last executing test programs: 12m5.715226967s ago: executing program 32 (id=127): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffc000, 0x8004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) 11m16.763655805s ago: executing program 0 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) gettid() socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) 11m14.297383632s ago: executing program 0 (id=247): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m9.719308268s ago: executing program 0 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 11m8.650731049s ago: executing program 0 (id=253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x2, 0x1) bind$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, 0x1}, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x4194) 11m7.425172506s ago: executing program 0 (id=254): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m6.909359107s ago: executing program 0 (id=255): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x54, 0x66, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4481eae167e8e5f, 0xfff1}, {0x1d, 0x4}, {0x9, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}]}, 0x54}}, 0x0) 10m55.982956776s ago: executing program 33 (id=250): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb8"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x7, @sliced={0x8, [0x5, 0xfbff, 0x4, 0x7818, 0x5, 0x2, 0x4d, 0x8, 0x8, 0x47, 0xffff, 0x1ec, 0x400, 0x2, 0x0, 0x80, 0xc08c, 0x1a45, 0x1004, 0x9, 0xffff, 0xd, 0x7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x5, 0x428a, 0xb1b, 0xfffe, 0x1, 0x8f5, 0x9, 0x3, 0x9, 0xe0ac, 0x8, 0x4, 0x8, 0x101, 0x8, 0x6, 0xf010, 0xe30d, 0xfff, 0x7ff]}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r1, 0xffffffffffffffff, 0x17, 0x1, r2, @void, @value=r2, @void, @void, r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x34, 0x0, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c) 10m51.404559245s ago: executing program 34 (id=255): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x54, 0x66, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4481eae167e8e5f, 0xfff1}, {0x1d, 0x4}, {0x9, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1000}]}, 0x54}}, 0x0) 9m0.049185275s ago: executing program 2 (id=383): bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getitimer(0x1, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sndctrl(0x0, 0x10, 0x141002) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) nanosleep(&(0x7f00000001c0), 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) timer_delete(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, 0x0) unshare(0x2a020480) 8m59.666838754s ago: executing program 2 (id=385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8m58.420315469s ago: executing program 2 (id=386): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) mknod$loop(0x0, 0xfff, 0x0) link(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 8m56.857049921s ago: executing program 2 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 8m55.562983995s ago: executing program 2 (id=390): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) 8m53.975840143s ago: executing program 2 (id=391): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m38.684609256s ago: executing program 35 (id=391): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m47.526118916s ago: executing program 4 (id=459): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrlimit(0x2, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0xffffffbc, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43, 0x558}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m42.405157326s ago: executing program 4 (id=465): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x0, 0x0, 0x2, 0x3}, 0x5a76224c41b455c1) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0)=0x400, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r2, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000500000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r3}, 0x18) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0x0, 0x0) 6m41.467311043s ago: executing program 4 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) umount2(&(0x7f0000000180)='./file0\x00', 0xc) bind$netlink(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6m38.573805825s ago: executing program 4 (id=468): socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x34, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000) 6m36.113829687s ago: executing program 4 (id=472): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) 6m34.116998303s ago: executing program 4 (id=473): syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x88, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x88}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8800}]}, 0x108) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000000100)=0xffffd44f) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0xd, 0x200, 0xf89]) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)}) 6m17.948338667s ago: executing program 36 (id=473): syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x88, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x88}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8800}]}, 0x108) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) semctl$SETVAL(r2, 0x1, 0x10, &(0x7f0000000100)=0xffffd44f) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0xd, 0x200, 0xf89]) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, &(0x7f0000000040)={0x80000000, &(0x7f0000000000), &(0x7f00000001c0)}) 6m17.698810358s ago: executing program 8 (id=492): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='async\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000280), 0x80) r2 = add_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) readahead(0xffffffffffffffff, 0x0, 0x6) keyctl$revoke(0x3, r2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 6m16.990516306s ago: executing program 8 (id=493): syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101341) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2e15, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m16.416469783s ago: executing program 6 (id=495): socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x6, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x80) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x0, &(0x7f0000004540)) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x7600) 6m12.122491247s ago: executing program 8 (id=497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x4, 0x20b, 0x6, 0x8, 0x4, 0x0, 0x7fffffff}, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, 0x0, 0x1000080, 0x0) sched_setscheduler(r1, 0x3, 0x0) 6m10.662871433s ago: executing program 6 (id=499): syz_open_dev$evdev(&(0x7f0000000040), 0xb, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101341) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2e15, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000), 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 6m10.413427985s ago: executing program 8 (id=500): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x47, 0xd, 0x7, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}, {0x1b, 0x9, 0xfb, 0x6, @tick=0x1, {0xf2, 0x1}, {0xa4}, @connect={{0xff, 0x7}, {0x4, 0xe}}}, {0x1, 0x2, 0x40, 0x8, @time={0xfffffff8, 0x499b}, {0x3, 0x81}, {0x2, 0x50}, @connect={{0xa2, 0x1}, {0x7f, 0xeb}}}, {0xb6, 0xfb, 0x7f, 0x63, @tick=0x5b, {0x10, 0x1}, {0x5, 0x1}, @quote={{0x8, 0xe}, 0x89a}}, {0x2, 0x6, 0xc, 0xff, @tick=0x5, {0x1, 0x2}, {0x1, 0x7}, @queue={0x19, {0x7, 0x4}}}, {0xff, 0x8, 0x82, 0xcf, @time={0x80000001}, {0x4, 0x7}, {0x4, 0x8}, @control={0x0, 0x6, 0x9}}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) 6m8.151856579s ago: executing program 8 (id=502): r0 = syz_clone(0x20040200, 0x0, 0x5, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace$setsig(0x4207, r0, 0x200000000000005, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000002c0)=0x2, 0x4) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) r4 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000480)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r8, 0x0, 0x0, 0x0, 0x322, 0x0, {0x1}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x3, 0x0, r4}, &(0x7f0000000200), &(0x7f0000000300)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20300) 6m6.701509499s ago: executing program 6 (id=503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 6m6.337296783s ago: executing program 6 (id=505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000001c0)='.\x00', 0x10000, 0x1f6) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m4.49874835s ago: executing program 6 (id=506): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x0, 0x51}, 0x28) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x200000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) timerfd_create(0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r0, 0xe7d4c009da6c1985}, {r0, 0x201}], 0x2, 0x4) 6m4.421480419s ago: executing program 8 (id=507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8001, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x3554000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a15"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fadvise64(r4, 0x85f5, 0x4000000005, 0x4) 6m0.6727858s ago: executing program 6 (id=509): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea0485"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m47.612182132s ago: executing program 37 (id=507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8001, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x3554000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a15"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fadvise64(r4, 0x85f5, 0x4000000005, 0x4) 5m44.077720422s ago: executing program 38 (id=509): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea0485"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m5.192342925s ago: executing program 1 (id=1016): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x4d, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) 1m4.816801394s ago: executing program 1 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x4d7d, &(0x7f0000000240)={0x0, 0x5dc3, 0x80, 0x3, 0x2100001a}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x200000000000000, 0x0) 1m4.289924094s ago: executing program 1 (id=1022): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '^\x00'}, 0x0, 0x45) 1m1.143426988s ago: executing program 1 (id=1027): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x1, 0x4, 0x3, 0x2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 1m0.103106108s ago: executing program 1 (id=1031): syz_usb_connect(0x5, 0x27, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, 0x0) 58.329773516s ago: executing program 1 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x8}]}) 41.840674994s ago: executing program 39 (id=1034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000090, 0x0, 0x8}]}) 41.59122074s ago: executing program 3 (id=1081): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x80000000, 0x75, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x7fffffff, 0x5}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 41.178324564s ago: executing program 3 (id=1082): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') 40.44535663s ago: executing program 3 (id=1084): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 39.488513115s ago: executing program 3 (id=1086): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 37.973289513s ago: executing program 3 (id=1087): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a", 0x2) 37.580919816s ago: executing program 3 (id=1088): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 29.895625356s ago: executing program 5 (id=1107): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 29.468695099s ago: executing program 5 (id=1109): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 29.118009486s ago: executing program 5 (id=1112): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) 28.883713251s ago: executing program 5 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x7}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) 27.823360132s ago: executing program 5 (id=1114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x47, 0xd, 0x7, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}, {0x1b, 0x9, 0xfb, 0x6, @tick=0x1, {0xf2, 0x1}, {0xa4}, @connect={{0xff, 0x7}, {0x4, 0xe}}}, {0x1, 0x2, 0x40, 0x8, @time={0xfffffff8, 0x499b}, {0x3, 0x81}, {0x2, 0x50}, @connect={{0xa2, 0x1}, {0x7f, 0xeb}}}, {0xb6, 0xfb, 0x7f, 0x63, @tick=0x5b, {0x10, 0x1}, {0x5, 0x1}, @quote={{0x8, 0xe}, 0x89a}}, {0x2, 0x6, 0xc, 0xff, @tick=0x5, {0x1, 0x2}, {0x1, 0x7}, @queue={0x19, {0x7, 0x4}}}, {0xff, 0x8, 0x82, 0xcf, @time={0x80000001}, {0x4, 0x7}, {0x4, 0x8}, @control={0x0, 0x6, 0x9}}], 0xc4) read$snapshot(r2, 0x0, 0xffffffbf) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) 26.887389479s ago: executing program 5 (id=1116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) 23.605018317s ago: executing program 9 (id=1124): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000100)) 23.252969142s ago: executing program 9 (id=1126): creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) 22.936157372s ago: executing program 9 (id=1128): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="100080"], 0x10}}], 0x1, 0x4000000) 22.68377447s ago: executing program 9 (id=1130): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x1, 0x800000000}) 22.234941943s ago: executing program 40 (id=1088): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 22.201019951s ago: executing program 9 (id=1132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd2b, 0xffffffff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x4, 0x0, 0x0, 0x82, 0xa}, 0x40000000}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010100, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 21.825325431s ago: executing program 9 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 16.645683214s ago: executing program 7 (id=1145): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 16.356179473s ago: executing program 7 (id=1146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x6) 15.965578696s ago: executing program 7 (id=1147): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000300010003", 0x7) 15.869882865s ago: executing program 7 (id=1148): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 15.526820777s ago: executing program 7 (id=1149): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f00000022c0)='hugetlbfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 15.393352719s ago: executing program 7 (id=1150): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 11.524565368s ago: executing program 41 (id=1116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) 6.595964195s ago: executing program 42 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 0s ago: executing program 43 (id=1150): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000ea01020000000900010073797a3200000000090001008a797ab0000000000900030073797a32000000000900010073797a32000000000900030073797a3200000000140002"], 0x70}}, 0x20000800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) kernel console output (not intermixed with test programs): ip=0x7f353723f749 code=0x7ffc0000 [ 555.295247][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 555.806494][ T6060] hsr_slave_0: left promiscuous mode [ 555.830693][ T6060] hsr_slave_1: left promiscuous mode [ 555.831858][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.831886][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.888713][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.888739][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.057067][ T6060] veth1_macvtap: left promiscuous mode [ 556.057304][ T6060] veth0_macvtap: left promiscuous mode [ 556.057524][ T6060] veth1_vlan: left promiscuous mode [ 556.057649][ T6060] veth0_vlan: left promiscuous mode [ 558.391084][ T8512] fuse: Unknown parameter '000000000000000001770x0000000000000000' [ 560.614109][ T8517] vivid-000: disconnect [ 560.774055][ T8514] vivid-000: reconnect [ 561.057676][ T8521] loop6: detected capacity change from 0 to 524288000 [ 561.217532][ T8522] support for the xor transformation has been removed. [ 566.670550][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.693263][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.709126][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.710326][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.711666][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.130130][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.130189][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.448917][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 568.696555][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 568.835956][ T8434] Bluetooth: hci2: command tx timeout [ 570.916076][ T8434] Bluetooth: hci2: command tx timeout [ 571.100533][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 571.118049][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 571.119225][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 571.421692][ T8547] infiniband syz2: set active [ 571.421710][ T8547] infiniband syz2: added vxcan1 [ 571.433659][ T8547] infiniband syz2: Couldn't open port 1 [ 571.479690][ T8547] RDS/IB: syz2: added [ 571.480864][ T8547] smc: adding ib device syz2 with port count 1 [ 571.481309][ T8547] smc: ib device syz2 port 1 has no pnetid [ 571.509134][ T5880] vxcan1 speed is unknown, defaulting to 1000 [ 571.514141][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 571.880350][ T5873] vxcan1 speed is unknown, defaulting to 1000 [ 571.885224][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 572.203455][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 572.494310][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 572.749932][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 573.048014][ T8434] Bluetooth: hci2: command tx timeout [ 573.083449][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 573.418259][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 573.878279][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 573.926721][ T8446] chnl_net:caif_netlink_parms(): no params data found [ 574.207057][ T8547] vxcan1 speed is unknown, defaulting to 1000 [ 574.207447][ T8443] chnl_net:caif_netlink_parms(): no params data found [ 574.413101][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 574.832368][ T8540] vxcan1 speed is unknown, defaulting to 1000 [ 575.087612][ T8434] Bluetooth: hci2: command tx timeout [ 576.240382][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.240541][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.240703][ T8446] bridge_slave_0: entered allmulticast mode [ 576.242821][ T8446] bridge_slave_0: entered promiscuous mode [ 576.310543][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.310637][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.310812][ T8446] bridge_slave_1: entered allmulticast mode [ 576.312722][ T8446] bridge_slave_1: entered promiscuous mode [ 576.357968][ T804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 576.505877][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 576.507828][ T804] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 576.507857][ T804] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 576.507878][ T804] usb 6-1: config 179 has no interface number 0 [ 576.507918][ T804] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 576.507959][ T804] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 576.507976][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.785234][ T5972] usb 6-1: USB disconnect, device number 2 [ 576.877179][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.877353][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.877522][ T8443] bridge_slave_0: entered allmulticast mode [ 576.879458][ T8443] bridge_slave_0: entered promiscuous mode [ 576.919917][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.027176][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.027316][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.027542][ T8443] bridge_slave_1: entered allmulticast mode [ 577.029676][ T8443] bridge_slave_1: entered promiscuous mode [ 577.067319][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.069272][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.069398][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.069612][ T8448] bridge_slave_0: entered allmulticast mode [ 577.073894][ T8448] bridge_slave_0: entered promiscuous mode [ 577.247156][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.247302][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.247464][ T8448] bridge_slave_1: entered allmulticast mode [ 577.249405][ T8448] bridge_slave_1: entered promiscuous mode [ 579.809620][ T8443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.080986][ T8446] team0: Port device team_slave_0 added [ 580.171920][ T8443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.250455][ T8446] team0: Port device team_slave_1 added [ 580.254012][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.630380][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.129875][ T8443] team0: Port device team_slave_0 added [ 581.142241][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.142257][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.142278][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.250083][ T8443] team0: Port device team_slave_1 added [ 581.442306][ T6060] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.510837][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.510855][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.510879][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.655108][ T8448] team0: Port device team_slave_0 added [ 581.746952][ T8448] team0: Port device team_slave_1 added [ 581.984186][ T6060] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.138999][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.139015][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.139036][ T8443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.254417][ T8443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.254436][ T8443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.254467][ T8443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.510187][ T6060] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.577412][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.577428][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.577449][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.728816][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.728832][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.728853][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.804214][ T8446] hsr_slave_0: entered promiscuous mode [ 582.813322][ T8446] hsr_slave_1: entered promiscuous mode [ 582.814079][ T8446] debugfs: 'hsr0' already exists in 'hsr' [ 582.814100][ T8446] Cannot create hsr debugfs directory [ 583.033284][ T6060] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.367428][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 583.395184][ T8443] hsr_slave_0: entered promiscuous mode [ 583.404383][ T8443] hsr_slave_1: entered promiscuous mode [ 583.405199][ T8443] debugfs: 'hsr0' already exists in 'hsr' [ 583.405218][ T8443] Cannot create hsr debugfs directory [ 583.642246][ T8448] hsr_slave_0: entered promiscuous mode [ 583.643744][ T8448] hsr_slave_1: entered promiscuous mode [ 583.644787][ T8448] debugfs: 'hsr0' already exists in 'hsr' [ 583.644813][ T8448] Cannot create hsr debugfs directory [ 584.603972][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.604198][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.604405][ T8540] bridge_slave_0: entered allmulticast mode [ 584.627216][ T8540] bridge_slave_0: entered promiscuous mode [ 584.688784][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.688943][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.689155][ T8540] bridge_slave_1: entered allmulticast mode [ 584.691107][ T8540] bridge_slave_1: entered promiscuous mode [ 585.164204][ T6060] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.230752][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.341679][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.885001][ T6060] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.260795][ T8540] team0: Port device team_slave_0 added [ 586.418356][ T6060] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.458821][ T8540] team0: Port device team_slave_1 added [ 586.929626][ T6060] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.039207][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.039224][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.039247][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.044801][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.044821][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.044851][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.571227][ T8540] hsr_slave_0: entered promiscuous mode [ 587.582881][ T8540] hsr_slave_1: entered promiscuous mode [ 587.583816][ T8540] debugfs: 'hsr0' already exists in 'hsr' [ 587.583850][ T8540] Cannot create hsr debugfs directory [ 588.342744][ T6060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.669032][ T6060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.994454][ T6060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.498664][ T6060] team0: Port device netdevsim0 removed [ 589.501085][ T6060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.342234][ T6060] bridge_slave_1: left allmulticast mode [ 590.342258][ T6060] bridge_slave_1: left promiscuous mode [ 590.342459][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.407066][ T6060] bridge_slave_0: left allmulticast mode [ 590.407092][ T6060] bridge_slave_0: left promiscuous mode [ 590.407286][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.479011][ T6060] bridge_slave_1: left allmulticast mode [ 590.479036][ T6060] bridge_slave_1: left promiscuous mode [ 590.479216][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.537085][ T6060] bridge_slave_0: left allmulticast mode [ 590.537112][ T6060] bridge_slave_0: left promiscuous mode [ 590.537318][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.599695][ T6060] bridge_slave_1: left allmulticast mode [ 590.599721][ T6060] bridge_slave_1: left promiscuous mode [ 590.599944][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.667799][ T6060] bridge_slave_0: left allmulticast mode [ 590.667831][ T6060] bridge_slave_0: left promiscuous mode [ 590.668097][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.729836][ T6060] vxlan0: left allmulticast mode [ 590.730149][ T6060] vxlan0: left promiscuous mode [ 590.730360][ T6060] bridge0: port 1(vxlan0) entered disabled state [ 591.531873][ T6060] bond0 (unregistering): Released all slaves [ 593.336813][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.406646][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.448848][ T6060] bond0 (unregistering): Released all slaves [ 593.646737][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.756795][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.818877][ T6060] bond0 (unregistering): Released all slaves [ 595.654356][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.706874][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.729174][ T6060] bond0 (unregistering): Released all slaves [ 596.794204][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.811039][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.812484][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.837758][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.839607][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.722533][ T6060] bond0 (unregistering): Released all slaves [ 597.926349][ T8601] vxcan1 speed is unknown, defaulting to 1000 [ 598.650481][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 598.658176][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 598.681816][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 598.727779][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 598.730953][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.916426][ T61] Bluetooth: hci0: command tx timeout [ 599.407820][ T8606] vxcan1 speed is unknown, defaulting to 1000 [ 600.780542][ T8434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.784509][ T8434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.842903][ T5807] Bluetooth: hci3: command tx timeout [ 600.843454][ T8434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.860948][ T8434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.861887][ T8434] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.005968][ T61] Bluetooth: hci0: command tx timeout [ 602.217318][ T8610] vxcan1 speed is unknown, defaulting to 1000 [ 602.664932][ T8601] chnl_net:caif_netlink_parms(): no params data found [ 602.916116][ T61] Bluetooth: hci3: command tx timeout [ 602.916164][ T8434] Bluetooth: hci4: command tx timeout [ 602.958099][ T8540] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 603.063756][ T8540] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 603.086025][ T8434] Bluetooth: hci0: command tx timeout [ 603.197098][ T8540] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 603.274381][ T8540] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 603.696259][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 603.736436][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.737385][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.737681][ T8601] bridge_slave_0: entered allmulticast mode [ 603.743284][ T8601] bridge_slave_0: entered promiscuous mode [ 603.810555][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.810699][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.810973][ T8601] bridge_slave_1: entered allmulticast mode [ 603.838826][ T8601] bridge_slave_1: entered promiscuous mode [ 604.342653][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.430478][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.979409][ T8601] team0: Port device team_slave_0 added [ 604.996254][ T61] Bluetooth: hci4: command tx timeout [ 604.996347][ T8434] Bluetooth: hci3: command tx timeout [ 605.033873][ T8601] team0: Port device team_slave_1 added [ 605.034145][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.035054][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.035298][ T8606] bridge_slave_0: entered allmulticast mode [ 605.041988][ T8606] bridge_slave_0: entered promiscuous mode [ 605.156244][ T8434] Bluetooth: hci0: command tx timeout [ 605.198648][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.198871][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.199093][ T8606] bridge_slave_1: entered allmulticast mode [ 605.202055][ T8606] bridge_slave_1: entered promiscuous mode [ 605.566718][ T6060] hsr_slave_0: left promiscuous mode [ 605.606028][ T6060] hsr_slave_1: left promiscuous mode [ 605.607189][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.607217][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.657140][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.657177][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.845952][ T6060] hsr_slave_0: left promiscuous mode [ 605.866269][ T6060] hsr_slave_1: left promiscuous mode [ 605.867215][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.867236][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.907679][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.907713][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.045966][ T6060] hsr_slave_0: left promiscuous mode [ 606.065966][ T6060] hsr_slave_1: left promiscuous mode [ 606.203290][ T6060] veth1_macvtap: left promiscuous mode [ 606.203375][ T6060] veth0_macvtap: left promiscuous mode [ 606.203553][ T6060] veth1_vlan: left promiscuous mode [ 606.203695][ T6060] veth0_vlan: left promiscuous mode [ 606.346331][ T6060] veth1_macvtap: left promiscuous mode [ 606.346444][ T6060] veth0_macvtap: left promiscuous mode [ 606.346721][ T6060] veth1_vlan: left promiscuous mode [ 606.346917][ T6060] veth0_vlan: left promiscuous mode [ 606.456283][ T6060] veth1_macvtap: left promiscuous mode [ 606.456371][ T6060] veth0_macvtap: left promiscuous mode [ 606.456557][ T6060] veth1_vlan: left promiscuous mode [ 606.456678][ T6060] veth0_vlan: left promiscuous mode [ 607.076122][ T61] Bluetooth: hci4: command tx timeout [ 607.076224][ T8434] Bluetooth: hci3: command tx timeout [ 609.167403][ T8434] Bluetooth: hci4: command tx timeout [ 609.286948][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 609.536586][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 612.396972][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 612.546627][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 615.267928][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 615.526666][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 623.565345][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.565361][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.565381][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.709964][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 623.728266][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.728290][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.728312][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.790190][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.909103][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.386880][ T8606] team0: Port device team_slave_0 added [ 624.541705][ T8606] team0: Port device team_slave_1 added [ 624.555251][ T8601] hsr_slave_0: entered promiscuous mode [ 624.566840][ T8601] hsr_slave_1: entered promiscuous mode [ 624.567748][ T8601] debugfs: 'hsr0' already exists in 'hsr' [ 624.567773][ T8601] Cannot create hsr debugfs directory [ 625.139847][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.139864][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.139884][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.256973][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.257199][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.257471][ T8610] bridge_slave_0: entered allmulticast mode [ 625.260928][ T8610] bridge_slave_0: entered promiscuous mode [ 625.288831][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.288886][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.288968][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.377021][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.377162][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.377390][ T8610] bridge_slave_1: entered allmulticast mode [ 625.380169][ T8610] bridge_slave_1: entered promiscuous mode [ 625.704301][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.830024][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.116692][ T8606] hsr_slave_0: entered promiscuous mode [ 626.117864][ T8606] hsr_slave_1: entered promiscuous mode [ 626.118597][ T8606] debugfs: 'hsr0' already exists in 'hsr' [ 626.118622][ T8606] Cannot create hsr debugfs directory [ 626.332329][ T8610] team0: Port device team_slave_0 added [ 626.450107][ T8610] team0: Port device team_slave_1 added [ 626.967493][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.967513][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.967543][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.972430][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.011815][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.016055][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.058894][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.073504][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.198134][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.198155][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.198186][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.182944][ T8610] hsr_slave_0: entered promiscuous mode [ 628.184550][ T8610] hsr_slave_1: entered promiscuous mode [ 628.187273][ T8610] debugfs: 'hsr0' already exists in 'hsr' [ 628.187353][ T8610] Cannot create hsr debugfs directory [ 628.318566][ T8678] vxcan1 speed is unknown, defaulting to 1000 [ 629.159678][ T8434] Bluetooth: hci5: command tx timeout [ 629.578676][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.578730][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.346821][ T8678] chnl_net:caif_netlink_parms(): no params data found [ 631.097810][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.098377][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.099634][ T8678] bridge_slave_0: entered allmulticast mode [ 631.105246][ T8678] bridge_slave_0: entered promiscuous mode [ 631.141882][ T8601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.170065][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.170281][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.170503][ T8678] bridge_slave_1: entered allmulticast mode [ 631.172511][ T8678] bridge_slave_1: entered promiscuous mode [ 631.237172][ T8434] Bluetooth: hci5: command tx timeout [ 631.272721][ T8601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.516982][ T8601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.627756][ T8601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.741598][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.923548][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.172029][ T8678] team0: Port device team_slave_0 added [ 632.238968][ T8678] team0: Port device team_slave_1 added [ 632.452921][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.452942][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.452971][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.491110][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.491154][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.491245][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.986986][ T8678] hsr_slave_0: entered promiscuous mode [ 632.988049][ T8678] hsr_slave_1: entered promiscuous mode [ 632.988824][ T8678] debugfs: 'hsr0' already exists in 'hsr' [ 632.988843][ T8678] Cannot create hsr debugfs directory [ 633.144955][ T6060] bridge_slave_1: left allmulticast mode [ 633.144986][ T6060] bridge_slave_1: left promiscuous mode [ 633.145243][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.229281][ T6060] bridge_slave_0: left allmulticast mode [ 633.229307][ T6060] bridge_slave_0: left promiscuous mode [ 633.229520][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.289976][ T6060] bridge_slave_1: left allmulticast mode [ 633.290003][ T6060] bridge_slave_1: left promiscuous mode [ 633.290187][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.315855][ T8434] Bluetooth: hci5: command tx timeout [ 633.332761][ T6060] bridge_slave_0: left allmulticast mode [ 633.332784][ T6060] bridge_slave_0: left promiscuous mode [ 633.332978][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.404661][ T6060] bridge_slave_1: left allmulticast mode [ 633.404687][ T6060] bridge_slave_1: left promiscuous mode [ 633.404907][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.468150][ T6060] bridge_slave_0: left allmulticast mode [ 633.468176][ T6060] bridge_slave_0: left promiscuous mode [ 633.468358][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.539175][ T6060] bridge_slave_1: left allmulticast mode [ 633.539200][ T6060] bridge_slave_1: left promiscuous mode [ 633.539395][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.617134][ T6060] bridge_slave_0: left allmulticast mode [ 633.617159][ T6060] bridge_slave_0: left promiscuous mode [ 633.617358][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.606891][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.695585][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.748431][ T6060] bond0 (unregistering): Released all slaves [ 634.966848][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.046559][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.118339][ T6060] bond0 (unregistering): Released all slaves [ 635.356870][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.396035][ T8434] Bluetooth: hci5: command tx timeout [ 635.436899][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.521539][ T6060] bond0 (unregistering): Released all slaves [ 635.736950][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.827613][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.897985][ T6060] bond0 (unregistering): Released all slaves [ 636.301680][ T8606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 636.378507][ T8606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 636.435500][ T8606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.592410][ T8606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 637.118673][ T8610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.189964][ T8610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.393340][ T8610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.464902][ T8610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.702924][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.006166][ T6060] hsr_slave_0: left promiscuous mode [ 638.047078][ T6060] hsr_slave_1: left promiscuous mode [ 638.047988][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.086830][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.229170][ T6060] hsr_slave_0: left promiscuous mode [ 638.246250][ T6060] hsr_slave_1: left promiscuous mode [ 638.247081][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.286938][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.438458][ T6060] hsr_slave_0: left promiscuous mode [ 638.476097][ T6060] hsr_slave_1: left promiscuous mode [ 638.476890][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.500240][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.658471][ T6060] hsr_slave_0: left promiscuous mode [ 638.678864][ T6060] hsr_slave_1: left promiscuous mode [ 638.679640][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.716694][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.446769][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 639.606551][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 640.947430][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 641.129453][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 642.247619][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 642.406638][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 643.680322][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 643.836839][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 644.488398][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.582163][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.582327][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.612724][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.613017][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.835361][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.230516][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.386619][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.421763][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.421953][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.423873][ T8678] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 645.523232][ T8678] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 645.673619][ T8678] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 645.801087][ T8678] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 645.873013][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.873176][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.948273][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.012805][ T2139] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.012973][ T2139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.080424][ T2139] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.081908][ T2139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.168505][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.654261][ T8601] veth0_vlan: entered promiscuous mode [ 646.711023][ T8601] veth1_vlan: entered promiscuous mode [ 646.821427][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.932645][ T8601] veth0_macvtap: entered promiscuous mode [ 646.959881][ T8601] veth1_macvtap: entered promiscuous mode [ 647.042552][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.095602][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.097196][ T1361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.154323][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.166738][ T1361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.261452][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.273946][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.331662][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.386639][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.389581][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.390358][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.390404][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.472925][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.073347][ T6545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.073371][ T6545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.357439][ T8610] veth0_vlan: entered promiscuous mode [ 648.439802][ T7403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.439826][ T7403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.550384][ T8610] veth1_vlan: entered promiscuous mode [ 648.654079][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.807420][ T8606] veth0_vlan: entered promiscuous mode [ 648.857297][ T8610] veth0_macvtap: entered promiscuous mode [ 648.874193][ T8606] veth1_vlan: entered promiscuous mode [ 648.900306][ T8610] veth1_macvtap: entered promiscuous mode [ 649.012533][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.886500][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.117077][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.121110][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.121883][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.175374][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.259362][ T8606] veth0_macvtap: entered promiscuous mode [ 650.371216][ T8606] veth1_macvtap: entered promiscuous mode [ 650.654734][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.806025][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.823555][ T6545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.823579][ T6545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.907596][ T7403] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.935110][ T7403] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.050816][ T7403] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.079269][ T7403] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.166588][ T1361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.166612][ T1361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.440223][ T8678] veth0_vlan: entered promiscuous mode [ 651.561332][ T1361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.561356][ T1361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.630554][ T8678] veth1_vlan: entered promiscuous mode [ 652.241736][ T8259] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 652.353298][ T2139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.353321][ T2139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.402743][ T8259] usb 6-1: unable to get BOS descriptor or descriptor too short [ 652.404419][ T8259] usb 6-1: not running at top speed; connect to a high speed hub [ 652.457527][ T8259] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 652.457597][ T8259] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 652.457661][ T8259] usb 6-1: config 17 has no interface number 0 [ 652.462345][ T8259] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 652.462370][ T8259] usb 6-1: config 17 interface 8 has no altsetting 0 [ 652.554716][ T8259] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 652.554741][ T8259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.554756][ T8259] usb 6-1: Product: syz [ 652.554766][ T8259] usb 6-1: Manufacturer: syz [ 652.554777][ T8259] usb 6-1: SerialNumber: syz [ 653.916408][ T8678] veth0_macvtap: entered promiscuous mode [ 655.858848][ T8678] veth1_macvtap: entered promiscuous mode [ 658.416915][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.552196][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.670426][ T7403] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.674820][ T7403] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.674877][ T7403] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.674917][ T7403] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.235949][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.235973][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.300665][ T8259] usb 6-1: selecting invalid altsetting 0 [ 661.300709][ T8259] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc [ 661.300732][ T8259] usb 6-1: selecting invalid altsetting 0 [ 661.784029][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.784054][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.889900][ T8872] capability: warning: `syz.1.557' uses deprecated v2 capabilities in a way that may be insecure [ 662.334325][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.361336][ T8878] netlink: 'syz.3.558': attribute type 30 has an invalid length. [ 662.361358][ T8878] netlink: 'syz.3.558': attribute type 33 has an invalid length. [ 662.361371][ T8878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.558'. [ 662.372354][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.374280][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.378256][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.400297][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.330952][ T5950] usb 6-1: USB disconnect, device number 3 [ 666.443127][ T8434] Bluetooth: hci2: command tx timeout [ 668.516455][ T8434] Bluetooth: hci2: command tx timeout [ 669.226655][ T805] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 669.235510][ T8874] vxcan1 speed is unknown, defaulting to 1000 [ 669.421775][ T5923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 669.540231][ T805] usb 10-1: unable to get BOS descriptor or descriptor too short [ 669.541087][ T805] usb 10-1: not running at top speed; connect to a high speed hub [ 669.550133][ T805] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 669.555384][ T805] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 669.566008][ T805] usb 10-1: config 17 has no interface number 0 [ 669.566082][ T805] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 669.566273][ T805] usb 10-1: config 17 interface 8 has no altsetting 0 [ 669.600426][ T805] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 669.600459][ T805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.600481][ T805] usb 10-1: Product: syz [ 669.600496][ T805] usb 10-1: Manufacturer: syz [ 669.600512][ T805] usb 10-1: SerialNumber: syz [ 669.635927][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 669.696813][ T5923] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 669.696843][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.696864][ T5923] usb 6-1: config 0 has no interface number 0 [ 669.696915][ T5923] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.696943][ T5923] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.696970][ T5923] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.697000][ T5923] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.697026][ T5923] usb 6-1: config 0 interface 52 has no altsetting 0 [ 669.697061][ T5923] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 669.697084][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.814591][ T5923] usb 6-1: config 0 descriptor?? [ 669.871639][ T8912] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 669.871665][ T8912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.566'. [ 670.211153][ T5923] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input8 [ 670.609344][ T8434] Bluetooth: hci2: command tx timeout [ 671.301799][ T5923] usb 6-1: USB disconnect, device number 4 [ 671.352407][ T5151] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 671.512462][ T8842] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.130671][ T8434] Bluetooth: hci2: command tx timeout [ 673.448139][ T8730] udevd[8730]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 673.908570][ T8930] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 675.586479][ T8434] Bluetooth: hci4: Malformed LE Event: 0x0b [ 675.806343][ T805] usb 10-1: selecting invalid altsetting 0 [ 675.806374][ T805] usb 10-1: 8:6 : no UAC_FORMAT_TYPE desc [ 675.806393][ T805] usb 10-1: selecting invalid altsetting 0 [ 676.465232][ T8842] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.240368][ T8963] netlink: 220 bytes leftover after parsing attributes in process `syz.3.580'. [ 677.299495][ T8842] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.439986][ T8094] usb 10-1: USB disconnect, device number 2 [ 679.799351][ T8842] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.086820][ T8842] bridge_slave_1: left allmulticast mode [ 685.086861][ T8842] bridge_slave_1: left promiscuous mode [ 685.087165][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.298926][ T8842] bridge_slave_0: left allmulticast mode [ 685.298959][ T8842] bridge_slave_0: left promiscuous mode [ 685.299230][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.185954][ T8168] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 686.376011][ T8168] usb 2-1: Using ep0 maxpacket: 8 [ 686.378163][ T8168] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 686.378196][ T8168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.378216][ T8168] usb 2-1: config 0 has no interface number 0 [ 686.392775][ T8168] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 686.392809][ T8168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.392830][ T8168] usb 2-1: Product: syz [ 686.392845][ T8168] usb 2-1: Manufacturer: syz [ 686.392860][ T8168] usb 2-1: SerialNumber: syz [ 686.474744][ T8168] usb 2-1: config 0 descriptor?? [ 688.066062][ T8168] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 688.066114][ T8168] uvcvideo 2-1:0.31: No valid video chain found. [ 688.275378][ T9] usb 2-1: USB disconnect, device number 5 [ 689.794928][ T9061] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 691.498541][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.498631][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.752209][ T9072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.608'. [ 691.801646][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 694.507376][ T8842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.606558][ T8842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.630897][ T8842] bond0 (unregistering): Released all slaves [ 694.804972][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 697.506601][ T9112] mmap: syz.9.619 (9112) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 697.719917][ T9118] netlink: 292 bytes leftover after parsing attributes in process `syz.3.621'. [ 698.206236][ T8434] Bluetooth: hci5: Malformed LE Event: 0x1b [ 702.147352][ T6265] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 702.315908][ T6265] usb 10-1: Using ep0 maxpacket: 16 [ 702.318039][ T6265] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.318074][ T6265] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.318101][ T6265] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 702.318147][ T6265] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 702.318173][ T6265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.406888][ T6265] usb 10-1: config 0 descriptor?? [ 702.946191][ T6265] HID 045e:07da: Invalid code 65791 type 1 [ 702.968484][ T6265] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0002/input/input9 [ 703.127880][ T6265] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 703.236017][ T6265] usb 10-1: USB disconnect, device number 3 [ 703.542434][ T9162] fido_id[9162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 703.795896][ T9168] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 704.022963][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.028254][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.029019][ T8874] bridge_slave_0: entered allmulticast mode [ 704.035078][ T8874] bridge_slave_0: entered promiscuous mode [ 705.306047][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.306224][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.306494][ T8874] bridge_slave_1: entered allmulticast mode [ 705.309402][ T8874] bridge_slave_1: entered promiscuous mode [ 707.240994][ T9179] warning: `syz.9.643' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 708.009227][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.197821][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.388841][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 708.564895][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.564922][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.564958][ T5923] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 708.564977][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.612744][ T5923] usb 4-1: config 0 descriptor?? [ 709.147187][ T8842] hsr_slave_0: left promiscuous mode [ 709.228296][ T5923] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 709.228857][ T5923] arvo 0003:1E7D:30D4.0003: parse failed [ 709.228912][ T5923] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 709.315876][ T8842] hsr_slave_1: left promiscuous mode [ 709.317954][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.317983][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.403533][ T5923] usb 4-1: USB disconnect, device number 2 [ 709.456543][ T8842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.456566][ T8842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.024991][ T8842] veth1_macvtap: left promiscuous mode [ 711.025102][ T8842] veth0_macvtap: left promiscuous mode [ 711.051928][ T8842] veth1_vlan: left promiscuous mode [ 711.052545][ T8842] veth0_vlan: left promiscuous mode [ 713.402241][ T8094] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 713.925802][ T8094] usb 2-1: Using ep0 maxpacket: 8 [ 713.928173][ T8094] usb 2-1: config 0 interface 0 has no altsetting 0 [ 713.928216][ T8094] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 713.928242][ T8094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.933943][ T8094] usb 2-1: config 0 descriptor?? [ 714.742934][ T8094] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 715.513983][ T8094] usb 2-1: USB disconnect, device number 6 [ 718.186698][ T8842] team0 (unregistering): Port device team_slave_1 removed [ 718.488788][ T8842] team0 (unregistering): Port device team_slave_0 removed [ 720.849763][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 720.854877][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 720.858196][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 720.905300][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 720.924121][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 721.402353][ T8874] team0: Port device team_slave_0 added [ 721.421994][ T9226] kthread_run failed with err -4 [ 721.789829][ T9238] vxcan1 speed is unknown, defaulting to 1000 [ 723.634733][ T5115] Bluetooth: hci3: command tx timeout [ 723.796239][ T9246] Bluetooth: hci4: command 0x0406 tx timeout [ 723.796637][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 724.430604][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 724.615826][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 724.666267][ T5871] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 724.666303][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.666324][ T5871] usb 4-1: Product: syz [ 724.666341][ T5871] usb 4-1: Manufacturer: syz [ 724.666356][ T5871] usb 4-1: SerialNumber: syz [ 724.779028][ T5871] usb 4-1: config 0 descriptor?? [ 724.890185][ T5871] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 724.891053][ T5871] dvb-usb: bulk message failed: -22 (2/0) [ 724.959648][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.981361][ T5871] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 724.981471][ T5871] usb 4-1: media controller created [ 725.079914][ T9264] dvb-usb: bulk message failed: -22 (7/0) [ 725.188238][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.615348][ T5871] usb 4-1: selecting invalid altsetting 7 [ 725.615435][ T5871] cxusb: set interface failed [ 725.615488][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 725.636485][ T5807] Bluetooth: hci3: command tx timeout [ 725.798664][ T5871] DVB: Unable to find symbol lgdt330x_attach() [ 725.798684][ T5871] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 726.145789][ T5871] rc_core: IR keymap rc-dvico-portable not found [ 726.145813][ T5871] Registered IR keymap rc-empty [ 726.162572][ T5871] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 726.252049][ T9297] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.670'. [ 726.366839][ T5871] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 726.379655][ T5871] dvb-usb: schedule remote query interval to 100 msecs. [ 726.379680][ T5871] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 726.490219][ T8437] dvb-usb: bulk message failed: -22 (1/0) [ 726.495283][ T5871] usb 4-1: USB disconnect, device number 3 [ 726.632815][ T8842] bridge_slave_1: left allmulticast mode [ 726.632848][ T8842] bridge_slave_1: left promiscuous mode [ 726.633132][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.833574][ T8842] bridge_slave_0: left allmulticast mode [ 726.833610][ T8842] bridge_slave_0: left promiscuous mode [ 726.833905][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.214205][ T5871] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 728.568725][ T5807] Bluetooth: hci3: command tx timeout [ 729.101422][ T5871] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 729.287741][ T8842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.315791][ T5871] usb 4-1: device descriptor read/all, error -71 [ 730.427242][ T8842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.590587][ T8842] bond0 (unregistering): Released all slaves [ 730.597034][ T5807] Bluetooth: hci3: command tx timeout [ 731.848445][ T9238] chnl_net:caif_netlink_parms(): no params data found [ 735.329680][ T9388] F2FS-fs: Conflicting test_dummy_encryption options [ 736.037111][ T8842] team0 (unregistering): Port device team_slave_0 removed [ 736.926867][ T9400] netlink: 264 bytes leftover after parsing attributes in process `syz.9.699'. [ 737.229494][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.707'. [ 737.346064][ T8931] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 737.662740][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.662976][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.663227][ T9238] bridge_slave_0: entered allmulticast mode [ 737.692027][ T9238] bridge_slave_0: entered promiscuous mode [ 737.705764][ T8931] usb 6-1: Using ep0 maxpacket: 8 [ 737.708374][ T8931] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 737.712556][ T8931] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 737.712591][ T8931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.712614][ T8931] usb 6-1: Product: syz [ 737.712629][ T8931] usb 6-1: Manufacturer: syz [ 737.712652][ T8931] usb 6-1: SerialNumber: syz [ 737.767521][ T8931] usb 6-1: config 0 descriptor?? [ 737.769445][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.769659][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.769916][ T9238] bridge_slave_1: entered allmulticast mode [ 737.775515][ T8931] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 737.775585][ T8931] usb 6-1: setting power ON [ 737.775605][ T8931] dvb-usb: bulk message failed: -22 (2/0) [ 737.826387][ T8931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 737.827221][ T8931] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 737.827272][ T8931] usb 6-1: media controller created [ 737.880144][ T9238] bridge_slave_1: entered promiscuous mode [ 737.925300][ T8931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 737.982613][ T8931] usb 6-1: selecting invalid altsetting 6 [ 737.982641][ T8931] usb 6-1: digital interface selection failed (-22) [ 737.982658][ T8931] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 738.009864][ T8931] usb 6-1: setting power OFF [ 738.010054][ T8931] dvb-usb: bulk message failed: -22 (2/0) [ 738.010075][ T8931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 738.010090][ T8931] (NULL device *): no alternate interface [ 738.012642][ T9436] dvb-usb: bulk message failed: -22 (3/0) [ 738.012669][ T9436] dvb-usb: bulk message failed: -22 (3/0) [ 738.296563][ T8931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 738.315215][ T8931] usb 6-1: USB disconnect, device number 5 [ 738.545607][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.609627][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.359176][ T8931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 740.505794][ T8931] usb 2-1: Using ep0 maxpacket: 16 [ 740.511119][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.718'. [ 740.511159][ T9468] tipc: Started in network mode [ 740.511186][ T9468] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 740.512835][ T9468] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 740.513739][ T9468] tipc: Enabled bearer , priority 10 [ 740.525088][ T9238] team0: Port device team_slave_0 added [ 740.570979][ T8931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.571013][ T8931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.571054][ T8931] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 740.571078][ T8931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.616615][ T8931] usb 2-1: config 0 descriptor?? [ 740.620557][ T9238] team0: Port device team_slave_1 added [ 740.827724][ T9470] tipc: Started in network mode [ 740.827754][ T9470] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 740.827803][ T9470] tipc: Enabling of bearer rejected, failed to enable media [ 740.874067][ T9473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.721'. [ 741.126478][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.126496][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.126521][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.139336][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.139387][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.139480][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.231394][ T8931] razer 0003:1532:011B.0005: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.1-1/input0 [ 741.276514][ T5871] usb 2-1: USB disconnect, device number 7 [ 741.355977][ T9476] fido_id[9476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 741.633286][ T9] tipc: Node number set to 1 [ 741.902753][ T9238] hsr_slave_0: entered promiscuous mode [ 741.913677][ T9238] hsr_slave_1: entered promiscuous mode [ 741.922737][ T9238] debugfs: 'hsr0' already exists in 'hsr' [ 741.922769][ T9238] Cannot create hsr debugfs directory [ 742.289891][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 742.289912][ T37] audit: type=1326 audit(1767665196.819:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.296700][ T37] audit: type=1326 audit(1767665196.819:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.298775][ T37] audit: type=1326 audit(1767665196.829:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.301597][ T37] audit: type=1326 audit(1767665196.829:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.304409][ T37] audit: type=1326 audit(1767665196.829:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.306423][ T37] audit: type=1326 audit(1767665196.829:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.319935][ T37] audit: type=1326 audit(1767665196.839:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9493 comm="syz.5.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353723f749 code=0x7ffc0000 [ 742.536141][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 742.696077][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 742.700546][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.700596][ T9] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 742.700613][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.721014][ T9] usb 10-1: config 0 descriptor?? [ 742.785960][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 742.949438][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 742.968885][ T5871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.968949][ T5871] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 742.969024][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.096107][ T5871] usb 6-1: config 0 descriptor?? [ 743.169933][ T5871] dvb-usb: found a 'TeVii S662' in warm state. [ 743.169992][ T5871] dw2102: su3000_power_ctrl: 1, initialized 0 [ 743.175411][ T5871] dvb-usb: bulk message failed: -22 (2/0) [ 743.238602][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238647][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238673][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238698][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238724][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238747][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238770][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238794][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238817][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.238841][ T9] elecom 0003:056E:010D.0006: unknown main item tag 0x0 [ 743.262670][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.316486][ T5871] dvbdev: DVB: registering new adapter (TeVii S662) [ 743.316647][ T5871] usb 6-1: media controller created [ 743.317832][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.317884][ T5871] dw2102: i2c transfer failed. [ 743.317939][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.317980][ T5871] dw2102: i2c transfer failed. [ 743.318024][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.318059][ T5871] dw2102: i2c transfer failed. [ 743.318108][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.318142][ T5871] dw2102: i2c transfer failed. [ 743.318185][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.318225][ T5871] dw2102: i2c transfer failed. [ 743.318267][ T5871] dvb-usb: bulk message failed: -22 (6/0) [ 743.318300][ T5871] dw2102: i2c transfer failed. [ 743.318330][ T5871] dvb-usb: MAC address: 02:02:02:02:02:02 [ 743.328402][ T9] elecom 0003:056E:010D.0006: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.9-1/input0 [ 743.430158][ T9496] dvb-usb: bulk message failed: -22 (5/0) [ 743.430182][ T9496] dw2102: i2c transfer failed. [ 743.496136][ T9] usb 10-1: USB disconnect, device number 4 [ 743.563583][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.665409][ T9504] fido_id[9504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 743.765587][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 743.765610][ T5871] dw2102: command 0x0e transfer failed. [ 743.765621][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 743.765634][ T5871] dw2102: command 0x0e transfer failed. [ 744.075901][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 744.075929][ T5871] dw2102: command 0x0e transfer failed. [ 744.075939][ T5871] dvb-usb: bulk message failed: -22 (3/0) [ 744.075955][ T5871] dw2102: command 0x0e transfer failed. [ 744.075965][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 744.075981][ T5871] dw2102: command 0x51 transfer failed. [ 744.075991][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 744.076005][ T5871] dw2102: i2c probe for address 0x68 failed. [ 744.076018][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 744.076032][ T5871] dw2102: i2c probe for address 0x69 failed. [ 744.076053][ T5871] dvb-usb: bulk message failed: -22 (5/0) [ 744.076068][ T5871] dw2102: i2c probe for address 0x6a failed. [ 744.076079][ T5871] dw2102: probing for demodulator failed. Is the external power switched on? [ 744.076092][ T5871] dvb-usb: no frontend was attached by 'TeVii S662' [ 744.336241][ T5871] rc_core: IR keymap rc-tt-1500 not found [ 744.336328][ T5871] Registered IR keymap rc-empty [ 744.375179][ T5871] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 744.407491][ T5871] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input11 [ 744.410910][ T5871] dvb-usb: schedule remote query interval to 250 msecs. [ 744.410934][ T5871] dw2102: su3000_power_ctrl: 0, initialized 1 [ 744.410948][ T5871] dvb-usb: TeVii S662 successfully initialized and connected. [ 744.415154][ T5871] usb 6-1: USB disconnect, device number 6 [ 744.843088][ T5871] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 745.385981][ T5871] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 745.541740][ T5871] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 745.541836][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 745.541860][ T5871] usb 6-1: Product: syz [ 745.541876][ T5871] usb 6-1: Manufacturer: syz [ 745.541892][ T5871] usb 6-1: SerialNumber: syz [ 745.601236][ T5871] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 745.824566][ T9238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 745.898295][ T9238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 745.980327][ T9238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 746.041120][ T9238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 746.061070][ T5871] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 746.061121][ T5871] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 746.292055][ T8940] usb 6-1: USB disconnect, device number 7 [ 746.359321][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.407264][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.468073][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.468192][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.503683][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.503933][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.870670][ T9559] tipc: Enabled bearer , priority 10 [ 747.597213][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.771133][ T9238] veth0_vlan: entered promiscuous mode [ 748.837331][ T9238] veth1_vlan: entered promiscuous mode [ 748.952398][ T9238] veth0_macvtap: entered promiscuous mode [ 749.026426][ T9238] veth1_macvtap: entered promiscuous mode [ 749.143500][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.198258][ T9609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 749.242581][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.378220][ T3568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.399824][ T5807] Bluetooth: hci5: command 0x0406 tx timeout [ 749.400162][ T3568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.432481][ T3568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.445388][ T3568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.456044][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.456069][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.921656][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.921679][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.683663][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.683749][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.927316][ T6265] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 756.094847][ T6265] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 756.094880][ T6265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.120770][ T6265] usb 4-1: config 0 descriptor?? [ 756.147755][ T6265] gspca_main: spca508-2.14.0 probing 8086:0110 [ 756.354860][ T6265] gspca_spca508: reg_read err -32 [ 756.414121][ T9697] sp0: Synchronizing with TNC [ 756.576030][ T6265] gspca_spca508: reg_read err -71 [ 756.576439][ T6265] gspca_spca508: reg_read err -71 [ 756.576837][ T6265] gspca_spca508: reg_read err -71 [ 756.577242][ T6265] gspca_spca508: reg write: error -71 [ 756.579319][ T6265] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 756.627181][ T6265] usb 4-1: USB disconnect, device number 6 [ 757.508769][ T61] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 757.521414][ T9721] [U] zÍwó,€Îlé¹MLï}¨•ó|¡²®%†þþë«p®,HÐð±Ò?)ñô [ 757.521529][ T9721] [U] £QÎÄÑZ!¾v¨vrŽ" Y [ 757.521574][ T9721] [U] 2eO [ 757.521614][ T9721] [U] سèéšñÎÕ׿•œµªG³ªÏä²V¾×èã÷–u”$F‚V9cª~SΦ»«m“HÅ;5kg zYYTRþt‘èÐÓ°ý;[°€Ú’‹‰ [ 757.521656][ T9721] [U] ÿUIñîE(H»¥yñGP¼b”©ËÅÏ KÏÙSÌœÂm•jt/YÏ [ 757.521688][ T9721] [U] ­Ýé1iÖæ-f>C…ªV¾=ôȯ!^øŽ&9r+LÿŠ…ÞõMGYñBÉ." [ 757.521772][ T9721] [U] !šTí·¥ ú(²æ˜ãTK§tø@Îâ¢q¼|ùº"}~ªýÒ˜ÜoÄR”¤xï¨åÙˉù8«©oôû±º¶Ôû¦MxÀf+Ÿv,$Í=stÆÀœÀ¥®EåÕ\g&5Þ ÛˇEQ¢A ÞoÕ9òõ­¤Ô„z`M*þüowg=ú¦ÀHÀ‰Á;í—j|HGÞp´•@6livï”TÓ4ò^a¥‘å{wf2éÄ,ÒEMiô`á›g¥UÍõIáøº-Aú7þ:š^WPlºó^vžq•…cƒ}2 ÿ8R „H’‘U?V¢è¨kÜ;¼7ÏÉ¿ß8§±•5¿±NŠØ!Ÿ Š4 C~þ¼#¬çÚGü–_U¼: ÍÜLnûà*4QÀv¹¢O¼9ÅŒ¾u°f{]á}Žž-ý í-IË [c¬M [ 757.522099][ T9721] [U] ‚]‡ÐžÁÓ¤ 8rËïsôˆ©ŠÚyp²ÛÛå~Qâ¹ù_ê´‡YøàT|vðP áùYË:ì!"®þ¥p…•´âRJéZÀ4¤Xd§¼Às–w³„]1ÍÏŸå÷Ó¦•å1‡'à<˜ÚJ ¥?¦iw1U #½-´ýzjê;‡Á¼{ä›OakÚr{§âÓ¤­ûÅ÷6ëƒLÉv¯S4÷xì—1büŸ¿x¨2ùéŒi‡Ìþ¥dwÝܶ—mr,h«%j`¹o7Q¾­£Î…Ó8î$¦ª2Hbý£U¶–85f™ ¨é¢%Šœ‘&à ß,è_†g¸ãWñÆ”Dç“vš@ù9ĨM¹ô–%þ ánfÕoýMéoPsÏHÓµ¢#»^\ÊíVòj; [ 757.611483][ T9720] [U] ˜À5]©åi#ÚR-yÚ›YW.ôöîíÔ±(*ÔSøÏë%ÕîðíübŽ™}ÆJý3k]‹ìè–‚FóÉ¿˜¦l­›Nm‡Ç·_EÂ’Š—’E¡=@f¨%_‰DØ=K¬ž¥qžmç'ŠrRP1¬¹´MtÐÁpˆ'~æ/¼þ]îör}£ÆT&=›á½ñSÎ7ÆØûàƒ7 [ 760.869070][ T9778] netlink: 'syz.5.816': attribute type 4 has an invalid length. [ 761.559012][ T61] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 761.559317][ T61] Bluetooth: hci5: Injecting HCI hardware error event [ 761.561813][ T5807] Bluetooth: hci5: hardware error 0x00 [ 764.165840][ T6265] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 764.200586][ T5807] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 764.358180][ T6265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.358216][ T6265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.358259][ T6265] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 764.358283][ T6265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.428435][ T6265] usb 8-1: config 0 descriptor?? [ 764.941434][ T6265] hid_parser_main: 54 callbacks suppressed [ 764.941464][ T6265] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 764.941497][ T6265] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 764.941568][ T6265] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 764.941597][ T6265] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 764.941625][ T6265] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 765.021851][ T6265] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 765.097286][ T6265] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 0 [ 765.097338][ T6265] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 765.097397][ T6265] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 765.097419][ T6265] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 765.104488][ T6265] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 765.310804][ T6316] usb 8-1: USB disconnect, device number 2 [ 765.962012][ T9846] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 770.435873][ T9884] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 770.483394][ T9884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 770.877206][ T9895] program syz.1.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.352409][ T9890] vxcan1 speed is unknown, defaulting to 1000 [ 773.780069][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.862'. [ 774.132141][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'. [ 778.481600][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 778.514840][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 781.207405][ T9972] syz.5.879 (9972) used greatest stack depth: 17952 bytes left [ 786.597088][ T8931] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 786.795982][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 787.000582][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 787.082182][ T8931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.082220][ T8931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.082265][ T8931] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 787.082290][ T8931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.152378][ T10] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 787.152414][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.152435][ T10] usb 10-1: Product: syz [ 787.152450][ T10] usb 10-1: Manufacturer: syz [ 787.152466][ T10] usb 10-1: SerialNumber: syz [ 787.234292][ T8931] usb 2-1: config 0 descriptor?? [ 787.262351][ T10] usb 10-1: config 0 descriptor?? [ 787.459061][ T10] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 787.536770][ T10] usb 10-1: Detected FT-X [ 787.593966][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 788.228605][ T10] ftdi_sio 10-1:0.0: GPIO initialisation failed: -32 [ 788.243072][ T10] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 788.253042][ T10] usb 10-1: USB disconnect, device number 5 [ 788.329997][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 788.330826][ T10] ftdi_sio 10-1:0.0: device disconnected [ 788.923280][ T8931] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 788.923331][ T8931] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 788.923360][ T8931] steelseries 0003:1038:12B6.0008: unknown main item tag 0x6 [ 788.923387][ T8931] steelseries 0003:1038:12B6.0008: item fetching failed at offset 4/7 [ 788.924412][ T8931] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 789.086245][ T8931] usb 2-1: USB disconnect, device number 8 [ 792.157199][ T5880] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 792.315922][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 792.318276][ T5880] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 792.318305][ T5880] usb 10-1: config 0 has no interface number 0 [ 792.318368][ T5880] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.318398][ T5880] usb 10-1: config 0 interface 85 has no altsetting 0 [ 792.323159][ T5880] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 792.323191][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.323212][ T5880] usb 10-1: Product: syz [ 792.323228][ T5880] usb 10-1: Manufacturer: syz [ 792.323243][ T5880] usb 10-1: SerialNumber: syz [ 792.458942][ T5880] usb 10-1: config 0 descriptor?? [ 793.127685][ T5880] appletouch 10-1:0.85: Geyser mode initialized. [ 793.156708][ T5880] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input12 [ 793.338370][ C1] appletouch 10-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 793.783062][ T5880] usb 10-1: USB disconnect, device number 6 [ 795.605221][ T5880] appletouch 10-1:0.85: input: appletouch disconnected [ 807.758185][T10306] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 808.600775][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.983'. [ 808.609631][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.983'. [ 813.888820][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.888897][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.845475][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.5.995'. [ 815.689803][ T5950] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 815.939549][T10372] program syz.9.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.028230][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.028260][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.029813][ T5950] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 816.029842][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 816.029864][ T5950] usb 2-1: SerialNumber: syz [ 816.580062][ T5950] usb 2-1: 0:2 : does not exist [ 816.684936][ T5950] usb 2-1: USB disconnect, device number 9 [ 817.214286][T10379] udevd[10379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.704790][T10414] netlink: 'syz.5.1015': attribute type 11 has an invalid length. [ 823.987958][T10461] TCP: tcp_parse_options: Illegal window scaling value 163 > 14 received [ 824.035882][ T6265] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 824.295511][ T6265] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 824.295551][ T6265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.295573][ T6265] usb 2-1: Product: syz [ 824.295589][ T6265] usb 2-1: Manufacturer: syz [ 824.323161][ T6265] usb 2-1: SerialNumber: syz [ 824.353806][ T6265] usb 2-1: config 0 descriptor?? [ 824.390827][ T6265] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 824.408214][ T6265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.409199][ T6265] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 824.409262][ T6265] usb 2-1: media controller created [ 824.462476][ T6265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.789236][ T6265] DVB: Unable to find symbol mt352_attach() [ 825.085254][ T6265] DVB: Unable to find symbol nxt6000_attach() [ 825.085272][ T6265] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 825.177063][ T6265] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 825.208355][ T6265] dvb-usb: schedule remote query interval to 1000 msecs. [ 825.208382][ T6265] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 825.208416][ T6265] dvb-usb: bulk message failed: -22 (7/0) [ 825.208448][ T6265] dvb-usb: bulk message failed: -22 (7/0) [ 825.327860][ T5880] usb 2-1: USB disconnect, device number 10 [ 826.388896][ T5880] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 833.150692][T10566] vti0: entered promiscuous mode [ 833.150735][T10566] vti0: entered allmulticast mode [ 834.114529][ T8094] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 834.285760][ T8094] usb 8-1: Using ep0 maxpacket: 32 [ 834.291638][ T8094] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 834.291668][ T8094] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 834.291690][ T8094] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 834.291713][ T8094] usb 8-1: config 1 has no interface number 0 [ 834.291761][ T8094] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 834.291789][ T8094] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 834.291832][ T8094] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 834.291856][ T8094] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.432792][ T8094] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 834.820704][ T8094] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 835.312035][ T8094] usb 8-1: USB disconnect, device number 3 [ 835.315447][ T8094] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 836.912401][T10609] overlayfs: workdir and upperdir must be separate subtrees [ 843.051779][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.087371][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 843.089038][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 843.091041][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 843.091954][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 843.524015][T10660] vxcan1 speed is unknown, defaulting to 1000 [ 845.236002][ T61] Bluetooth: hci2: command tx timeout [ 846.837104][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 847.320521][ T61] Bluetooth: hci2: command tx timeout [ 849.396030][ T5807] Bluetooth: hci2: command tx timeout [ 851.182259][T10660] chnl_net:caif_netlink_parms(): no params data found [ 851.475824][ T5807] Bluetooth: hci2: command tx timeout [ 854.000446][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.000689][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.000962][T10660] bridge_slave_0: entered allmulticast mode [ 854.045913][T10660] bridge_slave_0: entered promiscuous mode [ 854.085132][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.105920][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.106305][T10660] bridge_slave_1: entered allmulticast mode [ 854.109264][T10660] bridge_slave_1: entered promiscuous mode [ 856.016834][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.016865][T10779] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.065852][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.065893][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.133936][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.134030][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.134047][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 856.188767][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.850048][T10660] team0: Port device team_slave_0 added [ 856.854277][T10660] team0: Port device team_slave_1 added [ 857.110124][T10794] program syz.7.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.260241][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 862.294962][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 862.336283][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 862.341099][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 862.342104][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 862.717311][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.717331][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.717362][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.788315][T10871] pimreg: tun_chr_ioctl cmd 1074812118 [ 862.793610][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.793630][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.793658][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.436670][ T61] Bluetooth: hci4: command tx timeout [ 866.223142][T10895] io-wq is not configured for unbound workers [ 866.516468][ T61] Bluetooth: hci4: command tx timeout [ 867.094961][T10660] hsr_slave_0: entered promiscuous mode [ 867.106063][T10660] hsr_slave_1: entered promiscuous mode [ 867.107266][T10660] debugfs: 'hsr0' already exists in 'hsr' [ 867.107293][T10660] Cannot create hsr debugfs directory [ 867.176866][T10873] vxcan1 speed is unknown, defaulting to 1000 [ 868.596420][ T61] Bluetooth: hci4: command tx timeout [ 870.677464][ T61] Bluetooth: hci4: command tx timeout [ 872.019670][T10873] chnl_net:caif_netlink_parms(): no params data found [ 872.408356][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 872.464646][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 872.468355][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 872.470883][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 872.472779][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 873.414347][T10920] vxcan1 speed is unknown, defaulting to 1000 [ 873.425530][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.434050][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.434336][T10873] bridge_slave_0: entered allmulticast mode [ 873.452632][T10873] bridge_slave_0: entered promiscuous mode [ 873.546810][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.546951][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.547225][T10873] bridge_slave_1: entered allmulticast mode [ 873.550109][T10873] bridge_slave_1: entered promiscuous mode [ 874.605832][ T5807] Bluetooth: hci6: command tx timeout [ 875.332915][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.333012][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.675762][ T5807] Bluetooth: hci6: command tx timeout [ 876.841674][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.874642][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.313359][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 877.338701][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 877.342780][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 877.383520][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 877.384523][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 878.755915][ T61] Bluetooth: hci6: command tx timeout [ 879.192492][ T3466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.475880][ T61] Bluetooth: hci7: command tx timeout [ 880.163847][T10873] team0: Port device team_slave_0 added [ 880.186324][T10873] team0: Port device team_slave_1 added [ 880.835849][ T61] Bluetooth: hci6: command tx timeout [ 881.133493][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.133514][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.133544][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.199442][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.199463][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.199492][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.200230][T10926] vxcan1 speed is unknown, defaulting to 1000 [ 881.557287][ T61] Bluetooth: hci7: command tx timeout [ 882.774580][T10873] hsr_slave_0: entered promiscuous mode [ 882.782550][T10873] hsr_slave_1: entered promiscuous mode [ 882.783720][T10873] debugfs: 'hsr0' already exists in 'hsr' [ 882.783747][T10873] Cannot create hsr debugfs directory [ 883.635775][ T61] Bluetooth: hci7: command tx timeout [ 883.973287][ T5807] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 884.012197][ T5807] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 884.156014][ T5807] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 884.158012][ T5807] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 884.159786][ T5807] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 884.602122][T10920] chnl_net:caif_netlink_parms(): no params data found [ 885.715945][ T5807] Bluetooth: hci7: command tx timeout [ 886.074878][T10936] vxcan1 speed is unknown, defaulting to 1000 [ 886.275836][ T5807] Bluetooth: hci8: command tx timeout [ 887.978319][T10920] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.978563][T10920] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.978844][T10920] bridge_slave_0: entered allmulticast mode [ 887.982259][T10920] bridge_slave_0: entered promiscuous mode [ 888.038222][T10920] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.038366][T10920] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.038627][T10920] bridge_slave_1: entered allmulticast mode [ 888.041577][T10920] bridge_slave_1: entered promiscuous mode [ 888.355732][ T5807] Bluetooth: hci8: command tx timeout [ 888.720747][T10926] chnl_net:caif_netlink_parms(): no params data found [ 888.768662][T10920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.440399][ T5807] Bluetooth: hci8: command tx timeout [ 892.122750][T10920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.515978][ T5807] Bluetooth: hci8: command tx timeout [ 900.067939][T10920] team0: Port device team_slave_0 added [ 900.105119][T10920] team0: Port device team_slave_1 added [ 902.571673][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.612461][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.615434][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.632856][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.633792][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.428061][T10920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.428081][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.428112][T10920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.553917][T10920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.553938][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.553969][T10920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.754206][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.754427][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.754650][T10926] bridge_slave_0: entered allmulticast mode [ 904.756236][ T5807] Bluetooth: hci1: command tx timeout [ 904.794517][T10926] bridge_slave_0: entered promiscuous mode [ 904.848352][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.848531][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.848819][T10926] bridge_slave_1: entered allmulticast mode [ 904.851748][T10926] bridge_slave_1: entered promiscuous mode [ 905.745000][T10991] vxcan1 speed is unknown, defaulting to 1000 [ 906.835868][ T61] Bluetooth: hci1: command tx timeout [ 908.274070][T10920] hsr_slave_0: entered promiscuous mode [ 908.300651][T10920] hsr_slave_1: entered promiscuous mode [ 908.301831][T10920] debugfs: 'hsr0' already exists in 'hsr' [ 908.301859][T10920] Cannot create hsr debugfs directory [ 908.302441][T10936] chnl_net:caif_netlink_parms(): no params data found [ 908.352022][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.915937][ T61] Bluetooth: hci1: command tx timeout [ 909.677345][ T3466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.189826][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.995945][ T61] Bluetooth: hci1: command tx timeout [ 912.893287][T10926] team0: Port device team_slave_0 added [ 914.208858][T10926] team0: Port device team_slave_1 added [ 917.230240][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.230261][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.230292][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.309504][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.309523][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.309554][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.310643][T10936] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.310885][T10936] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.311119][T10936] bridge_slave_0: entered allmulticast mode [ 917.314003][T10936] bridge_slave_0: entered promiscuous mode [ 917.488777][T10936] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.489937][T10936] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.490243][T10936] bridge_slave_1: entered allmulticast mode [ 917.493196][T10936] bridge_slave_1: entered promiscuous mode [ 921.835377][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 921.870702][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 921.874136][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 921.875531][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 921.926085][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 922.581289][T10936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.630786][T10926] hsr_slave_0: entered promiscuous mode [ 922.631921][T10926] hsr_slave_1: entered promiscuous mode [ 922.632737][T10926] debugfs: 'hsr0' already exists in 'hsr' [ 922.632757][T10926] Cannot create hsr debugfs directory [ 922.678113][T10936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.036131][ T5807] Bluetooth: hci3: command tx timeout [ 926.115827][ T5807] Bluetooth: hci3: command tx timeout [ 926.630024][T10936] team0: Port device team_slave_0 added [ 926.686973][T10936] team0: Port device team_slave_1 added [ 928.196058][ T5807] Bluetooth: hci3: command tx timeout [ 928.811797][T10936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.811819][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.811847][T10936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.863319][T11022] vxcan1 speed is unknown, defaulting to 1000 [ 928.952411][T10936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.952431][T10936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.952460][T10936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.192620][T10991] chnl_net:caif_netlink_parms(): no params data found [ 930.276037][ T5807] Bluetooth: hci3: command tx timeout [ 931.548332][T10936] hsr_slave_0: entered promiscuous mode [ 931.550732][T10936] hsr_slave_1: entered promiscuous mode [ 931.551958][T10936] debugfs: 'hsr0' already exists in 'hsr' [ 931.551985][T10936] Cannot create hsr debugfs directory [ 932.928880][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.932326][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.962513][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.983452][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.984408][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 933.850276][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.850516][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.851060][T10991] bridge_slave_0: entered allmulticast mode [ 933.880596][T10991] bridge_slave_0: entered promiscuous mode [ 933.921302][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.922220][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.922501][T10991] bridge_slave_1: entered allmulticast mode [ 933.952147][T10991] bridge_slave_1: entered promiscuous mode [ 935.075818][ T5807] Bluetooth: hci5: command tx timeout [ 936.745187][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.765846][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.765922][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.155703][ T5807] Bluetooth: hci5: command tx timeout [ 937.180312][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.235483][T11055] vxcan1 speed is unknown, defaulting to 1000 [ 937.868793][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 937.874833][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 937.893973][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 937.895468][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 937.919195][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 938.226969][T10991] team0: Port device team_slave_0 added [ 938.304310][T10991] team0: Port device team_slave_1 added [ 939.235740][ T5807] Bluetooth: hci5: command tx timeout [ 939.263255][T11022] chnl_net:caif_netlink_parms(): no params data found [ 939.280984][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.281001][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.281022][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.378874][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.378893][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.378925][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.435699][T11061] vxcan1 speed is unknown, defaulting to 1000 [ 939.956170][ T5807] Bluetooth: hci9: command tx timeout [ 941.326114][ T5807] Bluetooth: hci5: command tx timeout [ 942.039116][ T5807] Bluetooth: hci9: command tx timeout [ 942.827599][T10991] hsr_slave_0: entered promiscuous mode [ 942.829312][T10991] hsr_slave_1: entered promiscuous mode [ 942.831643][T10991] debugfs: 'hsr0' already exists in 'hsr' [ 942.831667][T10991] Cannot create hsr debugfs directory [ 944.115950][ T5807] Bluetooth: hci9: command tx timeout [ 944.797738][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 944.804178][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 944.832969][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 944.834413][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 944.869391][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 945.577147][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.580955][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.581252][T11022] bridge_slave_0: entered allmulticast mode [ 945.617844][T11022] bridge_slave_0: entered promiscuous mode [ 945.749077][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.749220][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.749835][T11022] bridge_slave_1: entered allmulticast mode [ 945.753224][T11022] bridge_slave_1: entered promiscuous mode [ 946.196220][ T5807] Bluetooth: hci9: command tx timeout [ 946.916221][ T5807] Bluetooth: hci10: command tx timeout [ 948.995989][ T5807] Bluetooth: hci10: command tx timeout [ 949.596207][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.721476][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.674241][T11108] vxcan1 speed is unknown, defaulting to 1000 [ 950.736144][T11022] team0: Port device team_slave_0 added [ 950.771677][T11055] chnl_net:caif_netlink_parms(): no params data found [ 951.075795][ T5807] Bluetooth: hci10: command tx timeout [ 951.285280][T11022] team0: Port device team_slave_1 added [ 953.156629][ T5807] Bluetooth: hci10: command tx timeout [ 953.824235][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.824255][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.824286][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.949717][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.949738][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.949769][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.889852][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.890100][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.890359][T11055] bridge_slave_0: entered allmulticast mode [ 955.918206][T11055] bridge_slave_0: entered promiscuous mode [ 955.941132][T11061] chnl_net:caif_netlink_parms(): no params data found [ 956.005934][T11022] hsr_slave_0: entered promiscuous mode [ 956.007865][T11022] hsr_slave_1: entered promiscuous mode [ 956.009137][T11022] debugfs: 'hsr0' already exists in 'hsr' [ 956.009166][T11022] Cannot create hsr debugfs directory [ 956.009599][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.010553][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.010909][T11055] bridge_slave_1: entered allmulticast mode [ 956.064495][T11055] bridge_slave_1: entered promiscuous mode [ 960.104583][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.159192][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.250178][T11055] team0: Port device team_slave_0 added [ 962.797363][T11055] team0: Port device team_slave_1 added [ 963.217609][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 963.243457][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 963.245327][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 963.270571][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 963.271534][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 964.951739][T11061] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.012237][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.045941][T11061] bridge_slave_0: entered allmulticast mode [ 965.048527][T11061] bridge_slave_0: entered promiscuous mode [ 965.316190][ T5807] Bluetooth: hci11: command tx timeout [ 965.412599][T11061] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.412738][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.413064][T11061] bridge_slave_1: entered allmulticast mode [ 965.440092][T11061] bridge_slave_1: entered promiscuous mode [ 965.486923][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.486942][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.486973][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.598303][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.598324][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.598353][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.395815][ T5807] Bluetooth: hci11: command tx timeout [ 967.818422][T11061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.847415][T11108] chnl_net:caif_netlink_parms(): no params data found [ 967.898854][T11061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.476099][ T5807] Bluetooth: hci11: command tx timeout [ 969.566298][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 970.914983][T11179] vxcan1 speed is unknown, defaulting to 1000 [ 971.555824][ T61] Bluetooth: hci11: command tx timeout [ 976.841756][ T3466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.837228][T11061] team0: Port device team_slave_0 added [ 977.854477][T11055] hsr_slave_0: entered promiscuous mode [ 977.867623][T11055] hsr_slave_1: entered promiscuous mode [ 977.868895][T11055] debugfs: 'hsr0' already exists in 'hsr' [ 977.868923][T11055] Cannot create hsr debugfs directory [ 977.932569][T11061] team0: Port device team_slave_1 added [ 981.313932][T11061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.313951][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.313981][T11061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.971932][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 981.991187][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 982.013588][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 982.015096][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 982.060802][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 982.162556][T11061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.162576][T11061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.162605][T11061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.582444][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.582667][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.582921][T11108] bridge_slave_0: entered allmulticast mode [ 982.584865][T11108] bridge_slave_0: entered promiscuous mode [ 982.658499][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.658667][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.658969][T11108] bridge_slave_1: entered allmulticast mode [ 982.660972][T11108] bridge_slave_1: entered promiscuous mode [ 984.116424][ T5115] Bluetooth: hci0: command tx timeout [ 984.927350][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 985.403430][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.460936][T11061] hsr_slave_0: entered promiscuous mode [ 985.462659][T11061] hsr_slave_1: entered promiscuous mode [ 985.463829][T11061] debugfs: 'hsr0' already exists in 'hsr' [ 985.463854][T11061] Cannot create hsr debugfs directory [ 985.559304][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.563873][T11194] vxcan1 speed is unknown, defaulting to 1000 [ 986.206399][ T5807] Bluetooth: hci0: command tx timeout [ 988.276028][ T5807] Bluetooth: hci0: command tx timeout [ 990.356131][ T5807] Bluetooth: hci0: command tx timeout [ 990.539978][T11108] team0: Port device team_slave_0 added [ 992.190234][T11108] team0: Port device team_slave_1 added [ 992.958474][ T61] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 992.988111][ T61] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 993.029030][ T61] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 993.048250][ T61] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 993.049781][ T61] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 994.222041][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.222060][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.222090][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.635857][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.635877][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.635905][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.195771][ T5115] Bluetooth: hci6: command 0x0406 tx timeout [ 995.195876][ T61] Bluetooth: hci12: command tx timeout [ 996.712675][T11179] chnl_net:caif_netlink_parms(): no params data found [ 997.236260][ T5807] Bluetooth: hci12: command tx timeout [ 997.484883][ T61] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 997.511957][ T61] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 997.515442][ T61] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 997.552065][ T61] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 997.553134][ T61] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 997.700648][T11108] hsr_slave_0: entered promiscuous mode [ 997.738133][T11108] hsr_slave_1: entered promiscuous mode [ 997.739418][T11108] debugfs: 'hsr0' already exists in 'hsr' [ 997.739459][T11108] Cannot create hsr debugfs directory [ 997.776618][T11215] vxcan1 speed is unknown, defaulting to 1000 [ 998.228841][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.228921][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.315832][ T5807] Bluetooth: hci12: command tx timeout [ 999.756617][ T5807] Bluetooth: hci13: command tx timeout [ 1000.275903][ T5807] Bluetooth: hci7: command 0x0406 tx timeout [ 1001.396310][ T5807] Bluetooth: hci12: command tx timeout [ 1001.808165][ T5807] Bluetooth: hci13: command tx timeout [ 1003.875966][ T61] Bluetooth: hci13: command tx timeout [ 1004.462596][ T5807] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1004.503890][ T5807] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1004.548252][ T5807] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1004.552147][ T5807] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1004.553528][ T5807] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1005.481312][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.482316][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.482678][T11179] bridge_slave_0: entered allmulticast mode [ 1005.509032][T11179] bridge_slave_0: entered promiscuous mode [ 1005.596624][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.596789][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.597134][T11179] bridge_slave_1: entered allmulticast mode [ 1005.621176][T11222] vxcan1 speed is unknown, defaulting to 1000 [ 1005.649542][T11179] bridge_slave_1: entered promiscuous mode [ 1005.956171][ T5807] Bluetooth: hci13: command tx timeout [ 1006.676118][ T5807] Bluetooth: hci9: command tx timeout [ 1008.755817][ T5807] Bluetooth: hci9: command tx timeout [ 1010.488290][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.488775][T11194] chnl_net:caif_netlink_parms(): no params data found [ 1010.525681][ T5807] Bluetooth: hci8: command 0x0406 tx timeout [ 1010.593935][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.626560][T11251] vxcan1 speed is unknown, defaulting to 1000 [ 1010.835911][ T5807] Bluetooth: hci9: command tx timeout [ 1012.916097][ T61] Bluetooth: hci9: command tx timeout [ 1013.313890][T11179] team0: Port device team_slave_0 added [ 1013.390854][T11179] team0: Port device team_slave_1 added [ 1015.896993][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.897012][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.897043][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.842824][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.842845][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.842876][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.894000][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.894235][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.894611][T11194] bridge_slave_0: entered allmulticast mode [ 1017.918365][T11194] bridge_slave_0: entered promiscuous mode [ 1019.716091][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.716231][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.716593][T11194] bridge_slave_1: entered allmulticast mode [ 1019.719905][T11194] bridge_slave_1: entered promiscuous mode [ 1022.330584][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.503671][ T5807] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1023.546057][ T5807] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1023.549528][ T5807] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1023.551517][ T5807] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1023.552445][ T5807] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1023.642455][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.675991][T11215] chnl_net:caif_netlink_parms(): no params data found [ 1025.605997][T11194] team0: Port device team_slave_0 added [ 1025.635875][ T5807] Bluetooth: hci10: command tx timeout [ 1025.687839][T11194] team0: Port device team_slave_1 added [ 1025.885107][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 1027.716244][ T61] Bluetooth: hci10: command tx timeout [ 1029.795889][ T61] Bluetooth: hci10: command tx timeout [ 1030.232407][T11280] vxcan1 speed is unknown, defaulting to 1000 [ 1030.427392][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.427414][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.427444][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.518276][T11222] chnl_net:caif_netlink_parms(): no params data found [ 1030.625897][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.625917][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.625947][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.318691][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.319853][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.320158][T11215] bridge_slave_0: entered allmulticast mode [ 1031.323176][T11215] bridge_slave_0: entered promiscuous mode [ 1031.875909][ T61] Bluetooth: hci10: command tx timeout [ 1032.400363][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.400536][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.400855][T11215] bridge_slave_1: entered allmulticast mode [ 1032.429138][T11215] bridge_slave_1: entered promiscuous mode [ 1034.284572][T11251] chnl_net:caif_netlink_parms(): no params data found [ 1034.810249][T11194] hsr_slave_0: entered promiscuous mode [ 1034.814106][T11194] hsr_slave_1: entered promiscuous mode [ 1034.815391][T11194] debugfs: 'hsr0' already exists in 'hsr' [ 1034.815428][T11194] Cannot create hsr debugfs directory [ 1034.923460][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.939754][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.236782][ T38] INFO: task syz-executor:10873 blocked for more than 143 seconds. [ 1037.236819][ T38] Tainted: G L syzkaller #0 [ 1037.236832][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.236843][ T38] task:syz-executor state:D stack:19736 pid:10873 tgid:10873 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1037.236912][ T38] Call Trace: [ 1037.236925][ T38] [ 1037.236939][ T38] __schedule+0x145f/0x5070 [ 1037.236997][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1037.237048][ T38] ? __pfx___schedule+0x10/0x10 [ 1037.237101][ T38] rt_mutex_schedule+0x77/0xf0 [ 1037.237138][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1037.237184][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1037.237227][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1037.237261][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1037.237293][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1037.237337][ T38] ? del_device_store+0xd1/0x360 [ 1037.237368][ T38] ? del_device_store+0xd1/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1037.237399][ T38] ? del_device_store+0xd1/0x360 [ 1037.237422][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1037.237458][ T38] del_device_store+0xd1/0x360 [ 1037.237481][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1037.237513][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1037.237537][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1037.237568][ T38] ? sysfs_kf_write+0x166/0x260 [ 1037.237603][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1037.237632][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1037.237667][ T38] vfs_write+0x5d5/0xb40 [ 1037.237706][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1037.237735][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1037.237763][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1037.237807][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1037.237840][ T38] ? do_sys_openat2+0x15a/0x200 [ 1037.237882][ T38] ksys_write+0x14b/0x260 [ 1037.237918][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1037.237963][ T38] do_syscall_64+0xec/0xf80 [ 1037.237985][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.238008][ T38] ? trace_irq_disable+0x37/0x100 [ 1037.238032][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1037.238060][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.238083][ T38] RIP: 0033:0x7f45596ae1ff [ 1037.238109][ T38] RSP: 002b:00007ffedfa01850 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1037.238132][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f45596ae1ff [ 1037.238148][ T38] RDX: 0000000000000001 RSI: 00007ffedfa018a0 RDI: 0000000000000005 [ 1037.238163][ T38] RBP: 00007f45597352cb R08: 0000000000000000 R09: 00007ffedfa016a7 [ 1037.238178][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1037.238191][ T38] R13: 00007ffedfa018a0 R14: 00007f455a434620 R15: 0000000000000003 [ 1037.238232][ T38] [ 1037.238293][ T38] [ 1037.238293][ T38] Showing all locks held in the system: [ 1037.238305][ T38] 4 locks held by rcuc/0/20: [ 1037.238321][ T38] 1 lock held by khungtaskd/38: [ 1037.238333][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1037.238431][ T38] 6 locks held by kworker/u8:10/3466: [ 1037.238444][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1037.238500][ T38] #1: ffffc9000da97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1037.238553][ T38] #2: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1037.238607][ T38] #3: ffff88805ea2b0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1037.238668][ T38] #4: ffff888027df7300 (&devlink->lock_key#20){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1037.238734][ T38] #5: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.238791][ T38] 2 locks held by dhcpcd/5460: [ 1037.238804][ T38] #0: ffffffff8e889b78 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 1037.238865][ T38] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 1037.238927][ T38] 2 locks held by getty/5561: [ 1037.238939][ T38] #0: ffff88814dd350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1037.238991][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1037.239040][ T38] 3 locks held by kworker/u8:19/6317: [ 1037.239053][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1037.239114][ T38] #1: ffffc90006a1fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1037.239168][ T38] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1037.239247][ T38] 7 locks held by syz-execu[ 1037.239247][ T38] 7 locks held by syz-executor/10660: [ 1037.239260][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.239323][ T38] #1: ffff888023468878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.239377][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.239439][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.239492][ T38] #4: ffff88805c35c0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1037.239550][ T38] #5: ffff88805c35d300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1037.239612][ T38] #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.239667][ T38] 1 lock held by syz.3.1088/10684: [ 1037.239680][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.239734][ T38] 4 locks held by syz-executor/10873: [ 1037.239747][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.239811][ T38] #1: ffff888035d36c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.239867][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.239927][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.239979][ T38] 4 locks held by syz-executor/10920: [ 1037.239989][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.240052][ T38] #1: ffff88805f2c6078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.240107][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.240166][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.240230][ T38] 4 locks held by syz-executor/10926: [ 1037.240243][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.240307][ T38] #1: ffff8880281b8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.240361][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.240422][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.240476][ T38] 4 locks held by syz-executor/10936: [ 1037.240489][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.240552][ T38] #1: ffff888032380478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.240606][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.240665][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.240720][ T38] 4 locks held by syz-executor/10991: [ 1037.240732][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.240796][ T38] #1: ffff88805d4fc078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.240845][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.240904][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.240959][ T38] 4 locks held by syz-executor/11022: [ 1037.240971][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.241035][ T38] #1: ffff888143fec878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.241088][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.241148][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.241203][ T38] 4 locks held by syz-executor/11055: [ 1037.241222][ T38] #0: ffff8880356a2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1037.241286][ T38] #1: ffff888057777c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1037.241339][ T38] #2: ffff888026f4fa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1037.241398][ T38] #3: ffffffff8e12c878 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1037.241451][ T38] 1 lock held by syz-executor/11061: [ 1037.241464][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.241519][ T38] 1 lock held by syz-executor/11108: [ 1037.241532][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.241586][ T38] 1 lock held by syz-executor/11179: [ 1037.241598][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1037.241652][ T38] 2 locks held by syz-executor/11194: [ 1037.241664][ T38] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1037.241725][ T38] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1037.241778][ T38] 2 locks held by syz-executor/11215: [ 1037.241790][ T38] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1037.241850][ T38] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1037.241903][ T38] 1 lock held by syz-executor/11222: [ 1037.241916][ T38] #0: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1037.241970][ T38] 2 locks held by syz-executor/11251: [ 1037.241983][ T38] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1037.242043][ T38] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1037.242097][ T38] 2 locks held by syz-executor/11280: [ 1037.242110][ T38] #0: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1037.242160][ T38] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1037.242227][ T38] [ 1037.242233][ T38] ============================================= [ 1037.242233][ T38] [ 1037.242243][ T38] NMI backtrace for cpu 1 [ 1037.242276][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.242306][ T38] Tainted: [L]=SOFTLOCKUP [ 1037.242314][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1037.242329][ T38] Call Trace: [ 1037.242338][ T38] [ 1037.242348][ T38] dump_stack_lvl+0xe8/0x150 [ 1037.242382][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1037.242411][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1037.242438][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1037.242471][ T38] sys_info+0x135/0x170 [ 1037.242496][ T38] watchdog+0xf95/0xfe0 [ 1037.242526][ T38] ? watchdog+0x20a/0xfe0 [ 1037.242559][ T38] kthread+0x711/0x8a0 [ 1037.242596][ T38] ? __pfx_watchdog+0x10/0x10 [ 1037.242619][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.242648][ T38] ? rt_spin_unlock+0x150/0x200 [ 1037.242683][ T38] ? rt_spin_unlock+0x161/0x200 [ 1037.242711][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.242743][ T38] ret_from_fork+0x510/0xa50 [ 1037.242770][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.242793][ T38] ? __switch_to+0xc9e/0x1480 [ 1037.242831][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.242864][ T38] ret_from_fork_asm+0x1a/0x30 [ 1037.242914][ T38] [ 1037.242922][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1037.242955][ C0] NMI backtrace for cpu 0 [ 1037.242979][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.243005][ C0] Tainted: [L]=SOFTLOCKUP [ 1037.243012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1037.243024][ C0] RIP: 0010:unwind_next_frame+0x138f/0x23d0 [ 1037.243053][ C0] Code: 14 24 4d 89 3c 24 41 0f b6 44 2d 00 84 c0 0f 85 09 0e 00 00 c6 03 00 4c 8b 64 24 48 4c 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 <84> c0 0f 85 73 0b 00 00 41 0f b6 04 2f 84 c0 0f 85 8a 0b 00 00 0f [ 1037.243070][ C0] RSP: 0018:ffffc90000196818 EFLAGS: 00000246 [ 1037.243086][ C0] RAX: 0000000000000000 RBX: ffffc90000196920 RCX: 0000000000000000 [ 1037.243099][ C0] RDX: ffffffff8f687112 RSI: 0000000000000000 RDI: ffffc90000196948 [ 1037.243112][ C0] RBP: dffffc0000000000 R08: ffffc90000196947 R09: 0000000000000000 [ 1037.243126][ C0] R10: ffffc90000196938 R11: fffff52000032d29 R12: ffffc90000196938 [ 1037.243141][ C0] R13: 1ffff92000032d1f R14: ffffc900001968e8 R15: 1ffffffff1ed0e22 [ 1037.243155][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1037.243170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.243183][ C0] CR2: 00007f2a9d08b000 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 1037.243201][ C0] Call Trace: [ 1037.243208][ C0] [ 1037.243219][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1037.243246][ C0] ? __local_bh_enable_ip+0x171/0x2c0 [ 1037.243271][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1037.243296][ C0] arch_stack_walk+0x11c/0x150 [ 1037.243324][ C0] ? rcu_cpu_kthread+0xbec/0x1af0 [ 1037.243355][ C0] stack_trace_save+0x9c/0xe0 [ 1037.243378][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1037.243401][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1037.243428][ C0] kasan_save_track+0x3e/0x80 [ 1037.243455][ C0] ? kasan_save_track+0x3e/0x80 [ 1037.243480][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1037.243507][ C0] ? kmem_cache_alloc_noprof+0x18d/0x6c0 [ 1037.243534][ C0] ? fill_pool+0x100/0x570 [ 1037.243557][ C0] ? debug_objects_fill_pool+0x9b/0xd0 [ 1037.243580][ C0] ? debug_object_activate+0x36/0x4e0 [ 1037.243603][ C0] ? call_rcu+0x43/0x890 [ 1037.243619][ C0] ? skb_release_head_state+0x71/0x360 [ 1037.243642][ C0] ? consume_skb+0x60/0xf0 [ 1037.243661][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1037.243682][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 1037.243701][ C0] ? nft_do_chain+0x40c/0x1920 [ 1037.243718][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 1037.243737][ C0] ? nf_hook_slow+0xc5/0x220 [ 1037.243762][ C0] ? NF_HOOK+0x206/0x3a0 [ 1037.243785][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1037.243808][ C0] ? __netif_receive_skb+0x143/0x380 [ 1037.243825][ C0] ? process_backlog+0x315/0x8f0 [ 1037.243844][ C0] ? __napi_poll+0xae/0x520 [ 1037.243859][ C0] ? net_rx_action+0x64a/0xdb0 [ 1037.243878][ C0] ? handle_softirqs+0x1df/0x650 [ 1037.243898][ C0] ? __local_bh_enable_ip+0x171/0x2c0 [ 1037.243939][ C0] ? __slab_alloc+0xc6/0x1f0 [ 1037.243959][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1037.243993][ C0] ? fill_pool+0x100/0x570 [ 1037.244016][ C0] kmem_cache_alloc_noprof+0x18d/0x6c0 [ 1037.244048][ C0] fill_pool+0x100/0x570 [ 1037.244071][ C0] ? debug_objects_fill_pool+0x73/0xd0 [ 1037.244096][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1037.244124][ C0] ? debug_objects_fill_pool+0x73/0xd0 [ 1037.244146][ C0] ? debug_objects_fill_pool+0x73/0xd0 [ 1037.244171][ C0] debug_objects_fill_pool+0x9b/0xd0 [ 1037.244194][ C0] debug_object_activate+0x36/0x4e0 [ 1037.244217][ C0] ? __pfx_rcuref_put_slowpath+0x10/0x10 [ 1037.244240][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1037.244268][ C0] call_rcu+0x43/0x890 [ 1037.244289][ C0] ? dst_release+0x126/0x1b0 [ 1037.244318][ C0] skb_release_head_state+0x71/0x360 [ 1037.244342][ C0] consume_skb+0x60/0xf0 [ 1037.244364][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 1037.244388][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1037.244411][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1037.244432][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1037.244453][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1037.244476][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1037.244506][ C0] nft_do_chain+0x40c/0x1920 [ 1037.244530][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1037.244547][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 1037.244569][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1037.244609][ C0] nft_do_chain_inet+0x25d/0x340 [ 1037.244628][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1037.244653][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1037.244677][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1037.244701][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1037.244722][ C0] nf_hook_slow+0xc5/0x220 [ 1037.244752][ C0] NF_HOOK+0x206/0x3a0 [ 1037.244777][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1037.244803][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1037.244826][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1037.244849][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1037.244876][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1037.244903][ C0] ? skb_dst+0x4f/0xd0 [ 1037.244928][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1037.244955][ C0] NF_HOOK+0x30c/0x3a0 [ 1037.244985][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1037.245010][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1037.245033][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1037.245058][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1037.245089][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1037.245112][ C0] __netif_receive_skb+0x143/0x380 [ 1037.245133][ C0] ? process_backlog+0x272/0x8f0 [ 1037.245153][ C0] process_backlog+0x315/0x8f0 [ 1037.245178][ C0] __napi_poll+0xae/0x520 [ 1037.245197][ C0] net_rx_action+0x64a/0xdb0 [ 1037.245227][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1037.245246][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1037.245282][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1037.245322][ C0] handle_softirqs+0x1df/0x650 [ 1037.245350][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 1037.245372][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 1037.245401][ C0] rcu_cpu_kthread+0xbec/0x1af0 [ 1037.245433][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 1037.245469][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1037.245507][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1037.245536][ C0] ? __pfx_rcu_cpu_kthread_should_run+0x10/0x10 [ 1037.245571][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1037.245595][ C0] smpboot_thread_fn+0x542/0xa60 [ 1037.245619][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1037.245647][ C0] kthread+0x711/0x8a0 [ 1037.245676][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1037.245699][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.245725][ C0] ? rt_spin_unlock+0x150/0x200 [ 1037.245753][ C0] ? rt_spin_unlock+0x161/0x200 [ 1037.245777][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.245804][ C0] ret_from_fork+0x510/0xa50 [ 1037.245825][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.245844][ C0] ? __switch_to+0xc9e/0x1480 [ 1037.245875][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.245903][ C0] ret_from_fork_asm+0x1a/0x30 [ 1037.245941][ C0] [ 1037.716069][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1037.716101][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.716133][ T38] Tainted: [L]=SOFTLOCKUP [ 1037.716142][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1037.716157][ T38] Call Trace: [ 1037.716166][ T38] [ 1037.716176][ T38] vpanic+0x1e0/0x670 [ 1037.716224][ T38] panic+0xb9/0xc0 [ 1037.716255][ T38] ? __pfx_panic+0x10/0x10 [ 1037.716288][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1037.716320][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1037.716354][ T38] watchdog+0xfdf/0xfe0 [ 1037.716386][ T38] ? watchdog+0x20a/0xfe0 [ 1037.716418][ T38] kthread+0x711/0x8a0 [ 1037.716459][ T38] ? __pfx_watchdog+0x10/0x10 [ 1037.716483][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.716513][ T38] ? rt_spin_unlock+0x150/0x200 [ 1037.716548][ T38] ? rt_spin_unlock+0x161/0x200 [ 1037.716576][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.716609][ T38] ret_from_fork+0x510/0xa50 [ 1037.716637][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.716660][ T38] ? __switch_to+0xc9e/0x1480 [ 1037.716700][ T38] ? __pfx_kthread+0x10/0x10 [ 1037.716732][ T38] ret_from_fork_asm+0x1a/0x30 [ 1037.716784][ T38] [ 1037.717390][ T38] Kernel Offset: disabled