ 1073.031668][T11931] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1902'. [ 1078.501460][T11967] syz.4.1910 (11967): drop_caches: 2 [ 1082.532205][T11988] tmpfs: Unknown parameter 'usrquota' [ 1082.877386][T11991] [U]  [ 1083.081867][T11994] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1918'. [ 1084.979151][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1084.993457][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1085.001970][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1085.010857][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1085.020162][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1085.027494][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1085.130031][T12006] lo speed is unknown, defaulting to 1000 [ 1085.179042][T12006] lo speed is unknown, defaulting to 1000 [ 1086.949578][T12032] syz.4.1924 (12032): drop_caches: 2 [ 1087.118439][T10648] Bluetooth: hci5: command 0x0409 tx timeout [ 1088.687847][T12006] chnl_net:caif_netlink_parms(): no params data found [ 1088.728242][T12048] [U]  [ 1089.198153][T10648] Bluetooth: hci5: command 0x041b tx timeout [ 1089.902599][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.959002][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.985453][T12006] device bridge_slave_0 entered promiscuous mode [ 1090.000918][T12069] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1090.017403][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.048457][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.069408][T12006] device bridge_slave_1 entered promiscuous mode [ 1091.077760][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.115919][T12055] syz.0.1929 (12055) used greatest stack depth: 18128 bytes left [ 1091.173231][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.278393][T10648] Bluetooth: hci5: command 0x040f tx timeout [ 1091.690709][T12006] team0: Port device team_slave_0 added [ 1091.764255][T12006] team0: Port device team_slave_1 added [ 1093.186622][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.224244][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.250209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1093.294483][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.358622][T10648] Bluetooth: hci5: command 0x0419 tx timeout [ 1093.409489][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.416509][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.491628][T12091] tmpfs: Unknown parameter 'grpquota' [ 1093.554814][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.693865][T12100] syz.4.1938 (12100): drop_caches: 2 [ 1095.104649][T12106] [U]  [ 1095.128883][T12006] device hsr_slave_0 entered promiscuous mode [ 1095.158407][T12006] device hsr_slave_1 entered promiscuous mode [ 1095.221316][T12006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.238069][T12006] Cannot create hsr debugfs directory [ 1095.248377][ T4321] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1097.148572][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 1097.172369][ T4321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.203327][ T4321] usb 1-1: config 0 has no interfaces? [ 1097.214622][ T4321] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1097.249759][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.277678][ T4321] usb 1-1: Product: syz [ 1097.308582][ T4321] usb 1-1: Manufacturer: syz [ 1097.330053][ T4321] usb 1-1: SerialNumber: syz [ 1097.422551][ T4321] usb 1-1: config 0 descriptor?? [ 1098.113227][ T4321] usb 1-1: USB disconnect, device number 36 [ 1098.268737][ T4322] IPVS: stopping backup sync thread 9348 ... [ 1100.957520][ T4322] device hsr_slave_0 left promiscuous mode [ 1100.978656][ T4322] device hsr_slave_1 left promiscuous mode [ 1101.018470][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.038330][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.069946][ T4322] device bridge_slave_1 left promiscuous mode [ 1101.076210][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.171656][ T4322] device bridge_slave_0 left promiscuous mode [ 1101.178006][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.033901][T12155] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1948'. [ 1105.068485][ T4323] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1105.273321][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.321681][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1105.416109][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1105.530127][ T4323] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1105.603889][T12161] tmpfs: Unknown parameter 'grpquota' [ 1105.612703][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1105.644907][ T4323] usb 3-1: Product: syz [ 1105.678479][ T4323] usb 3-1: Manufacturer: syz [ 1105.687053][ T4323] usb 3-1: SerialNumber: syz [ 1105.746320][ T4322] bond1 (unregistering): Released all slaves [ 1105.773246][ T4323] usb 3-1: config 0 descriptor?? [ 1105.889021][ T4323] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1105.896724][ T4323] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1105.910314][ T4323] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1106.927902][T12172] syz.4.1951 (12172): drop_caches: 2 [ 1107.787755][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1107.834728][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1108.374907][T12006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1108.446719][ T4323] usb 3-1: USB disconnect, device number 28 [ 1108.533017][T12006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.611820][T12006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1110.375838][T12006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1110.481606][T12190] [U]  [ 1113.173299][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.182144][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.376838][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.421870][T12178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.885099][T12178] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.895147][T12178] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.904144][T12178] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.913119][T12178] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.761400][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.887626][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.895108][T12236] [U]  [ 1116.670688][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1116.684331][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1116.723800][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.798451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1116.830136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.799571][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.806707][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.817621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1117.837825][T12248] tmpfs: Unknown parameter 'grpquota' [ 1118.151627][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1118.203319][T12252] device macsec1 entered promiscuous mode [ 1118.209327][T12252] device dummy0 entered promiscuous mode [ 1118.225911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1118.257075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1118.320413][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.327655][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.385303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1118.422345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1118.532113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1118.554277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1118.607604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.638741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1118.844235][T12264] input: syz0 as /devices/virtual/input/input26 [ 1119.358160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1119.369470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1119.378561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1119.388034][T12265] syz.0.1964 (12265): drop_caches: 2 [ 1119.394740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.414544][T12006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1120.193094][T12264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1965'. [ 1120.214003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1126.316611][T12312] tmpfs: Unknown parameter 'grpquota' [ 1126.594083][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1126.608310][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1126.643917][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.649880][T12320] syz.0.1977 (12320): drop_caches: 2 [ 1132.619665][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1983'. [ 1135.049206][T12362] tmpfs: Unknown parameter 'grpquota' [ 1135.095332][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1135.108414][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1135.116588][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1135.126310][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1135.136638][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1135.144084][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1135.233496][T12364] lo speed is unknown, defaulting to 1000 [ 1135.245446][T12364] lo speed is unknown, defaulting to 1000 [ 1137.199295][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 1138.945921][T12006] device veth0_vlan entered promiscuous mode [ 1139.006268][T12006] device veth1_vlan entered promiscuous mode [ 1139.055803][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 1139.090830][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1139.116868][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1139.180535][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1139.221811][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1139.253988][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1139.279697][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1139.304455][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1139.360558][T12388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1139.422267][T12364] chnl_net:caif_netlink_parms(): no params data found [ 1139.758158][ T7536] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1140.937880][ T7536] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.557492][ T7536] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1141.568337][ T7536] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1141.609837][ T7536] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1141.648319][ T7536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1141.656605][ T7536] usb 3-1: Product: syz [ 1141.660956][ T7536] usb 3-1: Manufacturer: syz [ 1141.665671][ T7536] usb 3-1: SerialNumber: syz [ 1141.688802][ T7536] usb 3-1: config 0 descriptor?? [ 1141.704707][ T7536] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1141.712501][ T7536] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1141.719922][ T7536] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1141.757146][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1141.801888][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1141.833291][T12006] device veth0_macvtap entered promiscuous mode [ 1141.908360][ T4321] usb 3-1: USB disconnect, device number 29 [ 1141.983684][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1142.343812][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.803682][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.060205][T12364] device bridge_slave_0 entered promiscuous mode [ 1143.180015][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.208408][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.216778][T12364] device bridge_slave_1 entered promiscuous mode [ 1143.731822][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.743868][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.809809][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1143.820203][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1143.828639][T10648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1143.846578][T10648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1143.859856][T12364] team0: Port device team_slave_0 added [ 1143.874996][T10648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1143.884282][T10648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1143.947006][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1143.962791][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1144.017242][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1144.033904][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1144.045853][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1144.054674][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1144.266821][T12364] team0: Port device team_slave_1 added [ 1144.868675][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.875704][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.914778][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.971943][T12419] lo speed is unknown, defaulting to 1000 [ 1144.985491][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.013966][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.051148][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.074719][T12419] lo speed is unknown, defaulting to 1000 [ 1145.184094][T12364] device hsr_slave_0 entered promiscuous mode [ 1145.201152][T12364] device hsr_slave_1 entered promiscuous mode [ 1146.658259][T12436] CacheFiles: No cache directory specified [ 1146.677994][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 1147.087637][T12444] syz.0.2002 (12444): drop_caches: 2 [ 1148.798125][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 1150.116394][T12453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1150.469726][ T4343] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1150.878132][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 1151.050024][ T4343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.068251][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1151.079632][ T4343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1151.102277][ T4343] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1151.118359][ T4343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1151.127450][ T4343] usb 3-1: Product: syz [ 1151.132864][ T4343] usb 3-1: Manufacturer: syz [ 1151.137490][ T4343] usb 3-1: SerialNumber: syz [ 1151.144619][ T4343] usb 3-1: config 0 descriptor?? [ 1151.160042][ T4343] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1151.172902][ T4343] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1151.180081][ T4343] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1151.360748][ T4343] usb 3-1: USB disconnect, device number 30 [ 1151.520726][T12364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1151.648949][T12364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1151.674571][T12364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1151.688374][ T4322] IPVS: stopping backup sync thread 11810 ... [ 1151.712467][T12364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1151.779060][T12419] chnl_net:caif_netlink_parms(): no params data found [ 1153.038207][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 1153.487182][ T4322] device hsr_slave_0 left promiscuous mode [ 1153.520889][ T4322] device hsr_slave_1 left promiscuous mode [ 1153.547413][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.575941][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.614297][ T4322] device bridge_slave_1 left promiscuous mode [ 1153.647638][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.696776][ T4322] device bridge_slave_0 left promiscuous mode [ 1153.726224][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.035657][T12502] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2011'. [ 1156.968377][T12521] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2016'. [ 1157.070214][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1157.113858][T12524] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2016'. [ 1157.456144][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1157.961483][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.043111][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.569571][T12528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2017'. [ 1158.632795][ T4322] bond0 (unregistering): Released all slaves [ 1158.739975][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.747141][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.755621][T12419] device bridge_slave_0 entered promiscuous mode [ 1158.808626][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.815914][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.882187][T12419] device bridge_slave_1 entered promiscuous mode [ 1158.968083][ T14] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1158.991270][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.111329][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.160777][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.275924][ T14] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1159.328473][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.381050][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1159.520129][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.535444][ T14] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1159.584080][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.622110][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1159.722627][ T14] usb 3-1: Product: syz [ 1159.766128][ T14] usb 3-1: Manufacturer: syz [ 1159.807633][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.825555][ T14] usb 3-1: SerialNumber: syz [ 1159.885573][ T14] usb 3-1: config 0 descriptor?? [ 1159.895001][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1159.919819][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.969899][ T14] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 1159.977412][ T14] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 1160.002748][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.010184][T10993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.038471][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1160.053426][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1160.162399][ T4321] usb 3-1: USB disconnect, device number 31 [ 1160.330674][T12419] team0: Port device team_slave_0 added [ 1160.347268][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.376806][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.389062][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.396259][T10993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.407358][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1160.419452][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1160.447848][T12419] team0: Port device team_slave_1 added [ 1161.068749][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.126589][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.217379][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.456386][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.099063][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.115217][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.368091][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.011367][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.023223][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1163.109140][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1163.148645][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1163.204387][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1163.225134][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1163.243059][T12581] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2027'. [ 1163.288104][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1163.341322][T12582] syz.2.2026 (12582): drop_caches: 2 [ 1163.436739][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1164.854153][T12364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.407096][T12419] device hsr_slave_0 entered promiscuous mode [ 1165.507814][T12419] device hsr_slave_1 entered promiscuous mode [ 1165.568590][T12419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1165.576233][T12419] Cannot create hsr debugfs directory [ 1172.533380][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.602679][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1173.168783][T12638] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2036'. [ 1173.195480][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.034329][T12419] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1175.328932][T12419] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1175.381791][T12419] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1177.099674][T12419] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1177.152205][ T4322] device hsr_slave_0 left promiscuous mode [ 1177.201463][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.233842][ T4322] device hsr_slave_1 left promiscuous mode [ 1177.245643][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.271792][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.292517][ T4322] device bridge_slave_1 left promiscuous mode [ 1177.632691][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.097152][ T4322] device bridge_slave_0 left promiscuous mode [ 1179.181272][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.906619][ T4322] device veth0_macvtap left promiscuous mode [ 1180.062280][ T4322] device veth1_vlan left promiscuous mode [ 1180.085425][ T4322] device veth0_vlan left promiscuous mode [ 1182.249172][T12701] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1183.693240][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1183.739610][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1183.783485][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.828014][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.106982][ T4322] bond0 (unregistering): Released all slaves [ 1184.489226][T12364] device veth0_vlan entered promiscuous mode [ 1184.522061][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1184.541983][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1184.587856][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1184.663078][T12720] syz.2.2046 (12720): drop_caches: 2 [ 1184.762980][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1184.983265][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1185.046117][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1185.249552][T12364] device veth1_vlan entered promiscuous mode [ 1185.372290][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1186.383880][T12364] device veth0_macvtap entered promiscuous mode [ 1186.585608][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.691504][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1186.833749][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1186.983396][T12364] device veth1_macvtap entered promiscuous mode [ 1187.092887][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1187.429157][T12419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.447218][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.553321][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1187.602568][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1188.328982][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1188.338207][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1188.381875][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.407765][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1188.574519][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.186432][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.193686][T10993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.442476][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.615459][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.721669][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.728898][T10993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.901769][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1191.024595][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1191.126161][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1191.222963][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1191.304719][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1191.374204][T12364] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.409617][T12364] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.443968][T12364] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.484493][T12364] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.598375][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1191.633168][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1191.678262][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1191.708402][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1191.727723][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1191.759281][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1191.774020][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.644497][T12419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.719465][T12419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1192.749191][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.834165][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.248987][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1194.260133][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1194.277558][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1194.288929][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1194.298235][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1194.305637][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1194.480930][T12780] lo speed is unknown, defaulting to 1000 [ 1194.588343][ T46] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.675300][T12780] lo speed is unknown, defaulting to 1000 [ 1194.691151][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1194.742778][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1194.901599][ T46] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.993005][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.155507][ T46] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.431465][ T46] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.988052][ T7536] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1196.399256][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 1196.768048][ T7536] usb 1-1: Using ep0 maxpacket: 8 [ 1196.779486][ T7536] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1196.799919][ T7536] usb 1-1: config 0 has no interface number 0 [ 1196.802890][T12780] chnl_net:caif_netlink_parms(): no params data found [ 1196.817721][ T7536] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1196.858006][ T7536] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1197.091257][ T7536] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1197.105071][ T7536] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1197.114489][ T7536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.124638][ T7536] usb 1-1: config 0 descriptor?? [ 1197.713877][ T7536] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1198.396640][T12823] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2063'. [ 1198.478274][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 1198.583031][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1198.603392][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1198.716394][T12780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.742753][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.767547][T12780] device bridge_slave_0 entered promiscuous mode [ 1198.834975][T12419] device veth0_vlan entered promiscuous mode [ 1198.850129][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1198.865729][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1198.885289][T12780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.894519][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.920131][T12780] device bridge_slave_1 entered promiscuous mode [ 1199.014711][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1199.036016][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1199.065068][T12780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.083051][T12780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.187467][T12780] team0: Port device team_slave_0 added [ 1199.197173][T12419] device veth1_vlan entered promiscuous mode [ 1199.246736][T12780] team0: Port device team_slave_1 added [ 1199.319402][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1199.328987][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1199.347161][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1199.357041][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1199.380220][T12419] device veth0_macvtap entered promiscuous mode [ 1199.446496][T12780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.468046][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.568323][T12780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.589875][T12780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.596931][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.624016][ T4321] usb 1-1: USB disconnect, device number 37 [ 1199.708189][T12780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.730589][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1199.835761][T12843] [U]  [ 1200.465522][T12419] device veth1_macvtap entered promiscuous mode [ 1200.482569][ T4323] lo speed is unknown, defaulting to 1000 [ 1200.511281][ T46] device hsr_slave_0 left promiscuous mode [ 1200.527543][ T46] device hsr_slave_1 left promiscuous mode [ 1200.552031][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.558580][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 1200.568005][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.615099][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.645994][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.654261][ T46] device bridge_slave_1 left promiscuous mode [ 1200.665160][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.387623][ T46] device bridge_slave_0 left promiscuous mode [ 1202.502023][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.649353][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 1203.252264][ T46] device veth1_macvtap left promiscuous mode [ 1203.376730][ T46] device veth0_macvtap left promiscuous mode [ 1203.400374][ T46] device veth1_vlan left promiscuous mode [ 1203.406223][ T46] device veth0_vlan left promiscuous mode [ 1206.394091][T12877] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1206.646489][T12877] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1206.753288][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1206.764650][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1206.774533][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1206.783877][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1206.792703][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1206.807109][T10648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1207.415755][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1207.586212][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1207.735504][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.849998][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.476171][ T46] bond0 (unregistering): Released all slaves [ 1208.878023][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 1209.967638][T12881] lo speed is unknown, defaulting to 1000 [ 1209.976747][T12881] lo speed is unknown, defaulting to 1000 [ 1210.082581][T12780] device hsr_slave_0 entered promiscuous mode [ 1210.126610][T12780] device hsr_slave_1 entered promiscuous mode [ 1210.528122][ T954] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1210.748139][ T954] usb 3-1: Using ep0 maxpacket: 8 [ 1210.761441][ T954] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1210.939844][ T954] usb 3-1: config 0 has no interface number 0 [ 1210.958393][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 1211.068663][ T954] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1211.272697][ T954] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1211.464513][ T954] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1212.213470][ T954] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1212.346557][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.535157][ T954] usb 3-1: config 0 descriptor?? [ 1212.698918][ T954] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1213.048663][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 1213.219880][T12920] [U]  [ 1214.212365][T12881] chnl_net:caif_netlink_parms(): no params data found [ 1214.854975][ T6051] usb 3-1: USB disconnect, device number 32 [ 1215.128137][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 1219.686716][T12881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.699730][T12881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.707846][T12881] device bridge_slave_0 entered promiscuous mode [ 1219.729290][T12951] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2079'. [ 1219.861749][T12881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.884244][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.931063][T12881] device bridge_slave_1 entered promiscuous mode [ 1220.081328][T12951] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2079'. [ 1220.171351][T12780] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1220.229374][T12780] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1222.153137][T12962] device bond2 entered promiscuous mode [ 1222.374151][T12780] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1222.417169][T12881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.708301][T12780] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1222.783775][T12881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.972856][T12881] team0: Port device team_slave_0 added [ 1223.014231][T12881] team0: Port device team_slave_1 added [ 1224.702363][T12881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.758163][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.145109][T12881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.294619][T12881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.327978][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.425356][T12881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.563211][T12994] [U]  [ 1225.664355][T12780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.447620][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1226.457432][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1226.491972][T12780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.722073][T12881] device hsr_slave_0 entered promiscuous mode [ 1226.862406][T12881] device hsr_slave_1 entered promiscuous mode [ 1226.987008][T12881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.094249][T12881] Cannot create hsr debugfs directory [ 1227.452852][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.542133][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.749199][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.756428][ T9361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.238674][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1228.293929][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1228.427053][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1228.560563][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.567696][ T9361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.264939][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1229.752870][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1229.853528][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1230.143847][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1230.553535][T13021] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2090'. [ 1230.646385][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1235.022270][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1235.038298][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1235.167668][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1235.176670][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1235.192265][T12780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.230142][T12780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1236.573410][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1236.584195][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1237.956224][ T46] device hsr_slave_0 left promiscuous mode [ 1237.981460][T13058] [U]  [ 1237.990940][ T46] device hsr_slave_1 left promiscuous mode [ 1238.001955][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.017355][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.030428][ T46] device bridge_slave_1 left promiscuous mode [ 1238.036851][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.052122][ T46] device bridge_slave_0 left promiscuous mode [ 1238.061132][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.122779][ T46] device veth1_macvtap left promiscuous mode [ 1238.136520][ T46] device veth0_macvtap left promiscuous mode [ 1238.151353][ T46] device veth1_vlan left promiscuous mode [ 1238.165829][ T46] device veth0_vlan left promiscuous mode [ 1238.649055][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.921296][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1238.972944][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1239.017844][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.071419][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.378346][ T46] bond0 (unregistering): Released all slaves [ 1241.663967][T12881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1241.683737][T12881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1241.694134][T12881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1242.138247][ T4362] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1242.341237][ T4362] usb 1-1: Using ep0 maxpacket: 8 [ 1242.351341][ T4362] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1242.394601][ T4362] usb 1-1: config 0 has no interface number 0 [ 1242.414752][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1244.000730][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1245.302292][T13093] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2101'. [ 1245.431628][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1245.457559][ T4362] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1245.487939][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.502240][ T4362] usb 1-1: config 0 descriptor?? [ 1245.520379][T12881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1245.551311][ T4362] usb 1-1: can't set config #0, error -71 [ 1245.597802][ T4362] usb 1-1: USB disconnect, device number 38 [ 1245.689826][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1245.702738][T13093] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2101'. [ 1245.720193][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1245.749311][T12780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.239136][T12881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.257116][T12881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.287661][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1248.327359][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.353037][T13114] [U]  [ 1248.365959][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.385679][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.394963][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.402196][ T9500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.410929][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1248.420462][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1248.429129][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.436275][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.444750][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1248.454832][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1248.464034][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1249.042612][T12881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1249.113749][T12881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.229551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1249.289169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1249.335545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1251.348219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1251.420240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1251.445583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1251.496234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1251.528914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1251.573742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1251.600821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1252.078381][T12559] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1253.568237][T13133] device bond2 entered promiscuous mode [ 1254.358101][T12559] usb 3-1: Using ep0 maxpacket: 8 [ 1254.839826][T12559] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1254.847498][T12559] usb 3-1: can't read configurations, error -71 [ 1258.402229][T13174] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1258.431254][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1258.439878][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1258.452839][T12881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.077107][T13183] [U]  [ 1259.157155][T13174] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1259.194306][T13180] device dummy0 left promiscuous mode [ 1259.210262][T10648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1259.222614][T10648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1259.232619][T10648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1259.242024][T10648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1259.251534][T10648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1259.261867][T13180] device macsec1 left promiscuous mode [ 1259.268635][T10648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1259.279493][T13180] device bond2 left promiscuous mode [ 1261.358030][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 1262.955826][T13181] lo speed is unknown, defaulting to 1000 [ 1262.984725][T13181] lo speed is unknown, defaulting to 1000 [ 1263.448276][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 1265.518781][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 1267.598008][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 1269.082384][T13234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2121'. [ 1269.482139][T13181] chnl_net:caif_netlink_parms(): no params data found [ 1269.547478][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1269.558770][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1269.567797][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1269.579100][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1269.588084][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1269.595369][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1269.751180][T13181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.775306][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.794045][T13181] device bridge_slave_0 entered promiscuous mode [ 1270.906563][T13256] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2125'. [ 1271.014694][T13243] lo speed is unknown, defaulting to 1000 [ 1271.020968][T13181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.259118][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.267451][T13181] device bridge_slave_1 entered promiscuous mode [ 1271.388267][T13243] lo speed is unknown, defaulting to 1000 [ 1271.591593][T13266] [U]  [ 1271.678268][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 1271.715854][T13256] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2125'. [ 1271.780794][T13181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.937188][T13181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.758070][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 1274.906624][T13181] team0: Port device team_slave_0 added [ 1274.971224][T13181] team0: Port device team_slave_1 added [ 1275.107540][T13181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.127980][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.188416][T13181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.227988][T10108] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1275.362687][T13181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.401792][T13181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.438078][T10108] usb 1-1: Using ep0 maxpacket: 8 [ 1275.674508][T13181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.838076][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 1276.303588][T13243] chnl_net:caif_netlink_parms(): no params data found [ 1276.857522][T10108] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1277.356662][T10993] device hsr_slave_0 left promiscuous mode [ 1277.433372][T10993] device hsr_slave_1 left promiscuous mode [ 1277.503971][T10993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.588821][T10993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.675632][T10993] device bridge_slave_1 left promiscuous mode [ 1277.732380][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.836857][T10993] device bridge_slave_0 left promiscuous mode [ 1277.918098][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 1277.927031][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.207243][T10108] usb 1-1: config 0 has no interface number 0 [ 1278.213549][T10108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1278.224343][T10108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1278.235204][T10108] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1278.248460][T10108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1278.257716][T10108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.269028][T10108] usb 1-1: config 0 descriptor?? [ 1278.428433][T10108] usb 1-1: can't set config #0, error -71 [ 1278.448186][T10108] usb 1-1: USB disconnect, device number 39 [ 1279.650051][T13315] [U]  [ 1282.596216][T13329] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2137'. [ 1282.704967][T10993] team0 (unregistering): Port device team_slave_1 removed [ 1283.095584][T13329] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2137'. [ 1283.198140][T10993] team0 (unregistering): Port device team_slave_0 removed [ 1283.370964][T10993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.464824][T10993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.970345][T10993] bond0 (unregistering): Released all slaves [ 1284.114032][T13181] device hsr_slave_0 entered promiscuous mode [ 1284.163725][T13181] device hsr_slave_1 entered promiscuous mode [ 1284.221289][T13310] device bond2 left promiscuous mode [ 1284.408669][T13341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1284.426415][T13243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.460221][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.811916][T13243] device bridge_slave_0 entered promiscuous mode [ 1285.369880][T13243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.442055][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.451717][T13243] device bridge_slave_1 entered promiscuous mode [ 1285.822217][T13243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.359571][T13362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2144'. [ 1286.379953][T13243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.703439][T13243] team0: Port device team_slave_0 added [ 1286.857624][T13243] team0: Port device team_slave_1 added [ 1286.938063][ T4321] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1286.960117][T13372] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2146'. [ 1287.867979][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 1287.924577][ T4321] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.937827][T13243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.944881][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.711598][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1288.747356][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1288.765816][T13243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.776982][ T4321] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.795725][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1288.807317][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.847534][T13243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.859917][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.888900][T13243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.110466][T13381] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2148'. [ 1289.303409][ T4321] usb 1-1: GET_CAPABILITIES returned 0 [ 1289.310575][ T4321] usbtmc 1-1:16.0: can't read capabilities [ 1291.013813][ T4362] usb 1-1: USB disconnect, device number 40 [ 1291.124010][T13385] dlm: no local IP address has been set [ 1291.140235][T13385] dlm: cannot start dlm midcomms -107 [ 1291.254649][T13243] device hsr_slave_0 entered promiscuous mode [ 1291.297836][T13243] device hsr_slave_1 entered promiscuous mode [ 1291.360834][T13243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.368875][T13243] Cannot create hsr debugfs directory [ 1293.174724][T13181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1293.407790][T13181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1294.375915][T13181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1294.441226][T13181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1295.027962][T10108] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1297.237984][T10108] usb 3-1: Using ep0 maxpacket: 8 [ 1297.610054][T13421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2155'. [ 1298.175771][T10108] usb 3-1: device descriptor read/all, error -71 [ 1300.080350][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.352912][T10993] device hsr_slave_0 left promiscuous mode [ 1300.401504][T10993] device hsr_slave_1 left promiscuous mode [ 1300.437277][T10993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.483036][T10993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.539716][T10993] device bridge_slave_1 left promiscuous mode [ 1300.570501][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.632583][T10993] device bridge_slave_0 left promiscuous mode [ 1300.662040][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.587352][T13433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1302.357343][T13433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1303.239606][T13449] dlm: no local IP address has been set [ 1303.250268][T13449] dlm: cannot start dlm midcomms -107 [ 1303.368613][T10993] team0 (unregistering): Port device team_slave_1 removed [ 1303.421454][T10993] team0 (unregistering): Port device team_slave_0 removed [ 1303.472768][T10993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.554387][T10993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.691132][T10993] bond0 (unregistering): Released all slaves [ 1305.216038][T13243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1305.305381][T13243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1305.350810][T13243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1305.400856][T13181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.439195][T13243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1305.738919][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1305.758933][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1305.804817][T13181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.863075][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1305.882535][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1305.928814][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.936123][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.968120][ T4323] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1306.006362][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1306.072175][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1306.094989][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1306.137264][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.144513][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.167952][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 1306.192107][ T4323] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1306.206324][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.231945][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1306.242581][ T4323] usb 3-1: config 0 has no interface number 0 [ 1306.263377][ T4323] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1306.292891][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1306.326668][ T4323] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1306.338358][ T4323] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1306.351754][ T4323] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1306.360894][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.635045][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1306.699500][ T4323] usb 3-1: config 0 descriptor?? [ 1306.722338][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1306.736131][ T4323] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1306.761031][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1306.812384][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1306.874529][T13243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.919187][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1306.932752][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1306.973008][T13181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.999028][T13181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1308.820806][T13474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2167'. [ 1309.000990][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1309.368435][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1309.532269][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1309.662020][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1310.360396][T13243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.439692][ T4362] usb 3-1: USB disconnect, device number 37 [ 1310.472450][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1310.523085][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1310.557445][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.564703][T10993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.262106][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1312.403445][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1312.497474][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1312.576897][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.584167][T10993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.688530][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1312.833245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1312.943644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1313.043134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1313.164804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1313.248479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1313.327793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1313.461161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1313.599595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1313.688167][T13243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.781426][T13243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1313.805832][T13502] dlm: no local IP address has been set [ 1313.813534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1313.821633][T13502] dlm: cannot start dlm midcomms -107 [ 1313.855888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1314.011837][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1314.064061][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1314.085822][T13181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.657660][T13520] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2173'. [ 1319.999025][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1320.010011][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1320.026990][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1320.042600][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1320.051394][T10648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1320.058854][T10648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1320.204022][T13243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.227661][T13545] lo speed is unknown, defaulting to 1000 [ 1320.238206][T12761] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1320.249011][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.256593][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1320.308717][T13545] lo speed is unknown, defaulting to 1000 [ 1320.447979][T12761] usb 3-1: Using ep0 maxpacket: 8 [ 1322.158083][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 1323.964489][T12761] usb 3-1: unable to read config index 0 descriptor/all [ 1323.971739][T12761] usb 3-1: can't read configurations, error -71 [ 1324.259370][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 1325.193393][T13586] dlm: no local IP address has been set [ 1325.232365][T13586] dlm: cannot start dlm midcomms -107 [ 1326.319122][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 1327.562344][T13545] chnl_net:caif_netlink_parms(): no params data found [ 1328.411270][T10648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1328.428418][T10648] Bluetooth: hci4: command 0x0419 tx timeout [ 1328.440938][T10648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1328.454051][T10648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1328.511174][T10648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1328.549873][T10648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1328.580220][T10648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1328.704357][T13545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.713942][T13545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.727930][T12761] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1328.813082][T13545] device bridge_slave_0 entered promiscuous mode [ 1328.978123][T12761] usb 3-1: Using ep0 maxpacket: 8 [ 1328.983974][T13545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.010278][T12761] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1329.024258][T12761] usb 3-1: config 0 has no interface number 0 [ 1329.045816][T12761] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1329.047084][T13545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.074930][T12761] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1329.109034][T12761] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1329.142742][T12761] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1329.162923][T12761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.182699][T13545] device bridge_slave_1 entered promiscuous mode [ 1329.190522][T12761] usb 3-1: config 0 descriptor?? [ 1329.209536][T12761] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1329.377482][T13615] lo speed is unknown, defaulting to 1000 [ 1329.386467][T13545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.426007][T13545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.606866][T13545] team0: Port device team_slave_0 added [ 1329.654384][T13615] lo speed is unknown, defaulting to 1000 [ 1329.979801][T13545] team0: Port device team_slave_1 added [ 1330.484380][T13545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.494132][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.530915][T13632] dlm: no local IP address has been set [ 1330.547628][T13632] dlm: cannot start dlm midcomms -107 [ 1330.561634][T13545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.649581][T10648] Bluetooth: hci1: command 0x0409 tx timeout [ 1330.815170][T13545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.864561][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1331.241885][T13545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.462954][ T4519] device hsr_slave_0 left promiscuous mode [ 1331.493566][ T4519] device hsr_slave_1 left promiscuous mode [ 1331.508964][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.551257][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.675246][ T4519] device bridge_slave_1 left promiscuous mode [ 1331.730241][ T4362] usb 3-1: USB disconnect, device number 40 [ 1331.850606][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.079492][ T4519] device bridge_slave_0 left promiscuous mode [ 1332.175008][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.718450][T10648] Bluetooth: hci1: command 0x041b tx timeout [ 1334.808009][T10648] Bluetooth: hci1: command 0x040f tx timeout [ 1335.824646][ T4519] team0 (unregistering): Port device team_slave_1 removed [ 1336.749196][ T4519] team0 (unregistering): Port device team_slave_0 removed [ 1336.992299][T10648] Bluetooth: hci1: command 0x0419 tx timeout [ 1337.668319][ T4519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.302689][ T4519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.705061][T13684] dlm: no local IP address has been set [ 1338.714619][T13684] dlm: cannot start dlm midcomms -107 [ 1340.267483][ T4519] bond0 (unregistering): Released all slaves [ 1340.607992][T13676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2196'. [ 1342.384047][T13545] device hsr_slave_0 entered promiscuous mode [ 1342.537541][T13545] device hsr_slave_1 entered promiscuous mode [ 1344.210243][T13615] chnl_net:caif_netlink_parms(): no params data found [ 1345.859038][T13737] dlm: no local IP address has been set [ 1345.864682][T13737] dlm: cannot start dlm midcomms -107 [ 1346.725348][T13615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.643425][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.695542][T13615] device bridge_slave_0 entered promiscuous mode [ 1347.916720][T13615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.000343][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.139417][T13615] device bridge_slave_1 entered promiscuous mode [ 1348.858421][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.926128][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.949744][T13545] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1349.000731][T13545] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1349.084905][T13545] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1349.126180][T13615] team0: Port device team_slave_0 added [ 1349.162081][T13545] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1349.198714][T13615] team0: Port device team_slave_1 added [ 1349.376470][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.428074][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.454020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1349.466116][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.563456][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2213'. [ 1349.713248][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.721882][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.786775][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.595909][T13615] device hsr_slave_0 entered promiscuous mode [ 1352.831567][T13615] device hsr_slave_1 entered promiscuous mode [ 1352.853856][T13615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.974258][T13615] Cannot create hsr debugfs directory [ 1353.346349][T13545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.538035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.574917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.609470][T13545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.439216][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1354.448528][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1354.490600][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.497728][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.622905][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1354.682111][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1354.711117][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.718340][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.759304][T13787] dlm: no local IP address has been set [ 1354.764929][T13787] dlm: cannot start dlm midcomms -107 [ 1354.771253][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1355.759985][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1355.778514][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1356.799056][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1356.850773][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1356.874699][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1356.950337][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.200456][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.772715][ T4519] device hsr_slave_0 left promiscuous mode [ 1357.808386][ T4519] device hsr_slave_1 left promiscuous mode [ 1357.846063][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.874754][ T4519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.939270][ T4519] device bridge_slave_1 left promiscuous mode [ 1357.945608][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.989364][ T4519] device bridge_slave_0 left promiscuous mode [ 1358.004841][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.694665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.349079][T13845] dlm: no local IP address has been set [ 1363.354800][T13845] dlm: cannot start dlm midcomms -107 [ 1364.268941][ T4519] team0 (unregistering): Port device team_slave_1 removed [ 1364.500188][ T4519] team0 (unregistering): Port device team_slave_0 removed [ 1366.460137][ T4519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.593360][ T4519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.717039][T13871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2237'. [ 1369.209954][ T4519] bond0 (unregistering): Released all slaves [ 1369.719285][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1369.728511][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1369.746662][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1369.769189][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1369.797200][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2229'. [ 1369.820317][T13545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1369.983196][T13896] dlm: no local IP address has been set [ 1370.008503][T13896] dlm: cannot start dlm midcomms -107 [ 1371.611213][T13615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1375.961061][T13615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1376.106318][T13615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1376.168468][T13615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1376.311757][T13615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.333664][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1376.348626][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.360981][T13615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.379617][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1376.394860][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1376.419153][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.426316][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.481955][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1376.512033][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1376.578348][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.602407][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.609630][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.672287][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1378.040180][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1378.051891][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1378.061869][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1378.232148][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1378.263748][T13942] dlm: no local IP address has been set [ 1378.265801][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1378.330313][T13615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1378.343391][T13942] dlm: cannot start dlm midcomms -107 [ 1379.113792][T13615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1379.229490][T13620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1379.250120][T13620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1379.258604][T13620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1379.266498][T13620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1379.274576][T13620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1379.283207][T13620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1379.334294][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1379.364715][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1379.439129][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1379.476353][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1379.533935][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1379.722117][T13960] syz.2.2254 (13960): drop_caches: 2 [ 1381.368182][T10648] Bluetooth: hci4: command 0x0409 tx timeout [ 1382.025267][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1382.514198][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2251'. [ 1382.554177][T13951] lo speed is unknown, defaulting to 1000 [ 1382.659231][T13951] lo speed is unknown, defaulting to 1000 [ 1383.058240][ T4362] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1383.267908][ T4362] usb 3-1: Using ep0 maxpacket: 8 [ 1383.448126][T10648] Bluetooth: hci4: command 0x041b tx timeout [ 1385.333634][ T4362] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1385.517978][T10648] Bluetooth: hci4: command 0x040f tx timeout [ 1386.577980][ T4362] usb 3-1: config 0 has no interface number 0 [ 1386.584356][ T4362] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1386.595560][ T4362] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1386.606593][ T4362] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1386.619987][ T4362] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1386.629419][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.640419][ T4362] usb 3-1: config 0 descriptor?? [ 1386.787937][ T4362] usb 3-1: can't set config #0, error -71 [ 1386.828486][ T4362] usb 3-1: USB disconnect, device number 41 [ 1387.346162][T13951] chnl_net:caif_netlink_parms(): no params data found [ 1387.598969][T10648] Bluetooth: hci4: command 0x0419 tx timeout [ 1389.301389][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.313098][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.439090][T13951] device bridge_slave_0 entered promiscuous mode [ 1389.457311][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1389.522992][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1389.544534][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1389.557342][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1389.568923][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1389.579732][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1389.965673][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.987632][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.089530][T13951] device bridge_slave_1 entered promiscuous mode [ 1390.451379][T14031] syz.0.2264 (14031): drop_caches: 2 [ 1391.826369][T10648] Bluetooth: hci1: command 0x0409 tx timeout [ 1392.243084][T14023] lo speed is unknown, defaulting to 1000 [ 1392.292720][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.454283][T14023] lo speed is unknown, defaulting to 1000 [ 1392.462241][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.616883][T13951] team0: Port device team_slave_0 added [ 1393.082732][T13951] team0: Port device team_slave_1 added [ 1393.301894][ T4515] device hsr_slave_0 left promiscuous mode [ 1393.325074][ T4515] device hsr_slave_1 left promiscuous mode [ 1393.421540][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.431207][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.468653][ T4515] device bridge_slave_1 left promiscuous mode [ 1393.481071][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.532430][ T4515] device bridge_slave_0 left promiscuous mode [ 1393.566845][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.848277][T10648] Bluetooth: hci1: command 0x041b tx timeout [ 1394.496599][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 1394.554430][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 1394.602562][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.648503][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.673077][ T4515] bond0 (unregistering): Released all slaves [ 1395.918341][T10648] Bluetooth: hci1: command 0x040f tx timeout [ 1396.512314][T14071] dlm: no local IP address has been set [ 1396.530955][T14071] dlm: cannot start dlm midcomms -107 [ 1396.575930][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.583121][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.630343][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.715387][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.839699][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.180867][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.930862][T13951] device hsr_slave_0 entered promiscuous mode [ 1397.985582][T13951] device hsr_slave_1 entered promiscuous mode [ 1398.079301][T10648] Bluetooth: hci1: command 0x0419 tx timeout [ 1398.107032][T14023] chnl_net:caif_netlink_parms(): no params data found [ 1399.940619][ T4362] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1400.278247][ T4362] usb 1-1: Using ep0 maxpacket: 8 [ 1400.435560][ T4362] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1400.548158][ T4362] usb 1-1: config 0 has no interface number 0 [ 1400.558417][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1400.587998][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1400.607160][ T4362] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1400.636652][ T4362] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1400.666143][ T4362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.684188][ T4362] usb 1-1: config 0 descriptor?? [ 1400.717879][ T4362] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1401.308842][T14023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.316440][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.876420][T14023] device bridge_slave_0 entered promiscuous mode [ 1402.128348][T14023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.152823][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.172084][T14023] device bridge_slave_1 entered promiscuous mode [ 1402.272234][T14133] dlm: no local IP address has been set [ 1402.337350][T14133] dlm: cannot start dlm midcomms -107 [ 1402.407038][T14023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.556173][T14023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.819043][T14023] team0: Port device team_slave_0 added [ 1402.870508][T14023] team0: Port device team_slave_1 added [ 1403.027410][T13951] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1403.089878][T14023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.097928][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.123884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.203894][T14023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.231086][T13951] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1403.269815][T14023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.276929][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.620832][T14023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.782561][T12761] usb 1-1: USB disconnect, device number 41 [ 1403.883136][T13951] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1404.183166][T13951] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1404.564343][T14023] device hsr_slave_0 entered promiscuous mode [ 1404.581345][T14023] device hsr_slave_1 entered promiscuous mode [ 1404.860146][T14023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1404.867914][T14023] Cannot create hsr debugfs directory [ 1405.777406][T14171] fuse: Bad value for 'group_id' [ 1407.220959][T14180] dlm: no local IP address has been set [ 1407.226604][T14180] dlm: cannot start dlm midcomms -107 [ 1408.123875][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.159251][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1409.176446][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1409.233111][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.366096][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1409.404327][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1409.434903][T13568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.442165][T13568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.462539][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1409.914041][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1410.033741][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1410.190423][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.197694][ T9361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.438262][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1410.650857][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1410.672060][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1410.701694][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1410.718944][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1410.728817][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1410.737758][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1410.746878][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1410.763569][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1410.793175][ T4515] device hsr_slave_0 left promiscuous mode [ 1410.812541][ T4515] device hsr_slave_1 left promiscuous mode [ 1410.823419][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.835393][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.847113][ T4515] device bridge_slave_1 left promiscuous mode [ 1410.860876][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.873907][ T4515] device bridge_slave_0 left promiscuous mode [ 1410.880762][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.136475][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 1411.191314][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 1411.246025][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.272397][T14230] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2303'. [ 1411.335449][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.392637][T14230] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2303'. [ 1411.481375][T14235] dlm: no local IP address has been set [ 1411.509918][T14235] dlm: cannot start dlm midcomms -107 [ 1412.375585][ T4515] bond0 (unregistering): Released all slaves [ 1413.161680][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.332968][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.366651][T14023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1413.419802][T13951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1413.468389][T14023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1413.525059][T14023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1413.622433][T14023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1414.003031][T14023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.054943][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1414.077587][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1414.156550][T14023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.199961][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1414.221120][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1414.246607][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.253883][ T9361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.303740][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1414.322460][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1414.343716][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1414.372309][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.379588][ T9361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.418464][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1414.475583][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1414.506307][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1414.524275][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1414.547705][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1414.566997][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1414.582066][T13921] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1414.613897][T14023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1414.635292][T14023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1414.653245][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1414.668339][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1414.733924][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1414.787895][T13921] usb 1-1: Using ep0 maxpacket: 8 [ 1414.865018][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1414.953833][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.098791][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1415.235952][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1415.389999][T13921] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1415.398462][T13921] usb 1-1: config 0 has no interface number 0 [ 1415.404606][T13921] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1415.415372][T13921] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1415.427923][T13921] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1415.441091][T13921] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1415.461110][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.467949][T13921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.472460][T13921] usb 1-1: config 0 descriptor?? [ 1415.500669][T13921] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1415.558026][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1416.031755][T14294] dlm: no local IP address has been set [ 1416.056239][T14294] dlm: cannot start dlm midcomms -107 [ 1416.695187][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1416.743917][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1416.891745][T14023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.946261][ T4343] usb 1-1: USB disconnect, device number 42 [ 1417.040031][T14302] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2315'. [ 1419.683401][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1419.712420][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1419.784356][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1419.824495][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1419.855293][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1419.890814][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1419.923961][T13951] device veth0_vlan entered promiscuous mode [ 1420.033093][T13951] device veth1_vlan entered promiscuous mode [ 1420.884869][T14357] dlm: no local IP address has been set [ 1420.890572][T14357] dlm: cannot start dlm midcomms -107 [ 1420.941367][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1421.771409][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1421.797672][T13951] device veth0_macvtap entered promiscuous mode [ 1421.909437][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1421.948906][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1421.979242][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1422.021718][T13951] device veth1_macvtap entered promiscuous mode [ 1422.231622][T14368] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2327'. [ 1422.278132][T12761] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1422.348906][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.400134][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1422.456406][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1422.487929][T12761] usb 3-1: Using ep0 maxpacket: 8 [ 1422.503413][T12761] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1422.949226][T12761] usb 3-1: config 0 has no interface number 0 [ 1422.959686][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.970179][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.014957][T12761] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1423.046014][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1423.166242][T12761] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1423.200465][T12761] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1423.214294][T12761] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1423.224267][T12761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.279024][T12761] usb 3-1: config 0 descriptor?? [ 1423.336035][T12761] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1423.494975][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1423.745823][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1423.796017][ T9124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1423.851899][T13951] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.923477][T13951] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.949012][T13951] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.973938][T13951] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.058066][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1425.681527][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1425.729101][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1425.750739][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1425.767470][T14023] device veth0_vlan entered promiscuous mode [ 1425.803114][ T6053] usb 3-1: USB disconnect, device number 42 [ 1425.826926][T14023] device veth1_vlan entered promiscuous mode [ 1425.982132][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1426.017004][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1426.104310][T14023] device veth0_macvtap entered promiscuous mode [ 1426.219318][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.227754][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.239407][T14023] device veth1_macvtap entered promiscuous mode [ 1426.271181][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1426.286145][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1426.295308][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1426.339924][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 1426.355705][T14023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1426.395095][T14405] dlm: no local IP address has been set [ 1426.400921][T14023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1426.416664][T14405] dlm: cannot start dlm midcomms -107 [ 1426.434566][T14023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.484631][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1426.552657][ T9361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1427.256054][T14023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.267330][T14023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.279559][T14023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.323730][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.331313][T14023] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.340588][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.358633][T14023] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.377986][T14023] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.386824][T14023] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.397665][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1427.435391][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1427.480512][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1427.603701][T14416] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1428.160231][ T9361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1428.347411][ T9361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.462126][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1430.768182][ T9500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.849183][ T9500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.900406][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1433.160654][T14458] gadgetfs: bound to dummy_udc driver [ 1434.955408][T14471] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2349'. [ 1438.637918][T12559] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1439.098046][T12559] usb 1-1: Using ep0 maxpacket: 32 [ 1439.122848][T12559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1440.756810][T12559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1440.768078][T12559] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1440.782837][T12559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.793715][T12559] usb 1-1: config 0 descriptor?? [ 1440.805356][T12559] hub 1-1:0.0: USB hub found [ 1440.867444][T14521] dlm: no local IP address has been set [ 1440.873659][T14521] dlm: cannot start dlm midcomms -107 [ 1441.626042][T12559] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1441.913430][T12559] usbhid 1-1:0.0: can't add hid device: -71 [ 1441.927939][T12559] usbhid: probe of 1-1:0.0 failed with error -71 [ 1441.978651][T12559] usb 1-1: USB disconnect, device number 43 [ 1442.028243][T14530] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1442.244142][T14530] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1450.187431][T14597] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1451.912614][T14609] tmpfs: Unknown parameter 'grpquota' [ 1452.044476][T14618] overlayfs: failed to resolve './file1/file0': -2 [ 1454.163956][T14641] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1454.598242][ T4323] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1454.961815][ T4323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.145577][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1456.442945][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1456.925281][ T4323] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1457.066583][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1457.136979][ T4323] usb 3-1: Product: syz [ 1457.144891][ T4323] usb 3-1: Manufacturer: syz [ 1457.169021][T14654] dlm: no local IP address has been set [ 1457.174656][T14654] dlm: cannot start dlm midcomms -107 [ 1457.176965][ T4323] usb 3-1: SerialNumber: syz [ 1458.186289][ T4323] usb 3-1: config 0 descriptor?? [ 1458.193304][ T4323] usb 3-1: can't set config #0, error -71 [ 1458.498958][ T4323] usb 3-1: USB disconnect, device number 43 [ 1460.275627][T14675] tmpfs: Unknown parameter 'grpquota' [ 1460.493307][T14680] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2399'. [ 1468.263602][T14717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2407'. [ 1468.547972][T13921] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1470.519891][T13921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.538546][T13921] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1471.501503][T13921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1472.085606][T13921] usb 3-1: string descriptor 0 read error: -71 [ 1472.143845][T13921] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1472.201235][T13921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1472.219420][T13921] usb 3-1: config 0 descriptor?? [ 1472.234840][T13921] usb 3-1: can't set config #0, error -71 [ 1472.254405][T13921] usb 3-1: USB disconnect, device number 44 [ 1473.334800][T14747] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1474.574251][T14770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2417'. [ 1479.381988][T14798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1480.078037][ T6051] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1482.629016][ T6051] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.664686][ T6051] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1483.604390][ T6051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1483.851851][ T6051] usb 1-1: string descriptor 0 read error: -71 [ 1483.864971][ T6051] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1484.000315][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1484.052455][ T6051] usb 1-1: config 0 descriptor?? [ 1484.097971][ T6051] usb 1-1: can't set config #0, error -71 [ 1484.146936][ T6051] usb 1-1: USB disconnect, device number 44 [ 1484.401390][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.485359][T14843] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1489.603765][T14862] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2440'. [ 1489.911640][ T4323] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1491.518184][ T4323] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.066263][ T4323] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1492.087430][ T4323] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1493.536459][ T4323] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1495.231650][ T4323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1495.433294][ T4323] usb 8-1: config 0 descriptor?? [ 1495.567669][ T4323] usb 8-1: can't set config #0, error -71 [ 1495.641399][T14883] dlm: no local IP address has been set [ 1495.689618][ T4323] usb 8-1: USB disconnect, device number 2 [ 1495.726139][T14883] dlm: cannot start dlm midcomms -107 [ 1502.008034][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 1504.004540][T14945] dlm: no local IP address has been set [ 1504.076972][T14945] dlm: cannot start dlm midcomms -107 [ 1504.924086][ T4330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.241870][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1505.253218][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1505.263768][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1505.284959][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1505.297259][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1505.309500][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1506.066214][ T4330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.490458][T10648] Bluetooth: hci1: command 0x0409 tx timeout [ 1507.584868][ T4330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.008637][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2461'. [ 1509.067055][ T4330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.136255][T14953] lo speed is unknown, defaulting to 1000 [ 1509.161573][T14953] lo speed is unknown, defaulting to 1000 [ 1509.167494][T14987] [ 1509.169869][T14987] ====================================================== [ 1509.176919][T14987] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1509.183985][T14987] syzkaller #0 Not tainted [ 1509.188452][T14987] ------------------------------------------------------ [ 1509.195494][T14987] syz.2.2463/14987 is trying to acquire lock: [ 1509.201599][T14987] ffff88807ea21bd0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1509.212508][T14987] [ 1509.212508][T14987] but task is already holding lock: [ 1509.219900][T14987] ffff88804616b5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1509.230075][T14987] [ 1509.230075][T14987] which lock already depends on the new lock. [ 1509.230075][T14987] [ 1509.240530][T14987] [ 1509.240530][T14987] the existing dependency chain (in reverse order) is: [ 1509.249591][T14987] [ 1509.249591][T14987] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1509.257203][T14987] down_read_killable+0x4c/0x340 [ 1509.262777][T14987] mmap_read_lock_killable+0x1d/0x60 [ 1509.268625][T14987] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1509.274437][T14987] do_user_addr_fault+0x2e8/0xb20 [ 1509.280068][T14987] exc_page_fault+0x60/0x100 [ 1509.285239][T14987] asm_exc_page_fault+0x22/0x30 [ 1509.290714][T14987] fault_in_readable+0x13e/0x1f0 [ 1509.296270][T14987] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1509.300810][T14992] overlayfs: failed to resolve './file1': -2 [ 1509.302534][T14987] generic_perform_write+0x1f1/0x5c0 [ 1509.314407][T14987] __generic_file_write_iter+0x148/0x2a0 [ 1509.320611][T14987] generic_file_write_iter+0xab/0x2e0 [ 1509.326637][T14987] vfs_write+0x482/0x9a0 [ 1509.331525][T14987] ksys_write+0x14d/0x260 [ 1509.336436][T14987] do_syscall_64+0x4c/0xa0 [ 1509.341440][T14987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1509.347911][T14987] [ 1509.347911][T14987] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1509.356650][T14987] __lock_acquire+0x2d18/0x7c40 [ 1509.362119][T14987] lock_acquire+0x1bb/0x4a0 [ 1509.367203][T14987] down_write+0x36/0x60 [ 1509.371927][T14987] process_measurement+0x3af/0x1c40 [ 1509.377694][T14987] ima_file_mmap+0xe9/0x140 [ 1509.382764][T14987] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1509.388964][T14987] do_syscall_64+0x4c/0xa0 [ 1509.393954][T14987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1509.400420][T14987] [ 1509.400420][T14987] other info that might help us debug this: [ 1509.400420][T14987] [ 1509.410678][T14987] Possible unsafe locking scenario: [ 1509.410678][T14987] [ 1509.418166][T14987] CPU0 CPU1 [ 1509.423561][T14987] ---- ---- [ 1509.428961][T14987] lock(&mm->mmap_lock); [ 1509.433331][T14987] lock(&sb->s_type->i_mutex_key#13); [ 1509.441393][T14987] lock(&mm->mmap_lock); [ 1509.448281][T14987] lock(&sb->s_type->i_mutex_key#13); [ 1509.453794][T14987] [ 1509.453794][T14987] *** DEADLOCK *** [ 1509.453794][T14987] [ 1509.461974][T14987] 1 lock held by syz.2.2463/14987: [ 1509.467116][T14987] #0: ffff88804616b5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1509.477627][T14987] [ 1509.477627][T14987] stack backtrace: [ 1509.483556][T14987] CPU: 1 PID: 14987 Comm: syz.2.2463 Not tainted syzkaller #0 [ 1509.491057][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1509.501147][T14987] Call Trace: [ 1509.504536][T14987] [ 1509.507581][T14987] dump_stack_lvl+0x188/0x24e [ 1509.512391][T14987] ? load_image+0x410/0x410 [ 1509.516993][T14987] ? show_regs_print_info+0x12/0x12 [ 1509.518047][T10648] Bluetooth: hci1: command 0x041b tx timeout [ 1509.522226][T14987] ? print_circular_bug+0x12b/0x1a0 [ 1509.533479][T14987] check_noncircular+0x296/0x330 [ 1509.538480][T14987] ? look_up_lock_class+0x75/0x140 [ 1509.543648][T14987] ? add_chain_block+0x9b0/0x9b0 [ 1509.548644][T14987] ? lockdep_lock+0xf1/0x1f0 [ 1509.553294][T14987] ? mark_lock+0x94/0x320 [ 1509.557697][T14987] ? _find_first_zero_bit+0xd2/0x100 [ 1509.563033][T14987] __lock_acquire+0x2d18/0x7c40 [ 1509.567947][T14987] ? ima_match_policy+0x10d/0x21b0 [ 1509.573116][T14987] ? __lock_acquire+0x7c40/0x7c40 [ 1509.578194][T14987] ? verify_lock_unused+0x140/0x140 [ 1509.583458][T14987] ? ima_match_policy+0x10d/0x21b0 [ 1509.588622][T14987] ? ima_match_policy+0x211c/0x21b0 [ 1509.593911][T14987] lock_acquire+0x1bb/0x4a0 [ 1509.598467][T14987] ? process_measurement+0x3af/0x1c40 [ 1509.603896][T14987] ? __might_sleep+0xd0/0xd0 [ 1509.608533][T14987] ? read_lock_is_recursive+0x10/0x10 [ 1509.613960][T14987] ? ima_get_action+0x71/0xa0 [ 1509.618685][T14987] down_write+0x36/0x60 [ 1509.622885][T14987] ? process_measurement+0x3af/0x1c40 [ 1509.628307][T14987] process_measurement+0x3af/0x1c40 [ 1509.633611][T14987] ? ima_file_mmap+0x140/0x140 [ 1509.638431][T14987] ? aa_file_perm+0x112/0xf00 [ 1509.643250][T14987] ? mtree_load+0x100/0xa70 [ 1509.647835][T14987] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1509.654043][T14987] ima_file_mmap+0xe9/0x140 [ 1509.658599][T14987] ? ima_file_free+0x3e0/0x3e0 [ 1509.663502][T14987] ? common_file_perm+0x171/0x1c0 [ 1509.668573][T14987] ? bpf_lsm_mmap_file+0x5/0x10 [ 1509.673565][T14987] ? security_mmap_file+0x11b/0x180 [ 1509.678857][T14987] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1509.684547][T14987] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1509.690352][T14987] ? lock_chain_count+0x20/0x20 [ 1509.695271][T14987] ? lockdep_hardirqs_on+0x94/0x140 [ 1509.700512][T14987] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1509.706281][T14987] do_syscall_64+0x4c/0xa0 [ 1509.710765][T14987] ? clear_bhb_loop+0x60/0xb0 [ 1509.715491][T14987] ? clear_bhb_loop+0x60/0xb0 [ 1509.720219][T14987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1509.726174][T14987] RIP: 0033:0x7f3daed9e019 [ 1509.730698][T14987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.750397][T14987] RSP: 002b:00007f3dafc59028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1509.758933][T14987] RAX: ffffffffffffffda RBX: 00007f3daf025fa0 RCX: 00007f3daed9e019 [ 1509.766949][T14987] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000 [ 1509.774956][T14987] RBP: 00007f3daee3500c R08: 0000000004000000 R09: 0000000000000000 [ 1509.783008][T14987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.791023][T14987] R13: 00007f3daf026038 R14: 00007f3daf025fa0 R15: 00007fff1922d698 [ 1509.799047][T14987] [ 1511.252657][ T4330] device hsr_slave_0 left promiscuous mode [ 1511.259254][ T4330] device hsr_slave_1 left promiscuous mode [ 1511.265698][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.275473][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.286728][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.297200][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1511.305183][ T4330] device bridge_slave_1 left promiscuous mode [ 1511.313418][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.322075][ T4330] device bridge_slave_0 left promiscuous mode [ 1511.330895][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.342217][ T4330] device veth1_macvtap left promiscuous mode [ 1511.350638][ T4330] device veth0_macvtap left promiscuous mode [ 1511.356744][ T4330] device veth1_vlan left promiscuous mode [ 1511.363163][ T4330] device veth0_vlan left promiscuous mode [ 1511.582141][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1511.616929][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1511.644836][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.674476][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.770331][ T4330] bond0 (unregistering): Released all slaves [ 1512.278261][ T4330] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.323369][ T4330] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.374320][ T4330] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.422765][ T4330] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.208903][ T4330] IPVS: stopping backup sync thread 9411 ... [ 1514.216450][ T4330] IPVS: stopping backup sync thread 9871 ... [ 1514.223100][ T4330] IPVS: stopping backup sync thread 9472 ... [ 1514.986906][ T4330] device hsr_slave_0 left promiscuous mode [ 1514.994840][ T4330] device hsr_slave_1 left promiscuous mode [ 1515.003118][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.013461][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.022277][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.031387][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.042604][ T4330] device bridge_slave_1 left promiscuous mode [ 1515.050569][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.059178][ T4330] device bridge_slave_0 left promiscuous mode [ 1515.065406][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.079630][ T4330] device hsr_slave_0 left promiscuous mode [ 1515.085989][ T4330] device hsr_slave_1 left promiscuous mode [ 1515.094429][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.102595][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.112097][ T4330] device bridge_slave_1 left promiscuous mode [ 1515.119939][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.129751][ T4330] device bridge_slave_0 left promiscuous mode [ 1515.136071][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.147612][ T4330] device hsr_slave_0 left promiscuous mode [ 1515.155421][ T4330] device hsr_slave_1 left promiscuous mode [ 1515.162148][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.171440][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.179954][ T4330] device bridge_slave_1 left promiscuous mode [ 1515.186175][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.196322][ T4330] device bridge_slave_0 left promiscuous mode [ 1515.203129][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.215976][ T4330] device hsr_slave_0 left promiscuous mode [ 1515.222556][ T4330] device hsr_slave_1 left promiscuous mode [ 1515.230485][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.238291][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.245934][ T4330] device bridge_slave_1 left promiscuous mode [ 1515.252686][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.261532][ T4330] device bridge_slave_0 left promiscuous mode [ 1515.267789][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.290200][ T4330] device veth1_macvtap left promiscuous mode [ 1515.296297][ T4330] device veth0_macvtap left promiscuous mode [ 1515.302772][ T4330] device veth1_vlan left promiscuous mode [ 1515.308744][ T4330] device veth0_vlan left promiscuous mode [ 1515.499850][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1515.526910][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1515.554679][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.568294][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.616826][ T4330] bond0 (unregistering): Released all slaves [ 1515.671303][ T4330] bond2 (unregistering): Released all slaves [ 1515.804719][ T4330] bond1 (unregistering): Released all slaves [ 1516.208695][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1516.248602][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1516.286539][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.329397][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.617819][ T4330] bond0 (unregistering): Released all slaves [ 1516.696939][ T4330] bond2 (unregistering): Released all slaves [ 1516.714722][ T4330] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1516.831615][ T4330] bond1 (unregistering): Released all slaves [ 1517.216218][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1517.257429][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1517.296340][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.337296][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.615712][ T4330] bond0 (unregistering): Released all slaves [ 1518.081057][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 1518.120478][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 1518.160360][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.202158][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.481125][ T4330] bond0 (unregistering): Released all slaves