last executing test programs: 26m40.412624813s ago: executing program 32 (id=7): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="66923dca343e7c28f9a57ce723713a91e185f20b873b17564a9ae45651d22094dea6daf6450541639a346351489fd749feaaeafdb50f5c37513fc3cf0ff37738ef211385cedc300cf288b6d264048ed3bf53aef2c0bf6776658f25fbb80fb752ac690c897bdfe3f17371ec9a9b03147961b2bdf6acdeb13910cd4f0d744eab8a0ae94620a69e8e30ccb4b7fdfe7aa26ba484a8a85876e930b7f092f5780192731f112837099e43", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000180)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 26m30.760834942s ago: executing program 33 (id=16): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="66923dca343e7c28f9a57ce723713a91e185f20b873b17564a9ae45651d22094dea6daf6450541639a346351489fd749feaaeafdb50f5c37513fc3cf0ff37738ef211385cedc300cf288b6d264048ed3bf53aef2c0bf6776658f25fbb80fb752ac690c897bdfe3f17371ec9a9b03147961b2bdf6acdeb13910cd4f0d744eab8a0ae94620a69e8e30ccb4b7fdfe7aa26ba484a8a85876e930b7f092f5780192731f112837099e43", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000180)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14m10.321621505s ago: executing program 4 (id=2351): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 14m8.597125839s ago: executing program 4 (id=2353): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 14m6.627555533s ago: executing program 4 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x40, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="36566011ebc1"}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 14m6.151461684s ago: executing program 4 (id=2355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280050004000100000014000700fc02000000000000000000000000000108000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14m2.572100583s ago: executing program 4 (id=2359): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 14m1.008567642s ago: executing program 4 (id=2360): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) 13m45.18356279s ago: executing program 34 (id=2360): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) 11m18.720275253s ago: executing program 6 (id=2615): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x400, 0x2, 0x5a}, &(0x7f0000000000)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r3}, 0x38) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x80) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x6, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x400, 0x1, {0x8, 0x1}, {0x4c, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x0, 0x0, 0x3, 0x4}, {0xc, 0x1, 0x4, 0xfffffe01}, {0x9, 0x97, 0x28}]}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) 11m17.62787397s ago: executing program 6 (id=2617): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x4000010, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0xe526, 0x7, 0x9, {0x5, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x0, 0x1000, 0x7f, r2, r3, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m17.394189691s ago: executing program 6 (id=2618): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11m9.588428061s ago: executing program 6 (id=2629): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff26bd70000100000000000000", @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280050004000100000014000700fc02000000000000000000000000000108000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m4.82259185s ago: executing program 6 (id=2634): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x3, 0xa382) r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000f0900020073797a310000000008000a40fffffffc200011000100636f6e6e6c696d69740000000c00028008000140fffff2741400000011000124d56230e34dc15f7c3217ce6e8c7b18c00aaa2b6b342d0431873c60545c0d164892b0436bfdf3a76b74700144c4fae99cef1878582b2a74899fe298c6ad8ce228aa377b7aa2aac9aa8dfb0ecd40a67fa55ba50493f26399a1e36971b70e47da17f85ded6ec791f76b04a50000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="01042ebd7000fedbdf251600000018000180140002006e657464657673696d30000000"], 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x6c, r9, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x3ff, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r11, &(0x7f0000000640)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) 7m47.421235989s ago: executing program 5 (id=2980): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a000000000000000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYRES32=r3], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7m43.86516797s ago: executing program 5 (id=2984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000280)={0x10, &(0x7f00000000c0)={0x40, 0x12, 0x7, "e8c4c94f000000"}, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="208402000000b0e0"], 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001b00)={0x44, &(0x7f00000016c0)={0x0, 0x8, 0x2, 'V\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="201430"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 7m33.090829451s ago: executing program 5 (id=3002): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xcc36, 0x100, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="0000000000aa303e97380e90231bdbdaf6a4bd865726b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d0c", 0x5b}, {&(0x7f0000000d00)="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", 0x426}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 7m32.616933347s ago: executing program 5 (id=3004): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m17.279195987s ago: executing program 36 (id=3004): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m28.046766789s ago: executing program 7 (id=3682): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, 0x0, &(0x7f0000000840)=""/48, &(0x7f00000001c0)=""/48, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r2}) 5m23.640092376s ago: executing program 7 (id=3693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 5m22.638242018s ago: executing program 7 (id=3695): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000080)=0x3) openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) 5m21.397650743s ago: executing program 7 (id=3696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB="03000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @loopback, 0x0}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(r7, &(0x7f0000000240)) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000faff6eff00000000", @ANYRES32=r2, @ANYBLOB="0000010000000000", @ANYRES32=r3, @ANYRES32=r4], 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900032b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7af", 0x5c4}], 0x1}, 0x0) 5m20.007925142s ago: executing program 7 (id=3702): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x18}}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000080)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) pipe2(&(0x7f00000000c0), 0x80000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) 5m18.725651442s ago: executing program 7 (id=3704): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m10.259517133s ago: executing program 9 (id=3721): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002480)={{r5}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3}) write$UHID_CREATE2(r5, &(0x7f0000003bc0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x73, 0x5, 0xa, 0x4, 0x9, 0xffffffff, "696e7d864f57c45d8c1117c489ffa03aae6ac8bb06e13f252504b9fb2d120c7f2b393dfc0e84bbb1de94d25b60cb5da8b1e61ec1267dea0b92808d5b3cbb6145048e5057549e8db903f32644b06f68dad3397048eb55115b3600437fa5e34c6552f49ca820513dc8fd534911cb95ec769a537c"}}, 0x18b) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x0, 0x3}, {0x0, 0x7}, 0x6, 0x6}) 5m7.766718097s ago: executing program 9 (id=3726): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5m3.668777036s ago: executing program 37 (id=3704): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m2.648685604s ago: executing program 9 (id=3768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0x5}, 0x18) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000280)=0x8001) r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653e, 0x0, 0x0, 0x28e}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000210000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) unlink(&(0x7f0000000380)='./file0\x00') 5m1.319995419s ago: executing program 9 (id=3771): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x110, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x1000, 0x34324258, 0x6, 0x4, [{0x2, 0x1}, {0x180000, 0x4}, {0xb720, 0x101}, {0x80000000, 0x83}, {0x3, 0x8}, {0x8000ffe, 0x5415}, {0x400, 0x7ff}, {0x40000003, 0x4}], 0x1, 0x7, 0x4, 0x1, 0x5}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000008c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x471a, 0x3, 0x0, 0x709048e0dd7e944, [0xc, 0x8], [0x7637], 0x139}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) 4m59.923692412s ago: executing program 9 (id=3775): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 4m56.498165798s ago: executing program 9 (id=3794): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4m41.4200999s ago: executing program 38 (id=3794): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 38.178449211s ago: executing program 2 (id=6404): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0xff, 0x3}, 0x20) 37.860827912s ago: executing program 2 (id=6405): r0 = syz_open_dev$sndctrl(&(0x7f0000004180), 0x2, 0x8003) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x8, 0x2, 0x9, 0x400, 'syz0\x00', 0x200}, 0x3, 0x20, 0x543a, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) 4.752199879s ago: executing program 8 (id=6761): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x1, 0x10000000000009, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @remote, 0x5}, 0x1c) 4.608395893s ago: executing program 8 (id=6763): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x10b, 0x0, 0xfffffffffffffffc}]}) 4.424406621s ago: executing program 8 (id=6767): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) close(0x3) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x1000, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.326864146s ago: executing program 8 (id=6770): mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 3.725697596s ago: executing program 8 (id=6772): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) syz_genetlink_get_family_id$ipvs(0x0, r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 2.647282936s ago: executing program 8 (id=6784): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x401000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0x10000000}) 2.566301383s ago: executing program 2 (id=6406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x88, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "61e3a68848039b27f509d8b9c4214f720f85bf505d011861de55d0f6fbfb604b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d0bc8bb16642422f531fb2503ce7527"}]}]}, 0x88}}, 0x0) 2.446359116s ago: executing program 2 (id=6789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 1.925482583s ago: executing program 2 (id=6797): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.56327241s ago: executing program 0 (id=6807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 1.5213485s ago: executing program 1 (id=6808): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 1.298354912s ago: executing program 0 (id=6810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010025bd7000ffdbdf2502202000000000070010000008000300", @ANYRES32=r2, @ANYBLOB="080019"], 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0xea5bc50b6199d77e) 1.076472142s ago: executing program 1 (id=6812): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x80, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffff1000, 0x1, 0xa, 0xfc, 0x0, 0x7, 0xfe, 0x0, 0x0, 0x1}, {0x5000, 0xa000, 0x0, 0x8, 0x0, 0x1, 0x81, 0x9, 0x47, 0xe, 0x0, 0x2}, {0x10b002, 0xc000, 0x8, 0xfd, 0x80, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, {0xb000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfd, 0x0, 0x2, 0xfc, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x84, 0xfe}, {0xdddd0000, 0x80a0000, 0xd, 0x0, 0x0, 0x6, 0x0, 0x80, 0x0, 0x4, 0x0, 0xff}, {0x7000, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xbd, 0x5, 0x0, 0x2}, {0x6000}, {0x1, 0xff4d}, 0x60000021, 0x0, 0x0, 0x10, 0xc, 0x0, 0xeeef0000, [0x0, 0xfffffffffffffffd, 0x10000, 0xffffffffffffffff]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000080)) 1.076180162s ago: executing program 0 (id=6813): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.027523404s ago: executing program 1 (id=6815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)="b99f482b0da5bd36a8f7f459566cf98f59c9b83dfb50ef69ce0811026505b3", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="6fd3e89961", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="5dd3", 0x2}], 0x1, &(0x7f0000000f80)}}], 0x4, 0x80) 985.338053ms ago: executing program 0 (id=6816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x3}, [{0x3, 0x1, "813bf0a868db"}]}}}}}}, 0x0) 835.956178ms ago: executing program 1 (id=6819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 776.915642ms ago: executing program 0 (id=6820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 701.163696ms ago: executing program 1 (id=6822): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x81, 0xfffffffb}) epoll_create1(0x0) creat(0x0, 0x100) signalfd(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 598.282411ms ago: executing program 3 (id=6824): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xf1, 0x9) 534.563262ms ago: executing program 0 (id=6825): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, 0x1a, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) close_range(r0, 0xffffffffffffffff, 0x0) 440.354218ms ago: executing program 3 (id=6826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 407.821269ms ago: executing program 2 (id=6827): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x185402) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, 0x0) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) 394.398148ms ago: executing program 3 (id=6828): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x9e, "0000080100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 244.340931ms ago: executing program 3 (id=6829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 207.527424ms ago: executing program 3 (id=6830): socket$kcm(0x10, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 92.005557ms ago: executing program 3 (id=6831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x80a0000, 0x1000, &(0x7f000027e000/0x1000)=nil, 0x0, r2}) 0s ago: executing program 1 (id=6832): move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x2) kernel console output (not intermixed with test programs): ror reading register 00: -32 [ 1386.482937][T12577] usb 4-1: USB disconnect, device number 58 [ 1386.600878][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.632043][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.826132][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.826295][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.939207][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.939357][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.996405][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.275519][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.279008][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.310013][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.317964][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.754623][T17028] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1388.825182][T17028] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1388.865171][T17028] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1388.950589][T17028] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1389.092525][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.125838][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.498263][T17028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.664882][T17028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.713946][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.714112][ T1441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.756128][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.757047][ T1441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.223239][T16404] veth0_vlan: entered promiscuous mode [ 1390.264595][T16404] veth1_vlan: entered promiscuous mode [ 1390.446674][T16404] veth0_macvtap: entered promiscuous mode [ 1390.489051][T16404] veth1_macvtap: entered promiscuous mode [ 1390.592215][T16513] veth0_vlan: entered promiscuous mode [ 1390.637914][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.678499][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.679098][T16513] veth1_vlan: entered promiscuous mode [ 1390.733405][ T5945] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.753159][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.771762][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.786959][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.877584][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.121957][T16513] veth0_macvtap: entered promiscuous mode [ 1391.269535][T16513] veth1_macvtap: entered promiscuous mode [ 1391.437044][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.437067][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.526690][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.612995][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.664957][ T1441] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.676895][ T1441] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.677035][ T1441] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.677144][ T1441] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.769601][T11283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.769624][T11283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.366657][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.366678][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.651301][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.651326][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.715362][T17028] veth0_vlan: entered promiscuous mode [ 1393.679927][T17028] veth1_vlan: entered promiscuous mode [ 1394.321621][T17028] veth0_macvtap: entered promiscuous mode [ 1394.518653][T17754] hub 9-0:1.0: USB hub found [ 1394.521088][T17754] hub 9-0:1.0: 1 port detected [ 1394.548071][T17752] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1394.672617][T17752] team0: Port device batadv1 added [ 1394.676282][T17028] veth1_macvtap: entered promiscuous mode [ 1395.711545][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.753315][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.925148][ T1377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.995121][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.995185][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.995226][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.499216][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.499240][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.639261][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.639292][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.179215][T17788] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3640'. [ 1400.640377][T13369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1400.762152][T13369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1400.789074][T13369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1401.364980][T13369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1401.404396][T13369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1403.547942][T14598] Bluetooth: hci4: command tx timeout [ 1404.893046][T17872] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1404.896193][T17872] team0: Port device batadv2 added [ 1404.907305][T17872] hub 9-0:1.0: USB hub found [ 1404.911153][T17872] hub 9-0:1.0: 1 port detected [ 1405.630667][T14598] Bluetooth: hci4: command tx timeout [ 1406.414014][ T1377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.708689][T14598] Bluetooth: hci4: command tx timeout [ 1409.781753][T13369] Bluetooth: hci4: command tx timeout [ 1409.848127][ T1377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.746345][ T1377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.833444][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1414.983329][T17978] hub 9-0:1.0: USB hub found [ 1414.990599][T17978] hub 9-0:1.0: 1 port detected [ 1416.988774][ T1377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.412346][T17977] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1417.415775][T17977] team0: Port device batadv1 added [ 1418.434063][T17823] chnl_net:caif_netlink_parms(): no params data found [ 1421.552915][ T1377] bridge_slave_1: left allmulticast mode [ 1421.552946][ T1377] bridge_slave_1: left promiscuous mode [ 1421.553217][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.605886][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3704'. [ 1421.726381][ T1377] bridge_slave_0: left allmulticast mode [ 1421.726412][ T1377] bridge_slave_0: left promiscuous mode [ 1421.726691][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.022524][ T1377] bond_slave_0: left promiscuous mode [ 1426.024791][ T1377] bond_slave_1: left promiscuous mode [ 1430.860392][ T5812] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1431.036192][ T5812] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1431.036224][ T5812] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1431.036244][ T5812] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1431.036298][ T5812] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1431.036327][ T5812] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1431.102900][ T5812] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1431.102931][ T5812] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1431.102952][ T5812] usb 9-1: Product: syz [ 1431.102967][ T5812] usb 9-1: Manufacturer: syz [ 1431.152346][ T5812] cdc_wdm 9-1:1.0: skipping garbage [ 1431.152368][ T5812] cdc_wdm 9-1:1.0: skipping garbage [ 1431.191188][ T5812] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1431.191213][ T5812] cdc_wdm 9-1:1.0: Unknown control protocol [ 1431.542704][ T10] usb 9-1: USB disconnect, device number 2 [ 1432.669953][T18123] hub 9-0:1.0: USB hub found [ 1432.671869][T18123] hub 9-0:1.0: 1 port detected [ 1433.464938][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.465045][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.831598][T13369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1434.844950][ T1377] bond0 (unregistering): left allmulticast mode [ 1434.845024][ T1377] bond_slave_0: left allmulticast mode [ 1434.845077][ T1377] bond_slave_1: left allmulticast mode [ 1434.885366][T13369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1434.887196][T13369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1434.888676][T13369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1434.889963][T13369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1435.103347][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.181221][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.226973][ T1377] bond0 (unregistering): Released all slaves [ 1435.338226][T18098] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1435.339962][T18098] team0: Port device batadv2 added [ 1435.372976][T18121] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1435.394358][T18121] team0: Port device batadv3 added [ 1436.982169][ T1377] tipc: Left network mode [ 1437.019524][T13369] Bluetooth: hci0: command tx timeout [ 1437.226715][T17823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.226930][T17823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.227151][T17823] bridge_slave_0: entered allmulticast mode [ 1437.229596][T17823] bridge_slave_0: entered promiscuous mode [ 1438.001791][T17823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.003860][T17823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.344819][T17823] bridge_slave_1: entered allmulticast mode [ 1438.347603][T17823] bridge_slave_1: entered promiscuous mode [ 1438.860515][ T5966] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1439.060677][T13369] Bluetooth: hci0: command tx timeout [ 1439.062325][ T5966] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1439.062353][ T5966] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1439.062375][ T5966] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1439.062417][ T5966] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1439.062436][ T5966] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1439.064334][ T5966] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1439.064363][ T5966] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1439.064377][ T5966] usb 10-1: Product: syz [ 1439.064388][ T5966] usb 10-1: Manufacturer: syz [ 1439.086683][ T5966] cdc_wdm 10-1:1.0: skipping garbage [ 1439.086768][ T5966] cdc_wdm 10-1:1.0: skipping garbage [ 1439.129034][ T5966] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1439.129091][ T5966] cdc_wdm 10-1:1.0: Unknown control protocol [ 1440.733154][T17823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.792293][T17823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.140662][T13369] Bluetooth: hci0: command tx timeout [ 1441.610473][ T1377] hsr_slave_0: left promiscuous mode [ 1441.721255][T17740] usb 10-1: USB disconnect, device number 2 [ 1442.779138][ T1377] hsr_slave_1: left promiscuous mode [ 1442.786115][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.892109][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.892142][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.516731][T13369] Bluetooth: hci0: command tx timeout [ 1444.400303][ T1377] veth1_macvtap: left promiscuous mode [ 1444.400427][ T1377] veth0_macvtap: left promiscuous mode [ 1444.400707][ T1377] veth1_vlan: left promiscuous mode [ 1444.400895][ T1377] veth0_vlan: left promiscuous mode [ 1444.530681][T18301] hub 9-0:1.0: USB hub found [ 1444.533281][T18301] hub 9-0:1.0: 1 port detected [ 1445.497031][ T1377] team0 (unregistering): Port device batadv1 removed [ 1447.150695][T18347] hub 9-0:1.0: USB hub found [ 1447.157168][T18347] hub 9-0:1.0: 1 port detected [ 1451.506932][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1453.075546][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1455.051754][T18500] binder: 18495:18500 ioctl c0306201 0 returned -14 [ 1457.165593][T14598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1457.195314][T14598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1457.196725][T14598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1457.216249][T14598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1457.217046][T14598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1457.883933][T14598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1457.900667][T14598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1457.902168][T14598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1457.918650][T14598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1457.953011][T14598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1458.303697][T17823] team0: Port device team_slave_0 added [ 1458.432117][T18292] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1458.442690][T18292] team0: Port device batadv3 added [ 1459.308306][T13369] Bluetooth: hci5: command tx timeout [ 1460.100466][T13369] Bluetooth: hci6: command tx timeout [ 1461.167452][T13369] Bluetooth: hci1: command 0x0406 tx timeout [ 1461.382287][T13369] Bluetooth: hci5: command tx timeout [ 1461.878485][T18166] chnl_net:caif_netlink_parms(): no params data found [ 1462.181830][T14598] Bluetooth: hci6: command tx timeout [ 1463.312208][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.312421][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.312678][T18166] bridge_slave_0: entered allmulticast mode [ 1463.328012][T18166] bridge_slave_0: entered promiscuous mode [ 1463.359232][T18579] chnl_net:caif_netlink_parms(): no params data found [ 1463.393083][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.393219][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.393473][T18166] bridge_slave_1: entered allmulticast mode [ 1463.443295][T18166] bridge_slave_1: entered promiscuous mode [ 1463.460498][T14598] Bluetooth: hci5: command tx timeout [ 1463.532041][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3957'. [ 1464.240923][T18559] chnl_net:caif_netlink_parms(): no params data found [ 1464.260274][T14598] Bluetooth: hci6: command tx timeout [ 1465.540342][T14598] Bluetooth: hci5: command tx timeout [ 1466.445140][T14598] Bluetooth: hci6: command tx timeout [ 1466.744766][T18762] syz.8.3969 (18762) used greatest stack depth: 17912 bytes left [ 1466.801762][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.644431][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.469789][ T1377] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.891864][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3992'. [ 1468.931598][T18166] team0: Port device team_slave_0 added [ 1469.426267][ T1377] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.580598][T18166] team0: Port device team_slave_1 added [ 1469.580842][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.603514][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.603788][T18579] bridge_slave_0: entered allmulticast mode [ 1469.606774][T18579] bridge_slave_0: entered promiscuous mode [ 1469.853062][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.853212][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.853439][T18579] bridge_slave_1: entered allmulticast mode [ 1469.856656][T18579] bridge_slave_1: entered promiscuous mode [ 1470.529246][ T1377] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.561722][T18559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.561882][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.562144][T18559] bridge_slave_0: entered allmulticast mode [ 1470.568970][T18559] bridge_slave_0: entered promiscuous mode [ 1470.587137][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.587192][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.587267][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.771675][T18559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.771806][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.772013][T18559] bridge_slave_1: entered allmulticast mode [ 1470.774799][T18559] bridge_slave_1: entered promiscuous mode [ 1470.776650][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.776665][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.776694][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.808723][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.253733][ T1377] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.335239][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.644473][T18559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.680370][ T1615] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1471.811078][ T1615] usb 9-1: device descriptor read/64, error -71 [ 1471.852455][T18559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.875729][T18579] team0: Port device team_slave_0 added [ 1472.050635][ T1615] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1472.077708][T18579] team0: Port device team_slave_1 added [ 1472.106988][T18166] hsr_slave_0: entered promiscuous mode [ 1472.127435][T18166] hsr_slave_1: entered promiscuous mode [ 1472.134283][T18166] debugfs: 'hsr0' already exists in 'hsr' [ 1472.134359][T18166] Cannot create hsr debugfs directory [ 1472.180502][ T1615] usb 9-1: device descriptor read/64, error -71 [ 1472.291310][ T1615] usb usb9-port1: attempt power cycle [ 1472.436475][T18559] team0: Port device team_slave_0 added [ 1472.650765][ T1615] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1472.671662][ T1615] usb 9-1: device descriptor read/8, error -71 [ 1472.718517][T18559] team0: Port device team_slave_1 added [ 1472.910392][ T1615] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1472.933291][ T1615] usb 9-1: device descriptor read/8, error -71 [ 1472.979391][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.979411][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1472.979441][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.044689][ T1615] usb usb9-port1: unable to enumerate USB device [ 1473.174579][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.174593][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.174614][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.562107][T18559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.562126][T18559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.562156][T18559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.804907][T18559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.804926][T18559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.804958][T18559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.099775][T18579] hsr_slave_0: entered promiscuous mode [ 1474.113127][T18579] hsr_slave_1: entered promiscuous mode [ 1474.114263][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 1474.114290][T18579] Cannot create hsr debugfs directory [ 1474.415029][ T1377] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.380877][T19019] hub 9-0:1.0: USB hub found [ 1475.420407][T19019] hub 9-0:1.0: 1 port detected [ 1475.694435][ T1377] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.825631][T18559] hsr_slave_0: entered promiscuous mode [ 1475.827186][T18559] hsr_slave_1: entered promiscuous mode [ 1475.828089][T18559] debugfs: 'hsr0' already exists in 'hsr' [ 1475.828108][T18559] Cannot create hsr debugfs directory [ 1476.000793][T19016] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1476.031119][T19016] team0: Port device batadv4 added [ 1476.324824][ T1377] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.811867][ T1377] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.312347][T19048] cgroup: fork rejected by pids controller in /syz8 [ 1480.312510][ T1377] bridge_slave_1: left allmulticast mode [ 1480.312543][ T1377] bridge_slave_1: left promiscuous mode [ 1480.312820][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.419156][ T1377] bridge_slave_0: left allmulticast mode [ 1480.419180][ T1377] bridge_slave_0: left promiscuous mode [ 1480.419374][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.484836][ T1377] bridge_slave_1: left allmulticast mode [ 1480.484868][ T1377] bridge_slave_1: left promiscuous mode [ 1480.485126][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.542135][ T1377] bridge_slave_0: left allmulticast mode [ 1480.542166][ T1377] bridge_slave_0: left promiscuous mode [ 1480.542428][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.624819][ T1377] bridge_slave_1: left allmulticast mode [ 1480.624848][ T1377] bridge_slave_1: left promiscuous mode [ 1480.625134][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.702296][ T1377] bridge_slave_0: left allmulticast mode [ 1480.702327][ T1377] bridge_slave_0: left promiscuous mode [ 1480.702641][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.834373][T13369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1480.856141][T13369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1480.870141][T13369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1480.886250][T13369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1480.889616][T13369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1483.010863][T14598] Bluetooth: hci1: command tx timeout [ 1483.682170][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1483.751327][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1483.774976][ T1377] bond0 (unregistering): Released all slaves [ 1484.003138][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.092689][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.173120][ T1377] bond0 (unregistering): Released all slaves [ 1485.060578][T14598] Bluetooth: hci1: command tx timeout [ 1486.491452][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.551332][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.598763][ T1377] bond0 (unregistering): Released all slaves [ 1487.140362][T14598] Bluetooth: hci1: command tx timeout [ 1487.929487][T19106] chnl_net:caif_netlink_parms(): no params data found [ 1489.220628][T14598] Bluetooth: hci1: command tx timeout [ 1489.540690][T19106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.542882][T19106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.543143][T19106] bridge_slave_0: entered allmulticast mode [ 1489.545638][T19106] bridge_slave_0: entered promiscuous mode [ 1489.852110][T19106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.852323][T19106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.852586][T19106] bridge_slave_1: entered allmulticast mode [ 1489.855512][T19106] bridge_slave_1: entered promiscuous mode [ 1490.314169][T19106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.459128][ T1377] hsr_slave_0: left promiscuous mode [ 1490.482344][ T1377] hsr_slave_1: left promiscuous mode [ 1490.483782][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.483809][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.515118][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.515149][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.690438][ T1377] hsr_slave_0: left promiscuous mode [ 1490.730716][ T1377] hsr_slave_1: left promiscuous mode [ 1490.731572][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.731591][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.771251][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.771272][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.905745][ T1377] veth1_macvtap: left promiscuous mode [ 1490.905863][ T1377] veth0_macvtap: left promiscuous mode [ 1490.906122][ T1377] veth1_vlan: left promiscuous mode [ 1490.906306][ T1377] veth0_vlan: left promiscuous mode [ 1491.051018][ T1377] veth1_macvtap: left promiscuous mode [ 1491.051147][ T1377] veth0_macvtap: left promiscuous mode [ 1491.051417][ T1377] veth1_vlan: left promiscuous mode [ 1491.051606][ T1377] veth0_vlan: left promiscuous mode [ 1491.753262][ T1377] team0 (unregistering): Port device batadv3 removed [ 1491.853347][ T1377] team0 (unregistering): Port device batadv2 removed [ 1491.981132][ T1377] team0 (unregistering): Port device batadv1 removed [ 1494.823468][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1494.897303][T13369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1494.916323][T13369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1494.919296][T13369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1494.927295][T13369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1494.928121][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.928191][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.929955][T13369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1495.241315][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1497.060818][T14598] Bluetooth: hci3: command tx timeout [ 1498.772494][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1499.140632][T14598] Bluetooth: hci3: command tx timeout [ 1501.253833][T14598] Bluetooth: hci3: command tx timeout [ 1502.039913][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1502.392252][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1503.300521][T14598] Bluetooth: hci3: command tx timeout [ 1505.877871][T19106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.285942][T19106] team0: Port device team_slave_0 added [ 1506.289940][T19106] team0: Port device team_slave_1 added [ 1506.904807][T19106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.904826][T19106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.904856][T19106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.973407][T19106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.973428][T19106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.973456][T19106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.690051][T19106] hsr_slave_0: entered promiscuous mode [ 1507.695837][T19106] hsr_slave_1: entered promiscuous mode [ 1509.335471][T19559] chnl_net:caif_netlink_parms(): no params data found [ 1510.116700][T19559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.117491][T19559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.117717][T19559] bridge_slave_0: entered allmulticast mode [ 1510.126171][T19559] bridge_slave_0: entered promiscuous mode [ 1510.147980][T19559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.149020][T19559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.149284][T19559] bridge_slave_1: entered allmulticast mode [ 1510.164061][T19559] bridge_slave_1: entered promiscuous mode [ 1510.793914][T18579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1510.887769][T19559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.932065][T18579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1511.004216][T19559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.004562][T18579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1511.201698][T18579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1511.388744][T19559] team0: Port device team_slave_0 added [ 1511.402124][T19559] team0: Port device team_slave_1 added [ 1511.668198][T19559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.668217][T19559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.668248][T19559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.727270][T19559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.727289][T19559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.727321][T19559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.791546][T18559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1511.840057][T18559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1512.089902][T19106] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.250699][T18559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1512.680685][T18559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1513.016790][T19106] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.104343][T19559] hsr_slave_0: entered promiscuous mode [ 1513.105884][T19559] hsr_slave_1: entered promiscuous mode [ 1513.106930][T19559] debugfs: 'hsr0' already exists in 'hsr' [ 1513.106957][T19559] Cannot create hsr debugfs directory [ 1513.384290][T19106] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.884726][T19106] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.878348][T19106] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1514.944065][T19106] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1515.004745][T19106] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1515.098609][T19106] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1515.365685][ T1377] bridge_slave_1: left allmulticast mode [ 1515.365718][ T1377] bridge_slave_1: left promiscuous mode [ 1515.365987][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.462044][ T1377] bridge_slave_0: left allmulticast mode [ 1515.462075][ T1377] bridge_slave_0: left promiscuous mode [ 1515.464645][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.513316][ T1377] bridge_slave_1: left allmulticast mode [ 1515.513339][ T1377] bridge_slave_1: left promiscuous mode [ 1515.513538][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.562314][ T1377] bridge_slave_0: left allmulticast mode [ 1515.562343][ T1377] bridge_slave_0: left promiscuous mode [ 1515.562603][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.162627][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.293445][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.383481][ T1377] bond0 (unregistering): Released all slaves [ 1517.272453][T13369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1517.291387][T13369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1517.294462][T13369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1517.297535][T13369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1517.299127][T13369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1517.825462][T17830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1517.829661][T17830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1517.853765][T17830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1517.880501][T17830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1517.881477][T17830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1518.871393][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.941917][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.986617][ T1377] bond0 (unregistering): Released all slaves [ 1519.416000][T17830] Bluetooth: hci0: command tx timeout [ 1519.960772][T17830] Bluetooth: hci4: command tx timeout [ 1521.470667][T17830] Bluetooth: hci0: command tx timeout [ 1521.900425][ T1377] hsr_slave_0: left promiscuous mode [ 1521.940547][ T1377] hsr_slave_1: left promiscuous mode [ 1521.941641][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.984149][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.020677][T17830] Bluetooth: hci4: command tx timeout [ 1522.121108][ T1377] hsr_slave_0: left promiscuous mode [ 1522.160434][ T1377] hsr_slave_1: left promiscuous mode [ 1522.161438][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.161464][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.201656][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.201688][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.320445][ T1377] veth1_macvtap: left promiscuous mode [ 1522.320551][ T1377] veth0_macvtap: left promiscuous mode [ 1522.320808][ T1377] veth1_vlan: left promiscuous mode [ 1522.321014][ T1377] veth0_vlan: left promiscuous mode [ 1523.511123][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1523.570292][T17830] Bluetooth: hci0: command tx timeout [ 1523.681325][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1524.100621][T17830] Bluetooth: hci4: command tx timeout [ 1524.531241][ T1377] team0 (unregistering): Port device batadv4 removed [ 1524.650992][ T1377] team0 (unregistering): Port device batadv3 removed [ 1524.791345][ T1377] team0 (unregistering): Port device batadv2 removed [ 1524.901765][ T1377] team0 (unregistering): Port device batadv1 removed [ 1525.620827][T14598] Bluetooth: hci0: command tx timeout [ 1526.200741][T17830] Bluetooth: hci4: command tx timeout [ 1527.601212][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1527.951357][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1531.880008][T20251] chnl_net:caif_netlink_parms(): no params data found [ 1531.889965][T19559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1531.988160][T19559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1532.180478][T19559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1532.383402][T19559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1532.448551][T19106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.513982][T20269] chnl_net:caif_netlink_parms(): no params data found [ 1532.966001][T20251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.966213][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.966404][T20251] bridge_slave_0: entered allmulticast mode [ 1532.969909][T20251] bridge_slave_0: entered promiscuous mode [ 1533.017108][T20251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.017917][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.018126][T20251] bridge_slave_1: entered allmulticast mode [ 1533.046110][T20251] bridge_slave_1: entered promiscuous mode [ 1533.201807][T19106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.448100][T20251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.571328][T20251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.697123][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.697374][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.698330][T20269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.698451][T20269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.698663][T20269] bridge_slave_0: entered allmulticast mode [ 1533.712855][T20269] bridge_slave_0: entered promiscuous mode [ 1533.902746][T20269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.902943][T20269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.903170][T20269] bridge_slave_1: entered allmulticast mode [ 1533.906228][T20269] bridge_slave_1: entered promiscuous mode [ 1534.118167][T20251] team0: Port device team_slave_0 added [ 1534.163359][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.163592][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.282964][T20251] team0: Port device team_slave_1 added [ 1534.306194][T20269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.424966][T20269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.682987][T20251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.683003][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.683023][T20251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.815039][T20251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.815057][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.815104][T20251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.872946][T20269] team0: Port device team_slave_0 added [ 1534.904884][T20269] team0: Port device team_slave_1 added [ 1535.554881][T20269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.554901][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.554932][T20269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.624912][T20251] hsr_slave_0: entered promiscuous mode [ 1535.626460][T20251] hsr_slave_1: entered promiscuous mode [ 1535.627551][T20251] debugfs: 'hsr0' already exists in 'hsr' [ 1535.627577][T20251] Cannot create hsr debugfs directory [ 1535.631779][T20269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.631795][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.631823][T20269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.887562][T20269] hsr_slave_0: entered promiscuous mode [ 1536.888600][T20269] hsr_slave_1: entered promiscuous mode [ 1536.902390][T20269] debugfs: 'hsr0' already exists in 'hsr' [ 1536.902419][T20269] Cannot create hsr debugfs directory [ 1537.959384][T19559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.769181][T19559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.004113][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.004336][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.047593][T19106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.083020][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.086058][T17963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.730543][ T1377] bridge_slave_1: left allmulticast mode [ 1539.730575][ T1377] bridge_slave_1: left promiscuous mode [ 1539.730861][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.811940][ T1377] bridge_slave_0: left allmulticast mode [ 1539.811974][ T1377] bridge_slave_0: left promiscuous mode [ 1539.812260][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.905647][ T1377] bridge_slave_1: left allmulticast mode [ 1539.905680][ T1377] bridge_slave_1: left promiscuous mode [ 1539.905939][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.981680][ T1377] bridge_slave_0: left allmulticast mode [ 1539.981703][ T1377] bridge_slave_0: left promiscuous mode [ 1539.981914][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.931942][T14598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1540.938108][T14598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1540.954361][T14598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1540.958843][T14598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1540.962222][T14598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1541.391294][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.491182][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.573302][ T1377] bond0 (unregistering): Released all slaves [ 1542.521102][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.583947][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.672703][ T1377] bond0 (unregistering): Released all slaves [ 1543.069496][T17830] Bluetooth: hci5: command tx timeout [ 1543.411413][ T1377] hsr_slave_0: left promiscuous mode [ 1543.430603][ T1377] hsr_slave_1: left promiscuous mode [ 1543.431444][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.486872][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.710723][ T1377] hsr_slave_0: left promiscuous mode [ 1543.730320][ T1377] hsr_slave_1: left promiscuous mode [ 1543.731091][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.771500][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.631022][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1544.832872][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1545.140360][T17830] Bluetooth: hci5: command tx timeout [ 1546.251765][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1546.412677][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1547.220343][T17830] Bluetooth: hci5: command tx timeout [ 1547.644621][T19559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.017678][T21010] chnl_net:caif_netlink_parms(): no params data found [ 1548.416154][T19559] veth0_vlan: entered promiscuous mode [ 1548.416612][T20251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1548.535904][T20251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1548.720422][T20251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1548.746290][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.747035][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.747252][T21010] bridge_slave_0: entered allmulticast mode [ 1548.750099][T21010] bridge_slave_0: entered promiscuous mode [ 1548.807972][T20251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1548.835608][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.835764][T21010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.835961][T21010] bridge_slave_1: entered allmulticast mode [ 1548.838225][T21010] bridge_slave_1: entered promiscuous mode [ 1549.113397][T19559] veth1_vlan: entered promiscuous mode [ 1549.130614][T21010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.162663][T21010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.305847][T17830] Bluetooth: hci5: command tx timeout [ 1549.525598][T21010] team0: Port device team_slave_0 added [ 1549.527337][T20269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1549.573929][T21010] team0: Port device team_slave_1 added [ 1549.578631][T20269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1549.693855][T20269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1549.884899][T20269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1549.906170][T21010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.906186][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.906207][T21010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.953240][T21010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.953300][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.953381][T21010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.337902][T21010] hsr_slave_0: entered promiscuous mode [ 1550.338987][T21010] hsr_slave_1: entered promiscuous mode [ 1550.339711][T21010] debugfs: 'hsr0' already exists in 'hsr' [ 1550.339729][T21010] Cannot create hsr debugfs directory [ 1550.366665][T19559] veth0_macvtap: entered promiscuous mode [ 1550.693263][T19559] veth1_macvtap: entered promiscuous mode [ 1551.373200][T19559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.627320][T19559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.685898][T17963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.703568][T17963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.709244][T17963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.738927][T17963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.797648][T20251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.095961][T20251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.223909][T20269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.230871][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.231126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.242711][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.242776][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.400956][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.411058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.475286][ T1377] bridge_slave_1: left allmulticast mode [ 1552.475318][ T1377] bridge_slave_1: left promiscuous mode [ 1552.475586][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.571332][ T1377] bridge_slave_0: left allmulticast mode [ 1552.571357][ T1377] bridge_slave_0: left promiscuous mode [ 1552.575460][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.791447][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.851247][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.874663][ T1377] bond0 (unregistering): Released all slaves [ 1554.915607][T14598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1554.938732][T14598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1554.955557][T14598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1554.961072][T14598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1554.965666][T14598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1555.193666][T20269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.360380][ T1377] hsr_slave_0: left promiscuous mode [ 1555.382357][ T1377] hsr_slave_1: left promiscuous mode [ 1555.383455][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.421442][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.349149][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.349226][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.916797][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1557.070917][T17830] Bluetooth: hci1: command tx timeout [ 1557.274335][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1559.150517][T17830] Bluetooth: hci1: command tx timeout [ 1560.274795][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.274936][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1560.472767][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.473004][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.242858][T17830] Bluetooth: hci1: command tx timeout [ 1561.841032][T21010] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1561.877756][T21010] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1562.210624][T21010] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1562.288303][T21010] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1562.311056][T21216] chnl_net:caif_netlink_parms(): no params data found [ 1562.502915][ T1377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.641652][T20251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1562.865897][ T1377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.928483][T20269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.277427][ T1377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.300553][T17830] Bluetooth: hci1: command tx timeout [ 1563.424952][T21216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.425173][T21216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.425409][T21216] bridge_slave_0: entered allmulticast mode [ 1563.428979][T21216] bridge_slave_0: entered promiscuous mode [ 1563.648026][ T1377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.692958][T21216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.693115][T21216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.693361][T21216] bridge_slave_1: entered allmulticast mode [ 1563.696336][T21216] bridge_slave_1: entered promiscuous mode [ 1563.956440][T21216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.989283][T21216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.365814][T21216] team0: Port device team_slave_0 added [ 1564.402309][T21216] team0: Port device team_slave_1 added [ 1564.734836][T21216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.734857][T21216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.734886][T21216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.756049][T21216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.756100][T21216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.756175][T21216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.903689][T20269] veth0_vlan: entered promiscuous mode [ 1564.907873][T20251] veth0_vlan: entered promiscuous mode [ 1565.016365][ T1377] bridge_slave_1: left allmulticast mode [ 1565.016397][ T1377] bridge_slave_1: left promiscuous mode [ 1565.016658][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.103213][ T1377] bridge_slave_0: left allmulticast mode [ 1565.103244][ T1377] bridge_slave_0: left promiscuous mode [ 1565.103500][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.611084][ T1377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.671175][ T1377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.694027][ T1377] bond0 (unregistering): Released all slaves [ 1567.853482][T21216] hsr_slave_0: entered promiscuous mode [ 1567.854606][T21216] hsr_slave_1: entered promiscuous mode [ 1567.937938][T20269] veth1_vlan: entered promiscuous mode [ 1568.062705][T20251] veth1_vlan: entered promiscuous mode [ 1569.280391][ T1377] hsr_slave_0: left promiscuous mode [ 1569.320805][ T1377] hsr_slave_1: left promiscuous mode [ 1569.321635][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.321655][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.371299][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.371334][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.506048][ T1377] veth1_macvtap: left promiscuous mode [ 1569.506166][ T1377] veth0_macvtap: left promiscuous mode [ 1569.506446][ T1377] veth1_vlan: left promiscuous mode [ 1569.506635][ T1377] veth0_vlan: left promiscuous mode [ 1572.172549][ T1377] team0 (unregistering): Port device team_slave_1 removed [ 1572.462592][ T1377] team0 (unregistering): Port device team_slave_0 removed [ 1575.315104][T21010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.348065][T20269] veth0_macvtap: entered promiscuous mode [ 1575.392460][T20251] veth0_macvtap: entered promiscuous mode [ 1575.476926][T20269] veth1_macvtap: entered promiscuous mode [ 1575.502729][T20251] veth1_macvtap: entered promiscuous mode [ 1575.519614][T21010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.731211][T20269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.735974][T17963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.737151][T17963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.766420][T20251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.807672][T20269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.817565][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.832462][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.884492][T20251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.016544][ T3548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.078307][ T3548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.089768][ T3548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.107847][ T3548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.231454][ T3548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.320746][ T3548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.409037][ T3548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.438515][ T6096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.167205][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.167230][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.239517][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.239538][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.302903][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.302926][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.315484][T21216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1577.575467][T21216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1577.736275][T21216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1577.846778][T21216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1577.877047][T14598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1577.883903][T14598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1577.900543][T14598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1577.962640][T14598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1577.966113][T14598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1579.370857][T21010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.055855][T14598] Bluetooth: hci3: command tx timeout [ 1582.396565][T17830] Bluetooth: hci3: command tx timeout [ 1583.352191][ T3548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.753468][ T3548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.830310][T17830] Bluetooth: hci3: command tx timeout [ 1586.249277][ T3548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.350082][T21467] chnl_net:caif_netlink_parms(): no params data found [ 1586.799246][ T3548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.892617][T21216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.164068][T21010] veth0_vlan: entered promiscuous mode [ 1587.861116][T17830] Bluetooth: hci3: command tx timeout [ 1588.043963][T21467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.046270][T21467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.046507][T21467] bridge_slave_0: entered allmulticast mode [ 1588.090511][T21467] bridge_slave_0: entered promiscuous mode [ 1588.111104][T21467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.116391][T21467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.116659][T21467] bridge_slave_1: entered allmulticast mode [ 1588.160650][T21467] bridge_slave_1: entered promiscuous mode [ 1588.166496][T21216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.258377][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5118'. [ 1588.501949][T21645] hub 9-0:1.0: USB hub found [ 1588.515042][T21645] hub 9-0:1.0: 1 port detected [ 1588.654913][T21010] veth1_vlan: entered promiscuous mode [ 1588.870911][T21467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.918415][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.918528][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.939560][T21467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.342594][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.343981][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.354132][T21467] team0: Port device team_slave_0 added [ 1589.383699][T21467] team0: Port device team_slave_1 added [ 1589.542667][ T3548] bridge_slave_1: left allmulticast mode [ 1589.542697][ T3548] bridge_slave_1: left promiscuous mode [ 1589.542967][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.642081][ T3548] bridge_slave_0: left allmulticast mode [ 1589.642118][ T3548] bridge_slave_0: left promiscuous mode [ 1589.642383][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.441256][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.521102][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.553154][ T3548] bond0 (unregistering): Released all slaves [ 1598.762944][T21467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.762958][T21467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.762979][T21467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.770380][T21467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.770454][T21467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.770517][T21467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.476554][T21467] hsr_slave_0: entered promiscuous mode [ 1599.478029][T21467] hsr_slave_1: entered promiscuous mode [ 1599.479028][T21467] debugfs: 'hsr0' already exists in 'hsr' [ 1599.479054][T21467] Cannot create hsr debugfs directory [ 1601.836566][T14598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1601.845836][T14598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1601.856681][T14598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1601.857835][T14598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1601.858574][T14598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1603.941235][T17830] Bluetooth: hci0: command tx timeout [ 1604.072670][ T3548] hsr_slave_0: left promiscuous mode [ 1604.130914][ T3548] hsr_slave_1: left promiscuous mode [ 1604.131931][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1604.131963][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.201475][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.201506][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.476120][ T3548] veth1_macvtap: left promiscuous mode [ 1604.476232][ T3548] veth0_macvtap: left promiscuous mode [ 1604.478373][ T3548] veth1_vlan: left promiscuous mode [ 1604.478572][ T3548] veth0_vlan: left promiscuous mode [ 1606.020482][T17830] Bluetooth: hci0: command tx timeout [ 1608.110487][T17830] Bluetooth: hci0: command tx timeout [ 1608.163883][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 1608.420968][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 1610.182699][T17830] Bluetooth: hci0: command tx timeout [ 1614.106759][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5196'. [ 1614.106834][T21950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5196'. [ 1614.325769][T21216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.468916][T21764] chnl_net:caif_netlink_parms(): no params data found [ 1615.123860][T14598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1615.127251][T14598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1615.129654][T14598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1615.134841][T14598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1615.138024][T14598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1615.942064][T21764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.950662][T21764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.951375][T21764] bridge_slave_0: entered allmulticast mode [ 1615.958651][T21764] bridge_slave_0: entered promiscuous mode [ 1616.268585][T21764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.268747][T21764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.268938][T21764] bridge_slave_1: entered allmulticast mode [ 1616.288378][T21764] bridge_slave_1: entered promiscuous mode [ 1617.089359][T21764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.120164][T21764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.150790][T21467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1617.230802][T17830] Bluetooth: hci5: command tx timeout [ 1617.358461][T21467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1617.551772][T21467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1617.589371][T21764] team0: Port device team_slave_0 added [ 1617.624342][T21764] team0: Port device team_slave_1 added [ 1617.626140][T21467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1617.795993][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.796086][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.079281][T21764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.079300][T21764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.079329][T21764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.134448][T21764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.134468][T21764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.134498][T21764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.588907][ T3548] bridge_slave_1: left allmulticast mode [ 1618.588938][ T3548] bridge_slave_1: left promiscuous mode [ 1618.589191][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.673379][ T3548] bridge_slave_0: left allmulticast mode [ 1618.673410][ T3548] bridge_slave_0: left promiscuous mode [ 1618.673663][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.310506][T17830] Bluetooth: hci5: command tx timeout [ 1621.061241][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.121088][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.162929][ T3548] bond0 (unregistering): Released all slaves [ 1621.227454][T21764] hsr_slave_0: entered promiscuous mode [ 1621.228457][T21764] hsr_slave_1: entered promiscuous mode [ 1621.229134][T21764] debugfs: 'hsr0' already exists in 'hsr' [ 1621.229153][T21764] Cannot create hsr debugfs directory [ 1621.380448][T17830] Bluetooth: hci5: command tx timeout [ 1621.801064][T22198] netlink: 'syz.3.5308': attribute type 39 has an invalid length. [ 1621.862940][ T3548] hsr_slave_0: left promiscuous mode [ 1621.900404][ T3548] hsr_slave_1: left promiscuous mode [ 1621.901511][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.952336][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.088562][ T3548] veth1_vlan: left promiscuous mode [ 1622.088818][ T3548] veth0_vlan: left promiscuous mode [ 1623.480242][T17830] Bluetooth: hci5: command tx timeout [ 1624.482648][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 1624.791174][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 1628.310457][T22198] hsr_slave_1 (unregistering): left promiscuous mode [ 1628.795046][T21984] chnl_net:caif_netlink_parms(): no params data found [ 1630.430786][T21984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.430924][T21984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.431187][T21984] bridge_slave_0: entered allmulticast mode [ 1630.462470][T21984] bridge_slave_0: entered promiscuous mode [ 1630.483315][T21984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.486600][T21984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.486845][T21984] bridge_slave_1: entered allmulticast mode [ 1630.489744][T21984] bridge_slave_1: entered promiscuous mode [ 1630.628484][ T37] audit: type=1326 audit(1767860975.470:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22481 comm="syz.3.5442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x0 [ 1630.892528][T21984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.911219][T21984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.383452][T21984] team0: Port device team_slave_0 added [ 1631.398378][T21467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.728736][T21984] team0: Port device team_slave_1 added [ 1631.857244][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'. [ 1632.213912][ T37] audit: type=1326 audit(1767860977.060:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1632.214582][ T37] audit: type=1326 audit(1767860977.060:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1632.214636][ T37] audit: type=1326 audit(1767860977.060:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1632.219870][ T37] audit: type=1326 audit(1767860977.060:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1632.276797][ T37] audit: type=1326 audit(1767860977.120:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdb002005 code=0x7ffc0000 [ 1632.276950][ T37] audit: type=1326 audit(1767860977.120:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdb002005 code=0x7ffc0000 [ 1632.278622][ T37] audit: type=1326 audit(1767860977.120:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdb002005 code=0x7ffc0000 [ 1632.282188][ T37] audit: type=1326 audit(1767860977.130:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdb002005 code=0x7ffc0000 [ 1632.284250][ T37] audit: type=1326 audit(1767860977.130:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22538 comm="syz.3.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdb002005 code=0x7ffc0000 [ 1632.546362][T21984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.546379][T21984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.546404][T21984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.561796][T21984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.561848][T21984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.561917][T21984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.955686][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1633.239662][T21467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.597353][T21984] hsr_slave_0: entered promiscuous mode [ 1633.608696][T21984] hsr_slave_1: entered promiscuous mode [ 1633.609883][T21984] debugfs: 'hsr0' already exists in 'hsr' [ 1633.609908][T21984] Cannot create hsr debugfs directory [ 1633.843439][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.843593][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.134102][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.134337][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.364606][T21764] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1634.457907][T21764] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1634.596436][T21764] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1634.682863][T21764] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1635.148691][ T3548] bridge_slave_1: left allmulticast mode [ 1635.148721][ T3548] bridge_slave_1: left promiscuous mode [ 1635.148978][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.234351][ T3548] bridge_slave_0: left allmulticast mode [ 1635.234382][ T3548] bridge_slave_0: left promiscuous mode [ 1635.234661][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.472761][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.551183][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.604329][ T3548] bond0 (unregistering): Released all slaves [ 1638.090355][T22641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1638.090527][T22641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1638.232279][T22641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1638.235787][T22641] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1638.320290][ T3548] hsr_slave_0: left promiscuous mode [ 1638.349575][ T3548] hsr_slave_1: left promiscuous mode [ 1638.357940][T22641] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1638.358648][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.391639][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.452529][T22641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1638.452638][T22641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1638.601839][T22641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1638.685405][T22641] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1638.685515][T22641] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1638.765610][T22641] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1638.894134][T14598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1638.900033][T14598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1638.905018][T14598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1638.908738][T14598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1638.910043][T14598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1639.132275][T22745] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5552'. [ 1640.100461][T17830] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.289649][T17830] Bluetooth: hci4: command 0x0c1a tx timeout [ 1640.509216][T17830] Bluetooth: hci0: command 0x0c1a tx timeout [ 1640.581103][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 1640.763774][T17830] Bluetooth: hci5: command 0x0c1a tx timeout [ 1640.891453][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 1641.070368][T17830] Bluetooth: hci1: command tx timeout [ 1642.180250][T17830] Bluetooth: hci2: command 0x0406 tx timeout [ 1642.343286][T17830] Bluetooth: hci4: command 0x0c1a tx timeout [ 1642.584102][T17830] Bluetooth: hci0: command 0x0c1a tx timeout [ 1642.820479][T17830] Bluetooth: hci5: command 0x0c1a tx timeout [ 1643.160575][T17830] Bluetooth: hci1: command tx timeout [ 1644.430768][T17830] Bluetooth: hci4: command 0x0c1a tx timeout [ 1644.660520][T17830] Bluetooth: hci0: command 0x0c1a tx timeout [ 1644.910426][T17830] Bluetooth: hci5: command 0x0c1a tx timeout [ 1645.220454][T17830] Bluetooth: hci1: command tx timeout [ 1645.373855][T17830] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1646.132658][T21764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.802926][T21984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1646.863182][T22717] chnl_net:caif_netlink_parms(): no params data found [ 1646.885218][T21764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.886301][T21984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1647.173196][T21984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1647.235189][T21984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1647.300493][T17830] Bluetooth: hci1: command tx timeout [ 1647.632070][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.632427][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.124193][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.124423][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.200641][ T5947] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1648.258286][T22717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.258423][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.258740][T22717] bridge_slave_0: entered allmulticast mode [ 1648.295295][T22717] bridge_slave_0: entered promiscuous mode [ 1648.308151][T22717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.308921][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.309128][T22717] bridge_slave_1: entered allmulticast mode [ 1648.331050][T22717] bridge_slave_1: entered promiscuous mode [ 1648.370480][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 1648.377906][ T5947] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1648.377935][ T5947] usb 4-1: config 0 has no interface number 0 [ 1648.377972][ T5947] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1648.408152][ T5947] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1648.408187][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.408202][ T5947] usb 4-1: Product: syz [ 1648.408212][ T5947] usb 4-1: Manufacturer: syz [ 1648.408223][ T5947] usb 4-1: SerialNumber: syz [ 1648.481150][ T5947] usb 4-1: config 0 descriptor?? [ 1648.486048][ T5947] f81534 4-1:0.12: required endpoints missing [ 1648.703254][T22717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.721179][ T5892] usb 4-1: USB disconnect, device number 59 [ 1648.742176][T22717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.116538][T22717] team0: Port device team_slave_0 added [ 1649.129348][T22717] team0: Port device team_slave_1 added [ 1649.582050][T22717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.582069][T22717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.582096][T22717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.651066][T22717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.651080][T22717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.651101][T22717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.730918][ T3548] bridge_slave_1: left allmulticast mode [ 1649.730941][ T3548] bridge_slave_1: left promiscuous mode [ 1649.731159][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.792374][ T3548] bridge_slave_0: left allmulticast mode [ 1649.792405][ T3548] bridge_slave_0: left promiscuous mode [ 1649.792664][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.990902][T23107] syz.3.5709 (23107) used greatest stack depth: 17888 bytes left [ 1652.431826][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.491160][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.523467][ T3548] bond0 (unregistering): Released all slaves [ 1652.576422][T23154] netlink: 'syz.3.5732': attribute type 12 has an invalid length. [ 1652.576446][T23154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1652.851712][T23187] netlink: 'syz.3.5748': attribute type 1 has an invalid length. [ 1652.851735][T23187] netlink: 'syz.3.5748': attribute type 2 has an invalid length. [ 1652.937493][T22717] hsr_slave_0: entered promiscuous mode [ 1652.938894][T22717] hsr_slave_1: entered promiscuous mode [ 1653.166858][ T3548] hsr_slave_0: left promiscuous mode [ 1653.194456][ T3548] hsr_slave_1: left promiscuous mode [ 1653.197035][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.241521][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.273605][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 1654.642464][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 1655.638540][T17830] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1655.638819][T14598] Bluetooth: hci3: command 0x1003 tx timeout [ 1656.275229][T23292] netlink: 'syz.3.5799': attribute type 10 has an invalid length. [ 1658.004126][T23292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.008675][T23292] bond0: (slave team0): Enslaving as an active interface with an up link [ 1658.248692][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1658.732317][T21764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.959256][T21984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.127254][T23461] Bluetooth: MGMT ver 1.23 [ 1661.272794][T21984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.315184][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.319779][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.376741][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.407494][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.421898][ T5168] udevd[5168]: worker [23192] terminated by signal 33 (Unknown signal 33) [ 1661.421940][ T5168] udevd[5168]: worker [23192] failed while handling '/fs/nfs/net/nfs_client' [ 1662.576076][T14598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1662.604919][T14598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1662.608388][T14598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1662.609555][T14598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1662.631963][T14598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1664.372618][T22717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1664.390356][T12577] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1664.463120][T22717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1664.542162][T12577] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1664.542220][T12577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.542240][T12577] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1664.542257][T12577] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1664.543484][T12577] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1664.543518][T12577] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1664.543532][T12577] usb 4-1: Manufacturer: syz [ 1664.547276][T12577] usb 4-1: config 0 descriptor?? [ 1664.660374][T17830] Bluetooth: hci0: command tx timeout [ 1664.973346][T22717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1664.978288][T12577] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1665.036683][T22717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1665.067242][T12577] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1665.110904][T21984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.726324][ T10] usb 4-1: USB disconnect, device number 60 [ 1666.238437][T23483] chnl_net:caif_netlink_parms(): no params data found [ 1666.282593][T21984] veth0_vlan: entered promiscuous mode [ 1666.404919][T23604] Bluetooth: MGMT ver 1.23 [ 1666.601382][T21984] veth1_vlan: entered promiscuous mode [ 1666.632932][ T70] bridge_slave_1: left allmulticast mode [ 1666.632965][ T70] bridge_slave_1: left promiscuous mode [ 1666.633229][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.722266][ T70] bridge_slave_0: left allmulticast mode [ 1666.722298][ T70] bridge_slave_0: left promiscuous mode [ 1666.722569][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.747426][T17830] Bluetooth: hci0: command tx timeout [ 1667.846909][T23663] overlayfs: failed to resolve './file0': -2 [ 1668.830386][T17830] Bluetooth: hci0: command tx timeout [ 1669.421115][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.511938][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.555441][ T70] bond0 (unregistering): Released all slaves [ 1669.925831][T23483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.926104][T23483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.926334][T23483] bridge_slave_0: entered allmulticast mode [ 1669.929445][T23483] bridge_slave_0: entered promiscuous mode [ 1670.110598][ T70] hsr_slave_0: left promiscuous mode [ 1670.150284][ T70] hsr_slave_1: left promiscuous mode [ 1670.151397][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.210049][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.910625][T17830] Bluetooth: hci0: command tx timeout [ 1672.101182][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1672.408275][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1675.499359][T14598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1675.559974][T14598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1675.562610][T14598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1675.565167][T14598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1675.568644][T14598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1675.731326][T23483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.735455][T23483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.735708][T23483] bridge_slave_1: entered allmulticast mode [ 1675.738487][T23483] bridge_slave_1: entered promiscuous mode [ 1675.960778][T22717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.172948][T23483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.224313][T23483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.022823][T23483] team0: Port device team_slave_0 added [ 1677.043649][T23483] team0: Port device team_slave_1 added [ 1677.162405][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1677.204259][T22717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.205331][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1677.209301][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1677.209500][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1677.263002][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1677.263169][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1677.281417][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1677.281867][T23931] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1677.281954][T23931] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1677.502699][T23483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.502718][T23483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.502748][T23483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.559745][T23483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.559765][T23483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.559796][T23483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.621309][T14598] Bluetooth: hci3: command tx timeout [ 1677.658719][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.659893][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.823628][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.830611][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.003828][T23483] hsr_slave_0: entered promiscuous mode [ 1678.005206][T23483] hsr_slave_1: entered promiscuous mode [ 1678.005938][T23483] debugfs: 'hsr0' already exists in 'hsr' [ 1678.005956][T23483] Cannot create hsr debugfs directory [ 1679.226935][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.227007][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.700228][T14598] Bluetooth: hci3: command tx timeout [ 1679.861136][T23884] chnl_net:caif_netlink_parms(): no params data found [ 1679.880292][ T5892] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1680.050417][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 1680.066570][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.066603][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.066642][ T5892] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1680.066666][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.081424][ T5892] usb 4-1: config 0 descriptor?? [ 1680.551512][ T5892] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1680.770899][ T5892] usb 4-1: USB disconnect, device number 61 [ 1680.907010][T23884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.907152][T23884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.907352][T23884] bridge_slave_0: entered allmulticast mode [ 1680.909245][T23884] bridge_slave_0: entered promiscuous mode [ 1680.984359][T23884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.984473][T23884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.984640][T23884] bridge_slave_1: entered allmulticast mode [ 1681.000567][T23884] bridge_slave_1: entered promiscuous mode [ 1681.492050][T23884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.544229][ T70] bridge_slave_1: left allmulticast mode [ 1681.544261][ T70] bridge_slave_1: left promiscuous mode [ 1681.544503][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.652197][ T70] bridge_slave_0: left allmulticast mode [ 1681.652229][ T70] bridge_slave_0: left promiscuous mode [ 1681.653435][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.790451][T14598] Bluetooth: hci3: command tx timeout [ 1683.869270][T14598] Bluetooth: hci3: command tx timeout [ 1684.061745][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.151119][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.194122][ T70] bond0 (unregistering): Released all slaves [ 1684.256456][T23884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.681005][T23884] team0: Port device team_slave_0 added [ 1684.687208][T23884] team0: Port device team_slave_1 added [ 1685.110439][ T70] hsr_slave_0: left promiscuous mode [ 1685.161934][ T70] hsr_slave_1: left promiscuous mode [ 1685.162755][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.210232][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.328195][ T70] veth1_vlan: left promiscuous mode [ 1685.328417][ T70] veth0_vlan: left promiscuous mode [ 1687.421208][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1687.754048][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1691.361690][T23884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.361710][T23884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.361741][T23884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.395404][T23884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.395471][T23884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1691.395573][T23884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.472543][T22717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.785213][T23483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1691.797479][T17740] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1691.901537][T23483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1691.940336][T17740] usb 4-1: Using ep0 maxpacket: 16 [ 1691.967185][T17740] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1691.967213][T17740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.967234][T17740] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1691.984939][T17740] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1691.984970][T17740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.984991][T17740] usb 4-1: Product: syz [ 1691.985006][T17740] usb 4-1: Manufacturer: syz [ 1691.985022][T17740] usb 4-1: SerialNumber: syz [ 1692.037561][T23884] hsr_slave_0: entered promiscuous mode [ 1692.039007][T23884] hsr_slave_1: entered promiscuous mode [ 1692.040025][T23884] debugfs: 'hsr0' already exists in 'hsr' [ 1692.040051][T23884] Cannot create hsr debugfs directory [ 1692.041495][T23483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1692.172318][T23483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1692.491843][T17740] usb 4-1: 0:2 : does not exist [ 1693.099508][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1693.121596][T22717] veth0_vlan: entered promiscuous mode [ 1693.123532][T17740] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1693.198258][T17740] usb 4-1: USB disconnect, device number 62 [ 1693.318484][T22717] veth1_vlan: entered promiscuous mode [ 1693.539625][T22717] veth0_macvtap: entered promiscuous mode [ 1693.597002][T22717] veth1_macvtap: entered promiscuous mode [ 1693.733919][T23483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.779766][T22717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.942201][T22717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.955060][T23483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.979295][ T1342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.979637][T24458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1693.981588][ T1342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.989254][ T1342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.012230][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.012940][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.026464][ T1342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.102963][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.103059][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.626526][T24471] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6356'. [ 1694.821160][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.821182][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.988108][T23884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1695.019412][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1695.019436][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.041386][T23884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1695.117947][T23884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1695.126397][T24487] netlink: 'syz.3.6364': attribute type 10 has an invalid length. [ 1695.192011][T23884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1695.974179][ T5892] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1696.435590][T23884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.462943][T23483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.483385][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1696.483424][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1696.483453][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1696.486544][ T5892] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1696.486574][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.486608][ T5892] usb 4-1: Product: syz [ 1696.486624][ T5892] usb 4-1: Manufacturer: syz [ 1696.486639][ T5892] usb 4-1: SerialNumber: syz [ 1696.562952][ T5892] usb 4-1: config 0 descriptor?? [ 1696.564108][T24509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1696.564304][T24509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1696.566942][ T5892] usb 4-1: ucan: probing device on interface #0 [ 1696.623143][T23884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.779184][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.787735][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.874726][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.874986][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.978489][ T5892] usb 4-1: ucan: device reported invalid tx-fifo size [ 1696.978522][ T5892] usb 4-1: ucan: probe failed; try to update the device firmware [ 1697.182488][T18195] usb 4-1: USB disconnect, device number 63 [ 1697.695224][T23884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.763756][T23483] veth0_vlan: entered promiscuous mode [ 1697.789359][T23483] veth1_vlan: entered promiscuous mode [ 1697.919157][T24550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1697.965614][T24550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1697.992764][T23483] veth0_macvtap: entered promiscuous mode [ 1698.059166][T23483] veth1_macvtap: entered promiscuous mode [ 1698.077219][T23884] veth0_vlan: entered promiscuous mode [ 1698.151336][T23884] veth1_vlan: entered promiscuous mode [ 1698.158211][T23483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.216366][T23483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.259221][ T3548] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.283501][ T3548] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.286985][ T3548] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.289411][ T3548] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.397854][T23884] veth0_macvtap: entered promiscuous mode [ 1698.508650][T23884] veth1_macvtap: entered promiscuous mode [ 1698.706747][T24575] 9p: Bad value for 'wfdno' [ 1698.846321][T23884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.877938][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.877961][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.942695][T23884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.997146][ T1342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.998973][ T1342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.999020][ T1342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.999059][ T1342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.217955][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.217978][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.223417][T17740] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1699.358908][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 1699.358929][ T37] audit: type=1326 audit(1767861044.200:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.359222][ T37] audit: type=1326 audit(1767861044.200:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.359643][ T37] audit: type=1326 audit(1767861044.200:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.410197][T17740] usb 2-1: Using ep0 maxpacket: 16 [ 1699.442936][T17740] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1699.442963][T17740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.442984][T17740] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1699.446563][ T37] audit: type=1326 audit(1767861044.290:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.446925][ T37] audit: type=1326 audit(1767861044.290:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.447234][ T37] audit: type=1326 audit(1767861044.290:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.447552][ T37] audit: type=1326 audit(1767861044.290:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.447840][ T37] audit: type=1326 audit(1767861044.290:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.448281][ T37] audit: type=1326 audit(1767861044.290:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.448576][ T37] audit: type=1326 audit(1767861044.290:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.3.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2cdafcf749 code=0x7ffc0000 [ 1699.449342][T17740] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.449370][T17740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.449391][T17740] usb 2-1: Product: syz [ 1699.449406][T17740] usb 2-1: Manufacturer: syz [ 1699.449419][T17740] usb 2-1: SerialNumber: syz [ 1699.933637][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.933658][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.052581][T17740] usb 2-1: 0:2 : does not exist [ 1700.057577][T17740] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1700.138409][T17740] usb 2-1: USB disconnect, device number 2 [ 1700.200898][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.200923][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.083732][T24611] input: syz0 as /devices/virtual/input/input24 [ 1701.514099][T17830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1701.532772][T17830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1701.538211][T17830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1701.562295][T17830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1701.568489][T17830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1702.842756][T24634] serio: Serial port ttyS3 [ 1703.368559][T24651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1703.560531][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1703.599191][ T4478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.621399][T14598] Bluetooth: hci5: command tx timeout [ 1704.102775][T24660] bond0: (slave bond_slave_0): Releasing backup interface [ 1704.171873][T24666] binder: 24665:24666 ioctl c0306201 0 returned -14 [ 1704.559362][T24679] Context (ID=0x10) not attached to queue pair (handle=0x2:0x40) [ 1704.813363][T24686] binder_alloc: 24685: binder_alloc_buf, no vma [ 1704.896667][ T4478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.157685][T24697] binder: 24696:24697 ioctl c0306201 0 returned -14 [ 1705.262362][T24702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6438'. [ 1705.700192][T14598] Bluetooth: hci5: command tx timeout [ 1706.002099][ T4478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.837116][ T4478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.068252][ T5937] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1707.182342][T24614] chnl_net:caif_netlink_parms(): no params data found [ 1707.222123][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 1707.229024][ T5937] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1707.229052][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.229073][ T5937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1707.270742][ T5937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1707.270774][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.270803][ T5937] usb 1-1: Product: syz [ 1707.270818][ T5937] usb 1-1: Manufacturer: syz [ 1707.270833][ T5937] usb 1-1: SerialNumber: syz [ 1707.694734][ T5937] usb 1-1: 0:2 : does not exist [ 1707.721895][ T5937] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1707.781746][T14598] Bluetooth: hci5: command tx timeout [ 1707.840360][ T5937] usb 1-1: USB disconnect, device number 2 [ 1707.904449][T24614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.906244][T24614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.906485][T24614] bridge_slave_0: entered allmulticast mode [ 1707.908251][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1707.909007][T24614] bridge_slave_0: entered promiscuous mode [ 1708.240941][T24614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.241085][T24614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.241482][T24614] bridge_slave_1: entered allmulticast mode [ 1708.245101][T24614] bridge_slave_1: entered promiscuous mode [ 1708.536963][T24778] tipc: Started in network mode [ 1708.537003][T24778] tipc: Node identity 32c3d5878b28, cluster identity 4711 [ 1708.537230][T24778] tipc: Enabled bearer , priority 0 [ 1708.561017][T24614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.593061][T24775] syzkaller0: entered promiscuous mode [ 1708.593082][T24775] syzkaller0: entered allmulticast mode [ 1708.598042][T24614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.822696][ T4478] bridge_slave_1: left allmulticast mode [ 1708.822731][ T4478] bridge_slave_1: left promiscuous mode [ 1708.823134][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.904724][ T4478] bridge_slave_0: left allmulticast mode [ 1708.904758][ T4478] bridge_slave_0: left promiscuous mode [ 1708.915912][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.230031][T18195] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1709.380658][T18195] usb 2-1: Using ep0 maxpacket: 16 [ 1709.385184][T18195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.385235][T18195] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1709.385258][T18195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.428094][T18195] usb 2-1: config 0 descriptor?? [ 1709.861106][T14598] Bluetooth: hci5: command tx timeout [ 1709.961785][T18195] greenasia 0003:0E8F:0012.0007: unknown main item tag 0x1 [ 1709.961824][T18195] greenasia 0003:0E8F:0012.0007: item fetching failed at offset 4/5 [ 1709.962657][T18195] greenasia 0003:0E8F:0012.0007: parse failed [ 1709.962734][T18195] greenasia 0003:0E8F:0012.0007: probe with driver greenasia failed with error -22 [ 1710.099707][ T5892] usb 2-1: USB disconnect, device number 3 [ 1710.813338][T24817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1711.786257][ T4478] tipc: Disabling bearer [ 1712.090370][ T5892] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1712.228133][ T5892] usb 4-1: device descriptor read/64, error -71 [ 1713.215982][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1713.292592][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1713.362944][ T4478] bond0 (unregistering): Released all slaves [ 1713.432390][T24780] tipc: Resetting bearer [ 1713.720726][T24772] tipc: Resetting bearer [ 1714.001316][T24772] tipc: Disabling bearer [ 1714.184039][ T5966] tipc: Node number set to 3119240583 [ 1714.491886][T24820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.528287][T24820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.090727][ T5892] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1715.251060][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1715.251096][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 1715.251123][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1715.253797][ T5892] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1715.253827][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.253848][ T5892] usb 1-1: Product: syz [ 1715.253863][ T5892] usb 1-1: Manufacturer: syz [ 1715.253879][ T5892] usb 1-1: SerialNumber: syz [ 1715.279582][ T5892] usb 1-1: config 0 descriptor?? [ 1715.329979][ T5892] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1715.377191][T24820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.438274][T24820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.585839][ T5892] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1715.588610][ T5892] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1715.764013][ T5892] usb 1-1: USB disconnect, device number 3 [ 1716.770345][ T4478] tipc: Left network mode [ 1716.770668][T24614] team0: Port device team_slave_0 added [ 1716.806240][T17963] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.809330][T24614] team0: Port device team_slave_1 added [ 1717.121037][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6565'. [ 1717.146991][T17963] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.550206][ T5966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1717.741413][T17963] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.750374][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 1717.764304][ T5966] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1717.764394][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.803188][ T5966] usb 2-1: config 0 descriptor?? [ 1717.963973][T17963] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.965431][T24614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.965446][T24614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.965474][T24614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.073162][T24614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.073178][T24614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.073199][T24614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.183494][ T5966] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1718.243556][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1718.249309][ T5966] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1718.249383][ T5966] usb 2-1: media controller created [ 1718.315975][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1718.514211][ T5966] az6027: usb out operation failed. (-71) [ 1718.515571][ T5966] az6027: usb out operation failed. (-71) [ 1718.515587][ T5966] stb0899_attach: Driver disabled by Kconfig [ 1718.515600][ T5966] az6027: no front-end attached [ 1718.515600][ T5966] [ 1718.516984][ T5966] az6027: usb out operation failed. (-71) [ 1718.517001][ T5966] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1718.583525][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 1718.586538][ T5966] dvb-usb: schedule remote query interval to 400 msecs. [ 1718.586561][ T5966] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1718.630961][ T5966] usb 2-1: USB disconnect, device number 4 [ 1718.797001][ T5966] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1718.884201][T24614] hsr_slave_0: entered promiscuous mode [ 1718.885769][T24614] hsr_slave_1: entered promiscuous mode [ 1718.886767][T24614] debugfs: 'hsr0' already exists in 'hsr' [ 1718.886795][T24614] Cannot create hsr debugfs directory [ 1719.082050][ T4478] hsr_slave_0: left promiscuous mode [ 1719.101039][ T4478] hsr_slave_1: left promiscuous mode [ 1719.102024][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.147404][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.147434][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.354188][T25062] binder: 25061:25062 ioctl c0306201 0 returned -14 [ 1719.359189][T25062] binder: 25061:25062 ioctl c0306201 200000000540 returned -22 [ 1719.381479][ T4478] veth1_macvtap: left promiscuous mode [ 1719.381591][ T4478] veth0_macvtap: left promiscuous mode [ 1719.381870][ T4478] veth1_vlan: left promiscuous mode [ 1720.357572][T25083] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 1720.597627][T25092] fuseblk: Bad value for 'fd' [ 1720.651115][ T4478] team0 (unregistering): Port device batadv9 removed [ 1720.844115][ T4478] team0 (unregistering): Port device batadv8 removed [ 1720.976805][ T4478] team0 (unregistering): Port device batadv7 removed [ 1721.044434][T25104] No source specified [ 1721.048630][T14598] Bluetooth: hci1: hcon ffff888036ad4000 sent 1 < count 9 [ 1721.048771][T14598] Bluetooth: hci1: hcon ffff888036ad4000 sent 0 < count 9 [ 1721.048841][T14598] Bluetooth: hci1: hcon ffff888059608000 sent 1 < count 56702 [ 1721.221846][ T4478] team0 (unregistering): Port device batadv6 removed [ 1721.283965][T14598] Bluetooth: hci1: hcon ffff888036ad4000 sent 0 < count 16 [ 1721.522112][ T4478] team0 (unregistering): Port device batadv5 removed [ 1721.741230][ T4478] team0 (unregistering): Port device batadv4 removed [ 1721.992397][ T4478] team0 (unregistering): Port device batadv3 removed [ 1722.151046][ T4478] team0 (unregistering): Port device batadv2 removed [ 1722.321562][ T4478] team0 (unregistering): Port device batadv1 removed [ 1722.536974][T25138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6629'. [ 1725.731204][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 1726.080998][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 1730.200364][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1730.379470][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.379506][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.379531][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.379575][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.379600][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.461366][ T10] usb 2-1: config 0 descriptor?? [ 1730.979788][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1731.631342][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1731.875699][ T4478] IPVS: stop unused estimator thread 0... [ 1732.257562][T18195] usb 2-1: USB disconnect, device number 5 [ 1732.384688][T24614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1732.418045][T24614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1732.456473][T24614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1732.497342][T24614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1732.699654][ T5966] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1732.730557][ T5966] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1732.885519][T24614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1732.952858][T24614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.967264][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 1732.995636][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.999616][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.108210][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.108351][T17963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1733.875400][T24614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.985032][T25445] fuseblk: Bad value for 'fd' [ 1734.052196][T24614] veth0_vlan: entered promiscuous mode [ 1734.084862][T24614] veth1_vlan: entered promiscuous mode [ 1734.153582][T24614] veth0_macvtap: entered promiscuous mode [ 1734.159513][T24614] veth1_macvtap: entered promiscuous mode [ 1734.242673][T24614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.288026][T24614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.669435][T17834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.974962][ T6096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.024346][ T6096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.044667][ T6096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.274982][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.275006][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.401190][T25474] fuseblk: Bad value for 'fd' [ 1735.429592][ T6096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.429616][ T6096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.890291][T12577] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1735.966538][T25497] fuseblk: Bad value for 'fd' [ 1736.040630][T12577] usb 9-1: Using ep0 maxpacket: 8 [ 1736.043210][T12577] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1736.043274][T12577] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1736.043299][T12577] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1736.043327][T12577] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1736.043353][T12577] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1736.043398][T12577] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1736.043425][T12577] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.265953][T12577] usb 9-1: usb_control_msg returned -32 [ 1736.266007][T12577] usbtmc 9-1:16.0: can't read capabilities [ 1736.630549][ T5892] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1736.787240][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1736.787279][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1736.787304][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1736.789753][ T5892] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1736.789783][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.789802][ T5892] usb 3-1: Product: syz [ 1736.789818][ T5892] usb 3-1: Manufacturer: syz [ 1736.789833][ T5892] usb 3-1: SerialNumber: syz [ 1736.806347][ T5892] usb 3-1: config 0 descriptor?? [ 1736.889486][ T5892] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1737.094311][ T5892] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1737.094633][ T5892] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1737.096404][ T5892] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1737.291385][ T5892] usb 3-1: USB disconnect, device number 48 [ 1738.040718][ T5966] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1738.201506][T25572] [ 1738.201520][T25572] ====================================================== [ 1738.201530][T25572] WARNING: possible circular locking dependency detected [ 1738.201554][T25572] syzkaller #0 Tainted: G L [ 1738.201566][T25572] ------------------------------------------------------ [ 1738.201575][T25572] syz.2.6827/25572 is trying to acquire lock: [ 1738.201589][T25572] ffffffff8d69a778 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.201661][T25572] [ 1738.201661][T25572] but task is already holding lock: [ 1738.201670][T25572] ffff888142fb0060 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 1738.201722][T25572] [ 1738.201722][T25572] which lock already depends on the new lock. [ 1738.201722][T25572] [ 1738.201730][T25572] [ 1738.201730][T25572] the existing dependency chain (in reverse order) is: [ 1738.201739][T25572] [ 1738.201739][T25572] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1738.201775][T25572] blk_alloc_queue+0x537/0x620 [ 1738.201802][T25572] __blk_mq_alloc_disk+0x15c/0x340 [ 1738.201834][T25572] nbd_dev_add+0x46c/0xae0 [ 1738.201865][T25572] nbd_init+0x168/0x1f0 [ 1738.201894][T25572] do_one_initcall+0x1f1/0x800 [ 1738.201925][T25572] do_initcall_level+0x104/0x190 [ 1738.201949][T25572] do_initcalls+0x59/0xa0 [ 1738.201971][T25572] kernel_init_freeable+0x2a7/0x3d0 [ 1738.201994][T25572] kernel_init+0x1d/0x1d0 [ 1738.202021][T25572] ret_from_fork+0x510/0xa50 [ 1738.202044][T25572] ret_from_fork_asm+0x1a/0x30 [ 1738.202077][T25572] [ 1738.202077][T25572] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1738.202109][T25572] fs_reclaim_acquire+0x72/0x100 [ 1738.202143][T25572] __kmalloc_noprof+0x9d/0x7e0 [ 1738.202174][T25572] pcpu_create_chunk+0x54/0xbe0 [ 1738.202191][T25572] pcpu_alloc_noprof+0x77d/0x16d0 [ 1738.202234][T25572] crash_notes_memory_init+0x1d/0x50 [ 1738.202263][T25572] do_one_initcall+0x1f1/0x800 [ 1738.202294][T25572] do_initcall_level+0x104/0x190 [ 1738.202314][T25572] do_initcalls+0x59/0xa0 [ 1738.202333][T25572] kernel_init_freeable+0x2a7/0x3d0 [ 1738.202354][T25572] kernel_init+0x1d/0x1d0 [ 1738.202379][T25572] ret_from_fork+0x510/0xa50 [ 1738.202399][T25572] ret_from_fork_asm+0x1a/0x30 [ 1738.202431][T25572] [ 1738.202431][T25572] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1738.202461][T25572] __lock_acquire+0x15a6/0x2cf0 [ 1738.202489][T25572] lock_acquire+0x107/0x340 [ 1738.202515][T25572] _mutex_lock_killable+0x63/0x1d0 [ 1738.202542][T25572] pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.202575][T25572] sbitmap_init_node+0x1e1/0x640 [ 1738.202609][T25572] sbitmap_queue_init_node+0x3e/0x4d0 [ 1738.202628][T25572] blk_mq_init_tags+0x164/0x2d0 [ 1738.202649][T25572] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1738.202679][T25572] blk_mq_update_nr_hw_queues+0xa3a/0x1a90 [ 1738.202712][T25572] nbd_start_device+0x17f/0xb20 [ 1738.202730][T25572] nbd_ioctl+0x570/0xe10 [ 1738.202749][T25572] blkdev_ioctl+0x611/0x710 [ 1738.202779][T25572] __se_sys_ioctl+0xff/0x170 [ 1738.202806][T25572] do_syscall_64+0xec/0xf80 [ 1738.202825][T25572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.202846][T25572] [ 1738.202846][T25572] other info that might help us debug this: [ 1738.202846][T25572] [ 1738.202854][T25572] Chain exists of: [ 1738.202854][T25572] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 1738.202854][T25572] [ 1738.202895][T25572] Possible unsafe locking scenario: [ 1738.202895][T25572] [ 1738.202903][T25572] CPU0 CPU1 [ 1738.202910][T25572] ---- ---- [ 1738.202916][T25572] lock(&q->q_usage_counter(io)#51); [ 1738.202938][T25572] lock(fs_reclaim); [ 1738.202954][T25572] lock(&q->q_usage_counter(io)#51); [ 1738.202977][T25572] lock(pcpu_alloc_mutex); [ 1738.202991][T25572] [ 1738.202991][T25572] *** DEADLOCK *** [ 1738.202991][T25572] [ 1738.202997][T25572] 4 locks held by syz.2.6827/25572: [ 1738.203010][T25572] #0: ffff8880245521b0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xac/0x1a90 [ 1738.203077][T25572] #1: ffff8880245520c8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbf/0x1a90 [ 1738.203143][T25572] #2: ffff888142fb0060 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 1738.203198][T25572] #3: ffff888142fb0098 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 1738.203264][T25572] [ 1738.203264][T25572] stack backtrace: [ 1738.203296][T25572] CPU: 1 UID: 0 PID: 25572 Comm: syz.2.6827 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1738.203328][T25572] Tainted: [L]=SOFTLOCKUP [ 1738.203337][T25572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1738.203358][T25572] Call Trace: [ 1738.203372][T25572] [ 1738.203382][T25572] dump_stack_lvl+0xe8/0x150 [ 1738.203414][T25572] print_circular_bug+0x2e2/0x300 [ 1738.203453][T25572] check_noncircular+0x12e/0x150 [ 1738.203504][T25572] __lock_acquire+0x15a6/0x2cf0 [ 1738.203541][T25572] ? blk_mq_init_tags+0x83/0x2d0 [ 1738.203583][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203616][T25572] lock_acquire+0x107/0x340 [ 1738.203643][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203679][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203717][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203752][T25572] _mutex_lock_killable+0x63/0x1d0 [ 1738.203780][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203815][T25572] ? pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203852][T25572] pcpu_alloc_noprof+0x26c/0x16d0 [ 1738.203898][T25572] sbitmap_init_node+0x1e1/0x640 [ 1738.203936][T25572] sbitmap_queue_init_node+0x3e/0x4d0 [ 1738.203960][T25572] blk_mq_init_tags+0x164/0x2d0 [ 1738.203985][T25572] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 1738.204016][T25572] ? lockdep_hardirqs_on+0x7b/0x110 [ 1738.204038][T25572] ? blk_mq_update_nr_hw_queues+0x94f/0x1a90 [ 1738.204072][T25572] ? kfree+0x1bd/0x900 [ 1738.204099][T25572] ? blk_mq_update_nr_hw_queues+0x94f/0x1a90 [ 1738.204136][T25572] blk_mq_update_nr_hw_queues+0xa3a/0x1a90 [ 1738.204181][T25572] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1738.204230][T25572] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1738.204266][T25572] ? nbd_start_device+0x174/0xb20 [ 1738.204290][T25572] nbd_start_device+0x17f/0xb20 [ 1738.204313][T25572] ? nbd_ioctl+0x131/0xe10 [ 1738.204336][T25572] nbd_ioctl+0x570/0xe10 [ 1738.204361][T25572] ? __pfx_nbd_ioctl+0x10/0x10 [ 1738.204382][T25572] ? __asan_memset+0x22/0x50 [ 1738.204410][T25572] ? smack_file_ioctl+0x24d/0x340 [ 1738.204439][T25572] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1738.204468][T25572] ? __pfx_nbd_ioctl+0x10/0x10 [ 1738.204490][T25572] blkdev_ioctl+0x611/0x710 [ 1738.204524][T25572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1738.204555][T25572] ? __fget_files+0x2a/0x420 [ 1738.204579][T25572] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1738.204613][T25572] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1738.204646][T25572] __se_sys_ioctl+0xff/0x170 [ 1738.204676][T25572] do_syscall_64+0xec/0xf80 [ 1738.204697][T25572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.204718][T25572] ? trace_irq_disable+0x37/0x100 [ 1738.204743][T25572] ? clear_bhb_loop+0x60/0xb0 [ 1738.204769][T25572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.204791][T25572] RIP: 0033:0x7f72cb78f749 [ 1738.204818][T25572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.204839][T25572] RSP: 002b:00007f72c99f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.204863][T25572] RAX: ffffffffffffffda RBX: 00007f72cb9e5fa0 RCX: 00007f72cb78f749 [ 1738.204879][T25572] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 1738.204893][T25572] RBP: 00007f72cb813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1738.204908][T25572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1738.204922][T25572] R13: 00007f72cb9e6038 R14: 00007f72cb9e5fa0 R15: 00007ffc786776c8 [ 1738.204947][T25572] [ 1738.205036][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 1738.207020][ T5966] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 1738.207047][ T5966] usb 1-1: config 0 has no interface number 0 [ 1738.208452][ T5966] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1738.208481][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1738.208516][ T5966] usb 1-1: Product: syz [ 1738.208531][ T5966] usb 1-1: Manufacturer: syz [ 1738.212475][ T5966] usb 1-1: config 0 descriptor?? [ 1738.576455][ T5966] usb 1-1: USB disconnect, device number 4 [ 1738.719376][T12577] usb 9-1: USB disconnect, device number 7 [ 1739.104570][T14598] block nbd2: Receive control failed (result -32) [ 1739.104574][T17830] block nbd2: Receive control failed (result -32) [ 1739.160902][T25572] block nbd2: shutting down sockets [ 1740.662971][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.663034][ T1317] ieee802154 phy1 wpan1: encryption failed: -22