last executing test programs: 11m23.917807496s ago: executing program 1 (id=2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x4, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11m16.224712599s ago: executing program 1 (id=16): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080), 0x700) 11m12.108993508s ago: executing program 3 (id=26): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 11m4.046191256s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x0, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11m2.364873163s ago: executing program 3 (id=36): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0xdd, 0x8, 0x0, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}]}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) getpgid(0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x29) write(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 11m0.237357773s ago: executing program 32 (id=16): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080), 0x700) 10m59.95184029s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 10m59.406534175s ago: executing program 3 (id=42): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d00)=@newtfilter={0x388, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff2, 0xd}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x84, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xd}}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_FW_POLICE={0x30, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x68}, @TCA_POLICE_RESULT={0x8, 0x5, 0xddc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'macvlan1\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_matchall={{0xd}, {0x2c0, 0x2, [@TCA_MATCHALL_ACT={0x294, 0x2, [@m_vlan={0x140, 0x12, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xf3, 0x6, "cba56db3618345c918d47b44626575f175043ad9b22e5117ab594b187e84eedaa222c63fe5e73e5a10ff8dde672318a2295907bde7cbd625e4287f729f390db8fcab968038a55ffa2566a50f0d9c75d02acc0f6f1d7966496c5c0a926953172814d1db711b1d200f2c0797507a356d9454609ab9bb43ac4a8a944b8ce727bffd58df8a9b23631a1f80e55393fd5170b37432201ae6e4dfd95355088e9d8dfb85c3819bccd6161a0666b021cda968b63b457d87a7cc91f41d0567f0b372c832717bdc4078a8553af478256b407abe33d2626b328527168b20049f0678af92eced0bf61c1ef17aca747fbb22a4a110fe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x108, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8a6be}]}, {0xd2, 0x6, "8f23f73accf58e44d74e7b60498979b1448863f44caec262ab58c758f4ebbcbfbe341d986641a23929e30e52e9e866f7452018b4bf2108ae75b8408951fe6e456fbad15f6e4ea7f3cd6014face82b36ca483b671f085e2d8f0b0cdf3ec9c2dcd989eed182a025ff7aef53a8a61aca36492c11e8c08bf6d245e786dbedccafaffafb23208aec0ccca978922519a6b97410e1423f035b290a0383f2a01a5e0e19ebcf4fdd5f17a500a4010a672d1409e445d03e93cad518c5f3db183dd811ad9122406b0c17012d093dfb748051f1d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x48, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xf, 0xab73, 0x4, 0x31a0, 0xf029}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xe}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_get$uid(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) unshare(0x64000600) 10m52.906152653s ago: executing program 2 (id=52): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 10m51.30190679s ago: executing program 2 (id=54): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) memfd_create(0x0, 0x3) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000800000100"/17, @ANYRES32=r1], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x800000004, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2, 0x9, 0xffff, 0xb, 0xffffffffffffff6a, 0xc921}, 0x0, 0x0) 10m49.17238961s ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r3, 0x0, 0x3, 0xfdc, &(0x7f0000001400)="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", 0x5}) 10m47.70515507s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x3, 0x13, 0xffff9509, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x2}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b", 0xe5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 10m47.363799818s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='naa.6001405c935d791', 0x13) 10m46.395163747s ago: executing program 2 (id=63): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 10m44.339339305s ago: executing program 3 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f0000000500)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000ff100000616a63646768696a6b6c6d6e78797a303132333435"], 0x29, 0xfffffffffffffffe) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 10m31.175314074s ago: executing program 33 (id=63): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 10m27.073295249s ago: executing program 34 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc6, &(0x7f0000000500)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000ff100000616a63646768696a6b6c6d6e78797a303132333435"], 0x29, 0xfffffffffffffffe) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 8m26.051562125s ago: executing program 0 (id=254): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r5, 0x0, 0x3, 0xfdc, &(0x7f0000001400)="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", 0x5}) 8m20.057053365s ago: executing program 0 (id=261): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) 8m17.499010968s ago: executing program 0 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000007000000080000000800000045000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000015000000000000000800"/28], 0x50) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 8m12.753400511s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c00"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8810) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @empty}, 0x10) listen(r7, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[]) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0x0) 8m7.947575068s ago: executing program 0 (id=272): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000003a000/0x1000)=nil, &(0x7f00006ef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x112) write(r3, &(0x7f0000000500)='-294967295 2', 0xc) 8m0.179582186s ago: executing program 0 (id=279): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[], 0x305) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m44.20971456s ago: executing program 35 (id=279): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[], 0x305) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.076209993s ago: executing program 5 (id=675): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="09000000e7001400ffffc87bfb0789a83baa88a800", 0x15, 0x200000c4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_uring_setup(0x338e, &(0x7f0000000240)={0x0, 0x4b40, 0x80000, 0x1, 0xb7}) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000094c000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 11.035225296s ago: executing program 5 (id=676): unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5"}, 0xde, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 9.193563501s ago: executing program 4 (id=677): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r2, &(0x7f0000001080)='\v', 0x1) 6.461795156s ago: executing program 5 (id=678): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x148}], 0x1}}], 0x1, 0x2090) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8672630954c1c3a1632d3497e3be53a4734619bd79aea6ffd87b8278f09775884018c70a6cf7290d5d09c6fa35a2c5fe9be746c9a4cb3e45855a12bf0c0fdeecb5a86922094b0d7b1adf0c10295e0e2ded424c476b8a15ddc44d229951e8a86d359c911e6a4baaeeb2c84cf367e92566ad2bed0c079c614f903d48cd19252c004a2f1de096d83f032d1a86bcd0b53b16668c88258d7d5ca7fc72d41b74ffe5c4a02e5b7077eddbeb77e4678a45e2983e4a1c07e7eb53ebddedca9bf2c52b84b759a88ec4cad17935e7af6c1ae2dd0ce1d37a2dcc74c336a71daf179ebddb5651a41f209b6a5ea7a001efbf74bd21f7fa3708430baddc2b24a7871f7bb443913ca59e64556d361af986aff89975fa48682bd97e707590f3d508427f6a61e293393518b620c12b6d055014a2f5744be4a16a8b39e5cb19112eb529646f83ca092c52945bd873e6dffbd22f9ba99f350689313c2acc9d4a35c182056bf029aa5fbd942a955d5627b815b658a522605fc5a993c4cc3722da94d1509a1926fe2873c02027714784d20f2765c5f299c56a18791b4ca799bf477832093222f805fa125527495975cb5f50f5ca6cba89459b85d674214ff894c33b8a2c85193d7f312de8a42f4eede4fb84ae648dffae1ec13e8ad5663b10847f9d476e1bcacff45389dee0cc7e1a84834ab7904116ef8c89705f931b42a501303da83ac9799dde0df252d0b597e78001229d9a2339bd71c6244fdaebcffc10595c09ddad42bf7cfed789817962bffec261cc1d203910c5282b7971da3eae449202e1eda1d7c7793c2c24d6e6fd6f58331e63a59900e7a0e2c959fbc6b625fd4c95cd61d72ed56a96018d0b94358f9e50fb98eec69d4fae7d5ec303bde80f0bfd17908138c1a5c9e5d805c25adf392e5be7e1eb17945ed9b4171fb776e11602c32784718884fea99446ce11847ea0e4bcb2931105425c5614280f977380c50fe12d1542fcf61c61fdf8cb63054fba443fa1ee52798881269497db04912b467a563b24dbad4b08d34ac178b9e356c1e8b372ba51f4c8ab753f69e05b78e20b97e13b472a745c9bdf625e208dee9bca82ed2bb59c9253cf70764c3c7ed8ad833b7bef106836160ed8f68d8df869b08add999f43b949b8258c89d0baf3af35e", 0x761}], 0x2}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 5.65516448s ago: executing program 5 (id=679): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c80)=@delchain={0xc00, 0x65, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xa, 0x2}, {0x1, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @filter_kind_options=@f_matchall={{0xd}, {0xb84, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_vlan={0x30, 0x1e, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_MATCHALL_ACT={0x850, 0x2, [@m_simple={0x128, 0x14, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x917f, 0x2, 0x8, 0xffffffff, 0x6}}, @TCA_DEF_DATA={0x6, 0x3, '.\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0xfffffbff, 0x1, 0x8, 0xfc}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xc, 0x3, '/}!}[,]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x2, 0x30000008, 0x80, 0x80}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x8e, 0x6, "a00bf94db7a5e6d5efa10e177a5b68fc627c7e31653f4fe70cf82f1ef59c4b4333abdf2e83412fcf32fb1200cb7ed28ee6734f3d2486191cb64533245ed33e01c9e6fb3ee32b40f5612a58b9036a9695d21f6d19111de11377f03e03c95b463db37e8e5ba4a71b8d49d87553f77598f424c62d30200e560c70eff898ddfb56b730de3660e220414a4a31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x724, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x6f5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x2ac, 0x2, [@m_gact={0xd0, 0xb, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x55, 0xe14d, 0x0, 0x5, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x0, 0x8, 0xff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x22f2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd9e, 0x8}}]}, {0x5c, 0x6, "58a7af87cd39e47ebdae9e0972137a34b345f2fe3e26845e64c725940bd4a94fafbcbd3a00182638d9a588cc1f288255ad3634609769aab4f04ee88ab07f31973cc6ac59a42267e8b426d11071f1d8d02b92e65ea8f8624f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x34, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x70, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8914}]}, {0x32, 0x6, "b4773f1185da4d867f44a7c46f61535f3a50f7cacd4bc1ab117d874294847b44d61ba84b1891aebc6c69a6dd863b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xc4, 0xc, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffc, 0xffffff80, 0x1, 0x3ff, 0x8}}]}, {0x82, 0x6, "322359edf2310ce62d97c9b29dbb23ba3aa413254fc67c1e8176bf521d70abc080bcf7d6dcc9da948247a2174d4d910e4f566fdc134046005bb84ab5abcc950c9b60171fd03f2298ce64c81792014cc1f92adaaebc9b68a1a5de6a84e4d9637ed9a46799012a602e8403dc364f8c116d89dbacac395c73944a905bac4140"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x70, 0x1, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0x2}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0xc00}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) getpgid(0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000100)=[{r2, 0x1004}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 5.071378029s ago: executing program 4 (id=680): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000000c0)) close(r2) pwritev(0xffffffffffffffff, &(0x7f0000004700)=[{&(0x7f0000004440)="f65a", 0x2}], 0x1, 0x1, 0x9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0xfe, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xee00) 3.887732458s ago: executing program 5 (id=681): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB='fd', @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="2c677201", @ANYBLOB]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 3.751739858s ago: executing program 4 (id=682): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x48802, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000800000100"/17, @ANYRES32=r1], 0x20}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x24181, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x800000004, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2, 0x9, 0xffff, 0xb, 0xffffffffffffff6a, 0xc921}, 0x0, 0x0) 1.650095224s ago: executing program 5 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x6, 'dummy0\x00', {0xa}, 0x40}) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, 0x0, 0xd831961adcf9ebbd) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="e5bf9975d5d109a1124ebc493a59b2b6137731ee31570e272e84670ab26b0dfa6df59b790c0200d578a0626eb330a9f24c161a36461207134e0fdfe2302cf52dfdf93ec141f9eda92850517c1f744dd3d4f1b41ab0c6a3ef6c4a1bc9b415caf85e5c212d78eb55c7b5bcf3f359731e1af91997cecb1c", 0x76, 0x0, 0x0, 0xfffffffffffffee2) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='1', 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20048000) 1.448024279s ago: executing program 4 (id=684): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff0180", 0x41) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 1.206198467s ago: executing program 4 (id=685): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0xfffffffd, 0x1f4, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x100, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x14, 0x0, r1}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540), 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') close(0xffffffffffffffff) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) kernel console output (not intermixed with test programs): 427.842649][ T7943] netlink: 244 bytes leftover after parsing attributes in process `syz.5.364'. [ 428.098404][ T7952] netlink: 328 bytes leftover after parsing attributes in process `syz.4.365'. [ 428.821622][ T7955] 9pnet_fd: p9_fd_create_tcp (7955): problem connecting socket to 127.0.0.1 [ 431.500913][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.583901][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.657867][ T6086] bond0 (unregistering): Released all slaves [ 432.882211][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.933212][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.947614][ T6086] bond0 (unregistering): Released all slaves [ 433.307080][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.307223][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.307398][ T7853] bridge_slave_0: entered allmulticast mode [ 433.313554][ T7853] bridge_slave_0: entered promiscuous mode [ 434.350569][ T6086] hsr_slave_0: left promiscuous mode [ 434.392166][ T6086] hsr_slave_1: left promiscuous mode [ 434.393131][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.435748][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.514331][ T6086] hsr_slave_0: left promiscuous mode [ 434.532601][ T6086] hsr_slave_1: left promiscuous mode [ 434.533703][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.552786][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.237180][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 438.321819][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 439.336410][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 439.472491][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.472551][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.415095][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 440.472628][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 440.643255][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.656623][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.659190][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.662520][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.663261][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.824221][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.824401][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.824606][ T7853] bridge_slave_1: entered allmulticast mode [ 440.850993][ T7853] bridge_slave_1: entered promiscuous mode [ 441.277274][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.392018][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.543787][ T8005] netlink: 328 bytes leftover after parsing attributes in process `syz.5.374'. [ 442.280795][ T8008] 9pnet_fd: p9_fd_create_tcp (8008): problem connecting socket to 127.0.0.1 [ 443.309167][ T52] Bluetooth: hci6: command tx timeout [ 443.612602][ T7853] team0: Port device team_slave_0 added [ 443.745342][ T7853] team0: Port device team_slave_1 added [ 443.969569][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.969595][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.969643][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.974974][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.974997][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.975076][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.153214][ T7853] hsr_slave_0: entered promiscuous mode [ 444.154432][ T7853] hsr_slave_1: entered promiscuous mode [ 444.155294][ T7853] debugfs: 'hsr0' already exists in 'hsr' [ 444.155323][ T7853] Cannot create hsr debugfs directory [ 445.326112][ T4928] Bluetooth: hci6: command tx timeout [ 446.280265][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.376'. [ 446.295571][ T8033] netlink: 36 bytes leftover after parsing attributes in process `syz.5.376'. [ 447.423710][ T4928] Bluetooth: hci6: command tx timeout [ 449.874639][ T4928] Bluetooth: hci6: command tx timeout [ 450.000985][ T7742] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 450.042540][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.056771][ T7742] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 450.111846][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.123176][ T7742] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 450.352209][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.359872][ T7742] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 451.191349][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 451.420555][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 452.018415][ T7742] kthread_run failed with err -4 [ 453.917409][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.918085][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.918734][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.919856][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.921009][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.943874][ T8077] netlink: 328 bytes leftover after parsing attributes in process `syz.4.384'. [ 454.671604][ T8080] 9pnet_fd: p9_fd_create_tcp (8080): problem connecting socket to 127.0.0.1 [ 456.796254][ T7999] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.796377][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.796553][ T7999] bridge_slave_0: entered allmulticast mode [ 456.801747][ T7999] bridge_slave_0: entered promiscuous mode [ 456.809493][ T7999] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.809619][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.809780][ T7999] bridge_slave_1: entered allmulticast mode [ 456.811980][ T7999] bridge_slave_1: entered promiscuous mode [ 457.076802][ T6086] bridge_slave_1: left allmulticast mode [ 457.076841][ T6086] bridge_slave_1: left promiscuous mode [ 457.077087][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.109230][ T6086] bridge_slave_0: left allmulticast mode [ 457.109272][ T6086] bridge_slave_0: left promiscuous mode [ 457.109551][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.168623][ T6086] bridge_slave_1: left allmulticast mode [ 457.168662][ T6086] bridge_slave_1: left promiscuous mode [ 457.168887][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.174033][ T6086] bridge_slave_0: left allmulticast mode [ 457.174716][ T6086] bridge_slave_0: left promiscuous mode [ 457.174929][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.437103][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.440151][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.442046][ T6086] bond0 (unregistering): Released all slaves [ 457.833511][ T4928] Bluetooth: hci2: command tx timeout [ 457.840938][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.854044][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.855438][ T6086] bond0 (unregistering): Released all slaves [ 457.874947][ T7999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.895208][ T7999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.970076][ T7999] team0: Port device team_slave_0 added [ 457.994241][ T7999] team0: Port device team_slave_1 added [ 458.313732][ T6086] hsr_slave_0: left promiscuous mode [ 458.314734][ T6086] hsr_slave_1: left promiscuous mode [ 458.318881][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.319921][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.331640][ T6086] hsr_slave_0: left promiscuous mode [ 458.332571][ T6086] hsr_slave_1: left promiscuous mode [ 458.333677][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.334559][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.251893][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 459.300403][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 459.714625][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 459.730467][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 459.813189][ T8117] 0x000000000000-0x000000010000 : "" [ 459.938505][ T4928] Bluetooth: hci2: command tx timeout [ 459.961468][ T8117] ftl_cs: FTL header not found. [ 460.796971][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.796998][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.797047][ T7999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.802481][ T7999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.802504][ T7999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.802552][ T7999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.875148][ T7853] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 460.904957][ T7853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.913512][ T7853] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 460.924079][ T7853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.925119][ T7853] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 460.943090][ T7853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.927914][ T7853] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 461.956375][ T4928] Bluetooth: hci2: command tx timeout [ 461.960300][ T7853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.237551][ T5745] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 462.308795][ T7999] hsr_slave_0: entered promiscuous mode [ 462.309739][ T7999] hsr_slave_1: entered promiscuous mode [ 462.313407][ T7999] debugfs: 'hsr0' already exists in 'hsr' [ 462.313436][ T7999] Cannot create hsr debugfs directory [ 462.411268][ T5745] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 462.413563][ T5745] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 462.413603][ T5745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.413637][ T5745] usb 5-1: config 0 has no interface number 0 [ 462.413679][ T5745] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 462.413735][ T5745] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 462.413785][ T5745] usb 5-1: config 0 interface 255 has no altsetting 0 [ 462.413834][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.419943][ T5745] usb 5-1: config 0 descriptor?? [ 463.652314][ T7819] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 463.684496][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.688818][ T7819] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 463.744395][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.753771][ T4928] Bluetooth: hci2: command tx timeout [ 465.306701][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.345323][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.365830][ T5745] usb 5-1: string descriptor 0 read error: -71 [ 465.388590][ T5745] usb 5-1: USB disconnect, device number 2 [ 465.430125][ T7819] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 465.512246][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.520866][ T7819] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.578921][ T7819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.713386][ T6445] IPVS: starting estimator thread 0... [ 465.826356][ T8157] IPVS: using max 21 ests per chain, 50400 per kthread [ 466.811496][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.811635][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.903358][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.903485][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.440673][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 469.530758][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.533710][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.550845][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.553457][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.556493][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.784363][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.784554][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.784749][ T8075] bridge_slave_0: entered allmulticast mode [ 469.817706][ T8075] bridge_slave_0: entered promiscuous mode [ 469.835291][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.835429][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.855335][ T8075] bridge_slave_1: entered allmulticast mode [ 469.863397][ T8187] netlink: 328 bytes leftover after parsing attributes in process `syz.5.393'. [ 470.601572][ T8191] 9pnet_fd: p9_fd_create_tcp (8191): problem connecting socket to 127.0.0.1 [ 471.636651][ T4928] Bluetooth: hci4: command tx timeout [ 471.691758][ T8075] bridge_slave_1: entered promiscuous mode [ 472.219648][ T8075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.234541][ T8075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.562037][ T8075] team0: Port device team_slave_0 added [ 472.665342][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.685342][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.694765][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.705938][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 472.707182][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.823837][ T8075] team0: Port device team_slave_1 added [ 472.978843][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.978869][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.978916][ T8075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.022198][ T8075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.022222][ T8075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.022268][ T8075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.427347][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 473.448594][ T8075] hsr_slave_0: entered promiscuous mode [ 473.453434][ T8075] hsr_slave_1: entered promiscuous mode [ 473.454338][ T8075] debugfs: 'hsr0' already exists in 'hsr' [ 473.454366][ T8075] Cannot create hsr debugfs directory [ 473.726319][ T52] Bluetooth: hci4: command tx timeout [ 474.756151][ T52] Bluetooth: hci0: command tx timeout [ 475.236252][ T6086] bridge_slave_1: left allmulticast mode [ 475.236296][ T6086] bridge_slave_1: left promiscuous mode [ 475.236549][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.271072][ T6086] bridge_slave_0: left allmulticast mode [ 475.271105][ T6086] bridge_slave_0: left promiscuous mode [ 475.274389][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.796532][ T52] Bluetooth: hci4: command tx timeout [ 476.147665][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.311986][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.490945][ T6086] bond0 (unregistering): Released all slaves [ 477.792045][ T52] Bluetooth: hci0: command tx timeout [ 477.876043][ T52] Bluetooth: hci4: command tx timeout [ 478.526994][ T6086] hsr_slave_0: left promiscuous mode [ 478.528968][ T6086] hsr_slave_1: left promiscuous mode [ 478.530505][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.532778][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.801878][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 478.825409][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 479.171995][ T7999] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.208475][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.308995][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 479.329249][ T7999] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.470829][ T52] Bluetooth: hci0: command tx timeout [ 480.725752][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.727386][ T7999] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.790045][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.949832][ T7999] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.030663][ T7999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.515994][ T52] Bluetooth: hci0: command tx timeout [ 482.603467][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 483.871031][ T8308] netlink: 328 bytes leftover after parsing attributes in process `syz.5.405'. [ 484.611751][ T8311] 9pnet_fd: p9_fd_create_tcp (8311): problem connecting socket to 127.0.0.1 [ 487.279757][ T8318] capability: warning: `syz.4.407' uses deprecated v2 capabilities in a way that may be insecure [ 489.002490][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.002624][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.002753][ T8182] bridge_slave_0: entered allmulticast mode [ 489.034812][ T8182] bridge_slave_0: entered promiscuous mode [ 489.081523][ T7999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.145183][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.145859][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.152018][ T8182] bridge_slave_1: entered allmulticast mode [ 490.164248][ T8182] bridge_slave_1: entered promiscuous mode [ 490.570430][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.570649][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.570790][ T8204] bridge_slave_0: entered allmulticast mode [ 490.573211][ T8204] bridge_slave_0: entered promiscuous mode [ 490.620680][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.621901][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.622086][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.622215][ T8204] bridge_slave_1: entered allmulticast mode [ 490.625438][ T8204] bridge_slave_1: entered promiscuous mode [ 490.694633][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.779020][ T7999] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.806441][ T5846] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 490.856702][ T8075] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 490.865344][ T8075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.900763][ T8182] team0: Port device team_slave_0 added [ 490.904070][ T8182] team0: Port device team_slave_1 added [ 490.998186][ T5846] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.000220][ T5846] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 491.000260][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.000294][ T5846] usb 6-1: config 0 has no interface number 0 [ 491.000335][ T5846] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 491.000396][ T5846] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 491.000481][ T5846] usb 6-1: config 0 interface 255 has no altsetting 0 [ 491.000537][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.005551][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.060931][ T5846] usb 6-1: config 0 descriptor?? [ 491.191857][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.191971][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.200919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.201053][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.219320][ T8075] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 491.257622][ T8075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.517272][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.974711][ T8358] Cannot find add_set index 2 as target [ 494.621476][ T5846] usb 6-1: string descriptor 0 read error: -71 [ 494.665525][ T5846] usb 6-1: USB disconnect, device number 4 [ 494.711931][ T8075] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 494.730787][ T8075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.732387][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.732410][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.732457][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.772153][ T8204] team0: Port device team_slave_0 added [ 494.785788][ T8204] team0: Port device team_slave_1 added [ 494.792322][ T8075] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 494.809832][ T8075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.812971][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.812995][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.813042][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.272862][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.272890][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.272937][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.681750][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.681865][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.682358][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.339620][ T8182] hsr_slave_0: entered promiscuous mode [ 496.340583][ T8182] hsr_slave_1: entered promiscuous mode [ 496.341246][ T8182] debugfs: 'hsr0' already exists in 'hsr' [ 496.341292][ T8182] Cannot create hsr debugfs directory [ 497.590524][ T8204] hsr_slave_0: entered promiscuous mode [ 497.596435][ T8204] hsr_slave_1: entered promiscuous mode [ 497.598785][ T8204] debugfs: 'hsr0' already exists in 'hsr' [ 497.598815][ T8204] Cannot create hsr debugfs directory [ 499.542148][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 499.830250][ T8402] netlink: 328 bytes leftover after parsing attributes in process `syz.4.414'. [ 500.562778][ T8406] 9pnet_fd: p9_fd_create_tcp (8406): problem connecting socket to 127.0.0.1 [ 501.585244][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585322][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.970698][ T8075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.132057][ T6086] bridge_slave_1: left allmulticast mode [ 502.132095][ T6086] bridge_slave_1: left promiscuous mode [ 502.132332][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.174620][ T6086] bridge_slave_0: left allmulticast mode [ 502.174659][ T6086] bridge_slave_0: left promiscuous mode [ 502.189302][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.287537][ T6086] bridge_slave_1: left allmulticast mode [ 502.287590][ T6086] bridge_slave_1: left promiscuous mode [ 502.287820][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.319104][ T6086] bridge_slave_0: left allmulticast mode [ 502.319142][ T6086] bridge_slave_0: left promiscuous mode [ 502.319450][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.540653][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.553129][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.561008][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.570823][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.572359][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.132018][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.151779][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.165455][ T6086] bond0 (unregistering): Released all slaves [ 503.659472][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.682353][ T8431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.422'. [ 503.688653][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.727009][ T6086] bond0 (unregistering): Released all slaves [ 504.606095][ T4928] Bluetooth: hci5: command tx timeout [ 504.713053][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 505.729471][ T6086] hsr_slave_0: left promiscuous mode [ 505.735441][ T6086] hsr_slave_1: left promiscuous mode [ 505.750976][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.754787][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.794536][ T6086] hsr_slave_0: left promiscuous mode [ 505.801897][ T6086] hsr_slave_1: left promiscuous mode [ 505.802868][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.805179][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.676165][ T4928] Bluetooth: hci5: command tx timeout [ 507.190209][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 507.283679][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 508.434978][ T8463] netlink: 328 bytes leftover after parsing attributes in process `syz.5.429'. [ 509.162187][ T8466] 9pnet_fd: p9_fd_create_tcp (8466): problem connecting socket to 127.0.0.1 [ 510.204747][ T4928] Bluetooth: hci5: command tx timeout [ 511.053569][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 511.054378][ T8468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.431'. [ 511.097934][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 512.288813][ T4928] Bluetooth: hci5: command tx timeout [ 512.707422][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.711090][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.711774][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.713230][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.751387][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 514.836112][ T52] Bluetooth: hci6: command tx timeout [ 516.306785][ T8523] netlink: 328 bytes leftover after parsing attributes in process `syz.4.438'. [ 517.067982][ T8527] 9pnet_fd: p9_fd_create_tcp (8527): problem connecting socket to 127.0.0.1 [ 518.475974][ T52] Bluetooth: hci6: command tx timeout [ 519.157809][ T8533] netlink: 32 bytes leftover after parsing attributes in process `syz.5.440'. [ 520.516406][ T52] Bluetooth: hci6: command tx timeout [ 521.638227][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.638348][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.638518][ T8411] bridge_slave_0: entered allmulticast mode [ 521.662893][ T8411] bridge_slave_0: entered promiscuous mode [ 521.687538][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.687753][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.687930][ T8411] bridge_slave_1: entered allmulticast mode [ 521.717826][ T8411] bridge_slave_1: entered promiscuous mode [ 521.808209][ T8182] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 521.843462][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.302007][ T8182] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 522.376326][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.377448][ T8182] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 522.444642][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.528721][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.596298][ T52] Bluetooth: hci6: command tx timeout [ 522.728179][ T8182] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 522.772128][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.799776][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.354512][ T8577] 0x000000000000-0x000000010000 : "" [ 523.390069][ T8577] ftl_cs: FTL header not found. [ 524.535495][ T8411] team0: Port device team_slave_0 added [ 524.546312][ T8411] team0: Port device team_slave_1 added [ 526.898625][ T8607] netlink: 328 bytes leftover after parsing attributes in process `syz.4.447'. [ 527.631444][ T8610] 9pnet_fd: p9_fd_create_tcp (8610): problem connecting socket to 127.0.0.1 [ 528.778322][ T8612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.449'. [ 528.828625][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.828653][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.828720][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.853475][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.853502][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.853556][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.604608][ T8204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 529.632416][ T8204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.855661][ T8204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 529.885015][ T8204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.176270][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.178079][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.178660][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.179445][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.180073][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.209596][ T8411] hsr_slave_0: entered promiscuous mode [ 530.214362][ T8411] hsr_slave_1: entered promiscuous mode [ 530.217808][ T8411] debugfs: 'hsr0' already exists in 'hsr' [ 530.217837][ T8411] Cannot create hsr debugfs directory [ 530.236070][ T8204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 530.269655][ T8204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.291248][ T8204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 530.331820][ T8204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.332432][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.332567][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.332733][ T8477] bridge_slave_0: entered allmulticast mode [ 530.334980][ T8477] bridge_slave_0: entered promiscuous mode [ 530.697062][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.697187][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.697385][ T8477] bridge_slave_1: entered allmulticast mode [ 530.702705][ T8477] bridge_slave_1: entered promiscuous mode [ 531.175622][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.208836][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.564365][ T8477] team0: Port device team_slave_0 added [ 531.968708][ T8477] team0: Port device team_slave_1 added [ 532.198571][ T4928] Bluetooth: hci2: command tx timeout [ 533.006917][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.006945][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.006993][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.086824][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.086852][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.086899][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.551669][ T6086] bridge_slave_1: left allmulticast mode [ 533.551710][ T6086] bridge_slave_1: left promiscuous mode [ 533.551956][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.614179][ T6086] bridge_slave_0: left allmulticast mode [ 533.614218][ T6086] bridge_slave_0: left promiscuous mode [ 533.615438][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.711649][ T6086] bridge_slave_1: left allmulticast mode [ 533.711690][ T6086] bridge_slave_1: left promiscuous mode [ 533.711962][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.751910][ T6086] bridge_slave_0: left allmulticast mode [ 533.751957][ T6086] bridge_slave_0: left promiscuous mode [ 533.760626][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.178847][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.182091][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.184856][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.221543][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.228364][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.290053][ T4928] Bluetooth: hci2: command tx timeout [ 535.555801][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.585535][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.607045][ T6086] bond0 (unregistering): Released all slaves [ 536.111234][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.133537][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.153796][ T6086] bond0 (unregistering): Released all slaves [ 536.260034][ T8477] hsr_slave_0: entered promiscuous mode [ 536.261234][ T8477] hsr_slave_1: entered promiscuous mode [ 536.277660][ T4928] Bluetooth: hci0: command tx timeout [ 536.285676][ T8477] debugfs: 'hsr0' already exists in 'hsr' [ 536.285704][ T8477] Cannot create hsr debugfs directory [ 536.358491][ T4928] Bluetooth: hci2: command tx timeout [ 537.924924][ T6086] hsr_slave_0: left promiscuous mode [ 537.939504][ T6086] hsr_slave_1: left promiscuous mode [ 537.940532][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.948180][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.978053][ T8698] netlink: 328 bytes leftover after parsing attributes in process `syz.5.458'. [ 538.712501][ T8701] 9pnet_fd: p9_fd_create_tcp (8701): problem connecting socket to 127.0.0.1 [ 539.723070][ T4928] Bluetooth: hci0: command tx timeout [ 539.723120][ T4928] Bluetooth: hci2: command tx timeout [ 539.957431][ T6086] hsr_slave_0: left promiscuous mode [ 539.974800][ T6086] hsr_slave_1: left promiscuous mode [ 539.987287][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.993591][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.597840][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 541.724477][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 541.798449][ T52] Bluetooth: hci0: command tx timeout [ 543.900817][ T52] Bluetooth: hci0: command tx timeout [ 544.728783][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 544.811785][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 545.383209][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 545.687753][ T8732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.399062][ T8755] netlink: 328 bytes leftover after parsing attributes in process `syz.5.468'. [ 549.141614][ T8759] 9pnet_fd: p9_fd_create_tcp (8759): problem connecting socket to 127.0.0.1 [ 553.267008][ T8411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.297672][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.303020][ T8411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.351830][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.357216][ T8411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.393857][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.788940][ T8411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.806981][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.011597][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.011815][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.012010][ T8627] bridge_slave_0: entered allmulticast mode [ 557.049154][ T8627] bridge_slave_0: entered promiscuous mode [ 557.135178][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.135302][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.135454][ T8627] bridge_slave_1: entered allmulticast mode [ 557.167806][ T8627] bridge_slave_1: entered promiscuous mode [ 557.435331][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.463543][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.726274][ T8627] team0: Port device team_slave_0 added [ 557.743799][ T8627] team0: Port device team_slave_1 added [ 559.017848][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.017876][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.017923][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.026616][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.026638][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.026684][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.923244][ T8627] hsr_slave_0: entered promiscuous mode [ 559.934084][ T8627] hsr_slave_1: entered promiscuous mode [ 559.944333][ T8627] debugfs: 'hsr0' already exists in 'hsr' [ 559.944366][ T8627] Cannot create hsr debugfs directory [ 560.256088][ T8849] netlink: 328 bytes leftover after parsing attributes in process `syz.5.477'. [ 560.983096][ T8852] 9pnet_fd: p9_fd_create_tcp (8852): problem connecting socket to 127.0.0.1 [ 562.285604][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.285697][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.322187][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.322308][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.322470][ T8672] bridge_slave_0: entered allmulticast mode [ 562.358166][ T8672] bridge_slave_0: entered promiscuous mode [ 562.553641][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.553765][ T8672] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.553940][ T8672] bridge_slave_1: entered allmulticast mode [ 562.595362][ T8672] bridge_slave_1: entered promiscuous mode [ 562.835088][ T8672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.274740][ T8866] 0x000000000000-0x000000010000 : "" [ 563.316035][ T8866] ftl_cs: FTL header not found. [ 564.346839][ T8672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.408053][ T8477] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 564.428121][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.601745][ T8477] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 564.638904][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.743675][ T8477] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 564.776404][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.785515][ T8477] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 564.824457][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.840354][ T8672] team0: Port device team_slave_0 added [ 565.362386][ T8672] team0: Port device team_slave_1 added [ 565.643288][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.643316][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.643363][ T8672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.911371][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 565.923388][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 565.935679][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 565.945523][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 565.953543][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.990337][ T8672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.001486][ T8672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.001541][ T8672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.470301][ T8672] hsr_slave_0: entered promiscuous mode [ 566.483625][ T8672] hsr_slave_1: entered promiscuous mode [ 566.486047][ T8672] debugfs: 'hsr0' already exists in 'hsr' [ 566.486077][ T8672] Cannot create hsr debugfs directory [ 566.626839][ T8889] FAULT_INJECTION: forcing a failure. [ 566.626839][ T8889] name fail_futex, interval 1, probability 0, space 0, times 1 [ 566.626896][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: syz.5.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.626951][ T8889] Tainted: [L]=SOFTLOCKUP [ 566.626965][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 566.626988][ T8889] Call Trace: [ 566.627000][ T8889] [ 566.627014][ T8889] dump_stack_lvl+0x100/0x190 [ 566.627074][ T8889] should_fail_ex.cold+0x5/0xa [ 566.627128][ T8889] get_futex_key+0xf72/0x14f0 [ 566.627181][ T8889] ? __pfx_get_futex_key+0x10/0x10 [ 566.627225][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.627274][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.627320][ T8889] ? __mutex_unlock_slowpath+0x35d/0x930 [ 566.627365][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.627418][ T8889] futex_wake+0xf4/0x5e0 [ 566.627486][ T8889] ? __pfx_futex_wake+0x10/0x10 [ 566.627545][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.627600][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.627649][ T8889] ? lock_acquire+0x1d1/0x380 [ 566.627688][ T8889] ? detach_task_ctx_data+0x83/0x490 [ 566.627747][ T8889] do_futex+0x2b2/0x440 [ 566.627798][ T8889] ? __pfx_do_futex+0x10/0x10 [ 566.627843][ T8889] ? __might_fault+0xc5/0x140 [ 566.627902][ T8889] mm_exit_exec_release+0x256/0x2f0 [ 566.627946][ T8889] do_exit+0x707/0x2ae0 [ 566.628001][ T8889] ? __pfx_do_exit+0x10/0x10 [ 566.628046][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628092][ T8889] ? do_raw_spin_lock+0x128/0x260 [ 566.628137][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628183][ T8889] ? find_held_lock+0x2b/0x80 [ 566.628234][ T8889] ? get_signal+0x7e0/0x21e0 [ 566.628278][ T8889] do_group_exit+0xd5/0x2a0 [ 566.628332][ T8889] get_signal+0x1ec7/0x21e0 [ 566.628370][ T8889] ? __pfx_futex_wake+0x10/0x10 [ 566.628434][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628486][ T8889] ? __pfx_get_signal+0x10/0x10 [ 566.628527][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628581][ T8889] ? do_futex+0x190/0x440 [ 566.628635][ T8889] arch_do_signal_or_restart+0x91/0x7e0 [ 566.628694][ T8889] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.628762][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628813][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628867][ T8889] exit_to_user_mode_loop+0x139/0x700 [ 566.628924][ T8889] ? srso_alias_return_thunk+0x5/0xfbef5 [ 566.628970][ T8889] ? rcu_is_watching+0x13/0xc0 [ 566.629024][ T8889] do_syscall_64+0x661/0x790 [ 566.629069][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.629109][ T8889] RIP: 0033:0x7f4daf39e159 [ 566.629138][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.629175][ T8889] RSP: 002b:00007f4db01bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 566.629212][ T8889] RAX: 0000000000000001 RBX: 00007f4daf625fa8 RCX: 00007f4daf39e159 [ 566.629238][ T8889] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4daf625fac [ 566.629262][ T8889] RBP: 00007f4daf625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 566.629287][ T8889] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 566.629312][ T8889] R13: 00007f4daf626038 R14: 00007ffebae950e0 R15: 00007ffebae951c8 [ 566.629361][ T8889] [ 567.697913][ T6086] bridge_slave_1: left allmulticast mode [ 567.697943][ T6086] bridge_slave_1: left promiscuous mode [ 567.698124][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.705796][ T6086] bridge_slave_0: left allmulticast mode [ 567.705821][ T6086] bridge_slave_0: left promiscuous mode [ 567.706358][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.780875][ T6086] bridge_slave_1: left allmulticast mode [ 567.780906][ T6086] bridge_slave_1: left promiscuous mode [ 567.781087][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.818174][ T6086] bridge_slave_0: left allmulticast mode [ 567.818207][ T6086] bridge_slave_0: left promiscuous mode [ 567.818408][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.036555][ T52] Bluetooth: hci4: command tx timeout [ 568.220979][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.245305][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.265283][ T6086] bond0 (unregistering): Released all slaves [ 569.686966][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.722317][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.760990][ T6086] bond0 (unregistering): Released all slaves [ 570.116270][ T52] Bluetooth: hci4: command tx timeout [ 570.381620][ T8916] netlink: 328 bytes leftover after parsing attributes in process `syz.4.486'. [ 571.122721][ T8919] 9pnet_fd: p9_fd_create_tcp (8919): problem connecting socket to 127.0.0.1 [ 572.196367][ T52] Bluetooth: hci4: command tx timeout [ 572.263760][ T6086] hsr_slave_0: left promiscuous mode [ 572.272513][ T6086] hsr_slave_1: left promiscuous mode [ 572.273486][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.293140][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.368466][ T6086] hsr_slave_0: left promiscuous mode [ 572.373944][ T6086] hsr_slave_1: left promiscuous mode [ 572.374708][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.395597][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.605735][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 573.652117][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 574.286225][ T52] Bluetooth: hci4: command tx timeout [ 575.101550][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 575.119391][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 575.120886][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 575.122239][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 575.123145][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 575.829719][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 575.860056][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 577.156075][ T52] Bluetooth: hci5: command tx timeout [ 579.242481][ T8952] Cannot find add_set index 2 as target [ 580.469812][ T52] Bluetooth: hci5: command tx timeout [ 582.090518][ T8960] netlink: 328 bytes leftover after parsing attributes in process `syz.4.495'. [ 582.852815][ T8963] 9pnet_fd: p9_fd_create_tcp (8963): problem connecting socket to 127.0.0.1 [ 583.889235][ T52] Bluetooth: hci5: command tx timeout [ 585.349405][ T8627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 585.389536][ T8627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.413058][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.413149][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.413278][ T8880] bridge_slave_0: entered allmulticast mode [ 585.421287][ T8880] bridge_slave_0: entered promiscuous mode [ 585.427683][ T8627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 585.491598][ T8627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.492447][ T8627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 585.560651][ T8627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.595256][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.595353][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.595487][ T8880] bridge_slave_1: entered allmulticast mode [ 585.603258][ T8880] bridge_slave_1: entered promiscuous mode [ 585.956388][ T52] Bluetooth: hci5: command tx timeout [ 585.986731][ T8627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 586.011529][ T8627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.370821][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.400340][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.960780][ T8880] team0: Port device team_slave_0 added [ 587.028461][ T8880] team0: Port device team_slave_1 added [ 587.418893][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.418915][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.418950][ T8880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.522596][ T8880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.522623][ T8880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.522661][ T8880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.811465][ T8880] hsr_slave_0: entered promiscuous mode [ 587.827536][ T8880] hsr_slave_1: entered promiscuous mode [ 587.828387][ T8880] debugfs: 'hsr0' already exists in 'hsr' [ 587.828440][ T8880] Cannot create hsr debugfs directory [ 591.459944][ T4928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 591.477418][ T4928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.479149][ T4928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.480291][ T4928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.481688][ T4928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.572997][ T8672] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 591.647573][ T8672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 591.861266][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.861392][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.861552][ T8928] bridge_slave_0: entered allmulticast mode [ 592.299423][ T8928] bridge_slave_0: entered promiscuous mode [ 592.604538][ T8672] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 592.622098][ T8672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.631989][ T8672] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 592.671671][ T8672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.673824][ T8672] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 592.831098][ T8672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.832194][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.832309][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.832480][ T8928] bridge_slave_1: entered allmulticast mode [ 592.848264][ T8928] bridge_slave_1: entered promiscuous mode [ 593.632604][ T9022] Cannot find add_set index 2 as target [ 594.852717][ T52] Bluetooth: hci6: command tx timeout [ 595.011048][ T8672] kthread_run failed with err -4 [ 595.295685][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.321121][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.498237][ T8928] team0: Port device team_slave_0 added [ 595.517776][ T8928] team0: Port device team_slave_1 added [ 595.950631][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.950657][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.950700][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.010897][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.010924][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.010972][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.684323][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.697661][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.701453][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.723128][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.723868][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.918129][ T52] Bluetooth: hci6: command tx timeout [ 597.067702][ T8928] hsr_slave_0: entered promiscuous mode [ 597.084130][ T8928] hsr_slave_1: entered promiscuous mode [ 597.095992][ T8928] debugfs: 'hsr0' already exists in 'hsr' [ 597.096024][ T8928] Cannot create hsr debugfs directory [ 597.693878][ T9054] netlink: 328 bytes leftover after parsing attributes in process `syz.5.504'. [ 598.431273][ T9058] 9pnet_fd: p9_fd_create_tcp (9058): problem connecting socket to 127.0.0.1 [ 599.443495][ T52] Bluetooth: hci0: command tx timeout [ 599.444387][ T4928] Bluetooth: hci6: command tx timeout [ 600.060279][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 600.715332][ T6086] bridge_slave_1: left allmulticast mode [ 600.715371][ T6086] bridge_slave_1: left promiscuous mode [ 600.715621][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.775106][ T6086] bridge_slave_0: left allmulticast mode [ 600.775140][ T6086] bridge_slave_0: left promiscuous mode [ 600.775342][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.876307][ T6086] bridge_slave_1: left allmulticast mode [ 600.876359][ T6086] bridge_slave_1: left promiscuous mode [ 600.876543][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.907139][ T6086] bridge_slave_0: left allmulticast mode [ 600.907168][ T6086] bridge_slave_0: left promiscuous mode [ 600.907341][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.805197][ T52] Bluetooth: hci0: command tx timeout [ 601.812068][ T4928] Bluetooth: hci6: command tx timeout [ 602.419867][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.625286][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.643043][ T6086] bond0 (unregistering): Released all slaves [ 603.876641][ T4928] Bluetooth: hci0: command tx timeout [ 603.951384][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.993882][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.007871][ T6086] bond0 (unregistering): Released all slaves [ 604.329675][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 604.383611][ T6086] hsr_slave_0: left promiscuous mode [ 604.394039][ T6086] hsr_slave_1: left promiscuous mode [ 604.394912][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.401315][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.436253][ T6086] hsr_slave_0: left promiscuous mode [ 604.436907][ T6086] hsr_slave_1: left promiscuous mode [ 604.437638][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.438232][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.834376][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 604.868848][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 606.127825][ T4928] Bluetooth: hci0: command tx timeout [ 606.379942][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 606.458842][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 609.548870][ T9127] netlink: 328 bytes leftover after parsing attributes in process `syz.5.513'. [ 610.280966][ T9131] 9pnet_fd: p9_fd_create_tcp (9131): problem connecting socket to 127.0.0.1 [ 612.830396][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.830771][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.830971][ T9008] bridge_slave_0: entered allmulticast mode [ 612.838375][ T9008] bridge_slave_0: entered promiscuous mode [ 612.853298][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.853463][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.862778][ T9008] bridge_slave_1: entered allmulticast mode [ 612.867824][ T9008] bridge_slave_1: entered promiscuous mode [ 613.154440][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.210622][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.368411][ T9008] team0: Port device team_slave_0 added [ 613.466739][ T9008] team0: Port device team_slave_1 added [ 613.744843][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.744870][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.744916][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.800381][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.800408][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.800466][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.067794][ T9008] hsr_slave_0: entered promiscuous mode [ 614.068942][ T9008] hsr_slave_1: entered promiscuous mode [ 614.069734][ T9008] debugfs: 'hsr0' already exists in 'hsr' [ 614.069764][ T9008] Cannot create hsr debugfs directory [ 614.368014][ T8880] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.396961][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.708846][ T8880] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.733969][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.735270][ T8880] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.768201][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.769637][ T8880] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.794810][ T8880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.408377][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.408591][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.408787][ T9039] bridge_slave_0: entered allmulticast mode [ 617.424654][ T9039] bridge_slave_0: entered promiscuous mode [ 617.512263][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.512357][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.512498][ T9039] bridge_slave_1: entered allmulticast mode [ 617.523702][ T9039] bridge_slave_1: entered promiscuous mode [ 617.843784][ T9039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.884043][ T9039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.203596][ T9039] team0: Port device team_slave_0 added [ 619.284028][ T9039] team0: Port device team_slave_1 added [ 619.377497][ T9194] netlink: 328 bytes leftover after parsing attributes in process `syz.5.524'. [ 620.121298][ T9197] 9pnet_fd: p9_fd_create_tcp (9197): problem connecting socket to 127.0.0.1 [ 621.564813][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.564838][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.564881][ T9039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.507097][ T9039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.507124][ T9039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.507171][ T9039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.730024][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.735980][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.010812][ T9039] hsr_slave_0: entered promiscuous mode [ 624.027743][ T9039] hsr_slave_1: entered promiscuous mode [ 624.031560][ T9039] debugfs: 'hsr0' already exists in 'hsr' [ 624.031590][ T9039] Cannot create hsr debugfs directory [ 626.461394][ T6086] bridge_slave_1: left allmulticast mode [ 626.461440][ T6086] bridge_slave_1: left promiscuous mode [ 626.461694][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.518413][ T6086] bridge_slave_0: left allmulticast mode [ 626.518452][ T6086] bridge_slave_0: left promiscuous mode [ 626.518730][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.548771][ T6086] bridge_slave_1: left allmulticast mode [ 627.548810][ T6086] bridge_slave_1: left promiscuous mode [ 627.549056][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.576891][ T6086] bridge_slave_0: left allmulticast mode [ 627.601021][ T6086] bridge_slave_0: left promiscuous mode [ 627.601338][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.709168][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 627.712279][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 627.713321][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 627.714376][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 627.715482][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 628.297542][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.330858][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.351505][ T6086] bond0 (unregistering): Released all slaves [ 629.726484][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.762074][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.777418][ T6086] bond0 (unregistering): Released all slaves [ 629.806155][ T52] Bluetooth: hci2: command tx timeout [ 630.630974][ T6086] hsr_slave_0: left promiscuous mode [ 630.634737][ T6086] hsr_slave_1: left promiscuous mode [ 630.635711][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.662438][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.776693][ T6086] hsr_slave_0: left promiscuous mode [ 630.803155][ T6086] hsr_slave_1: left promiscuous mode [ 630.803944][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.836439][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.876353][ T52] Bluetooth: hci2: command tx timeout [ 632.534364][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 632.584793][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 633.828102][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 633.868544][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 633.956989][ T52] Bluetooth: hci2: command tx timeout [ 634.665192][ T9008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 634.691627][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.698653][ T9008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 634.743318][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.771030][ T9008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.833959][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.872842][ T9008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 634.916702][ T9008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.619593][ T9305] overlayfs: missing 'lowerdir' [ 638.725762][ T52] Bluetooth: hci2: command tx timeout [ 639.986182][ T9315] Cannot find add_set index 2 as target [ 641.315287][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 641.329950][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 641.335785][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 641.351994][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 641.352710][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.923548][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.407471][ T4928] Bluetooth: hci4: command tx timeout [ 643.840407][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.037861][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.037987][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.038172][ T9228] bridge_slave_0: entered allmulticast mode [ 644.042162][ T9228] bridge_slave_0: entered promiscuous mode [ 644.129672][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.129794][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.129967][ T9228] bridge_slave_1: entered allmulticast mode [ 644.132653][ T9228] bridge_slave_1: entered promiscuous mode [ 644.597313][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.597442][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.600262][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.600382][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.662081][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.498493][ T4928] Bluetooth: hci4: command tx timeout [ 645.820258][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.130011][ T9228] team0: Port device team_slave_0 added [ 646.267507][ T9228] team0: Port device team_slave_1 added [ 646.526815][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.526851][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.526898][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.529228][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.529248][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.529291][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.532318][ T9039] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 646.542045][ T9039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 646.575799][ T6086] bridge_slave_1: left allmulticast mode [ 646.576664][ T6086] bridge_slave_1: left promiscuous mode [ 646.576970][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.598127][ T6086] bridge_slave_0: left allmulticast mode [ 646.598280][ T6086] bridge_slave_0: left promiscuous mode [ 646.598534][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.960555][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.976770][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.980161][ T6086] bond0 (unregistering): Released all slaves [ 647.110260][ T9039] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 647.125727][ T9039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.147790][ T9039] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 647.177857][ T9039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.885028][ T4928] Bluetooth: hci4: command tx timeout [ 648.281489][ T9039] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 648.322470][ T9039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.439900][ T6086] hsr_slave_0: left promiscuous mode [ 648.443563][ T6086] hsr_slave_1: left promiscuous mode [ 648.444609][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.485145][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.723244][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 649.783721][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 649.999048][ T4928] Bluetooth: hci4: command tx timeout [ 650.773319][ T9228] hsr_slave_0: entered promiscuous mode [ 650.776223][ T9228] hsr_slave_1: entered promiscuous mode [ 650.780270][ T9228] debugfs: 'hsr0' already exists in 'hsr' [ 650.780299][ T9228] Cannot create hsr debugfs directory [ 651.524337][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.533682][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.533851][ T9317] bridge_slave_0: entered allmulticast mode [ 651.541447][ T9317] bridge_slave_0: entered promiscuous mode [ 651.633138][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.633280][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.633441][ T9317] bridge_slave_1: entered allmulticast mode [ 651.644042][ T9317] bridge_slave_1: entered promiscuous mode [ 652.502970][ T9445] Cannot find add_set index 2 as target [ 653.994269][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.007360][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.113778][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.117913][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.123910][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 654.127363][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 654.129932][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.385541][ T9317] team0: Port device team_slave_0 added [ 655.511907][ T9317] team0: Port device team_slave_1 added [ 655.789429][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.789456][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.789504][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.791845][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.791868][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.791923][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.197357][ T52] Bluetooth: hci5: command tx timeout [ 656.257831][ T9317] hsr_slave_0: entered promiscuous mode [ 656.260589][ T9317] hsr_slave_1: entered promiscuous mode [ 656.264503][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 656.264533][ T9317] Cannot create hsr debugfs directory [ 657.237858][ T9488] 0x000000000000-0x000000010000 : "" [ 657.288713][ T9488] ftl_cs: FTL header not found. [ 657.818398][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 657.822073][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 657.822762][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 657.983551][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.993411][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.276875][ T4928] Bluetooth: hci5: command tx timeout [ 660.285985][ T52] Bluetooth: hci0: command tx timeout [ 660.515960][ T52] Bluetooth: hci5: command tx timeout [ 661.093400][ T6086] bridge_slave_1: left allmulticast mode [ 661.093443][ T6086] bridge_slave_1: left promiscuous mode [ 661.093697][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.099600][ T6086] bridge_slave_0: left allmulticast mode [ 661.099633][ T6086] bridge_slave_0: left promiscuous mode [ 661.102352][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.577665][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.603797][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.616636][ T6086] bond0 (unregistering): Released all slaves [ 662.378726][ T9532] Cannot find add_set index 2 as target [ 663.596687][ T52] Bluetooth: hci0: command tx timeout [ 663.596733][ T52] Bluetooth: hci5: command tx timeout [ 663.769685][ T6086] hsr_slave_0: left promiscuous mode [ 663.771488][ T6086] hsr_slave_1: left promiscuous mode [ 663.772522][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.779934][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.333377][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 664.361091][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 664.772008][ T9228] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 664.785735][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.788713][ T9228] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 664.814753][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.822855][ T9228] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 664.871905][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.872868][ T9228] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 664.917603][ T9228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.643828][ T4928] Bluetooth: hci0: command tx timeout [ 667.332828][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 667.716080][ T4928] Bluetooth: hci0: command tx timeout [ 668.282569][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.282776][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.282967][ T9450] bridge_slave_0: entered allmulticast mode [ 668.310360][ T9450] bridge_slave_0: entered promiscuous mode [ 668.386120][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.386323][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.386495][ T9450] bridge_slave_1: entered allmulticast mode [ 668.393309][ T9450] bridge_slave_1: entered promiscuous mode [ 669.597761][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.611242][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.629920][ T9317] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 670.665409][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 670.673091][ T9317] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 670.691093][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.720979][ T9450] team0: Port device team_slave_0 added [ 671.314247][ T9610] Cannot find add_set index 2 as target [ 672.571453][ T9317] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 672.597970][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.602796][ T9450] team0: Port device team_slave_1 added [ 672.602893][ T9317] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 672.630050][ T9317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.755637][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.181787][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.181816][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.181864][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.193021][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.193045][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.193093][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.522352][ T9450] hsr_slave_0: entered promiscuous mode [ 675.523600][ T9450] hsr_slave_1: entered promiscuous mode [ 675.524468][ T9450] debugfs: 'hsr0' already exists in 'hsr' [ 675.524497][ T9450] Cannot create hsr debugfs directory [ 675.919155][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.744853][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.872444][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.872619][ T9487] bridge_slave_0: entered allmulticast mode [ 676.960709][ T9487] bridge_slave_0: entered promiscuous mode [ 677.121987][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.122115][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.124486][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.124730][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.124965][ T9487] bridge_slave_1: entered allmulticast mode [ 677.173126][ T9487] bridge_slave_1: entered promiscuous mode [ 677.325593][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.325722][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.371422][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.805468][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.274407][ T9487] team0: Port device team_slave_0 added [ 679.281283][ T9487] team0: Port device team_slave_1 added [ 679.369987][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.370018][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.370069][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.372252][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.372274][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.372323][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.548910][ T9684] 0x000000000000-0x000000010000 : "" [ 679.559007][ T9684] ftl_cs: FTL header not found. [ 679.799574][ T9487] hsr_slave_0: entered promiscuous mode [ 679.800765][ T9487] hsr_slave_1: entered promiscuous mode [ 679.801653][ T9487] debugfs: 'hsr0' already exists in 'hsr' [ 679.801681][ T9487] Cannot create hsr debugfs directory [ 679.988801][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.690025][ T6086] bridge_slave_1: left allmulticast mode [ 680.690065][ T6086] bridge_slave_1: left promiscuous mode [ 680.690318][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.718214][ T6086] bridge_slave_0: left allmulticast mode [ 680.718258][ T6086] bridge_slave_0: left promiscuous mode [ 680.718688][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.930703][ T6086] bridge_slave_1: left allmulticast mode [ 681.930744][ T6086] bridge_slave_1: left promiscuous mode [ 681.930968][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.363262][ T6086] bridge_slave_0: left allmulticast mode [ 682.363303][ T6086] bridge_slave_0: left promiscuous mode [ 682.365072][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.760975][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.783162][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.792362][ T6086] bond0 (unregistering): Released all slaves [ 683.246209][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.255768][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.278285][ T6086] bond0 (unregistering): Released all slaves [ 683.319489][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.381268][ T9317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 683.381308][ T9317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.591910][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.592046][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.618812][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.618942][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.914321][ T6086] hsr_slave_0: left promiscuous mode [ 683.923767][ T6086] hsr_slave_1: left promiscuous mode [ 683.925073][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.946954][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.973086][ T6086] hsr_slave_0: left promiscuous mode [ 683.974013][ T6086] hsr_slave_1: left promiscuous mode [ 683.975146][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.995438][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.959687][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 685.708054][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.708138][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.981587][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 686.879614][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 686.905107][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 688.124370][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.143881][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.153197][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.157650][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.158393][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.197064][ T52] Bluetooth: hci2: command tx timeout [ 690.332169][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.362702][ T9450] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 690.382092][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 690.386485][ T9450] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 690.425381][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.437380][ T9450] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 690.547744][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.548845][ T9450] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 690.580181][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.751474][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 690.799876][ T9792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.205727][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 692.275996][ T52] Bluetooth: hci2: command tx timeout [ 694.356540][ T52] Bluetooth: hci2: command tx timeout [ 696.436131][ T52] Bluetooth: hci2: command tx timeout [ 696.711777][ T9487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 696.733898][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.735018][ T9487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 696.762434][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.767741][ T9487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 696.789626][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.816040][ T6086] bridge_slave_1: left allmulticast mode [ 696.816082][ T6086] bridge_slave_1: left promiscuous mode [ 696.816355][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.851059][ T6086] bridge_slave_0: left allmulticast mode [ 696.851096][ T6086] bridge_slave_0: left promiscuous mode [ 696.851337][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.423645][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.446889][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.495960][ T9845] netlink: 52 bytes leftover after parsing attributes in process `syz.4.596'. [ 697.496359][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 697.707743][ T6086] bond0 (unregistering): Released all slaves [ 697.995065][ T9487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 698.047212][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.053763][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.089799][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 698.103156][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 698.118231][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 698.121727][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 698.358489][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.435018][ T6086] hsr_slave_0: left promiscuous mode [ 698.448462][ T6086] hsr_slave_1: left promiscuous mode [ 698.449508][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.460775][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.825203][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 698.847769][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.244794][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 699.271941][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 699.942613][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.195998][ T52] Bluetooth: hci4: command tx timeout [ 700.737458][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.737592][ T9136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.377940][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.378062][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.378247][ T9775] bridge_slave_0: entered allmulticast mode [ 701.417548][ T9775] bridge_slave_0: entered promiscuous mode [ 701.446413][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.446554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.487176][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.487298][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.487467][ T9775] bridge_slave_1: entered allmulticast mode [ 701.508809][ T9775] bridge_slave_1: entered promiscuous mode [ 701.896939][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.914523][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.992310][ T9775] team0: Port device team_slave_0 added [ 702.038035][ T9775] team0: Port device team_slave_1 added [ 702.119689][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.119719][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.119775][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.183604][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.183625][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.183662][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.319725][ T52] Bluetooth: hci4: command tx timeout [ 703.766564][ T9891] 0x000000000000-0x000000010000 : "" [ 703.774005][ T9891] ftl_cs: FTL header not found. [ 704.357627][ T52] Bluetooth: hci4: command tx timeout [ 704.390129][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.416977][ T9487] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.481004][ T9487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.481045][ T9487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.540118][ T9775] hsr_slave_0: entered promiscuous mode [ 704.541247][ T9775] hsr_slave_1: entered promiscuous mode [ 704.542042][ T9775] debugfs: 'hsr0' already exists in 'hsr' [ 704.542069][ T9775] Cannot create hsr debugfs directory [ 706.376329][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.376440][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.384954][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.385052][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.446082][ T52] Bluetooth: hci4: command tx timeout [ 706.730374][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 706.758629][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.581833][ T9915] Cannot find add_set index 2 as target [ 710.429803][ T6086] bridge_slave_1: left allmulticast mode [ 710.429843][ T6086] bridge_slave_1: left promiscuous mode [ 710.430093][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.464279][ T6086] bridge_slave_0: left allmulticast mode [ 710.464336][ T6086] bridge_slave_0: left promiscuous mode [ 710.464590][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.029576][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.063775][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.082070][ T6086] bond0 (unregistering): Released all slaves [ 712.523947][ T6086] hsr_slave_0: left promiscuous mode [ 712.536538][ T6086] hsr_slave_1: left promiscuous mode [ 712.537577][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.541370][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.324921][ T6086] team0 (unregistering): Port device team_slave_1 removed [ 715.450245][ T6086] team0 (unregistering): Port device team_slave_0 removed [ 715.687359][ T9853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 715.691019][ T9853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 715.692188][ T9853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 715.693386][ T9853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 715.694168][ T9853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.730554][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.703920][ T52] Bluetooth: hci5: command tx timeout [ 719.036434][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.036558][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.036723][ T9847] bridge_slave_0: entered allmulticast mode [ 719.047799][ T9847] bridge_slave_0: entered promiscuous mode [ 719.059310][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.061130][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.061289][ T9847] bridge_slave_1: entered allmulticast mode [ 719.074595][ T9847] bridge_slave_1: entered promiscuous mode [ 719.290194][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.335642][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.514310][ T9847] team0: Port device team_slave_0 added [ 719.575615][ T9775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.598192][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.599269][ T9775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.640464][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.643321][ T9847] team0: Port device team_slave_1 added [ 719.841652][ T9775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.891223][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.907489][ T9853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 719.917397][ T9853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 719.919126][ T9853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.920159][ T9853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.921475][ T9853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 719.971828][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.971964][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.972020][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.169807][ T9775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.218276][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.244657][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.244685][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.244733][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.407348][ T9853] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 720.692597][ T9977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.756307][ T9853] Bluetooth: hci5: command tx timeout [ 721.069095][ T9847] hsr_slave_0: entered promiscuous mode [ 721.074508][ T9847] hsr_slave_1: entered promiscuous mode [ 721.075367][ T9847] debugfs: 'hsr0' already exists in 'hsr' [ 721.075406][ T9847] Cannot create hsr debugfs directory [ 721.956336][ T9853] Bluetooth: hci6: command tx timeout [ 722.316944][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 722.589593][T10009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.836041][ T9853] Bluetooth: hci5: command tx timeout [ 724.036453][ T9853] Bluetooth: hci6: command tx timeout [ 724.126349][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.315354][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.315419][ T10] usb 6-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 724.316718][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 724.316767][ T10] usb 6-1: can't read configurations, error -71 [ 724.352506][ T9136] bridge_slave_1: left allmulticast mode [ 724.352542][ T9136] bridge_slave_1: left promiscuous mode [ 724.352786][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.365691][ T9136] bridge_slave_0: left allmulticast mode [ 724.365729][ T9136] bridge_slave_0: left promiscuous mode [ 724.371346][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.949380][ T9853] Bluetooth: hci5: command tx timeout [ 725.293659][ T9136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.309366][ T9136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.332128][ T9136] bond0 (unregistering): Released all slaves [ 725.355527][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.355668][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.374734][ T9942] bridge_slave_0: entered allmulticast mode [ 725.384885][ T9942] bridge_slave_0: entered promiscuous mode [ 725.395006][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.395126][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.395277][ T9942] bridge_slave_1: entered allmulticast mode [ 725.425071][ T9942] bridge_slave_1: entered promiscuous mode [ 725.560462][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.564092][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.208740][ T9853] Bluetooth: hci6: command tx timeout [ 726.453122][ T9136] hsr_slave_0: left promiscuous mode [ 726.463184][ T9136] hsr_slave_1: left promiscuous mode [ 726.471818][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.489948][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.275902][ T9853] Bluetooth: hci6: command tx timeout [ 728.373032][ T9136] team0 (unregistering): Port device team_slave_1 removed [ 728.418901][ T9136] team0 (unregistering): Port device team_slave_0 removed [ 728.832752][ T9853] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 729.073226][ T9942] team0: Port device team_slave_0 added [ 729.086037][ T9942] team0: Port device team_slave_1 added [ 729.090822][T10090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.803503][T10143] Cannot find add_set index 2 as target [ 731.125260][ T9775] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.137826][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.137938][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.140497][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.140520][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.140565][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.143448][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.143470][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.143517][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.275602][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.275736][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.382490][ T9942] hsr_slave_0: entered promiscuous mode [ 731.389999][ T9942] hsr_slave_1: entered promiscuous mode [ 731.397574][ T9942] debugfs: 'hsr0' already exists in 'hsr' [ 731.397615][ T9942] Cannot create hsr debugfs directory [ 735.455531][ T9847] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 735.485559][ T9847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.394097][ T9847] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 736.406690][ T9847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.407762][ T9847] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 736.415054][ T9847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.414552][ T9847] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 737.435765][ T9847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.557530][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.557655][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.557835][ T9979] bridge_slave_0: entered allmulticast mode [ 738.589079][ T9979] bridge_slave_0: entered promiscuous mode [ 738.643967][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.644095][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.644288][ T9979] bridge_slave_1: entered allmulticast mode [ 738.649983][ T9979] bridge_slave_1: entered promiscuous mode [ 739.394711][T10403] Cannot find add_set index 2 as target [ 740.785548][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.798905][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.342687][ T9979] team0: Port device team_slave_0 added [ 741.390259][ T9979] team0: Port device team_slave_1 added [ 741.557135][T10415] netlink: 304 bytes leftover after parsing attributes in process `syz.5.639'. [ 741.684231][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.684259][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.684307][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.861146][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.861173][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.861220][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.895148][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 742.492968][ T9136] bridge_slave_1: left allmulticast mode [ 742.493009][ T9136] bridge_slave_1: left promiscuous mode [ 742.493280][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.518720][ T9136] bridge_slave_0: left allmulticast mode [ 742.518757][ T9136] bridge_slave_0: left promiscuous mode [ 742.522020][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.672144][ T9136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.695546][ T9136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.753409][ T9136] bond0 (unregistering): Released all slaves [ 743.926982][ T9979] hsr_slave_0: entered promiscuous mode [ 743.927866][ T9979] hsr_slave_1: entered promiscuous mode [ 743.931043][ T9979] debugfs: 'hsr0' already exists in 'hsr' [ 743.931071][ T9979] Cannot create hsr debugfs directory [ 744.069699][ T9136] hsr_slave_0: left promiscuous mode [ 744.092780][ T9136] hsr_slave_1: left promiscuous mode [ 744.105975][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.133234][ T9136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.135765][ T9853] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 744.438857][T10506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.031126][ T9136] team0 (unregistering): Port device team_slave_1 removed [ 745.048925][ T9136] team0 (unregistering): Port device team_slave_0 removed [ 745.673905][T10550] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 745.708159][ T9775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.599749][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.599846][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.459639][T10584] Cannot find add_set index 2 as target [ 749.603171][ T9942] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.663433][ T9942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.691460][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.719657][ T9942] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.779644][ T9942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.878425][ T9942] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.906896][ T9942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.914355][ T9942] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.968670][ T9942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.113225][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.235079][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.235206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.593133][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.593273][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.651108][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.665427][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.671815][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.678384][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.680289][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 752.957765][ T9853] Bluetooth: hci0: command tx timeout [ 754.530072][ T9853] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 754.602651][ T9979] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 754.641454][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.919588][T10710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.996126][ T9853] Bluetooth: hci0: command tx timeout [ 755.081544][ T9979] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 755.101932][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.102864][ T9979] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 755.121499][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.122862][ T9979] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 755.151290][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.276842][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.375228][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.783053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.783192][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.995187][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.995328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.076285][ T9853] Bluetooth: hci0: command tx timeout [ 757.644701][ T8603] bridge_slave_1: left allmulticast mode [ 757.644735][ T8603] bridge_slave_1: left promiscuous mode [ 757.644939][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.704335][ T8603] bridge_slave_0: left allmulticast mode [ 757.704365][ T8603] bridge_slave_0: left promiscuous mode [ 757.704570][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.396260][ T5846] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 758.564627][ T5846] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.567483][ T5846] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 758.567522][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.567556][ T5846] usb 5-1: config 0 has no interface number 0 [ 758.567597][ T5846] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 758.567652][ T5846] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 758.567701][ T5846] usb 5-1: config 0 interface 255 has no altsetting 0 [ 758.567749][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.591869][ T5846] usb 5-1: config 0 descriptor?? [ 760.515384][ T9853] Bluetooth: hci0: command tx timeout [ 762.112302][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 762.133568][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 762.151673][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 762.153336][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 762.154147][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.306565][ T8603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.332993][ T8603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.370380][ T8603] bond0 (unregistering): Released all slaves [ 762.824905][ T8603] hsr_slave_0: left promiscuous mode [ 762.834410][ T8603] hsr_slave_1: left promiscuous mode [ 762.835720][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.851427][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.086698][ T5846] usb 5-1: string descriptor 0 read error: -71 [ 763.104496][ T5846] usb 5-1: USB disconnect, device number 3 [ 763.925305][ T8603] team0 (unregistering): Port device team_slave_1 removed [ 764.010361][T10846] 0x000000000000-0x000000010000 : "" [ 764.015253][T10846] ftl_cs: FTL header not found. [ 764.286521][ T9853] Bluetooth: hci2: command tx timeout [ 764.370910][ T8603] team0 (unregistering): Port device team_slave_0 removed [ 766.365936][ T9853] Bluetooth: hci2: command tx timeout [ 767.430062][T10908] Cannot find add_set index 2 as target [ 768.652312][ T52] Bluetooth: hci2: command tx timeout [ 768.755214][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.903769][ T9979] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.063825][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 769.074811][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.074928][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.135692][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.135903][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.221783][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.691254][ T52] Bluetooth: hci2: command tx timeout [ 771.454041][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.454249][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.454432][T10670] bridge_slave_0: entered allmulticast mode [ 771.485513][T10670] bridge_slave_0: entered promiscuous mode [ 771.519021][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.519158][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.519317][T10670] bridge_slave_1: entered allmulticast mode [ 771.522519][T10670] bridge_slave_1: entered promiscuous mode [ 772.113845][T10670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.664858][T10670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.082500][T10670] team0: Port device team_slave_0 added [ 773.188448][T10670] team0: Port device team_slave_1 added [ 773.522824][T11149] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 773.655119][ T95] bridge_slave_1: left allmulticast mode [ 773.655160][ T95] bridge_slave_1: left promiscuous mode [ 773.655407][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.685573][ T95] bridge_slave_0: left allmulticast mode [ 773.685607][ T95] bridge_slave_0: left promiscuous mode [ 773.699915][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.121337][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.140323][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.161445][ T95] bond0 (unregistering): Released all slaves [ 774.190848][T10670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.190877][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.190923][T10670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.385019][T10670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.385048][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.385096][T10670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.448971][ T95] hsr_slave_0: left promiscuous mode [ 774.449982][ T95] hsr_slave_1: left promiscuous mode [ 774.450961][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.451646][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.049430][ T95] team0 (unregistering): Port device team_slave_1 removed [ 776.527400][ T95] team0 (unregistering): Port device team_slave_0 removed [ 776.672768][ T9853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 776.674058][ T9853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 776.675094][ T9853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 776.695362][ T9853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 776.696598][ T9853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 777.194207][T10802] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.194417][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.194586][T10802] bridge_slave_0: entered allmulticast mode [ 777.198556][T10802] bridge_slave_0: entered promiscuous mode [ 777.215406][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.215527][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.215685][T10802] bridge_slave_1: entered allmulticast mode [ 777.222811][T10802] bridge_slave_1: entered promiscuous mode [ 777.369114][T10670] hsr_slave_0: entered promiscuous mode [ 777.370261][T10670] hsr_slave_1: entered promiscuous mode [ 777.374249][T10670] debugfs: 'hsr0' already exists in 'hsr' [ 777.374279][T10670] Cannot create hsr debugfs directory [ 777.505816][T10802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.693361][T10802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.664849][T10802] team0: Port device team_slave_0 added [ 778.688127][T10802] team0: Port device team_slave_1 added [ 778.756191][ T9853] Bluetooth: hci4: command tx timeout [ 778.961840][T10802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.961870][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.961917][T10802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.070465][T10802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.070493][T10802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.070540][T10802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.434489][ T9853] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 779.745625][T11351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.795252][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.105127][T10802] hsr_slave_0: entered promiscuous mode [ 780.108012][T10802] hsr_slave_1: entered promiscuous mode [ 780.108810][T10802] debugfs: 'hsr0' already exists in 'hsr' [ 780.108852][T10802] Cannot create hsr debugfs directory [ 780.836242][ T9853] Bluetooth: hci4: command tx timeout [ 781.542084][ T6082] bridge_slave_1: left allmulticast mode [ 781.542124][ T6082] bridge_slave_1: left promiscuous mode [ 781.542366][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.568227][ T6082] bridge_slave_0: left allmulticast mode [ 781.568266][ T6082] bridge_slave_0: left promiscuous mode [ 781.568875][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.663279][ T9853] Bluetooth: hci4: command tx timeout [ 785.705698][ T9853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.707830][ T9853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.709028][ T9853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.711177][ T9853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.711914][ T9853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.725902][ T52] Bluetooth: hci4: command tx timeout [ 785.971702][ T6082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.991624][ T6082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.996820][ T6082] bond0 (unregistering): Released all slaves [ 786.262318][ T6082] hsr_slave_0: left promiscuous mode [ 786.290951][ T6082] hsr_slave_1: left promiscuous mode [ 786.292058][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.295179][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.029256][ T6082] team0 (unregistering): Port device team_slave_1 removed [ 787.078102][ T6082] team0 (unregistering): Port device team_slave_0 removed [ 787.824173][ T9853] Bluetooth: hci5: command tx timeout [ 788.970218][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 789.292846][T11684] bond0: option arp_interval: invalid value ( ) [ 789.292887][T11684] bond0: option arp_interval: allowed values 0 - 2147483647 [ 789.633969][T10670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 789.660715][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.678249][T10670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 789.695508][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.783307][T10670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 789.799257][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.885962][ T9853] Bluetooth: hci5: command tx timeout [ 790.020596][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.022789][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.025498][T11218] bridge_slave_0: entered allmulticast mode [ 790.169603][T11218] bridge_slave_0: entered promiscuous mode [ 790.234034][T10670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 790.444092][T10670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.742092][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.742208][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.742397][T11218] bridge_slave_1: entered allmulticast mode [ 790.745033][T11218] bridge_slave_1: entered promiscuous mode [ 790.872958][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.919512][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.955976][ T9853] Bluetooth: hci5: command tx timeout [ 793.084559][T11218] team0: Port device team_slave_0 added [ 793.145669][T11218] team0: Port device team_slave_1 added [ 793.433834][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.433862][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.433922][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.623562][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.623591][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.623638][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.649108][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 794.034288][T11218] hsr_slave_0: entered promiscuous mode [ 794.036822][T11218] hsr_slave_1: entered promiscuous mode [ 794.037353][ T9853] Bluetooth: hci5: command tx timeout [ 794.037616][T11218] debugfs: 'hsr0' already exists in 'hsr' [ 794.037644][T11218] Cannot create hsr debugfs directory [ 794.896534][T11953] [ 794.898912][T11953] ====================================================== [ 794.905936][T11953] WARNING: possible circular locking dependency detected [ 794.912999][T11953] syzkaller #0 Tainted: G L [ 794.919001][T11953] ------------------------------------------------------ [ 794.926016][T11953] syz.4.686/11953 is trying to acquire lock: [ 794.931995][T11953] ffffffff90482600 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 794.940941][T11953] [ 794.940941][T11953] but task is already holding lock: [ 794.948324][T11953] ffff88807df66390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 794.957348][T11953] [ 794.957348][T11953] which lock already depends on the new lock. [ 794.957348][T11953] [ 794.967763][T11953] [ 794.967763][T11953] the existing dependency chain (in reverse order) is: [ 794.976783][T11953] [ 794.976783][T11953] -> #2 (&gi->lock){+.+.}-{4:4}: [ 794.983954][T11953] lock_acquire+0x1d1/0x380 [ 794.989276][T11953] __mutex_lock+0x1a4/0x1bd0 [ 794.994411][T11953] config_usb_cfg_link+0x57/0x3a0 [ 794.999989][T11953] configfs_symlink+0x695/0x1340 [ 795.005664][T11953] vfs_symlink+0x178/0x4d0 [ 795.010635][T11953] filename_symlinkat+0x2a6/0x560 [ 795.016351][T11953] __x64_sys_symlinkat+0x9c/0xe0 [ 795.022286][T11953] do_syscall_64+0x123/0x790 [ 795.027428][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.033874][T11953] [ 795.033874][T11953] -> #1 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 795.042613][T11953] lock_acquire+0x1d1/0x380 [ 795.047660][T11953] down_write+0x8b/0x1f0 [ 795.052471][T11953] configfs_depend_item_unlocked+0xf3/0x6a0 [ 795.059021][T11953] usbg_make_tpg+0x251/0x610 [ 795.064179][T11953] target_fabric_make_tpg+0xab/0x8c0 [ 795.069999][T11953] configfs_mkdir+0x525/0xd40 [ 795.075242][T11953] vfs_mkdir+0x364/0x850 [ 795.080032][T11953] filename_mkdirat+0x48b/0x5e0 [ 795.085415][T11953] __x64_sys_mkdirat+0x89/0xc0 [ 795.090720][T11953] do_syscall_64+0x123/0x790 [ 795.095885][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.102320][T11953] [ 795.102320][T11953] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 795.110470][T11953] check_prev_add+0xeb/0xe60 [ 795.115630][T11953] __lock_acquire+0x1528/0x1f40 [ 795.121014][T11953] lock_acquire+0x1d1/0x380 [ 795.126232][T11953] __mutex_lock+0x1a4/0x1bd0 [ 795.131480][T11953] tcm_alloc+0x20/0x440 [ 795.136231][T11953] usb_get_function+0x5e/0xd0 [ 795.141463][T11953] config_usb_cfg_link+0x1ed/0x3a0 [ 795.147486][T11953] configfs_symlink+0x695/0x1340 [ 795.152984][T11953] vfs_symlink+0x178/0x4d0 [ 795.157948][T11953] filename_symlinkat+0x2a6/0x560 [ 795.163525][T11953] __x64_sys_symlinkat+0x9c/0xe0 [ 795.169009][T11953] do_syscall_64+0x123/0x790 [ 795.174361][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.180807][T11953] [ 795.180807][T11953] other info that might help us debug this: [ 795.180807][T11953] [ 795.191136][T11953] Chain exists of: [ 795.191136][T11953] tpg_instances_lock --> &sb->s_type->i_mutex_key#25 --> &gi->lock [ 795.191136][T11953] [ 795.205101][T11953] Possible unsafe locking scenario: [ 795.205101][T11953] [ 795.212575][T11953] CPU0 CPU1 [ 795.217945][T11953] ---- ---- [ 795.223305][T11953] lock(&gi->lock); [ 795.227214][T11953] lock(&sb->s_type->i_mutex_key#25); [ 795.235243][T11953] lock(&gi->lock); [ 795.241667][T11953] lock(tpg_instances_lock); [ 795.246353][T11953] [ 795.246353][T11953] *** DEADLOCK *** [ 795.246353][T11953] [ 795.254602][T11953] locks held by syz.4.686/11953: 3, last CPU#0: [ 795.260847][T11953] #0: ffff88801dfda460 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 795.270588][T11953] #1: ffff888069419900 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 795.281549][T11953] #2: ffff88807df66390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 795.291078][T11953] [ 795.291078][T11953] stack backtrace: [ 795.296969][T11953] CPU: 0 UID: 0 PID: 11953 Comm: syz.4.686 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.307860][T11953] Tainted: [L]=SOFTLOCKUP [ 795.312180][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 795.322238][T11953] Call Trace: [ 795.325536][T11953] [ 795.328465][T11953] dump_stack_lvl+0x100/0x190 [ 795.333412][T11953] print_circular_bug.cold+0x178/0x1be [ 795.339131][T11953] check_noncircular+0x146/0x160 [ 795.344112][T11953] check_prev_add+0xeb/0xe60 [ 795.348743][T11953] __lock_acquire+0x1528/0x1f40 [ 795.353613][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.359281][T11953] lock_acquire+0x1d1/0x380 [ 795.363801][T11953] ? tcm_alloc+0x20/0x440 [ 795.368166][T11953] ? __pfx___might_resched+0x10/0x10 [ 795.373490][T11953] ? config_usb_cfg_link+0x57/0x3a0 [ 795.378704][T11953] __mutex_lock+0x1a4/0x1bd0 [ 795.383307][T11953] ? tcm_alloc+0x20/0x440 [ 795.387696][T11953] ? tcm_alloc+0x20/0x440 [ 795.392057][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.397707][T11953] ? __mutex_lock+0x26c/0x1bd0 [ 795.402489][T11953] ? config_usb_cfg_link+0x57/0x3a0 [ 795.407704][T11953] ? __pfx___mutex_lock+0x10/0x10 [ 795.412937][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.419036][T11953] ? __lock_acquire+0x5c0/0x1f40 [ 795.424136][T11953] ? tcm_alloc+0x20/0x440 [ 795.428525][T11953] tcm_alloc+0x20/0x440 [ 795.432751][T11953] usb_get_function+0x5e/0xd0 [ 795.437464][T11953] config_usb_cfg_link+0x1ed/0x3a0 [ 795.442764][T11953] ? mntput_no_expire+0xe7/0x220 [ 795.447852][T11953] configfs_symlink+0x695/0x1340 [ 795.452831][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.458483][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.464143][T11953] ? security_inode_permission+0xbf/0x250 [ 795.469895][T11953] ? __pfx_configfs_symlink+0x10/0x10 [ 795.475306][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.480964][T11953] vfs_symlink+0x178/0x4d0 [ 795.485404][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.491061][T11953] filename_symlinkat+0x2a6/0x560 [ 795.496104][T11953] ? __pfx_filename_symlinkat+0x10/0x10 [ 795.501665][T11953] ? strncpy_from_user+0x19d/0x2d0 [ 795.506801][T11953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 795.512473][T11953] ? do_getname+0x191/0x390 [ 795.517005][T11953] __x64_sys_symlinkat+0x9c/0xe0 [ 795.521963][T11953] do_syscall_64+0x123/0x790 [ 795.526600][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.532597][T11953] RIP: 0033:0x7f0f8699e159 [ 795.537047][T11953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.556714][T11953] RSP: 002b:00007f0f87797028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 795.565176][T11953] RAX: ffffffffffffffda RBX: 00007f0f86c25fa0 RCX: 00007f0f8699e159 [ 795.573161][T11953] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 795.581145][T11953] RBP: 00007f0f86a3506b R08: 0000000000000000 R09: 0000000000000000 [ 795.589121][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 795.597095][T11953] R13: 00007f0f86c26038 R14: 00007f0f86c25fa0 R15: 00007ffe949c3dd8 [ 795.605080][T11953] [ 795.673624][T10802] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 795.704770][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.707477][T10802] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 795.740244][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.839712][T10802] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 795.850373][T10802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.332099][ T13] bridge_slave_1: left allmulticast mode [ 796.332138][ T13] bridge_slave_1: left promiscuous mode [ 796.332308][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.375468][ T13] bridge_slave_0: left allmulticast mode [ 796.375502][ T13] bridge_slave_0: left promiscuous mode [ 796.375656][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.740413][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.742264][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.743563][ T13] bond0 (unregistering): Released all slaves [ 796.878308][ T13] hsr_slave_0: left promiscuous mode [ 796.878712][ T13] hsr_slave_1: left promiscuous mode [ 796.879200][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.879551][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.044851][ T13] team0 (unregistering): Port device team_slave_1 removed [ 797.065419][ T13] team0 (unregistering): Port device team_slave_0 removed [ 797.682483][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 797.911417][ T13] bridge_slave_1: left allmulticast mode [ 797.911458][ T13] bridge_slave_1: left promiscuous mode [ 797.911633][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.914315][ T13] bridge_slave_0: left allmulticast mode [ 797.914343][ T13] bridge_slave_0: left promiscuous mode [ 797.914518][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.931022][ T13] bridge_slave_1: left allmulticast mode [ 797.931055][ T13] bridge_slave_1: left promiscuous mode [ 797.931228][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.934238][ T13] bridge_slave_0: left allmulticast mode [ 797.934267][ T13] bridge_slave_0: left promiscuous mode [ 797.934417][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.034463][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.052322][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.072350][ T13] bond0 (unregistering): Released all slaves [ 798.109151][ T13] bond0 (unregistering): Released all slaves [ 798.172674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.174972][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.180421][ T13] bond0 (unregistering): Released all slaves [ 798.189441][ T5274] 8021q: adding VLAN 0 to HW filter on device eth22 [ 798.285310][ T13] hsr_slave_0: left promiscuous mode [ 798.292164][ T13] hsr_slave_1: left promiscuous mode [ 798.292800][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.293286][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.316595][ T13] hsr_slave_0: left promiscuous mode [ 798.317184][ T13] hsr_slave_1: left promiscuous mode [ 798.317824][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.318465][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.436569][ T13] team0 (unregistering): Port device team_slave_1 removed [ 798.442846][ T13] team0 (unregistering): Port device team_slave_0 removed [ 798.651696][ T13] team0 (unregistering): Port device team_slave_1 removed [ 798.674001][ T13] team0 (unregistering): Port device team_slave_0 removed [ 798.738137][ T5274] 8021q: adding VLAN 0 to HW filter on device eth23 [ 799.121485][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 799.140733][ T13] bridge_slave_1: left allmulticast mode [ 799.140768][ T13] bridge_slave_1: left promiscuous mode [ 799.140940][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.142361][ T13] bridge_slave_0: left allmulticast mode [ 799.142389][ T13] bridge_slave_0: left promiscuous mode [ 799.142554][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.202462][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.204351][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.205744][ T13] bond0 (unregistering): Released all slaves [ 799.283485][ T13] hsr_slave_0: left promiscuous mode [ 799.284053][ T13] hsr_slave_1: left promiscuous mode [ 799.284647][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.285171][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.395740][ T13] team0 (unregistering): Port device team_slave_1 removed [ 799.405149][ T13] team0 (unregistering): Port device team_slave_0 removed [ 800.526878][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 800.877905][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 801.240382][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 801.596193][ T5274] 8021q: adding VLAN 0 to HW filter on device eth24