last executing test programs: 1m0.512461718s ago: executing program 4 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) 1m0.406235571s ago: executing program 4 (id=47): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r4, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256", 0x22}, {&(0x7f0000000500)="55f0e46e7aeb504dca2fb5e5ea9ef6f5c17ac39ef5f90fcfe3ed8a", 0x1b}], 0x3}, 0x40011) 51.415186571s ago: executing program 4 (id=92): socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 49.68756709s ago: executing program 4 (id=99): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 49.489065315s ago: executing program 4 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) 49.13431572s ago: executing program 4 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x9}}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x7fffffff}, {0x3, 0x1, 0x8}, {0x5, 0x6, 0x6}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x20, 0x61, 0x0, 0x5f, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f00000004c0)=""/28, 0xc3, 0x1c, 0x0, 0x800, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x4, 0x10000, 0x8, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0xc0c2, 0x2, 0xe}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$xdp(0x2c, 0x3, 0x0) unshare(0x8000400) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x1000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) 34.6675332s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd70912db270a1182a5c174f91efe1e2003b00fb"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 33.698898905s ago: executing program 0 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r0) unshare(0x6a040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0xd0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20044040) 33.569482965s ago: executing program 32 (id=103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x9}}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x7fffffff}, {0x3, 0x1, 0x8}, {0x5, 0x6, 0x6}]}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x20, 0x61, 0x0, 0x5f, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f00000004c0)=""/28, 0xc3, 0x1c, 0x0, 0x800, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x4, 0x10000, 0x8, r1, 0x7f, '\x00', 0x0, r2, 0x3, 0xc0c2, 0x2, 0xe}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$xdp(0x2c, 0x3, 0x0) unshare(0x8000400) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x1000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) 31.174454836s ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 30.814287981s ago: executing program 0 (id=136): r0 = socket$netlink(0x10, 0x3, 0xc) memfd_secret(0x80000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_usb_connect$uac2(0x3, 0x94, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x40, 0xb, 0xfd, {0xfd, 0x2, "f6c6fc73837b5786ca5b7640aeecfd211a1b12a6912cf30ae7ef7df9a954faa6658d2a3bec7f53f5abb33d71ff413b8152a0875fab005049f79e4a6c40b3f9ae733dfcd25f541af6b9d3b8cf8f2ccef93d2ff3c478bd1cefd16c3aea3b696444ba1b00aba6fea3a8cdf4e35ca7c4014fdce3191f16793bf58f42257bb4f33b203f78db7a5146fe41c9fc0f2c17b92c240bd8b8ff0b45e7f7149f27c77d33aad7d979d65c79273168b89fb3c03b36d95e80d444fd61f5a1ea6301b4e746576353408b9fb8a87a8a951a0274d4fb36d361515c56132f6ed2a108220b74fae0e2f6afd67615c9d86ee9d6acabad9d745a91c1349c2961d51db5cb8959"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xa0}}, 0x0) 28.913628409s ago: executing program 0 (id=138): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/48, 0x30) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r3], 0x1, 0x1534, &(0x7f0000002840)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiySJJMklSZIkyS0haZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJLnllqz/Z2L+6tT5d87vdPL7H8/389mfWc+s/az3eeeZvffa72y+7TS4esMaVeoTEfxb8MKXRACIBYD+AHANAAQAUDaubFzmfHaJif/eQdif6+GUy10Bu5y4/1c27v+Vjft/ZeP+X9m4/1c27v+Vjft/ZeP+M3Yl2zg1/7V8u3JvfP3/Ssav//9FMkqO/nJ1yes7A8T8sync////4b+Ry/3/rxX8M3fi/v9X+8PtFvf/ShV7uQtg/wvw4/9KkO0fznD/r2zcf8auZL+8FhwLl/969F99g8h/8m8gvseFn/LlP89/eP6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4LS/RAFA1vhy18UYY4wxxhhjjLE/j892uStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYrPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aEC3A4V4Q6oBHdCZbgLqsDdUBWqQXWoAfdATbgXasF9UBvuhzrwANSFB6EePAT14WFoAI9AQ3gUGsFj0BiaQFNoBs3/R/kvQjd4CbpDD0iEntALXobe0Af6Qj/oD6/AAHgVBsJrkASDYDC8DkPgDRgKb8IwGA4j4C0YCW/DKBgNY2AsJMM4GA/vwAR4FybCJJgMUyAFpsI0eA+mwwyYCe/DLPgAZsMcmAvzIBU+hPmwANLgI1gIH0M6LILFsASWwjJYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOn8AO+BR2wi7YDZ/BHvj8X8w/9Xf5nREQUKBAhQpjMAZjMRZzYA7MiTkxF+bCCEYwDuMwN+bGPJgH82E+jMd4LIgF0aBBQsJCWAijGMUiWASLYlEsjsXRocNSWApL481YBstgWSyL5bAclscKWAErYkWshJWwMlbGKlgFq2JVrI7V8R68B3tiLayFtbE21sE6WZensD7WxwbYABtiQ2yEjbAxNsam2BSbY3NsgS2wJbbE1tga22AbbIttMQETsB22w/bYHjtgB+yIHbETdsLO2AW7ZLyYDfAlfAl7YFXRE3thL+yNSdn6Yj/sh6/gAHwVX8XXMAkH4WB8HV/HN3AonsRh54fjCByBlcTbOApHI4mxmIzJOB7H4wScgBNxEk7CKZiCU3EaTsPpOANn4Ps4Cz/AD3AOXgUAqZiK83EBpmEaLsRTmI6LcDEuwaW4DJfiClyJK3A1rsHVuA7X4QbcgJtwE27BLbgNt+EnqADwU9yFuzAJ9+Ae3It7cR/uw/24HzMwAw/gATyIB/EQHsLDeBiP4FE8hkfxBJ7Ak3gKT+NpPItn8Rw+H/91g0+KrUoCkUkJJWJEjIgVsSKHyCFyipwil8glIiIi4kScyC1yizwij8gn8ol4ES8KioLCCCNIhJnPFCIqoqKIKCKKiqKiuCgunHCilCglSovSoowoI8qKW0U5cZsoLyqIVq6iqCgqidausrhLVBFVRFVRTVQXNUQNUVPUFLVELVFb1BZ1RB1RVzwo6ome2BcfFpmdaSgGYSMxGBuLJkJefIZqIYZiS9FKtBZPiuE4DNuKFi5BPCPaiVHYXvxNjMbnREcxFjuJF0Rn0UV0FS+KbqKl6y56iInYU/QSU7C36CP6in5iOlYT7+Os7NXFayJJDBKDxetiHr4hhoo3xTAxXIwQb4mR4m0xSowWY8RYkSzGifHiHTFBvCsmiklispgiUsRUMU28J6aLGWKmeF/MEh+I2WKOmCvmiVTxoZgvFog08ZFYKD4W6WKRWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLj4RO8SnYqfYJXaLz8Qe8bnYK74Q+8SXYr/4SmSIr8UB8Y04KL4Vh8R34rD4XhwRR8UxcVycED+Ik+KUOC3OiLPiR3FO/CTOCy9AohRSSiUDGSOzyViZXeaQV8mcMsh6/pdx8jqZW14v88i8Mp/ML+NlAVlQammklSRDWUgWllF5gywib5RFZTFZXJaQTpaUpeRNsrS8WZaRt8iy8lZZTt4my8sK8nZZUd4hK8k7JUQuHKOqrCaryxryHpkI98pa8j5ZW94v68gHZF35oKwnH5L15cOygXxENpSPykbyMdlYNpFNZTPZXD4uW8gnZEvZSraWT8o28inZVj4tE+Qzsp30F39FnpMd5fOyk3xBdpZdZFf5kzwvvewue0joCbKXfFn2ln1kX9lP9pevyAHyVTlQviaT5CA5WL4uh8g35FD5phwmh8sR8i05Ur4tR8nRcowcK5PlODleviMnyHflRDlJTpZTZIqcKvteXGmmlH+Y/87v5A/8+egb5Ea5SW6WW+RWuU1ul5/IHXKH3Cl3yt1yt9wj98i9cq/cJ/fJ/XK/zJAZ8oA8IA/Kg/KQPCQPy8PyiDwqz8jj8oT8QZ6Up+QpeUaelWfluYs/A1CohJJKqUDFqGwqVmVXOdRVKqe6WuVS16iIulbFqetUbnW9yqPyqnwqv4pXBVRBpZVRVpEKVSFVWEXVDXjxF0YVVyWUUyVVKXXTv5KviqgbVVFV7Ff5WfUl/oP6mqvmqoVqoVqqlqq1aq3aqDaqrWqrElSCaqfaqfaqveqgOqiOqqPqpDqpzqqz6qq6qm6qm+quuqtElah6qZdVb9VH9VX9VH/1isg8h4FqoEpSSWqwGqyGqCFqqBqqhqlhaoQaoUaqkWqUGqXGqDEqWSWr8Wq8mqAmqIlqopqsJqsUlaKmqWlqupquZqqZapaapWar2WqumqtSVaqar+arNJWmFqqFKl0tUovUErVELVPL1Aq1Qq1Sq9QatUatU+tUutqoNqrNarPaqraq7Wq72qF2qJ1qp9qtdqs9ao/aq/aqfWqf2q/2qwyVoQ6oA+qgOqgyz+GwOqyOqCPqmDqmTqgT6qQ6qU6r0+qsOqvOqXPqvDqfue0LRCACFaggJogJYoPYIEeQI8gZ5AxyBbmCSBAJ4oK4IHdwfZAnyBvkC/IH8UGBoGCgAxPYQFxsejS4ISgS3BgUDYoFxYMSgQtKBqWCm4LSwc1BmeCWoGxwa1AuuC0oH1QIbg8qBncElYI7g8rBXUGV4O6galAtqB7UCO4Jagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxkGToGnQLGj+p67v/cm8T7juuodO1D11L/2y7q376L66n+6vX9ED9Kt6oH5NJ+lBerB+XQ/Rb+ih+k09TA/XI/RbeqR+W4/So/UYPVYn63F6vH5HT9Dv6ol6kp6sp+gUPVVP0+/p6XqGnqnf17P0B3q2nqPn6nk6VX+o5+sFOk1/pBfqj3W6XqQX6yV6qV6ml+sVeqVepVfrNXqtXqfX6w16o96kN+steqveprfrT/QO/aneqXfp3fozvUd/rvfqL/Q+/aXer7/SGfprfUB/ow/qb/Uh/Z0+rL/XR/RRXUYf1yf0D/qkPqVP6zP6rP5Rn9M/6fPaZ27uM1/ejTLKxJgYE2tiTQ6Tw+Q0OU0uk8tETMTEmTiT2+Q2eUwek8/kM/Em3hQ0BU0mMmQKmUImaqKmiCliipqiprgpbpxxppQpZUqb0qaMKWPKmrKmnClnypvy5nZzu7nD3GHuNHeau8xd5m5zt6lmqpkapoapaWqaWqaWqW1qmzqmjqlr6pp6pp6pb+qbBqaBaWgamkamkWlsGpumpqlpbpqbFqaFaWlamtamtWlj2pi2pq1JMAmmnWln2pv2poPpYDqajqaT6WQ6m86mq+lqupluprvpbhJNoullepneprfpa/qa/qa/GWAGmIFmoEkySWawGWyGmCFmqBlqhpnhZkTmRtW8bUaZ0WaMGWuSTbIZb8abCWaCmWgmmslmskkxKWaamWamm+lmpplpZplZZraZbeaauSbVpJr5Zr5JM2lmoVlo0k26WWwWm6VmqVlulpuVZqVZbVabtbDWrDfrzUaz0Ww2m81Ws9VsN9vNDrPD7DQ7zW6z2+wxe8xes9fsM/vMfrPfZJgMc8AcMAfNQXPIHDKHzWFzxBwxx8wxc8KcMCfNSXPanDZnTd6Lr5fexNrsNoe9yua0V9tc9hr793E+m9/G2wK2oNU2j837q9hYa4vaYra4LWGdLWlL2Zt+E5e3FezttqK9w1ayd9rKv4lr2nttLXufrW3vtzXsPb+K69gHbF37qK2HCGCb2Aa2mW1oH7WN7GO2sW1im9pmto19yra1T9sE+4xtZ5/9TTzfLrAr7Sq72q6xO+0ue9qesQftt/as/dF2tz1sf/uKHWBftQPtazbJDvpNPMK+ZUfat+0oO9qOsWN/E0+2U2yKnWqn2ffsdDvjN3Gq/dDOsml2tp1j59p5P8eZNaXZj+xC+7FNtwEstkvsUrvMLrcr/m+tS+w6u95usDvsp3az3WK32m12e9ZG2O6yu+1ndo/93B6w39h99ku73x6yGfbrn+PM8ztkv7OH7ff2iD1qj9nj9oT9QWVlZ577cfuTPW+9BUICkqQooBjKRrGUnXLQVZSTrqZcdA1F6FqKo+soN11PeSgv5aP8FE8FqCBpMmSJKKRCVJiidANllVecSpCjklSKbqLSdDOVoVuoLN1K5eg2Kk8V6HaqSHdQJbqTKtNdVIXupqpUjapTDbqHatK9VIvuo9p0P9WhB6guPUj16CGqTw9TA3qEGtKj1Igeo8bUhJpSM2pOj1MLeoJaUitqTU9SG3qK2tLTlEDPUDt6ltrT36gDPUcd6XnqRC9QZ+pCXelF6kYvUXfqQYnUk3rRy9Sb+lBf6kf96RUaQK/SQHqNkmgQDabXaQi9QUPpTRpGw2kEvUUj6W0aRaNpDI2lZBpH4+kdmkDv0kSaRJNpCqXQVJpG79F0mkEz6X2aRR/QbJpDc2kepdKHNJ8WUBp9RAvpY0qnRbSYltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRtvpE9pBn9JO2kW76TPaQ5/TXvqC9tGXtJ++ogz6mg7QN3SQvqVD9J3vQd/TETpKx+g4naAf6CSdotN0hs7Sj3SOfqLz5AlCDEUoQxUGYUyYLYwNs4c5wqvCnOHVYa7wmjASXhvGhdeFucPrwzxh3jBfmD+MDwuEBUMdmtCGFIZhobBwGA1vCIuEN4ZFw2Jh8bBE6MKSYanwprB0eHNYJrwlLBveGpYLbwvLhxXCR++vGN4RVgrvDCuHd4VVwrvDqmG1sHpYI7wnrBneG9YK7wtrh/eHZcIHwrrhg2G98KGwfvhw2CB8JGwYPho2Ch8LG4dNwqZhs7B5+HjYInwibBm2CluHV4VtwqfCtuHTYUL4TNgufPbn+QcWZM0/+Zv5xLBn2Ct8OXw59P4+OTc6L5oa/TA6P7ogmhb9KLow+nE0Pboouji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iep9jWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrnmrrlr4Z5wLV0r19o96Z50T7mn3NPuafeMa+eede3d31wH95zr6J53z7sXXGfXxXV1L7publyuC4/JRNfL9XK9XW/X1/V1/V1/N8ANcAPdQJfkkpx0g90QN8QNdUPdMDfMjXAj3Eg30o1yo9wYN8Ylu2Q33o13E9wEN9FNdJPdZJfiUtw0N81Nd9NdpRkXjjLbzXZz3VyX6lLdfJe5Z0xzC91Cl+7S3WK32C11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73E5/zYVF3R631+11+9w+t9995TLc1+6A+8YddN+6Q+47d9h97464o+6YO+5OuB/cSXfKnXZn3Fn3ozvnfnLnnXfJkXGR8ZF3IhMi70YmRiZFJkemRFIiUyPTIu9FpkdmRGZG3o/MinwQmR2ZE5kbmRdJjXwYmR9ZEEmLfBRZGPk4kh5ZFFkcWRJZGlkW8b7A5tAX8oV91N/gi/gbfVFfzBf3JbzzJX0pf5MvfaHudO9v9eX8bb68r5AN/GO+sW/im/pmvrl/3LfwT/iWvpVv7Z/0bfxTvq1/2if4Z3w7/6xv7//mO/jnfEf/vO/kX/CdfRff1b/ou/mXfHffwyf6nr6Xf9n39n18X9/P9/ev+AH+VT/Qv+aT/CA/2L/uh/g3/FD/ph/mh/sRMW/5kVlvkWGsT/bj/Hj/jp/g3/UT/SQ/2U/xKX6qn+bf89P9DD/Tv+9n+Q/8bD/Hz/XzfKr/0M/3C3ya/8gv9B/7dL8o66KxX+5X+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/uP/E7/Kd+p9/ld/vP/B7/ud/rv/D7/Jd+v//KZ/iv/QH/jT/ov/WH/Hf+sP/eH/FH/TF/3J/wP/iT/pQ/7c/4s/5Hf87/5M/zv1ljjDHGGPunjLs0FL+euXA5v+fv5Ihf3LkXAFy9JX/GL+czd5Rr81wY9xHxsZlfn+nR6eGsW9WqiYmJF++bLiEoPAcg6y9BmX7+6MHFeBG0hqcgAVpB6d+tv4/ocpb+YP3orQA5fpGTWVBWfGn9LwAw8XfWf/zJEfPLhafj/h/rzwEoWvhSTna4FC+C1j9fX2kFZf5B/Xlb/EH92b9MBmj5i5yccCm+VH8peAKehYRf3ZMxxhhjjDHGGLugj7i9Q9b7z6xPfP7e+/N4dSknG1yK/+j9OWOMMcYYY4wxxi6/57p0ffrxhIRWHf71QeX/UdY/PWgE/6mVefC7A+8Bsr6jAODfXBAgcyD/yrPY9JccK+niQ+fvp5ae8QH872jlnzG4zE9MjDHGGGOMsT/dpU3/r7+vLldBjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYFeiv+O/ELvc5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY5fb/wkAAP//Czn2iw==") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) io_setup(0x4, &(0x7f0000000080)) 27.738318642s ago: executing program 0 (id=139): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="c1", 0x1, 0x4, &(0x7f0000000540)={0x11, 0x1, r6, 0x1, 0x9, 0x6, @local}, 0x14) 12.246043278s ago: executing program 33 (id=139): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000500)="c1", 0x1, 0x4, &(0x7f0000000540)={0x11, 0x1, r6, 0x1, 0x9, 0x6, @local}, 0x14) 5.834618035s ago: executing program 1 (id=174): r0 = socket$netlink(0x10, 0x3, 0xc) memfd_secret(0x80000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_usb_connect$uac2(0x3, 0x94, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x40, 0xb, 0xfd, {0xfd, 0x2, "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"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x80}}, 0x0) 4.067229316s ago: executing program 2 (id=179): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1c, 0x0, 0x13, 0x9, 0x10000, 0x6, 0x6, 0x1}) 3.842452292s ago: executing program 2 (id=180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.74830108s ago: executing program 2 (id=181): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 3.67054742s ago: executing program 1 (id=183): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x4009, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x8014) 3.541579783s ago: executing program 3 (id=184): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x84) 3.434109959s ago: executing program 1 (id=185): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000280)={&(0x7f0000000340)=0x3, 0x2, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/48, 0x30) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000380)=ANY=[@ANYBLOB='dmask=00000000000000000000000,dmask=00000000000000000000006,errors=remount-ro,iocharset=cp932,fmask=00000000000000000000001,namecase=1,iocharset=iso8859-14,namecase=1,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r3], 0x1, 0x1534, &(0x7f0000002840)="$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") utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0xa08b}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) io_setup(0x4, &(0x7f0000000080)) 3.399601391s ago: executing program 3 (id=186): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x9, 0x3, 0x0, 0x700, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x18}, 0x1, 0x7}, 0x40) 3.305341086s ago: executing program 2 (id=187): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000249000/0x2000)=nil, &(0x7f0000059000/0x4000)=nil, 0x2000}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x0, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.057914773s ago: executing program 3 (id=188): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '\x94\xben\x85\xc2\xf0E\xa6\xb8\x18\x13^K?\x9d\xc4\xe1e\xba0tu\x154\x0eK\xf3\xce\"dl\x12k8V\xa8(Y\x9eW\xfc\xf03\xb6\x83D\x02\xb7o\xe5\x1a#\xd3\x02\xa7\xbaP\xa4]\xc2\xe7\x16\xd7\xc1\xc7\xa3s\xbb\x15\xa1TL\xdf\xb6\x9bWp\xe8\"P\x97\x1e\x02\xa7P\xbf\x8e\xba\x1c\x16:F\xc1L\x82\xb3\xb4[\x04\xb0\x10\x84\x84\xce\xbe\xff\x84Z\xd9-\xdb\xbcez8\xdf\xa1\x88\x1bl\x9d\xcf\xbe){\xdf\xc6\x86\x8aj\xbe\x10P\x88\xfc\x96\x9f\x95\xcbd&,f\x05\xf3G\x94\x90$\x7f\xfe\xb2+uu/\xf3\x99KXt\xdeC4\x86\xb8\x05\x00\x00\x00\x00\x00\x00\x00jl\x9c\xfa\xd8~\xd5\xca\x9em\x95\x9d\"\xac\x87\xfe\x98=\x89\xb4\\-\x8b(\xd0\xd7\xab\xcc\nw \xd3\xb7\xa7\xdcK,-Ra\xddkrt\xec\x9f\xe7\xb1\xd3j\xb6\xfe\"\xd06\xd8E\xda\x8b\xb46 V\xc5\xa0\xf7\xf3\x15k\xeb\x93\x90\xe7\xd0sc\xa4\x05(\xb7\xb7\xd4\xb0\x83\x06\xe84!\xb1\x83A\xc3\x98\x90\xf1\x95\xbd\xeb1u\xb4\x8c\xd9tF\xf6\xbd\x00a\xce^M\x85\xb4\xcc\x9e\x00\x05{\xba\xa2\x89\xf6\xcdl\xe1\xd5\x87\xcb\xd4\t\xd2Gi\x15\x94\xd4O\xf5\x10\xed\x92?\xe3$\xe8V\xba\xec\xcf<\x148N\xe2\xbb}\xf0(\x04\x92\xd9\x9b-]\x11s-1\xa2%m\x14\xd0D\x8c\xb0C\x90\xfd\xb91uc\x8b\x04y\xe5\xb9\x19[#\x8f%\xf1\xdc\xc2\xce\a~~\xc6\x19\x00\x00\x00\x10\x00\x00\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x1c3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) 2.055094266s ago: executing program 1 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4070, 0xfe6, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be9", 0x95}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125bd069ddc713fbff", 0xdf1}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.926461256s ago: executing program 2 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.770753555s ago: executing program 3 (id=191): r0 = socket$netlink(0x10, 0x3, 0xc) memfd_secret(0x80000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_usb_connect$uac2(0x3, 0x94, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x40, 0xb, 0xfd, {0xfd, 0x2, "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"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x70}}, 0x0) 1.684156398s ago: executing program 2 (id=192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000adf000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 226.968798ms ago: executing program 1 (id=193): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x4009, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40), 0x0, 0x8014) 161.509056ms ago: executing program 3 (id=194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x103a00, 0x150) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001140)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x20000003, 0x0, 0x0, 0xb, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 57.549425ms ago: executing program 1 (id=195): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c084}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'batadv_slave_1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000044) 0s ago: executing program 3 (id=196): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_RCVMTU(r0, 0x12, 0xd, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 75.442786][ T5580] cgroup: Unknown subsys name 'net' [ 75.715436][ T5580] cgroup: Unknown subsys name 'cpuset' [ 75.769726][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.360906][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.805018][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.805981][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.855965][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.873017][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.896749][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.896870][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.899222][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.901228][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.903519][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.905505][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.910609][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.911003][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.911361][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.912073][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.914270][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.921975][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.939458][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.940147][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.941422][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.944911][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.945367][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.961875][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.964495][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.007294][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.008045][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.010668][ T5615] Bluetooth: hci4: command tx timeout [ 82.011044][ T60] Bluetooth: hci3: command tx timeout [ 82.011214][ T5607] Bluetooth: hci2: command tx timeout [ 82.169113][ T5607] Bluetooth: hci1: command tx timeout [ 82.169245][ T5607] Bluetooth: hci0: command tx timeout [ 82.547801][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.548816][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.551480][ T5594] bridge_slave_0: entered allmulticast mode [ 82.555083][ T5594] bridge_slave_0: entered promiscuous mode [ 82.616364][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.616643][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.616888][ T5594] bridge_slave_1: entered allmulticast mode [ 82.619981][ T5594] bridge_slave_1: entered promiscuous mode [ 82.645631][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.645999][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.646598][ T5592] bridge_slave_0: entered allmulticast mode [ 82.650610][ T5592] bridge_slave_0: entered promiscuous mode [ 82.668397][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.668700][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.673550][ T5593] bridge_slave_0: entered allmulticast mode [ 82.676935][ T5593] bridge_slave_0: entered promiscuous mode [ 82.732816][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.733153][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.733639][ T5592] bridge_slave_1: entered allmulticast mode [ 82.735429][ T5592] bridge_slave_1: entered promiscuous mode [ 82.746670][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.746985][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.749690][ T5593] bridge_slave_1: entered allmulticast mode [ 82.752868][ T5593] bridge_slave_1: entered promiscuous mode [ 82.780504][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.780815][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.781055][ T5596] bridge_slave_0: entered allmulticast mode [ 82.784234][ T5596] bridge_slave_0: entered promiscuous mode [ 82.861936][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.862385][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.862673][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.863248][ T5596] bridge_slave_1: entered allmulticast mode [ 82.865218][ T5596] bridge_slave_1: entered promiscuous mode [ 82.943261][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.044485][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.044894][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.045286][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.045508][ T5595] bridge_slave_0: entered allmulticast mode [ 83.048341][ T5595] bridge_slave_0: entered promiscuous mode [ 83.061065][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.111248][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.111632][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.111827][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.111973][ T5595] bridge_slave_1: entered allmulticast mode [ 83.113734][ T5595] bridge_slave_1: entered promiscuous mode [ 83.117441][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.168165][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.213556][ T5594] team0: Port device team_slave_0 added [ 83.217423][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.267175][ T5594] team0: Port device team_slave_1 added [ 83.285002][ T5592] team0: Port device team_slave_0 added [ 83.294619][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.308519][ T5593] team0: Port device team_slave_0 added [ 83.350517][ T5592] team0: Port device team_slave_1 added [ 83.354045][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.356444][ T5593] team0: Port device team_slave_1 added [ 83.382591][ T5596] team0: Port device team_slave_0 added [ 83.433353][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.433364][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.433383][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.437606][ T5596] team0: Port device team_slave_1 added [ 83.504070][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.504081][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.504094][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.526372][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.526387][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.526410][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.534758][ T5595] team0: Port device team_slave_0 added [ 83.537910][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.537922][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.537946][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.587483][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.587499][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.587524][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.595218][ T5595] team0: Port device team_slave_1 added [ 83.597888][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.597900][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.597925][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.614910][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.614925][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.614948][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.686998][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.687014][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.687038][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.772061][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.772077][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.772101][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.855333][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.855349][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.855373][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.867795][ T5594] hsr_slave_0: entered promiscuous mode [ 83.870820][ T5594] hsr_slave_1: entered promiscuous mode [ 83.954238][ T5592] hsr_slave_0: entered promiscuous mode [ 83.955600][ T5592] hsr_slave_1: entered promiscuous mode [ 83.956773][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 83.956857][ T5592] Cannot create hsr debugfs directory [ 83.974403][ T5593] hsr_slave_0: entered promiscuous mode [ 83.976509][ T5593] hsr_slave_1: entered promiscuous mode [ 83.978327][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 83.978349][ T5593] Cannot create hsr debugfs directory [ 84.033053][ T5596] hsr_slave_0: entered promiscuous mode [ 84.034210][ T5596] hsr_slave_1: entered promiscuous mode [ 84.035184][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 84.035206][ T5596] Cannot create hsr debugfs directory [ 84.089134][ T60] Bluetooth: hci4: command tx timeout [ 84.089166][ T60] Bluetooth: hci2: command tx timeout [ 84.089251][ T5607] Bluetooth: hci3: command tx timeout [ 84.259452][ T60] Bluetooth: hci1: command tx timeout [ 84.259540][ T5607] Bluetooth: hci0: command tx timeout [ 84.549298][ T5595] hsr_slave_0: entered promiscuous mode [ 84.550502][ T5595] hsr_slave_1: entered promiscuous mode [ 84.551454][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 84.551475][ T5595] Cannot create hsr debugfs directory [ 85.281288][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.323091][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.331350][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.385346][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.398722][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.423951][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.447069][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.485439][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.629306][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.673691][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.680004][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.714507][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.718583][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.752710][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.773361][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.814867][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.954642][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.975268][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.997197][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.036634][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.046054][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.073225][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.098019][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.132823][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.170496][ T5607] Bluetooth: hci4: command tx timeout [ 86.170526][ T5607] Bluetooth: hci3: command tx timeout [ 86.170544][ T5607] Bluetooth: hci2: command tx timeout [ 86.273377][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.295637][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.310798][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.329269][ T60] Bluetooth: hci0: command tx timeout [ 86.329294][ T60] Bluetooth: hci1: command tx timeout [ 86.354608][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.370560][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.397250][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.412137][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.442322][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.551651][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.630929][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.673482][ T32] cfg80211: failed to load regulatory.db [ 86.676719][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.711958][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.758669][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.791124][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.842721][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.852891][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.894885][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.898128][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.976999][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.977136][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.033633][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.038718][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.038830][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.175665][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.238353][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.238549][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.278821][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.304200][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.304362][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.427505][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.467829][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.515115][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.519943][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.587894][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.588057][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.710429][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.766537][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.778286][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.781121][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.875760][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.875915][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.023411][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.102402][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.102655][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.167907][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.168068][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.266848][ T5607] Bluetooth: hci2: command tx timeout [ 88.266879][ T5607] Bluetooth: hci3: command tx timeout [ 88.266898][ T5607] Bluetooth: hci4: command tx timeout [ 88.421168][ T60] Bluetooth: hci1: command tx timeout [ 88.421199][ T60] Bluetooth: hci0: command tx timeout [ 88.539545][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.144976][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.241735][ T5594] veth0_vlan: entered promiscuous mode [ 89.311001][ T5594] veth1_vlan: entered promiscuous mode [ 89.608728][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.681370][ T5593] veth0_vlan: entered promiscuous mode [ 89.710956][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.723197][ T5594] veth0_macvtap: entered promiscuous mode [ 89.762887][ T5594] veth1_macvtap: entered promiscuous mode [ 89.847311][ T5593] veth1_vlan: entered promiscuous mode [ 89.876366][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.988484][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.070828][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.096055][ T5592] veth0_vlan: entered promiscuous mode [ 90.130769][ T3393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.143815][ T3393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.161177][ T3393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.180088][ T5593] veth0_macvtap: entered promiscuous mode [ 90.185355][ T3393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.203037][ T5592] veth1_vlan: entered promiscuous mode [ 90.298766][ T5593] veth1_macvtap: entered promiscuous mode [ 90.492834][ T5595] veth0_vlan: entered promiscuous mode [ 90.557788][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.616073][ T5596] veth0_vlan: entered promiscuous mode [ 90.625631][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.628438][ T5595] veth1_vlan: entered promiscuous mode [ 90.695069][ T5592] veth0_macvtap: entered promiscuous mode [ 90.701041][ T1427] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.717082][ T1427] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.741695][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.741718][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.745457][ T1427] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763468][ T5596] veth1_vlan: entered promiscuous mode [ 90.797527][ T5592] veth1_macvtap: entered promiscuous mode [ 90.821750][ T1427] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.047286][ T1427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.047303][ T1427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.072480][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.225692][ T5595] veth0_macvtap: entered promiscuous mode [ 91.271862][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.317828][ T5595] veth1_macvtap: entered promiscuous mode [ 91.357827][ T3393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.374214][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.374233][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.376536][ T3393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.404188][ T5596] veth0_macvtap: entered promiscuous mode [ 91.411470][ T3393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.434366][ T3393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.470368][ T5596] veth1_macvtap: entered promiscuous mode [ 91.621462][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.644261][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.644279][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.726687][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.934370][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.955243][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.033518][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.040667][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066337][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.170301][ T5793] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 92.185744][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.676237][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.692862][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.956967][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.963988][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.917786][ T3393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.001236][ T3393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.006795][ T3369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.006813][ T3369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.036440][ T3393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.085710][ T3393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.107521][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 94.133638][ T3393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.272696][ T5801] hsr_slave_0: left promiscuous mode [ 94.309055][ T5801] hsr_slave_1: left promiscuous mode [ 94.372053][ T3393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397983][ T5803] netlink: 'syz.0.9': attribute type 3 has an invalid length. [ 94.398003][ T5803] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 94.398015][ T5803] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.430638][ T3393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.459398][ T3451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543780][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.543799][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.284930][ T5811] syzkaller0: entered promiscuous mode [ 95.284945][ T5811] syzkaller0: entered allmulticast mode [ 95.904198][ T3369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.904215][ T3369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.077017][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.077036][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.498874][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.498951][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.870811][ T5829] futex_wake_op: syz.1.17 tries to shift op by 144; fix this program [ 96.913503][ T3369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.913521][ T3369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.538386][ T5830] loop1: detected capacity change from 0 to 2048 [ 97.953002][ T5830] loop1: p3 < > p4 < > [ 97.953025][ T5830] loop1: partition table partially beyond EOD, truncated [ 98.017319][ T5830] loop1: p3 start 4284289 is beyond EOD, truncated [ 98.691659][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 98.958864][ T5847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.097725][ T5837] syz.2.18 (5837) used greatest stack depth: 19608 bytes left [ 99.378078][ T5862] loop0: detected capacity change from 0 to 256 [ 99.381477][ T5862] exfat: Deprecated parameter 'namecase' [ 99.381536][ T5862] exfat: Deprecated parameter 'namecase' [ 99.381565][ T5862] exfat: Deprecated parameter 'namecase' [ 99.464256][ T5789] IPVS: starting estimator thread 0... [ 99.550465][ T5866] IPVS: using max 11 ests per chain, 26400 per kthread [ 99.680348][ T5862] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 99.698782][ T5862] binder: 5861:5862 ioctl c0306201 0 returned -14 [ 99.873439][ T5868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 100.738040][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 100.876059][ T5883] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 100.941243][ T5593] Flush: task=syz-executor[5593] dev=loop1 state=2 [ 100.952989][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 101.040587][ T5880] can: request_module (can-proto-0) failed. [ 101.061212][ T5891] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 101.096685][ T5593] Teardown: task=syz-executor[5593] dev=loop1 state=2 [ 101.528766][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 101.842904][ T5909] loop1: detected capacity change from 0 to 256 [ 101.844101][ T5909] exfat: Deprecated parameter 'namecase' [ 101.844162][ T5909] exfat: Deprecated parameter 'namecase' [ 101.844195][ T5909] exfat: Deprecated parameter 'namecase' [ 102.081799][ T5909] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 102.100597][ T5906] binder: 5899:5906 ioctl c0306201 0 returned -14 [ 102.415258][ T5593] Flush: task=syz-executor[5593] dev=loop1 state=2 [ 102.447045][ T5911] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 102.979077][ T5593] Teardown: task=syz-executor[5593] dev=loop1 state=2 [ 104.919483][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.483923][ T5951] loop3: detected capacity change from 0 to 256 [ 105.485171][ T5951] exfat: Deprecated parameter 'namecase' [ 105.485232][ T5951] exfat: Deprecated parameter 'namecase' [ 105.485266][ T5951] exfat: Deprecated parameter 'namecase' [ 105.667520][ T5951] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 105.688762][ T5949] binder: 5941:5949 ioctl c0306201 0 returned -14 [ 106.040219][ T5791] Flush: task=udevd[5791] dev=loop3 state=2 [ 106.132571][ T5791] Teardown: task=udevd[5791] dev=loop3 state=2 [ 106.596838][ T5965] netlink: 27 bytes leftover after parsing attributes in process `syz.0.57'. [ 107.603743][ T5987] loop1: detected capacity change from 0 to 256 [ 107.604968][ T5987] exfat: Deprecated parameter 'namecase' [ 107.605028][ T5987] exfat: Deprecated parameter 'namecase' [ 107.605060][ T5987] exfat: Deprecated parameter 'namecase' [ 107.674536][ T5987] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 107.677940][ T5987] binder: 5982:5987 ioctl c0306201 0 returned -14 [ 108.500667][ T5791] Flush: task=udevd[5791] dev=loop1 state=2 [ 108.852052][ T5791] Teardown: task=udevd[5791] dev=loop1 state=2 [ 109.537375][ T5990] syz.3.62 (5990) used greatest stack depth: 19080 bytes left [ 109.658261][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 110.025956][ T6012] tipc: Started in network mode [ 110.026000][ T6012] tipc: Node identity 400000000000000003, cluster identity 4711 [ 110.355417][ T6014] overlayfs: missing 'lowerdir' [ 112.983417][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 113.125035][ T6053] overlayfs: missing 'workdir' [ 113.457026][ T6059] tipc: Started in network mode [ 113.457053][ T6059] tipc: Node identity 5605c9d50e59, cluster identity 4711 [ 113.457421][ T6059] tipc: Enabled bearer , priority 0 [ 113.463092][ T6059] syzkaller0: entered promiscuous mode [ 113.463112][ T6059] syzkaller0: entered allmulticast mode [ 113.507237][ T6059] tipc: Resetting bearer [ 113.548461][ T6057] tipc: Resetting bearer [ 114.983360][ T6057] tipc: Disabling bearer [ 115.244202][ T6083] overlayfs: missing 'workdir' [ 115.284840][ T9] tipc: Node number set to 1482475989 [ 115.377465][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 115.965323][ T6084] syzkaller0: entered promiscuous mode [ 115.965349][ T6084] syzkaller0: entered allmulticast mode [ 115.996929][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 116.003484][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 116.008837][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 118.086480][ T6103] infiniband syz0: set active [ 118.086722][ T6103] infiniband syz0: added xfrm0 [ 118.108094][ T6103] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 118.125950][ T6132] overlayfs: missing 'workdir' [ 118.146063][ T6103] infiniband syz0: Couldn't open port 1 [ 118.146366][ T6103] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 118.146384][ T6103] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 118.146403][ T6103] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 118.286047][ T6103] RDS/IB: syz0: added [ 118.307750][ T6103] smc: adding ib device syz0 with port count 1 [ 118.308100][ T6103] smc: ib device syz0 port 1 has no pnetid [ 128.277968][ T6144] netlink: 'syz.1.115': attribute type 13 has an invalid length. [ 128.305859][ T6117] syzkaller1: entered promiscuous mode [ 128.305874][ T6117] syzkaller1: entered allmulticast mode [ 128.326800][ T37] xfrm0 speed is unknown, defaulting to 1000 [ 128.756832][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.764622][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.854598][ T1010] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.054062][ T1010] usb 1-1: Using ep0 maxpacket: 16 [ 129.091929][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.098747][ T1010] usb 1-1: config 0 has no interfaces? [ 129.098781][ T1010] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 129.098800][ T1010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.145615][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.212444][ T1010] usb 1-1: config 0 descriptor?? [ 129.597975][ T5610] usb 1-1: USB disconnect, device number 2 [ 130.207588][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.0.119'. [ 130.466815][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 130.603602][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.023393][ T3393] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.062480][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 131.251357][ T3393] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.255879][ T6178] syzkaller0: entered promiscuous mode [ 131.255902][ T6178] syzkaller0: entered allmulticast mode [ 131.586224][ T6188] tipc: Started in network mode [ 131.586253][ T6188] tipc: Node identity e6ee17049683, cluster identity 4711 [ 131.586561][ T6188] tipc: Enabled bearer , priority 0 [ 131.587372][ T3393] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.640481][ T3393] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.762680][ T5598] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.849226][ T6188] tipc: Resetting bearer [ 131.949765][ T5598] usb 2-1: Using ep0 maxpacket: 16 [ 131.952160][ T5598] usb 2-1: config 0 has no interfaces? [ 131.952190][ T5598] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 131.952211][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.996328][ T6188] tipc: Disabling bearer [ 132.025875][ T5598] usb 2-1: config 0 descriptor?? [ 132.609212][ T5789] usb 2-1: USB disconnect, device number 2 [ 132.624886][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 132.745875][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746074][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388250][ T6218] netlink: 'syz.3.132': attribute type 13 has an invalid length. [ 134.133502][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.248791][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 134.433301][ T5705] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.633283][ T5705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.634483][ T5705] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 134.691134][ T5705] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 134.691161][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.691179][ T5705] usb 1-1: Product: syz [ 134.691192][ T5705] usb 1-1: Manufacturer: syz [ 134.691205][ T5705] usb 1-1: SerialNumber: syz [ 134.944700][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.976854][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.036128][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.088394][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 135.221589][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.482516][ T5705] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.527441][ T5705] usb 1-1: 2:1 : bogus bTerminalLink 2 [ 135.993561][ T5705] usb 1-1: USB disconnect, device number 3 [ 136.940439][ T6274] loop0: detected capacity change from 0 to 256 [ 136.941665][ T6274] exfat: Deprecated parameter 'namecase' [ 136.941725][ T6274] exfat: Deprecated parameter 'namecase' [ 136.941751][ T6274] exfat: Deprecated parameter 'namecase' [ 136.978945][ T6274] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 137.001269][ T6272] binder: 6271:6272 ioctl c0306201 0 returned -14 [ 137.203031][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 137.291903][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 137.355647][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.838608][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 137.852081][ T3451] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.143042][ T6284] syzkaller0: entered promiscuous mode [ 138.143068][ T6284] syzkaller0: entered allmulticast mode [ 138.166096][ T3451] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.249727][ T6233] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.440959][ T6233] usb 4-1: Using ep0 maxpacket: 16 [ 138.449068][ T6233] usb 4-1: config 0 has no interfaces? [ 138.449102][ T6233] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 138.449124][ T6233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.487519][ T3451] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.611234][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.638743][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.646479][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.648176][ T6233] usb 4-1: config 0 descriptor?? [ 138.672481][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.677223][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.170543][ T1010] usb 4-1: USB disconnect, device number 2 [ 139.540397][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.713041][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.734212][ T37] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 139.754986][ T37] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 139.755013][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.755031][ T37] usb 3-1: Product: syz [ 139.755043][ T37] usb 3-1: Manufacturer: syz [ 139.755057][ T37] usb 3-1: SerialNumber: syz [ 140.122362][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.145191][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.214626][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 140.607986][ T6369] loop3: detected capacity change from 0 to 256 [ 140.627992][ T6369] exfat: Deprecated parameter 'namecase' [ 140.628404][ T6369] exfat: Deprecated parameter 'namecase' [ 140.628609][ T6369] exfat: Deprecated parameter 'namecase' [ 140.893462][ T60] Bluetooth: hci5: command tx timeout [ 141.306421][ T6369] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 141.323435][ T6364] binder: 6362:6364 ioctl c0306201 0 returned -14 [ 141.619585][ T37] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.621402][ T37] usb 3-1: 2:1 : bogus bTerminalLink 2 [ 141.693882][ T6142] Flush: task=udevd[6142] dev=loop3 state=2 [ 141.761954][ T37] usb 3-1: USB disconnect, device number 2 [ 141.864809][ T6142] Teardown: task=udevd[6142] dev=loop3 state=2 [ 141.959413][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 142.013585][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.014376][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 142.072877][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 142.969086][ T60] Bluetooth: hci5: command tx timeout [ 145.050370][ T60] Bluetooth: hci5: command tx timeout [ 147.129170][ T60] Bluetooth: hci5: command tx timeout [ 152.708814][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.734457][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.766881][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.767852][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.768687][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.629235][ T3451] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.632178][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 153.635292][ T6376] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 153.807482][ T6388] bridge0: entered allmulticast mode [ 153.831491][ T6392] bridge_slave_1: left allmulticast mode [ 153.831644][ T6392] bridge_slave_1: left promiscuous mode [ 153.868583][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.148043][ T6392] bridge_slave_0: left allmulticast mode [ 154.148076][ T6392] bridge_slave_0: left promiscuous mode [ 154.161565][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.647997][ T6103] xfrm0 speed is unknown, defaulting to 1000 [ 154.890020][ T60] Bluetooth: hci6: command tx timeout [ 155.136448][ T6233] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.311718][ T6233] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.313102][ T6233] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 155.315501][ T6233] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 155.315526][ T6233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.315544][ T6233] usb 2-1: Product: syz [ 155.315558][ T6233] usb 2-1: Manufacturer: syz [ 155.315571][ T6233] usb 2-1: SerialNumber: syz [ 155.657238][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.682065][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.709096][ T6443] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 155.709124][ T6443] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 155.709466][ T6443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 155.785842][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 156.106910][ T6233] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.107369][ T6233] usb 2-1: 2:1 : bogus bTerminalLink 2 [ 156.189995][ T6233] usb 2-1: USB disconnect, device number 3 [ 156.424656][ T6202] xfrm0 speed is unknown, defaulting to 1000 [ 156.698666][ T6432] udevd[6432]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.915928][ T6458] loop2: detected capacity change from 0 to 256 [ 156.929077][ T6458] exfat: Deprecated parameter 'namecase' [ 156.929502][ T6458] exfat: Deprecated parameter 'namecase' [ 156.929724][ T6458] exfat: Deprecated parameter 'namecase' [ 157.623987][ T60] Bluetooth: hci6: command tx timeout [ 157.657880][ T6458] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 157.674870][ T6455] binder: 6454:6455 ioctl c0306201 0 returned -14 [ 158.046535][ T6453] Flush: task=udevd[6453] dev=loop2 state=2 [ 158.185925][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 158.245269][ T6453] Teardown: task=udevd[6453] dev=loop2 state=2 [ 158.247481][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 158.333676][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 158.652651][ T6487] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 158.881284][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.882441][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.884021][ T6483] bridge0: entered allmulticast mode [ 158.926598][ T6484] bridge_slave_1: left allmulticast mode [ 158.926619][ T6484] bridge_slave_1: left promiscuous mode [ 158.926778][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.070840][ T6484] bridge_slave_0: left allmulticast mode [ 159.070901][ T6484] bridge_slave_0: left promiscuous mode [ 159.071104][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.262967][ T1010] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.411201][ T1010] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.412306][ T1010] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 159.414398][ T1010] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 159.414423][ T1010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.414441][ T1010] usb 2-1: Product: syz [ 159.414454][ T1010] usb 2-1: Manufacturer: syz [ 159.414463][ T1010] usb 2-1: SerialNumber: syz [ 159.525007][ T6497] loop3: detected capacity change from 0 to 256 [ 159.543744][ T6497] exfat: Deprecated parameter 'namecase' [ 159.544085][ T6497] exfat: Deprecated parameter 'namecase' [ 159.544261][ T6497] exfat: Deprecated parameter 'namecase' [ 159.689979][ T60] Bluetooth: hci6: command tx timeout [ 160.320692][ T6497] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 160.362254][ T6495] binder: 6494:6495 ioctl c0306201 0 returned -14 [ 160.391142][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.392246][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.482963][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 160.584873][ T1010] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.585187][ T1010] usb 2-1: 2:1 : bogus bTerminalLink 2 [ 160.607364][ T6432] Flush: task=udevd[6432] dev=loop3 state=2 [ 160.638196][ T6415] xfrm0 speed is unknown, defaulting to 1000 [ 160.692568][ T6432] Teardown: task=udevd[6432] dev=loop3 state=2 [ 160.912366][ T1010] usb 2-1: USB disconnect, device number 4 [ 161.816243][ T6529] loop1: detected capacity change from 0 to 256 [ 161.826688][ T6529] exfat: Deprecated parameter 'namecase' [ 161.827062][ T6529] exfat: Deprecated parameter 'namecase' [ 161.827208][ T6529] exfat: Deprecated parameter 'namecase' [ 161.836988][ T60] Bluetooth: hci6: command tx timeout [ 162.295262][ T6529] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 162.377904][ T6526] binder: 6519:6526 ioctl c0306201 0 returned -14 [ 162.942807][ T6434] Flush: task=udevd[6434] dev=loop1 state=2 [ 163.033622][ T6434] Teardown: task=udevd[6434] dev=loop1 state=2 [ 163.058789][ T6469] udevd[6469]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.372300][ T6232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.612151][ T6232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.617434][ T6232] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 163.638470][ T6232] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 163.638495][ T6232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.638514][ T6232] usb 4-1: Product: syz [ 163.638537][ T6232] usb 4-1: Manufacturer: syz [ 163.638550][ T6232] usb 4-1: SerialNumber: syz [ 163.907142][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.927406][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.014241][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 164.155112][ T6232] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 164.156877][ T6232] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 164.414212][ T6232] usb 4-1: USB disconnect, device number 3 [ 164.515507][ T57] bridge_slave_1: left allmulticast mode [ 164.515663][ T57] bridge_slave_1: left promiscuous mode [ 164.545465][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.775128][ T57] bridge_slave_0: left allmulticast mode [ 164.775159][ T57] bridge_slave_0: left promiscuous mode [ 164.776102][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.778654][ T6567] [ 164.778662][ T6567] ====================================================== [ 164.778670][ T6567] WARNING: possible circular locking dependency detected [ 164.778684][ T6567] syzkaller #0 Not tainted [ 164.778694][ T6567] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.778702][ T6567] syz.3.194/6567 is trying to acquire lock: [ 164.778712][ T6567] ffff88813fe672c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 164.778768][ T6567] [ 164.778768][ T6567] but task is already holding lock: [ 164.778774][ T6567] ffff8880275a9490 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 164.778822][ T6567] [ 164.778822][ T6567] which lock already depends on the new lock. [ 164.778822][ T6567] [ 164.778829][ T6567] [ 164.778829][ T6567] the existing dependency chain (in reverse order) is: [ 164.778836][ T6567] [ 164.778836][ T6567] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 164.778866][ T6567] blk_alloc_queue+0x54c/0x690 [ 164.778894][ T6567] __blk_mq_alloc_disk+0x194/0x390 [ 164.778908][ T6567] loop_add+0x480/0xb50 [ 164.778923][ T6567] loop_init+0xd7/0x160 [ 164.778943][ T6567] do_one_initcall+0x250/0x870 [ 164.778970][ T6567] do_initcall_level+0x10a/0x1a0 [ 164.778991][ T6567] do_initcalls+0x59/0xa0 [ 164.779008][ T6567] kernel_init_freeable+0x29d/0x3e0 [ 164.779027][ T6567] kernel_init+0x22/0x1d0 [ 164.779045][ T6567] ret_from_fork+0x514/0xb70 [ 164.779072][ T6567] ret_from_fork_asm+0x1a/0x30 [ 164.779095][ T6567] [ 164.779095][ T6567] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 164.779121][ T6567] fs_reclaim_acquire+0x71/0x100 [ 164.779138][ T6567] kmem_cache_alloc_noprof+0x5c/0x680 [ 164.779166][ T6567] __kernfs_iattrs+0xdd/0x380 [ 164.779183][ T6567] kernfs_iop_setattr+0xe6/0x3f0 [ 164.779199][ T6567] notify_change+0xbb8/0xec0 [ 164.779224][ T6567] do_truncate+0x1c2/0x250 [ 164.779244][ T6567] path_openat+0x300d/0x3850 [ 164.779265][ T6567] do_file_open+0x23e/0x4a0 [ 164.779284][ T6567] do_sys_openat2+0x115/0x200 [ 164.779298][ T6567] __x64_sys_openat+0x138/0x170 [ 164.779312][ T6567] do_syscall_64+0x174/0x580 [ 164.779336][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.779354][ T6567] [ 164.779354][ T6567] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 164.779389][ T6567] __lock_acquire+0x15ff/0x2e40 [ 164.779411][ T6567] lock_acquire+0x115/0x350 [ 164.779429][ T6567] down_read+0x97/0x200 [ 164.779444][ T6567] kernfs_iop_getattr+0x9e/0x450 [ 164.779459][ T6567] vfs_getattr_nosec+0x2e1/0x430 [ 164.779484][ T6567] loop_assign_backing_file+0x286/0x4c0 [ 164.779505][ T6567] lo_ioctl+0x1af1/0x1fe0 [ 164.779522][ T6567] blkdev_ioctl+0x5e6/0x750 [ 164.779537][ T6567] __se_sys_ioctl+0xff/0x170 [ 164.779558][ T6567] do_syscall_64+0x174/0x580 [ 164.779582][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.779599][ T6567] [ 164.779599][ T6567] other info that might help us debug this: [ 164.779599][ T6567] [ 164.779605][ T6567] Chain exists of: [ 164.779605][ T6567] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 164.779605][ T6567] [ 164.779640][ T6567] Possible unsafe locking scenario: [ 164.779640][ T6567] [ 164.779645][ T6567] CPU0 CPU1 [ 164.779651][ T6567] ---- ---- [ 164.779656][ T6567] lock(&q->q_usage_counter(io)#22); [ 164.779673][ T6567] lock(fs_reclaim); [ 164.779686][ T6567] lock(&q->q_usage_counter(io)#22); [ 164.779705][ T6567] rlock(&root->kernfs_iattr_rwsem); [ 164.779718][ T6567] [ 164.779718][ T6567] *** DEADLOCK *** [ 164.779718][ T6567] [ 164.779723][ T6567] 3 locks held by syz.3.194/6567: [ 164.779734][ T6567] #0: ffff888026f03498 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14d8/0x1fe0 [ 164.779780][ T6567] #1: ffff8880275a9490 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 164.779829][ T6567] #2: ffff8880275a94c8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: lo_ioctl+0x1a7d/0x1fe0 [ 164.779877][ T6567] [ 164.779877][ T6567] stack backtrace: [ 164.779900][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.779923][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.779942][ T6567] Call Trace: [ 164.779950][ T6567] [ 164.779957][ T6567] dump_stack_lvl+0xe8/0x150 [ 164.779987][ T6567] print_circular_bug+0x2e2/0x300 [ 164.780016][ T6567] check_noncircular+0x12f/0x150 [ 164.780045][ T6567] __lock_acquire+0x15ff/0x2e40 [ 164.780077][ T6567] lock_acquire+0x115/0x350 [ 164.780097][ T6567] ? kernfs_iop_getattr+0x9e/0x450 [ 164.780122][ T6567] down_read+0x97/0x200 [ 164.780138][ T6567] ? kernfs_iop_getattr+0x9e/0x450 [ 164.780156][ T6567] ? __pfx_down_read+0x10/0x10 [ 164.780172][ T6567] ? kernfs_root+0x1c/0x230 [ 164.780189][ T6567] ? kernfs_root+0x1c/0x230 [ 164.780210][ T6567] kernfs_iop_getattr+0x9e/0x450 [ 164.780232][ T6567] vfs_getattr_nosec+0x2e1/0x430 [ 164.780263][ T6567] loop_assign_backing_file+0x286/0x4c0 [ 164.780286][ T6567] ? rt_spin_unlock+0x157/0x200 [ 164.780309][ T6567] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 164.780347][ T6567] lo_ioctl+0x1af1/0x1fe0 [ 164.780378][ T6567] ? __pfx_lo_ioctl+0x10/0x10 [ 164.780401][ T6567] ? rcu_is_watching+0x15/0xb0 [ 164.780426][ T6567] ? trace_sched_exit_tp+0x3a/0x130 [ 164.780446][ T6567] ? __schedule+0x171f/0x5530 [ 164.780471][ T6567] ? __lock_acquire+0x6df/0x2e40 [ 164.780494][ T6567] ? __lock_acquire+0x6df/0x2e40 [ 164.780517][ T6567] ? __lock_acquire+0x6df/0x2e40 [ 164.780540][ T6567] ? __lock_acquire+0x6df/0x2e40 [ 164.780560][ T6567] ? lock_acquire+0x115/0x350 [ 164.780583][ T6567] ? lock_acquire+0x115/0x350 [ 164.780606][ T6567] ? lock_acquire+0x115/0x350 [ 164.780630][ T6567] ? is_bpf_text_address+0x26/0x2b0 [ 164.780657][ T6567] ? is_bpf_text_address+0x292/0x2b0 [ 164.780681][ T6567] ? is_bpf_text_address+0x26/0x2b0 [ 164.780706][ T6567] ? kernel_text_address+0xa5/0xe0 [ 164.780726][ T6567] ? __kernel_text_address+0xd/0x30 [ 164.780745][ T6567] ? unwind_get_return_address+0x4d/0x90 [ 164.780767][ T6567] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.780787][ T6567] ? arch_stack_walk+0xfb/0x150 [ 164.780814][ T6567] ? stack_trace_save+0xa9/0x100 [ 164.780832][ T6567] ? __pfx_stack_trace_save+0x10/0x10 [ 164.780850][ T6567] ? kasan_save_track+0x4f/0x80 [ 164.780880][ T6567] ? stack_depot_save_flags+0x33/0x800 [ 164.780898][ T6567] ? __lock_acquire+0x6df/0x2e40 [ 164.780920][ T6567] ? kasan_save_track+0x4f/0x80 [ 164.780945][ T6567] ? kasan_save_track+0x3e/0x80 [ 164.780972][ T6567] ? kasan_save_free_info+0x40/0x50 [ 164.780993][ T6567] ? __kasan_slab_free+0x5c/0x80 [ 164.781008][ T6567] ? kfree+0x1c5/0x6c0 [ 164.781030][ T6567] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 164.781049][ T6567] ? security_file_ioctl+0xb9/0x260 [ 164.781068][ T6567] ? __se_sys_ioctl+0x47/0x170 [ 164.781091][ T6567] ? do_syscall_64+0x174/0x580 [ 164.781117][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.781138][ T6567] ? __asan_memset+0x22/0x50 [ 164.781161][ T6567] ? blk_get_meta_cap+0x19d/0x780 [ 164.781189][ T6567] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 164.781218][ T6567] ? blkdev_common_ioctl+0x14b7/0x3250 [ 164.781240][ T6567] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 164.781259][ T6567] ? kasan_quarantine_put+0xbb/0x1f0 [ 164.781289][ T6567] ? tomoyo_path_number_perm+0x219/0x5f0 [ 164.781310][ T6567] ? tomoyo_path_number_perm+0x219/0x5f0 [ 164.781331][ T6567] ? do_vfs_ioctl+0x1184/0x1550 [ 164.781365][ T6567] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 164.781396][ T6567] ? do_futex+0x458/0x4e0 [ 164.781431][ T6567] ? __pfx_lo_ioctl+0x10/0x10 [ 164.781452][ T6567] blkdev_ioctl+0x5e6/0x750 [ 164.781472][ T6567] ? __pfx_blkdev_ioctl+0x10/0x10 [ 164.781489][ T6567] ? __fget_files+0x2a/0x420 [ 164.781519][ T6567] ? bpf_lsm_file_ioctl+0x9/0x20 [ 164.781540][ T6567] ? __pfx_blkdev_ioctl+0x10/0x10 [ 164.781559][ T6567] __se_sys_ioctl+0xff/0x170 [ 164.781583][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.781603][ T6567] do_syscall_64+0x174/0x580 [ 164.781632][ T6567] ? trace_irq_disable+0x3b/0x140 [ 164.781653][ T6567] ? clear_bhb_loop+0x40/0x90 [ 164.781675][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.781694][ T6567] RIP: 0033:0x7f2ee3e4de59 [ 164.781722][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.781739][ T6567] RSP: 002b:00007f2ee20a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.781759][ T6567] RAX: ffffffffffffffda RBX: 00007f2ee40d5fa0 RCX: 00007f2ee3e4de59 [ 164.781774][ T6567] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 164.781786][ T6567] RBP: 00007f2ee3ee3e6f R08: 0000000000000000 R09: 0000000000000000 [ 164.781798][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.781809][ T6567] R13: 00007f2ee40d6038 R14: 00007f2ee40d5fa0 R15: 00007ffc3dd83408 [ 164.781829][ T6567] [ 164.807937][ T6469] Flush: task=udevd[6469] dev=loop5 state=2 [ 164.963435][ T6469] Teardown: task=udevd[6469] dev=loop5 state=2 [ 166.039749][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.119771][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.139517][ T57] bond0 (unregistering): Released all slaves [ 166.181654][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 166.859334][ T57] tipc: Left network mode [ 167.541522][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.979002][ T57] hsr_slave_0: left promiscuous mode [ 167.998994][ T57] hsr_slave_1: left promiscuous mode [ 167.999446][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.039412][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.429739][ T57] team0 (unregistering): Port device team_slave_1 removed [ 168.469464][ T57] team0 (unregistering): Port device team_slave_0 removed [ 168.551413][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.776842][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.759876][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.000176][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.229940][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.439900][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.845524][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.060284][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.271772][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.489530][ T5255] 8021q: adding VLAN 0 to HW filter on device eth8 [ 171.904152][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.117511][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 172.339355][ T5255] 8021q: adding VLAN 0 to HW filter on device eth11 [ 172.550562][ T5255] 8021q: adding VLAN 0 to HW filter on device eth12 [ 172.920440][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.960954][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13 [ 173.199910][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.240246][ T5255] 8021q: adding VLAN 0 to HW filter on device eth14 [ 173.479920][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.521380][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15 [ 173.760328][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.800264][ T5255] 8021q: adding VLAN 0 to HW filter on device eth16 [ 174.319121][ T48] bridge_slave_1: left promiscuous mode [ 174.319307][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.419469][ T48] bridge_slave_0: left allmulticast mode [ 174.419486][ T48] bridge_slave_0: left promiscuous mode [ 174.419599][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.719436][ T48] bridge_slave_1: left allmulticast mode [ 174.719463][ T48] bridge_slave_1: left promiscuous mode [ 174.719663][ T48] bridge0: port 2(bridge_slave_1) entered disabled state