last executing test programs: 33m20.83162662s ago: executing program 32 (id=157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 31m9.030238509s ago: executing program 33 (id=503): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 29m27.974834088s ago: executing program 34 (id=751): socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020480) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) r6 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000001, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 29m2.810667456s ago: executing program 35 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 21m57.981086672s ago: executing program 36 (id=1782): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet(0x2, 0x3, 0x6) 21m50.09895279s ago: executing program 37 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003d00010324bd7002fadbdf25010000f0cc671ff60121b784f7b15bba64397818038c2636cf8ba04e7ed5ac7f5326b3eeedf4fd8d5adaf525f5f67c60b9fd4f4d45688a4eb00791ca612064666e1c28f8a8566f53984fb152597de233c6c17112e20e92dfdd69b8aafc12b48e40de9c47d06a34"], 0x14}}, 0x8000) 21m48.595015669s ago: executing program 38 (id=1793): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) readv(r0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18m17.57449001s ago: executing program 3 (id=2214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000f80)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000800)=""/188, 0xbc}], 0x1}, 0xcd5}], 0x2, 0x22eb, 0x0) 18m14.736997339s ago: executing program 3 (id=2218): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) pwrite64(r2, &(0x7f0000001ac0)="e3f2", 0x2, 0x3fff) fcntl$addseals(r2, 0x409, 0x6) r3 = memfd_create(&(0x7f0000000140)='/dev/nullb0\x00', 0x1) r4 = memfd_create(&(0x7f0000000180)='\x00', 0x1) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000340)={0x1, 0x6, [{r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x100000000, 0x2000}, {r3, 0x0, 0x10000, 0x1000}, {r3, 0x0, 0xfffffffff0000000, 0x100000000}, {r4, 0x0, 0x8000, 0x1000000000000}, {r4, 0x0, 0x1000000000000, 0x4000}]}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x3e) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x83, 0xfc, 0xd74}, {0x1ff, 0x6, 0x80, 0x8}]}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r7, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) close(r5) r8 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 18m11.963264052s ago: executing program 3 (id=2223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9998500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_fail_link\x00', r0, 0x0, 0x1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c981, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m9.813845893s ago: executing program 3 (id=2228): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="e6e0", 0x2}, {0x0}], 0x2}}], 0x1, 0x800) 18m6.433244124s ago: executing program 3 (id=2232): socket$inet(0xa, 0x6, 0x212) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xffffffffffffffda, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xffffffffffffff7d, 0x80000000000, 0x9011, 0x400000000000, 0x4000000000006, 0x4, 0xfffffffd, 0x1, 0x4000, 0x8000, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2, 0x80005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000f07000/0xe000)=nil, 0xe000, 0x1000000, 0x110, r7, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 18m3.842175223s ago: executing program 3 (id=2235): pipe2(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) 17m47.742598953s ago: executing program 39 (id=2235): pipe2(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) 12m28.220787009s ago: executing program 0 (id=2931): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000080000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 12m24.223593263s ago: executing program 0 (id=2938): syz_open_dev$vcsa(&(0x7f0000000000), 0x8b, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x200, 0x129432e6, 0xc8, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x4, 0x7, 0x5, 0x2f, 0x6, 0x312, 0x76, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0xe3ae, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x2, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xa, 0x9, 0x48c93690, 0x2, 0xff], [0x1007, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x1, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x80, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 12m22.521028838s ago: executing program 0 (id=2941): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800fe7f1000030400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000800000200012800f000100626f6e645f736c61766500000c000580060005000a00000008002c0007000000"], 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x100) sendto$inet6(r1, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) shutdown(r1, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x0, 0x1, 0x9}, 0x5, 0x80000001, 0x0, 0xffff6684, 0x0, 0x8}}) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x1262a, 0x10100, 0x0, 0x173}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x0, 0x3938700}, 0x0) 12m19.820162843s ago: executing program 0 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 12m18.541840586s ago: executing program 0 (id=2951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x28, 0xfd8, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 12m17.910907251s ago: executing program 0 (id=2953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002007000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r6, 0x25, 0x4, @val=@tcx}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r9, 0x4, r5}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 12m2.135220779s ago: executing program 40 (id=2953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002007000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r6, 0x25, 0x4, @val=@tcx}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r9, 0x4, r5}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 11m8.661543622s ago: executing program 8 (id=3071): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, 0x0, 0x0, 0x24008094) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000280)) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r3, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11m8.288601371s ago: executing program 8 (id=3073): syz_open_dev$sg(0x0, 0xffffffff, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4800003e, r2, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') dup2(r3, r2) 11m6.62160365s ago: executing program 8 (id=3076): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='YtV', 0x3}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 11m5.115512315s ago: executing program 8 (id=3078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) 11m4.041777785s ago: executing program 8 (id=3079): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x0, 0x39, 0x0, 0x1, 0x9}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x8, r1}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='tick_stop\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x100, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_io_uring_setup(0x100032bc, &(0x7f00000003c0)={0x0, 0x389c, 0x1, 0x0, 0x44}, 0x0, &(0x7f0000000040)) sendfile(r4, r4, 0x0, 0x2000fb) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r5, 0x0) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0xfffffffffffffff9) 11m0.024730602s ago: executing program 6 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m58.70086011s ago: executing program 6 (id=3086): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x1000) r4 = timerfd_create(0x7, 0x80000) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000240)) futex(&(0x7f000000cffc)=0xfffffffd, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) 10m58.559776078s ago: executing program 8 (id=3087): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d8000000200081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ptrace$setregs(0xd, r4, 0x8, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2a, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18fd08fd6b600a00000000000000ffff4b870920ffff54495c53efa781ac9a84e09c2479ffe885100000f8ffff956025c95ddfa65ced550000ffdf0000eb00"], 0x0, 0x10000, 0x0, &(0x7f0000000240), 0x40f00, 0x40, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x9, 0x3}, 0x10, r8, r1, 0x1, &(0x7f0000000440)=[r1, r1, r1, r1, r1], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x8}], 0x10, 0xfffffbff}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r12, {0x1}}, './file1\x00'}) 10m57.188752931s ago: executing program 6 (id=3090): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000240)='net/netfilter\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10m55.629273561s ago: executing program 6 (id=3092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 10m55.494035195s ago: executing program 7 (id=2261): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) remap_file_pages(&(0x7f0000933000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x2) 10m54.949534507s ago: executing program 6 (id=3094): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000001080), 0x0, 0x4018094) 10m54.236918307s ago: executing program 6 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 10m49.464572003s ago: executing program 7 (id=3103): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) 10m47.977253395s ago: executing program 7 (id=3106): prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) 10m47.349219332s ago: executing program 7 (id=3109): io_setup(0x239f, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioperm(0x0, 0x9, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0xfffffffffffffe5c, 0xfffffffffffffff9) r3 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x688142, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) 10m45.819591171s ago: executing program 7 (id=3110): truncate(0x0, 0x96f) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d150", 0xb2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 10m44.17993662s ago: executing program 7 (id=3113): syz_clone(0xc0024500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x20048100) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) flock(0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 10m43.353451698s ago: executing program 41 (id=3087): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d8000000200081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ptrace$setregs(0xd, r4, 0x8, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2a, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18fd08fd6b600a00000000000000ffff4b870920ffff54495c53efa781ac9a84e09c2479ffe885100000f8ffff956025c95ddfa65ced550000ffdf0000eb00"], 0x0, 0x10000, 0x0, &(0x7f0000000240), 0x40f00, 0x40, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x9, 0x3}, 0x10, r8, r1, 0x1, &(0x7f0000000440)=[r1, r1, r1, r1, r1], &(0x7f0000000480)=[{0x1, 0x2, 0xc, 0x8}], 0x10, 0xfffffbff}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r12, {0x1}}, './file1\x00'}) 10m28.826665143s ago: executing program 42 (id=3113): syz_clone(0xc0024500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x20048100) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) flock(0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 6m45.356942748s ago: executing program 4 (id=3515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x1001, 0xf}]) fsync(r2) 6m43.122134637s ago: executing program 4 (id=3518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000100000a283800000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000fc370380f83700800800034000000003e037"], 0x3850}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m42.488809957s ago: executing program 4 (id=3524): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0xc}]}}, 0x0, 0x26}, 0x28) 6m42.074674454s ago: executing program 4 (id=3526): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x99a26000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 6m39.027453235s ago: executing program 4 (id=3529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioprio_set$pid(0x2, r1, 0x4007) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0xffd6}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@union={0x8, 0x7, 0x0, 0x5, 0x0, 0x100, [{0x3, 0x3, 0x2c}, {0xa, 0x0, 0x4}, {0x2, 0x2, 0x7}, {0xa, 0x5, 0x7}, {0xe, 0x5, 0x6}, {0x0, 0x3, 0x8000}, {0x3, 0x2, 0x80000000}]}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x7f, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000340)={0x0, @frame_sync}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 6m28.895309829s ago: executing program 4 (id=3543): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a178002c68646ae1806883e6312b9fc5e88185d3c3f06efecfeaac090e85f6fa25f896683ae1c0a0e287435b39b00dddef75e6f292bc3ab16adca2a833b1100000000000000000000000000f1feec81f027f57709e4d19cbda3d665e2e974e47e37dec7a536fcd638e5901b3cb999968cfc12399f2d098412d63fa6fca15e9f2a5e5af794344ed3d17354879264093aa7e987be0abaa39681052aa2b8df7ed2bc150d3a141ae3", 0xd7, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x4000000) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4004890, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="32050000004ff500"], 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 6m12.842801567s ago: executing program 43 (id=3543): quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a178002c68646ae1806883e6312b9fc5e88185d3c3f06efecfeaac090e85f6fa25f896683ae1c0a0e287435b39b00dddef75e6f292bc3ab16adca2a833b1100000000000000000000000000f1feec81f027f57709e4d19cbda3d665e2e974e47e37dec7a536fcd638e5901b3cb999968cfc12399f2d098412d63fa6fca15e9f2a5e5af794344ed3d17354879264093aa7e987be0abaa39681052aa2b8df7ed2bc150d3a141ae3", 0xd7, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x4000000) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4004890, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="32050000004ff500"], 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 5m55.572194319s ago: executing program 1 (id=3627): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 5m53.921507363s ago: executing program 1 (id=3629): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 5m53.693755614s ago: executing program 1 (id=3630): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) 5m52.433498645s ago: executing program 1 (id=3632): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) 5m51.410889156s ago: executing program 1 (id=3634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000100000a283800000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000fc370380f83700800800034000000003e037"], 0x3850}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m50.947266796s ago: executing program 1 (id=3637): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x44040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 5m35.218287795s ago: executing program 44 (id=3637): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x44040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 2m1.925067574s ago: executing program 9 (id=4047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 2m1.785225186s ago: executing program 9 (id=4048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0x24, 0x4, &(0x7f00000002c0)={0x3, "bac783f1b4b81a2c3feb05826d2a5ef5e6c6bfc92b387c5b9e89c9b4adb44366be"}}) 1m59.965647678s ago: executing program 9 (id=4049): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="5890bd117843f67488d527ea978c3e3baed9c41768b516a387575b9ef12e6a83d64325d580b7859155eba7ef87c00a9d9f47dabe1810b1fd88b5ac98361a8fc20fde0458cad1d1254ba8d62670f15f803ccda359faf366559d66ed6678185a9ffb47ea7165c72cf5df04b410cb36757f04e8f222cbc7defa959357a4fc688d41359a68d0ca67d99fc029e70da9b8c14845498deede1673cdff4d87bb56730856cd52407f", 0xa4}, {&(0x7f00000002c0)="350a0d6ae3613ce7f7521c1eecb36d1481a2f655f5536506c4d602da1471a202aac1a7e62f8bf694d9331beb48ffd1f0dcb2bb480d134f04cbec7830fc75c4a881475c73831ee371c4dded713921fd52a98e8defc149f5f19c99a8cf1b168a29bd50356951b71e6c341f7b35d69c162a08224ffaecf4357aabed262ccc22961f7be77d32c3aebb3ec4e0a5fa544d85503f14565da22d8ccb8ef6ba1f21599422500f28bd7684", 0xa6}, {&(0x7f0000000200)="da0c5dd2b4af14f9744f34", 0xb}, {&(0x7f0000000380)="5fac76c8dec7670ef65e9851292a48da49f4", 0x12}, {&(0x7f0000000880)="ece57d58e2b3b39c5d417976b5f8fb879e1ef30e0456b2a8f849b3b56b806a1d7bef93cfa058be8d1286fb000000001ef478cfd895347b8cf8cfe760ae0000dd00c895f050d2dbb590fd3e6b13b280fab08bbbf0efd4dc5bd4ac8a06b7c3e84cc1b91a492ee5fe5de9032afe1eee5fa7c9b5bdfdbab614491a937314f18b25eaad4843e50261a598bb9852fbb1ef5ebe11aab2008c209eef495c", 0x9a}], 0x6}}], 0x4, 0x4004) 1m59.679060333s ago: executing program 9 (id=4050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0xfff0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x1001, 0xf}]) fsync(r2) 1m59.242787259s ago: executing program 9 (id=4051): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, r5, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) write$qrtrtun(r1, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000003b40)=0x4000000) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x12) 1m56.742879621s ago: executing program 9 (id=4054): r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d06, &(0x7f0000000080)=0x52) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0xc}, &(0x7f00000003c0)=""/61, 0x3d, &(0x7f0000000400)=""/149, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) syz_io_uring_setup(0x496, &(0x7f0000000580)={0x0, 0x100036f, 0x1000, 0x0, 0x600035c}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)=0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0xc00, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 1m40.774718854s ago: executing program 45 (id=4054): r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d06, &(0x7f0000000080)=0x52) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone3(&(0x7f0000000500)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0xc}, &(0x7f00000003c0)=""/61, 0x3d, &(0x7f0000000400)=""/149, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) syz_io_uring_setup(0x496, &(0x7f0000000580)={0x0, 0x100036f, 0x1000, 0x0, 0x600035c}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)=0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={0x0, 0xc00, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="379521000000000003e77200000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 8.864778812s ago: executing program 2 (id=4174): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0xa081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) 8.224824581s ago: executing program 2 (id=4175): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r4) sendmmsg$unix(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000100)="e6b191a7777056212d1b9d77aa4cbc1ea34364d81854b41392c81ee9a1c665d67b7132", 0x23}, {&(0x7f0000000180)="87bb9b793701f8671ac31ebe33816b2a3847b2c985c3c2b5a63180471f051f5ca607b62cda818385e24348dc0452df52df235dd8eddeee4aaa90008279301cf25bd76f56725184e72dd501453efda71390383ee5411cd21cd253bcf817c888245b446400c5d72d4fe733299032c54e022b56ddfea492c107eff0630333a7640620b7baf88e592511a612bc53830bbb9a5ba73cc446e7a6b13082692b9dc2ff9b035c5824113c31df2bb9a840e6a777950427c3a95f7458ee659394a05ee116c1ab2960c9b0c9077e4ac1ff80d8791883c2ea", 0xd2}], 0x2}}], 0x1, 0x20000000) 5.23020442s ago: executing program 5 (id=4178): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) utime(&(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 4.983774796s ago: executing program 2 (id=4179): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000500)=""/101, 0x65}], 0x1, 0x1, 0xfd4c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x4, 0x20, 0xfffffffffffffffc, 0x8}, &(0x7f0000000100)=0x18) getpid() socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0xef4, &(0x7f00000003c0)={0x0, 0x26c3, 0x1, 0x3, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, 0x0, 0xb) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x52ec3) 4.714205142s ago: executing program 5 (id=4180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0xd1302af0c2963958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f"], 0x60}}, 0x0) 3.470737113s ago: executing program 5 (id=4181): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 752.202981ms ago: executing program 2 (id=4182): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) 347.479062ms ago: executing program 5 (id=4183): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0xa081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) 261.910029ms ago: executing program 2 (id=4184): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x101, 0x2, 0x10000, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0xfffffffb, 0x800800, 0xa237, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x0, 0x5ca3, 0xb, 0x3, 0x3c, 0x1a9ae57e, 0x6, 0xefcb, 0x8]}) 118.500709ms ago: executing program 5 (id=4185): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="8c90e5385d03343d9d1c9234385100392512b9ff69c01e9f720046d7bb95", 0x1e}, {&(0x7f00000000c0)="5890bd117843f67488d527ea978c3e3baed9c41768b516a387575b9ef12e6a83d64325d580b7859155eba7ef87c00a9d9f47dabe1810b1fd88b5ac98361a8fc20fde0458cad1d1254ba8d62670f15f803ccda359faf366559d66ed6678185a9ffb47ea7165c72cf5df04b410cb36757f04e8f222cbc7defa959357a4fc688d41359a68d0ca67d99fc029e70da9b8c14845498deede1673cdff4d87bb56730856cd52407f", 0xa4}, {&(0x7f00000002c0)="350a0d6ae3613ce7f7521c1eecb36d1481a2f655f5536506c4d602da1471a202aac1a7e62f8bf694d9331beb48ffd1f0dcb2bb480d134f04cbec7830fc75c4a881475c73831ee371c4dded713921fd52a98e8defc149f5f19c99a8cf1b168a29bd50356951b71e6c341f7b35d69c162a08224ffaecf4357aabed262ccc22961f7be77d32c3aebb3ec4e0a5fa544d85503f14565da22d8ccb8ef6ba1f21599422500f28bd7684", 0xa6}, {&(0x7f0000000200)="da0c5dd2b4af14f9744f34", 0xb}, {&(0x7f0000000380)="5fac76c8dec7670ef65e9851292a48da49f4", 0x12}, {&(0x7f0000000880)="ece57d58e2b3b39c5d417976b5f8fb879e1ef30e0456b2a8f849b3b56b806a1d7bef93cfa058be8d1286fb000000001ef478cfd895347b8cf8cfe760ae0000dd00c895f050d2dbb590fd3e6b13b280fab08bbbf0efd4dc5bd4ac8a06b7c3e84cc1b91a492ee5fe5de9032afe1eee5fa7c9b5bdfdbab614491a937314f18b25eaad4843e50261a598bb9852fbb1ef5ebe11aab2008c209eef495c", 0x9a}], 0x6}}], 0x4, 0x4004) 96.323679ms ago: executing program 2 (id=4186): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x5a5042, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 5 (id=4187): openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) kernel console output (not intermixed with test programs): 792.165180][ T3474] hsr_slave_1: left promiscuous mode [ 1792.191675][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1792.226219][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1792.527922][ T3474] veth1_macvtap: left promiscuous mode [ 1792.535341][ T3474] veth0_macvtap: left promiscuous mode [ 1792.541853][ T3474] veth1_vlan: left promiscuous mode [ 1793.603593][ T3474] veth0_vlan: left promiscuous mode [ 1794.833686][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3548'. [ 1796.923505][T19785] binder: 19784:19785 ioctl c0306201 0 returned -14 [ 1797.164552][T19788] 9pnet_virtio: no channels available for device syz [ 1801.241080][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.247898][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.317547][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3562'. [ 1801.413838][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1802.014198][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1802.348068][ T31] audit: type=1326 audit(1766584192.400:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1802.546501][ T31] audit: type=1326 audit(1766584192.430:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1802.722742][ T31] audit: type=1326 audit(1766584192.440:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1802.801766][ T31] audit: type=1326 audit(1766584192.440:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1802.909486][ T31] audit: type=1326 audit(1766584192.440:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1802.981607][ T31] audit: type=1326 audit(1766584192.450:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1804.247824][ T31] audit: type=1326 audit(1766584192.450:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1804.274613][ T31] audit: type=1326 audit(1766584192.450:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19823 comm="syz.9.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0138f749 code=0x7ffc0000 [ 1808.012767][T19871] binder_alloc: 19869: binder_alloc_buf, no vma [ 1808.845553][ T7026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1808.931934][ T7026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1808.941270][ T7026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1808.952600][ T7026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1808.961888][ T7026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1809.223381][T19581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.734172][T19581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.068158][ T7026] Bluetooth: hci1: command tx timeout [ 1811.607046][T19581] team0: Port device team_slave_0 added [ 1811.625871][T19890] overlayfs: missing 'lowerdir' [ 1811.647007][T19581] team0: Port device team_slave_1 added [ 1812.052638][T19875] vxcan1 speed is unknown, defaulting to 1000 [ 1812.067881][T19581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.099331][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.246469][T19581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.632787][T19581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.666054][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1812.774233][T19581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.828835][ T5952] IPVS: starting estimator thread 0... [ 1812.931304][T19909] IPVS: using max 19 ests per chain, 45600 per kthread [ 1813.181607][ T7026] Bluetooth: hci1: command tx timeout [ 1815.231169][ T7026] Bluetooth: hci1: command tx timeout [ 1815.789747][T19581] hsr_slave_0: entered promiscuous mode [ 1815.823158][T19581] hsr_slave_1: entered promiscuous mode [ 1817.331167][ T7026] Bluetooth: hci1: command tx timeout [ 1817.745922][ T3474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.650750][ T5952] IPVS: starting estimator thread 0... [ 1819.662214][ T3474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.751157][T19956] IPVS: using max 21 ests per chain, 50400 per kthread [ 1821.054095][ T3474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.894801][ T3474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.503731][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3621'. [ 1824.066871][T19875] chnl_net:caif_netlink_parms(): no params data found [ 1825.380063][ T3474] bridge_slave_1: left allmulticast mode [ 1825.391500][ T3474] bridge_slave_1: left promiscuous mode [ 1825.398985][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.479757][ T3474] bridge_slave_0: left allmulticast mode [ 1825.499657][ T3474] bridge_slave_0: left promiscuous mode [ 1825.527391][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.156076][T20003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1826.163093][T20003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1826.230283][T20003] vhci_hcd vhci_hcd.0: Device attached [ 1826.659729][T20004] vhci_hcd: connection closed [ 1826.660106][ T8749] vhci_hcd vhci_hcd.2: stop threads [ 1826.674776][ T8749] vhci_hcd vhci_hcd.2: release socket [ 1826.682564][ T5967] usb 38-1: SetAddress Request (2) to port 0 [ 1826.695023][ T8749] vhci_hcd vhci_hcd.2: disconnect device [ 1826.711446][ T5967] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1826.755284][ T5967] usb 38-1: enqueue for inactive port 0 [ 1826.995544][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.042159][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.069431][ T3474] bond0 (unregistering): Released all slaves [ 1827.173044][ T5967] usb usb38-port1: attempt power cycle [ 1829.222946][ T5967] usb usb38-port1: unable to enumerate USB device [ 1829.427304][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3634'. [ 1829.520261][T19875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.624678][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.677720][T19875] bridge_slave_0: entered allmulticast mode [ 1829.693872][T19875] bridge_slave_0: entered promiscuous mode [ 1829.709304][T19875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.717611][T19875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.758774][T19875] bridge_slave_1: entered allmulticast mode [ 1829.790350][T19875] bridge_slave_1: entered promiscuous mode [ 1830.577207][T19875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.735387][T19875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.172636][T20034] vxcan1 speed is unknown, defaulting to 1000 [ 1831.513191][T19875] team0: Port device team_slave_0 added [ 1831.590213][T19581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1831.682981][T19581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1831.784282][T19875] team0: Port device team_slave_1 added [ 1832.156271][T19581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1832.533885][T19875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.570913][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.681254][T19875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.725881][T19875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.781232][T19875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.881227][T20055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3644'. [ 1832.900831][T19875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.146543][T20042] vxcan1 speed is unknown, defaulting to 1000 [ 1833.418289][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1833.434134][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1833.446667][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1833.456424][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1833.465560][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1834.034864][T19875] hsr_slave_0: entered promiscuous mode [ 1834.048099][T19875] hsr_slave_1: entered promiscuous mode [ 1834.056585][T19875] debugfs: 'hsr0' already exists in 'hsr' [ 1834.062810][T19875] Cannot create hsr debugfs directory [ 1834.085315][ T3474] hsr_slave_0: left promiscuous mode [ 1834.096228][ T3474] hsr_slave_1: left promiscuous mode [ 1834.103888][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1834.116842][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1834.126370][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1834.135059][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1834.198831][ T3474] veth1_macvtap: left promiscuous mode [ 1834.204710][ T3474] veth0_macvtap: left promiscuous mode [ 1834.210598][ T3474] veth1_vlan: left promiscuous mode [ 1834.216806][ T3474] veth0_vlan: left promiscuous mode [ 1835.701052][ T7026] Bluetooth: hci2: command tx timeout [ 1836.594549][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1836.652997][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1837.725153][ T7026] Bluetooth: hci2: command tx timeout [ 1838.236259][T20056] vxcan1 speed is unknown, defaulting to 1000 [ 1838.254394][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1839.822122][ T7026] Bluetooth: hci2: command tx timeout [ 1841.872231][ T7026] Bluetooth: hci2: command tx timeout [ 1842.480505][T20122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1843.984681][T16996] IPVS: starting estimator thread 0... [ 1844.101218][T20137] IPVS: using max 20 ests per chain, 48000 per kthread [ 1844.186078][T20056] chnl_net:caif_netlink_parms(): no params data found [ 1844.271131][ T7026] Bluetooth: hci3: command 0x0406 tx timeout [ 1845.173262][T20143] Process accounting resumed [ 1846.223129][ T7026] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1846.243365][ T7026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1846.260507][ T3474] bridge_slave_1: left allmulticast mode [ 1846.260542][ T7026] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1846.271034][ T3474] bridge_slave_1: left promiscuous mode [ 1846.292274][ T7026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1846.315868][ T7026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1846.409084][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.996197][ T3474] bridge_slave_0: left allmulticast mode [ 1847.043151][ T3474] bridge_slave_0: left promiscuous mode [ 1847.049460][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.748642][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1847.778934][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1847.797097][ T3474] bond0 (unregistering): Released all slaves [ 1847.865780][T19875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1848.122537][T19875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1848.185612][T19875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1848.431292][ T5832] Bluetooth: hci5: command tx timeout [ 1848.465498][T19875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1848.504351][T20056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.542399][T20056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.574054][T20056] bridge_slave_0: entered allmulticast mode [ 1848.600062][T20056] bridge_slave_0: entered promiscuous mode [ 1848.664952][T20056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.680320][T20056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.718366][T20056] bridge_slave_1: entered allmulticast mode [ 1848.727194][T20056] bridge_slave_1: entered promiscuous mode [ 1848.791794][ T3474] hsr_slave_0: left promiscuous mode [ 1848.798510][ T3474] hsr_slave_1: left promiscuous mode [ 1848.806954][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.820320][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.121126][ T5832] Bluetooth: hci5: command tx timeout [ 1852.242628][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1852.590874][T20185] Process accounting resumed [ 1852.793100][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1854.553347][ T5832] Bluetooth: hci5: command tx timeout [ 1856.592755][ T5832] Bluetooth: hci5: command tx timeout [ 1856.631920][T20056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.090908][T20153] vxcan1 speed is unknown, defaulting to 1000 [ 1857.102106][T20056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.674879][T20056] team0: Port device team_slave_0 added [ 1857.722198][T20056] team0: Port device team_slave_1 added [ 1857.964617][T20056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.988909][T20056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.066555][T20056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1858.174098][T20056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1858.203864][T20056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1858.311110][T20056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1859.795395][T17183] Bluetooth: hci4: command 0x0406 tx timeout [ 1861.028992][T20056] hsr_slave_0: entered promiscuous mode [ 1861.045899][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1861.058069][T20056] hsr_slave_1: entered promiscuous mode [ 1862.212114][T20227] Process accounting resumed [ 1862.293247][T19875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.701781][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.708769][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.750392][T20153] chnl_net:caif_netlink_parms(): no params data found [ 1863.328325][T19875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.125441][T20261] input: syz1 as /devices/virtual/input/input12 [ 1867.156068][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.163456][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.200483][ T3474] bridge_slave_1: left allmulticast mode [ 1867.219436][ T3474] bridge_slave_1: left promiscuous mode [ 1867.230756][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.292677][ T3474] bridge_slave_0: left allmulticast mode [ 1867.311515][ T3474] bridge_slave_0: left promiscuous mode [ 1867.331375][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.032432][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.055785][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.207724][ T3474] bond0 (unregistering): Released all slaves [ 1869.274816][T20153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.297667][T20153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.309970][T20153] bridge_slave_0: entered allmulticast mode [ 1869.310805][T17183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1869.328055][T20153] bridge_slave_0: entered promiscuous mode [ 1869.339381][T17183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1869.341635][T20153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.361657][T17183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1869.374930][T17183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1869.384132][T17183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1869.455599][T20153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.497779][T20153] bridge_slave_1: entered allmulticast mode [ 1869.525076][T20153] bridge_slave_1: entered promiscuous mode [ 1869.915457][T20153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.055462][T20153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.348136][T20153] team0: Port device team_slave_0 added [ 1870.602913][T20153] team0: Port device team_slave_1 added [ 1871.458236][T20280] Process accounting resumed [ 1871.478619][ T5832] Bluetooth: hci6: command tx timeout [ 1871.495084][T20276] vxcan1 speed is unknown, defaulting to 1000 [ 1871.513592][T20153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.592749][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.671415][T20153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.726586][T20153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.751097][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.859524][T20153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.106321][T20153] hsr_slave_0: entered promiscuous mode [ 1872.127340][T20153] hsr_slave_1: entered promiscuous mode [ 1872.142909][T20153] debugfs: 'hsr0' already exists in 'hsr' [ 1872.149132][T20153] Cannot create hsr debugfs directory [ 1872.168173][T20056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1872.204441][T20056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1872.342664][T20056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1872.503946][T20056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1873.211882][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557d6800: rx timeout, send abort [ 1873.720402][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557d6800: abort rx timeout. Force session deactivation [ 1873.748720][ T5832] Bluetooth: hci6: command tx timeout [ 1875.140963][ T3474] hsr_slave_0: left promiscuous mode [ 1875.162502][ T3474] hsr_slave_1: left promiscuous mode [ 1875.176746][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.205655][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.588837][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1875.791555][ T5832] Bluetooth: hci6: command tx timeout [ 1877.881412][ T5832] Bluetooth: hci6: command tx timeout [ 1878.197724][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1878.434208][T20328] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1878.491195][T20328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1878.691878][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1882.732373][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3733'. [ 1882.998416][ T1132] smc: removing ib device syz0 [ 1884.217625][T20358] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1884.235948][T20358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1887.428838][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1889.303275][T20394] overlayfs: missing 'lowerdir' [ 1891.209969][ T3474] IPVS: stop unused estimator thread 0... [ 1891.356539][T20276] chnl_net:caif_netlink_parms(): no params data found [ 1891.803920][T20423] overlayfs: missing 'lowerdir' [ 1892.285062][T20056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.310000][T20276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.327624][T20276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.337070][T20276] bridge_slave_0: entered allmulticast mode [ 1892.348161][T20276] bridge_slave_0: entered promiscuous mode [ 1892.386334][T20276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.395266][T20276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.403805][T20276] bridge_slave_1: entered allmulticast mode [ 1892.415211][T20276] bridge_slave_1: entered promiscuous mode [ 1892.555878][T20153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1892.608757][T20153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1892.969996][T20153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1893.777075][T20276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.937241][T20153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1894.015870][T20276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1894.269934][T17183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1894.284577][T17183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1894.297322][T17183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1894.322140][T17183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1894.335455][T17183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1894.466958][T20276] team0: Port device team_slave_0 added [ 1894.555829][T20276] team0: Port device team_slave_1 added [ 1894.774792][T20276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1894.806224][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.888706][T20276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.937754][T20276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.959335][T20276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.077270][T20276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1897.375022][T17183] Bluetooth: hci1: command tx timeout [ 1897.801161][ T3474] bridge_slave_1: left allmulticast mode [ 1897.807045][ T3474] bridge_slave_1: left promiscuous mode [ 1897.852176][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.975097][ T3474] bridge_slave_0: left allmulticast mode [ 1897.981469][ T3474] bridge_slave_0: left promiscuous mode [ 1898.020330][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.921801][T20465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1899.394309][T17183] Bluetooth: hci1: command tx timeout [ 1899.540613][T20472] overlayfs: missing 'lowerdir' [ 1900.801841][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1900.865304][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1900.902360][ T3474] bond0 (unregistering): Released all slaves [ 1901.055571][T20276] hsr_slave_0: entered promiscuous mode [ 1901.094467][T20276] hsr_slave_1: entered promiscuous mode [ 1901.111995][T20276] debugfs: 'hsr0' already exists in 'hsr' [ 1901.117764][T20276] Cannot create hsr debugfs directory [ 1901.450334][T20485] Process accounting resumed [ 1901.491122][T17183] Bluetooth: hci1: command tx timeout [ 1901.635181][ T3474] hsr_slave_0: left promiscuous mode [ 1901.675863][ T3474] hsr_slave_1: left promiscuous mode [ 1901.685745][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1901.733798][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1905.174937][T17183] Bluetooth: hci1: command tx timeout [ 1905.773404][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1905.889941][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1906.092920][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1906.105648][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1906.133417][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1906.144739][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1906.147466][T20524] overlayfs: missing 'workdir' [ 1906.158677][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1908.234920][ T5832] Bluetooth: hci2: command tx timeout [ 1908.438372][T20552] Process accounting resumed [ 1910.281286][ T5832] Bluetooth: hci2: command tx timeout [ 1911.230554][T20444] chnl_net:caif_netlink_parms(): no params data found [ 1911.526070][T20575] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3788'. [ 1913.505268][ T5832] Bluetooth: hci2: command tx timeout [ 1914.012432][T20584] overlayfs: missing 'workdir' [ 1914.504102][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1914.923636][T20600] fuse: Unknown parameter 'grou00000000000000000000' [ 1915.359561][T20444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.398903][T20444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.435658][T20444] bridge_slave_0: entered allmulticast mode [ 1915.477034][T20444] bridge_slave_0: entered promiscuous mode [ 1915.499198][T20521] chnl_net:caif_netlink_parms(): no params data found [ 1915.551252][ T5832] Bluetooth: hci2: command tx timeout [ 1915.566630][T20444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.579253][T20444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.652429][T20444] bridge_slave_1: entered allmulticast mode [ 1915.682205][T20444] bridge_slave_1: entered promiscuous mode [ 1916.425394][T20444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.624369][T20444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.419158][T20444] team0: Port device team_slave_0 added [ 1919.696911][T20444] team0: Port device team_slave_1 added [ 1919.711315][T20521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.731893][T20521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.759791][T20521] bridge_slave_0: entered allmulticast mode [ 1919.800575][T20521] bridge_slave_0: entered promiscuous mode [ 1919.950574][T20521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.981191][T20521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.990032][T20521] bridge_slave_1: entered allmulticast mode [ 1920.051305][T20521] bridge_slave_1: entered promiscuous mode [ 1920.422441][T20276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1920.475995][T20444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.501337][T20444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.601403][T20444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.727744][T20276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1920.769282][T20276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1920.812399][T20444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.847130][T20444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.896600][T20654] overlayfs: missing 'workdir' [ 1920.931094][T20444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.987962][T20521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.024355][T20276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1921.406090][T20521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.601255][ T5927] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1921.637324][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3805'. [ 1921.718960][T20673] fuse: Unknown parameter 'grou00000000000000000000' [ 1921.791169][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 1921.816470][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.852634][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.889928][ T5927] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1921.939430][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.996153][ T5927] usb 3-1: config 0 descriptor?? [ 1922.127186][T20521] team0: Port device team_slave_0 added [ 1922.324169][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 1922.360071][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1922.422994][ T5927] usb 3-1: USB disconnect, device number 5 [ 1922.557392][T20444] hsr_slave_0: entered promiscuous mode [ 1922.576928][T20444] hsr_slave_1: entered promiscuous mode [ 1922.584210][T20444] debugfs: 'hsr0' already exists in 'hsr' [ 1922.590601][T20444] Cannot create hsr debugfs directory [ 1922.612215][T20521] team0: Port device team_slave_1 added [ 1925.071916][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.084456][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.255411][T20521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.270075][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.302236][T20521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.328813][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3812'. [ 1925.400337][T20521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.411553][T20521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1925.445461][T20521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.633148][ T5967] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1925.828114][ T5967] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1925.935791][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.393061][ T5967] usb 3-1: Product: syz [ 1926.397384][ T5967] usb 3-1: Manufacturer: syz [ 1926.428463][ T5967] usb 3-1: SerialNumber: syz [ 1926.507048][ T5967] usb 3-1: config 0 descriptor?? [ 1926.935472][T20715] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1927.977255][ T5967] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1928.349405][ T5967] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1928.552735][T20521] hsr_slave_0: entered promiscuous mode [ 1928.560553][T20521] hsr_slave_1: entered promiscuous mode [ 1928.613870][T20521] debugfs: 'hsr0' already exists in 'hsr' [ 1928.652658][T20521] Cannot create hsr debugfs directory [ 1928.773876][ T5896] usb 3-1: USB disconnect, device number 6 [ 1929.112553][T20726] fuse: Unknown parameter 'group_i00000000000000000000' [ 1930.404234][ T3474] bridge_slave_1: left allmulticast mode [ 1930.442791][ T3474] bridge_slave_1: left promiscuous mode [ 1930.471422][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.571892][ T3474] bridge_slave_0: left allmulticast mode [ 1930.578638][ T3474] bridge_slave_0: left promiscuous mode [ 1930.597497][T17183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1930.628802][T17183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1930.642630][T17183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1930.656483][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.672359][T17183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1930.695490][T17183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1930.708660][ T3474] bridge_slave_1: left allmulticast mode [ 1930.716267][ T3474] bridge_slave_1: left promiscuous mode [ 1930.723441][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.799793][ T3474] bridge_slave_0: left allmulticast mode [ 1930.811176][ T3474] bridge_slave_0: left promiscuous mode [ 1930.817020][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1933.661375][T17183] Bluetooth: hci5: command tx timeout [ 1933.941089][T16999] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1934.561170][T16999] usb 6-1: Using ep0 maxpacket: 16 [ 1934.592296][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1934.658432][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.732516][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1934.750448][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1934.807069][T16999] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1934.843035][T16999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.894022][ T3474] bond0 (unregistering): Released all slaves [ 1934.943598][T16999] usb 6-1: config 0 descriptor?? [ 1934.973332][T16999] usb 6-1: can't set config #0, error -71 [ 1935.017912][T16999] usb 6-1: USB disconnect, device number 14 [ 1935.261420][ T5967] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1935.274818][T20759] fuse: Unknown parameter 'group_i00000000000000000000' [ 1935.472069][ T5967] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1935.518104][ T5967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.553842][ T5967] usb 10-1: Product: syz [ 1935.559560][ T5967] usb 10-1: Manufacturer: syz [ 1935.608789][ T5967] usb 10-1: SerialNumber: syz [ 1935.703064][ T5967] usb 10-1: config 0 descriptor?? [ 1935.731063][T17183] Bluetooth: hci5: command tx timeout [ 1935.840680][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1935.857609][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1935.887328][ T3474] bond0 (unregistering): Released all slaves [ 1936.447245][T20771] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1936.904697][ T5967] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -110 [ 1937.045741][ T5967] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1937.792307][T17183] Bluetooth: hci5: command tx timeout [ 1938.022330][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1938.559768][ T3474] hsr_slave_0: left promiscuous mode [ 1938.612872][T16999] usb 10-1: USB disconnect, device number 5 [ 1938.640866][ T3474] hsr_slave_1: left promiscuous mode [ 1938.675453][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.703156][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1938.731339][ T3474] hsr_slave_0: left promiscuous mode [ 1938.751332][ T3474] hsr_slave_1: left promiscuous mode [ 1938.757721][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.982118][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1939.621395][ T6411] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1939.881346][ T6411] usb 10-1: Using ep0 maxpacket: 16 [ 1939.898847][ T6411] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.898921][T17183] Bluetooth: hci5: command tx timeout [ 1939.935815][ T6411] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.001700][ T6411] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1940.042960][ T6411] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.116129][ T6411] usb 10-1: config 0 descriptor?? [ 1940.339899][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1940.446570][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1940.550677][ T6411] usbhid 10-1:0.0: can't add hid device: -71 [ 1940.558669][ T6411] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1940.603976][ T6411] usb 10-1: USB disconnect, device number 6 [ 1942.944594][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3844'. [ 1943.111279][ T5896] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1943.291587][ T5896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1943.459092][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.505766][ T5896] usb 3-1: Product: syz [ 1943.524570][ T5896] usb 3-1: Manufacturer: syz [ 1943.530508][ T5896] usb 3-1: SerialNumber: syz [ 1943.567184][ T5896] usb 3-1: config 0 descriptor?? [ 1943.728355][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1943.884688][T20813] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1944.315574][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1944.673545][ T5896] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1944.824713][ T5896] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1946.020450][ T5896] usb 3-1: USB disconnect, device number 7 [ 1951.468704][T20734] chnl_net:caif_netlink_parms(): no params data found [ 1952.041102][T14823] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1952.465286][T14823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1952.529452][T14823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.600805][T14823] usb 3-1: Product: syz [ 1952.656873][T14823] usb 3-1: Manufacturer: syz [ 1952.712712][T14823] usb 3-1: SerialNumber: syz [ 1952.777024][T20734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.797259][T20734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.818558][T20860] overlayfs: missing 'lowerdir' [ 1952.826905][T20734] bridge_slave_0: entered allmulticast mode [ 1952.844297][T20734] bridge_slave_0: entered promiscuous mode [ 1952.863050][T14823] usb 3-1: config 0 descriptor?? [ 1952.890423][T20444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1953.007435][T20734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.040147][T20734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.296657][T20734] bridge_slave_1: entered allmulticast mode [ 1953.317117][T20734] bridge_slave_1: entered promiscuous mode [ 1953.910896][T20877] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1954.403480][T14823] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1954.564090][T14823] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1954.640123][T20444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1956.693550][ T5967] usb 3-1: USB disconnect, device number 8 [ 1956.979815][T20734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.114846][T20734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1957.210017][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1957.241146][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1957.251962][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1957.272222][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1957.284932][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1959.373355][ T5832] Bluetooth: hci6: command tx timeout [ 1961.378618][T20734] team0: Port device team_slave_0 added [ 1961.471248][ T5832] Bluetooth: hci6: command tx timeout [ 1961.525172][T20734] team0: Port device team_slave_1 added [ 1961.608509][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'. [ 1963.551098][ T5832] Bluetooth: hci6: command tx timeout [ 1963.664096][T20923] fuse: Unknown parameter 'group_id00000000000000000000' [ 1963.693161][T20734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1963.700705][T20734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1963.786086][T20734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1964.022920][T16999] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1964.145349][T20734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1964.161061][T20734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1964.225189][T20734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1964.239908][T16999] usb 6-1: Using ep0 maxpacket: 16 [ 1964.271286][T16554] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1964.323681][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1964.361244][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1964.401160][T16999] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1964.443104][T16999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.461269][T16999] usb 6-1: config 0 descriptor?? [ 1964.522011][T16554] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1964.532559][T16554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.543450][T16554] usb 3-1: Product: syz [ 1964.550599][T16554] usb 3-1: Manufacturer: syz [ 1964.563804][T16554] usb 3-1: SerialNumber: syz [ 1964.582017][T16554] usb 3-1: config 0 descriptor?? [ 1964.700308][T16999] usbhid 6-1:0.0: can't add hid device: -71 [ 1964.726015][T16999] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1964.764687][T16999] usb 6-1: USB disconnect, device number 15 [ 1964.951632][T20935] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1965.631187][ T5832] Bluetooth: hci6: command tx timeout [ 1965.643809][T16554] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 1965.839447][T16554] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1967.214843][T20734] hsr_slave_0: entered promiscuous mode [ 1967.232956][T20734] hsr_slave_1: entered promiscuous mode [ 1967.308425][T16554] usb 3-1: USB disconnect, device number 9 [ 1967.393103][T17183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1967.418911][T17183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1967.432063][T17183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1967.441584][T17183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1967.450160][T17183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1969.498875][T17183] Bluetooth: hci1: command tx timeout [ 1971.551600][T17183] Bluetooth: hci1: command tx timeout [ 1973.631101][T17183] Bluetooth: hci1: command tx timeout [ 1974.821381][T20145] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1975.051191][T20145] usb 3-1: Using ep0 maxpacket: 16 [ 1975.063585][T20145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.092230][T20994] fuse: Bad value for 'user_id' [ 1975.117812][T20145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.131085][T20994] fuse: Bad value for 'user_id' [ 1975.170113][T20145] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1975.241593][T20145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.257045][ T3474] bridge_slave_1: left allmulticast mode [ 1975.271100][ T3474] bridge_slave_1: left promiscuous mode [ 1975.277231][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.296963][T20145] usb 3-1: config 0 descriptor?? [ 1975.385788][ T3474] bridge_slave_0: left allmulticast mode [ 1975.394415][ T3474] bridge_slave_0: left promiscuous mode [ 1975.411488][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.970627][T17183] Bluetooth: hci1: command tx timeout [ 1976.378732][T20145] usbhid 3-1:0.0: can't add hid device: -71 [ 1976.385602][T20145] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1976.398619][T20145] usb 3-1: USB disconnect, device number 10 [ 1977.414066][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1979.876433][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1980.183851][ T3474] bond0 (unregistering): Released all slaves [ 1981.472295][T20885] chnl_net:caif_netlink_parms(): no params data found [ 1982.291217][ T3474] hsr_slave_0: left promiscuous mode [ 1982.321285][ T3474] hsr_slave_1: left promiscuous mode [ 1982.332883][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.392363][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.727103][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 1984.791991][T20631] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1984.846940][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 1984.986179][T20631] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1985.023159][T20631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.035632][T20631] usb 6-1: Product: syz [ 1985.040140][T20631] usb 6-1: Manufacturer: syz [ 1985.063596][T20631] usb 6-1: SerialNumber: syz [ 1985.077140][T20631] usb 6-1: config 0 descriptor?? [ 1985.395009][T21072] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1985.557166][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1985.572213][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.508523][T20631] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1986.901087][T20942] chnl_net:caif_netlink_parms(): no params data found [ 1987.481298][T20631] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1987.652374][T20631] usb 6-1: USB disconnect, device number 16 [ 1991.287000][T20885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.424406][T20885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1991.789136][T20885] bridge_slave_0: entered allmulticast mode [ 1991.851539][T20885] bridge_slave_0: entered promiscuous mode [ 1992.042858][T20885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.050900][T20885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.059506][T20885] bridge_slave_1: entered allmulticast mode [ 1992.072219][T20885] bridge_slave_1: entered promiscuous mode [ 1992.226931][T17183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1992.243407][T17183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1992.277998][T17183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1992.298329][T17183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1992.306722][T17183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1993.666591][T20885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1993.704527][T20885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.010339][T20942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.021634][T20942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.049390][T20942] bridge_slave_0: entered allmulticast mode [ 1994.101639][T20942] bridge_slave_0: entered promiscuous mode [ 1994.136340][T20885] team0: Port device team_slave_0 added [ 1994.164677][T20885] team0: Port device team_slave_1 added [ 1994.351473][T17183] Bluetooth: hci2: command tx timeout [ 1994.432336][T20942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.440204][T20942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.485920][T20942] bridge_slave_1: entered allmulticast mode [ 1994.529931][T20942] bridge_slave_1: entered promiscuous mode [ 1994.597608][T20885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1994.637879][T20885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1994.751702][T20885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.166758][T20885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.199077][T20885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1995.281306][T20885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1995.382475][T20942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1995.445049][T16999] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1995.476405][T20942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1995.650055][T16999] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1995.693887][T16999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.729218][T16999] usb 3-1: Product: syz [ 1995.747257][T16999] usb 3-1: Manufacturer: syz [ 1995.767734][T16999] usb 3-1: SerialNumber: syz [ 1995.791899][T16999] usb 3-1: config 0 descriptor?? [ 1995.875487][T20942] team0: Port device team_slave_0 added [ 1996.037129][T21128] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1996.075736][T20942] team0: Port device team_slave_1 added [ 1996.098021][T20885] hsr_slave_0: entered promiscuous mode [ 1996.135178][T16999] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1996.145384][T20885] hsr_slave_1: entered promiscuous mode [ 1996.182608][T20885] debugfs: 'hsr0' already exists in 'hsr' [ 1996.190044][T20885] Cannot create hsr debugfs directory [ 1996.196488][T16999] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1996.234378][T16999] usb 3-1: USB disconnect, device number 11 [ 1996.431301][T20942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.439301][T20942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.474317][T17183] Bluetooth: hci2: command tx timeout [ 1996.511824][T20942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.580506][T20942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.590604][T20942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.626036][T20942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1997.200592][T20942] hsr_slave_0: entered promiscuous mode [ 1997.227919][T20942] hsr_slave_1: entered promiscuous mode [ 1997.245419][T20942] debugfs: 'hsr0' already exists in 'hsr' [ 1997.253308][T20942] Cannot create hsr debugfs directory [ 1997.367230][T21110] chnl_net:caif_netlink_parms(): no params data found [ 1999.213509][T17183] Bluetooth: hci2: command tx timeout [ 1999.503564][T21172] input: syz1 as /devices/virtual/input/input13 [ 1999.877613][T21110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.913333][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.951140][T21110] bridge_slave_0: entered allmulticast mode [ 1999.985560][T21110] bridge_slave_0: entered promiscuous mode [ 2000.015229][T21110] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.054615][T21110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.086722][T21110] bridge_slave_1: entered allmulticast mode [ 2000.097771][T21110] bridge_slave_1: entered promiscuous mode [ 2000.331361][T16999] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2000.504148][T21110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.513797][T16999] usb 6-1: Using ep0 maxpacket: 16 [ 2000.539902][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.572238][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.607510][T16999] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2000.641265][T16999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.680620][T16999] usb 6-1: config 0 descriptor?? [ 2000.908216][T21110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2000.966012][T16999] usbhid 6-1:0.0: can't add hid device: -71 [ 2001.022487][T16999] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2001.034973][ T3474] bridge_slave_1: left allmulticast mode [ 2001.064378][ T3474] bridge_slave_1: left promiscuous mode [ 2001.070779][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.081505][T16999] usb 6-1: USB disconnect, device number 17 [ 2001.133884][ T3474] bridge_slave_0: left allmulticast mode [ 2001.140223][ T3474] bridge_slave_0: left promiscuous mode [ 2001.231192][T17183] Bluetooth: hci2: command tx timeout [ 2001.321094][T17042] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2001.361391][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.376498][ T3474] bridge_slave_1: left allmulticast mode [ 2001.387211][ T3474] bridge_slave_1: left promiscuous mode [ 2001.414678][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.428559][ T3474] bridge_slave_0: left allmulticast mode [ 2001.434737][ T3474] bridge_slave_0: left promiscuous mode [ 2001.440710][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.454896][ T3474] bridge_slave_1: left allmulticast mode [ 2001.460831][ T3474] bridge_slave_1: left promiscuous mode [ 2001.469469][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.494415][T17042] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2001.504535][ T3474] bridge_slave_0: left allmulticast mode [ 2001.510506][ T3474] bridge_slave_0: left promiscuous mode [ 2001.523092][T17042] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.538281][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.547717][T17042] usb 3-1: Product: syz [ 2001.558436][T17042] usb 3-1: Manufacturer: syz [ 2001.565748][T17042] usb 3-1: SerialNumber: syz [ 2001.577311][T17042] usb 3-1: config 0 descriptor?? [ 2001.990079][T21182] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2002.064442][T17042] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 2002.101196][T17042] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2002.128161][T17042] usb 3-1: USB disconnect, device number 12 [ 2002.196570][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2002.219588][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.251550][ T3474] bond0 (unregistering): Released all slaves [ 2002.264304][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3932'. [ 2002.621393][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2002.678934][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.711227][ T3474] bond0 (unregistering): Released all slaves [ 2003.326846][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2003.444787][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2003.925468][T21184] Process accounting resumed [ 2003.998065][ T3474] bond0 (unregistering): Released all slaves [ 2004.532916][ T3474] hsr_slave_0: left promiscuous mode [ 2004.580218][ T3474] hsr_slave_1: left promiscuous mode [ 2004.625832][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.692689][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.777382][ T3474] hsr_slave_0: left promiscuous mode [ 2004.820241][ T3474] hsr_slave_1: left promiscuous mode [ 2004.852133][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.885158][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.193311][ T3474] hsr_slave_0: left promiscuous mode [ 2006.279428][ T3474] hsr_slave_1: left promiscuous mode [ 2006.306991][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.332481][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.378999][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 2007.513791][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 2008.653082][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 2008.692162][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 2009.392547][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 2009.468690][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 2010.809033][T21110] team0: Port device team_slave_0 added [ 2010.825417][T21110] team0: Port device team_slave_1 added [ 2011.046918][T21110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.060180][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.106550][T21110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.340151][T21110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.390318][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2012.929309][T21110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2013.226210][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3957'. [ 2013.293711][T21110] hsr_slave_0: entered promiscuous mode [ 2013.332018][T21110] hsr_slave_1: entered promiscuous mode [ 2015.287799][T20885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2015.332688][T20885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2015.371836][T20885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2015.406188][T20885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2015.702490][T20942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2017.461267][T20942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2017.485477][T20942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2017.530786][T20942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2017.790249][T21307] syz.5.3968 (21307) used greatest stack depth: 17928 bytes left [ 2017.907984][T21110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2017.948032][T21110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2017.990885][T21110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2018.041631][T21110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2018.218120][T20942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2018.453039][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3971'. [ 2018.476224][T20942] 8021q: adding VLAN 0 to HW filter on device team0 [ 2018.601075][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 2018.608471][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2018.834528][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2018.850197][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2018.864431][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2018.873774][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2018.884298][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2019.679410][T21340] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2019.686227][T21340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2019.702582][T21340] vhci_hcd vhci_hcd.0: Device attached [ 2019.823603][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 2019.831079][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2019.927962][T21341] vhci_hcd: connection closed [ 2019.930725][ T72] vhci_hcd vhci_hcd.5: stop threads [ 2019.941280][T14823] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2019.971952][ T72] vhci_hcd vhci_hcd.5: release socket [ 2019.979728][ T72] vhci_hcd vhci_hcd.5: disconnect device [ 2019.989933][T21110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2020.032624][T14823] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 2020.040337][T14823] usb 43-1: enqueue for inactive port 0 [ 2020.123278][T14823] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2020.310160][T21110] 8021q: adding VLAN 0 to HW filter on device team0 [ 2020.601920][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 2020.609917][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2020.991578][ T5832] Bluetooth: hci5: command tx timeout [ 2021.695908][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 2021.703651][T11706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2022.033043][T18520] bridge_slave_1: left allmulticast mode [ 2022.038819][T18520] bridge_slave_1: left promiscuous mode [ 2022.069065][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.083007][T18520] bridge_slave_0: left allmulticast mode [ 2022.088844][T18520] bridge_slave_0: left promiscuous mode [ 2022.109052][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.362972][T18520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2022.378299][T18520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2022.393160][T18520] bond0 (unregistering): Released all slaves [ 2022.453569][T21363] syzkaller0: entered promiscuous mode [ 2022.491174][T21363] syzkaller0: entered allmulticast mode [ 2022.594733][T18520] hsr_slave_0: left promiscuous mode [ 2022.603637][T18520] hsr_slave_1: left promiscuous mode [ 2022.615499][T18520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2022.627106][T18520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2023.067101][T18520] team0 (unregistering): Port device team_slave_1 removed [ 2023.082567][ T5832] Bluetooth: hci5: command tx timeout [ 2023.236344][T18520] team0 (unregistering): Port device team_slave_0 removed [ 2024.691485][T21378] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3984'. [ 2024.919863][T20942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2025.024285][T21333] chnl_net:caif_netlink_parms(): no params data found [ 2025.152167][ T5832] Bluetooth: hci5: command tx timeout [ 2026.683705][T21333] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.706999][T21333] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.716223][T21333] bridge_slave_0: entered allmulticast mode [ 2026.728724][T21333] bridge_slave_0: entered promiscuous mode [ 2026.763113][T21333] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.831371][T21333] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.901228][T21333] bridge_slave_1: entered allmulticast mode [ 2026.933046][T21333] bridge_slave_1: entered promiscuous mode [ 2027.231879][ T5832] Bluetooth: hci5: command tx timeout [ 2028.247703][T21333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.305545][T21333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.489096][T21333] team0: Port device team_slave_0 added [ 2028.513045][T21416] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2028.519695][T21416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2028.571467][T21416] vhci_hcd vhci_hcd.0: Device attached [ 2028.593039][T21333] team0: Port device team_slave_1 added [ 2028.703326][T17183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2028.733244][T21110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2028.740947][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3996'. [ 2028.741823][T17183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2028.768816][T17183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2028.789006][T17183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2028.798470][ T6126] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2028.813315][T17183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2028.831149][T21417] vhci_hcd: connection closed [ 2028.839091][ T37] vhci_hcd vhci_hcd.5: stop threads [ 2028.883158][ T37] vhci_hcd vhci_hcd.5: release socket [ 2028.920325][ T37] vhci_hcd vhci_hcd.5: disconnect device [ 2028.929768][T21427] openvswitch: netlink: Duplicate key (type 21). [ 2028.936911][ T6126] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 2029.005360][ T6126] usb 43-1: enqueue for inactive port 0 [ 2029.106370][ T6126] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2029.220248][T21333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2029.274869][T21333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2029.554247][T21333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2029.771799][T21333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.790143][T21333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2029.851200][T21333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.959214][T21429] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3998'. [ 2030.205329][T21333] hsr_slave_0: entered promiscuous mode [ 2030.214055][T21333] hsr_slave_1: entered promiscuous mode [ 2030.235115][T21333] debugfs: 'hsr0' already exists in 'hsr' [ 2030.240921][T21333] Cannot create hsr debugfs directory [ 2030.911157][ T5832] Bluetooth: hci6: command tx timeout [ 2031.033004][T21437] fuse: Bad value for 'rootmode' [ 2031.282213][T21442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4003'. [ 2031.595076][T21445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2031.683316][T21445] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2031.707334][T21446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2031.729741][T21446] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2031.836378][T21446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2031.998407][T21446] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2032.120524][T21445] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2032.211383][T21445] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2032.240490][T21446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2032.354145][T21110] veth0_vlan: entered promiscuous mode [ 2032.379978][T21446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2032.497074][T21446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2032.757203][T21446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2032.763558][T21446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2032.775207][T21446] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2032.861219][T21445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2032.963943][T21446] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2033.005640][T21445] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2033.055152][ T2992] bridge_slave_1: left allmulticast mode [ 2033.068419][ T2992] bridge_slave_1: left promiscuous mode [ 2033.084811][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.106760][T21446] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2033.157277][T21445] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2033.188160][T21445] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2033.243569][ T2992] bridge_slave_0: left allmulticast mode [ 2033.250203][ T2992] bridge_slave_0: left promiscuous mode [ 2033.266400][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.276455][T21446] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 2033.403429][T21445] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2033.470559][T21445] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2035.366684][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2035.416385][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2035.450020][ T2992] bond0 (unregistering): Released all slaves [ 2035.476529][T21463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4010'. [ 2035.522707][T21110] veth1_vlan: entered promiscuous mode [ 2035.657815][ T2992] hsr_slave_0: left promiscuous mode [ 2035.739207][ T2992] hsr_slave_1: left promiscuous mode [ 2035.748321][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2035.757579][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2035.811131][T21464] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2035.818536][T21464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2035.851312][T21464] vhci_hcd vhci_hcd.0: Device attached [ 2036.030333][T21465] vhci_hcd: connection closed [ 2036.030622][ T6079] vhci_hcd vhci_hcd.9: stop threads [ 2036.043889][ T5967] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2036.055285][ T6079] vhci_hcd vhci_hcd.9: release socket [ 2036.063602][ T6079] vhci_hcd vhci_hcd.9: disconnect device [ 2036.112419][ T5967] usb 51-1: new full-speed USB device number 4 using vhci_hcd [ 2036.120954][ T5967] usb 51-1: enqueue for inactive port 0 [ 2036.172284][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 2036.203108][ T5967] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2036.232561][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 2037.232450][T21470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4011'. [ 2038.439810][T21421] chnl_net:caif_netlink_parms(): no params data found [ 2040.514449][T21110] veth0_macvtap: entered promiscuous mode [ 2040.526179][T21333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2040.566205][T21421] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.602999][T21421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.617855][T21421] bridge_slave_0: entered allmulticast mode [ 2040.645782][T21421] bridge_slave_0: entered promiscuous mode [ 2040.695891][T21333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2040.851095][T20631] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2040.895052][T21333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2040.921484][T21421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.941698][T21421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.955888][T21421] bridge_slave_1: entered allmulticast mode [ 2040.986669][T21421] bridge_slave_1: entered promiscuous mode [ 2041.023680][T20631] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2041.045778][T20631] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2041.081243][T20631] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2041.083153][T21333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2041.131100][T20631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.224165][T21498] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2041.273655][T21110] veth1_macvtap: entered promiscuous mode [ 2041.293404][T20631] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2041.387623][T21421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.482611][T21421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.648778][T20631] usb 6-1: USB disconnect, device number 18 [ 2041.898522][T21421] team0: Port device team_slave_0 added [ 2041.990966][T21421] team0: Port device team_slave_1 added [ 2042.377336][T21421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.411510][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.505864][T21421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2043.865766][T21421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2043.905101][T21518] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2043.912142][T21518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2043.958995][T21518] vhci_hcd vhci_hcd.0: Device attached [ 2043.971180][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2044.072614][T21520] vhci_hcd: connection closed [ 2044.091151][T19839] vhci_hcd vhci_hcd.5: stop threads [ 2044.112105][T21421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.151146][T16554] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2044.170041][T19839] vhci_hcd vhci_hcd.5: release socket [ 2044.222784][T19839] vhci_hcd vhci_hcd.5: disconnect device [ 2044.227915][T16554] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 2044.285307][T16554] usb 43-1: enqueue for inactive port 0 [ 2044.287550][T21110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2044.411404][T16554] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2044.657132][T21110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2045.865058][ T2992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.403368][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.410104][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2049.963499][T21421] hsr_slave_0: entered promiscuous mode [ 2049.992712][T21421] hsr_slave_1: entered promiscuous mode [ 2050.017551][T21421] debugfs: 'hsr0' already exists in 'hsr' [ 2050.032941][T21421] Cannot create hsr debugfs directory [ 2050.040081][ T2992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.329275][ T2992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.376757][ T2992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.458057][T21333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2051.588866][T17183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2051.601963][T17183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2051.633926][T17183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2051.644905][T17183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2051.662256][T17183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2051.708147][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2051.717263][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2051.731527][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2051.740013][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2051.749038][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2052.196042][T21333] 8021q: adding VLAN 0 to HW filter on device team0 [ 2052.682073][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.691344][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2052.948484][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.324744][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.334758][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.547241][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.796175][T17183] Bluetooth: hci1: command tx timeout [ 2054.063340][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.252015][T21573] bridge_slave_0: left allmulticast mode [ 2054.259654][T21573] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.902310][T17183] Bluetooth: hci1: command tx timeout [ 2056.253755][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2057.951115][T17183] Bluetooth: hci1: command tx timeout [ 2057.960419][T21609] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4044'. [ 2058.079530][ T13] bridge_slave_1: left allmulticast mode [ 2058.106353][ T13] bridge_slave_1: left promiscuous mode [ 2058.253007][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.308753][ T13] bridge_slave_0: left allmulticast mode [ 2058.327795][ T13] bridge_slave_0: left promiscuous mode [ 2058.354472][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.181109][T20631] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2059.341152][T20631] usb 10-1: Using ep0 maxpacket: 8 [ 2059.343330][T20631] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2059.343394][T20631] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2059.343442][T20631] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.396840][T20631] usb 10-1: config 0 descriptor?? [ 2059.907398][T20631] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 2060.041583][T17183] Bluetooth: hci1: command tx timeout [ 2060.243570][T20631] usb 10-1: USB disconnect, device number 7 [ 2061.152609][T21625] fuse: Unknown parameter 'user_i00000000000000000000' [ 2063.319111][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2063.461683][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2063.514226][ T13] bond0 (unregistering): Released all slaves [ 2063.666426][T21556] chnl_net:caif_netlink_parms(): no params data found [ 2063.842574][T21636] syzkaller0: entered promiscuous mode [ 2063.848804][T21636] syzkaller0: entered allmulticast mode [ 2063.946784][T21421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2064.629356][T21657] 9pnet_virtio: no channels available for device syz [ 2067.651941][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4058'. [ 2071.373955][T21421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2071.485972][T21421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2071.772563][ T13] hsr_slave_0: left promiscuous mode [ 2071.800019][ T13] hsr_slave_1: left promiscuous mode [ 2071.833386][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2071.863542][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.865999][T21676] fuse: Unknown parameter 'user_i00000000000000000000' [ 2071.885108][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2071.904499][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2072.250827][ T13] veth1_macvtap: left promiscuous mode [ 2072.301215][ T13] veth0_macvtap: left promiscuous mode [ 2072.307341][ T13] veth1_vlan: left promiscuous mode [ 2072.351299][ T13] veth0_vlan: left promiscuous mode [ 2074.045567][ T13] team0 (unregistering): Port device team_slave_1 removed [ 2074.134006][ T13] team0 (unregistering): Port device team_slave_0 removed [ 2075.046331][T20145] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2075.193654][T20145] usb 3-1: device descriptor read/64, error -71 [ 2075.233302][T21421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2075.658959][T21556] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.683663][T21556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.714763][T21556] bridge_slave_0: entered allmulticast mode [ 2075.733831][T21556] bridge_slave_0: entered promiscuous mode [ 2075.784938][T21333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2075.822710][T21556] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.868800][T21556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.951518][T21556] bridge_slave_1: entered allmulticast mode [ 2076.560333][T21714] comedi comedi0: Minor 47 could not be opened [ 2077.251752][T21556] bridge_slave_1: entered promiscuous mode [ 2078.982017][T21556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2079.022124][T21556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2079.155824][T21556] team0: Port device team_slave_0 added [ 2079.192554][T21556] team0: Port device team_slave_1 added [ 2079.345647][T21556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2079.361076][T21556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2079.406375][T21556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2079.431779][T21556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2079.452793][T21556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2079.493807][T21556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.739887][T21556] hsr_slave_0: entered promiscuous mode [ 2079.803264][T21556] hsr_slave_1: entered promiscuous mode [ 2082.659687][T21421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2082.817236][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2082.834199][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2082.847315][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2082.856548][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2082.865499][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2083.514860][T21421] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.562557][T21730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2083.578021][T21730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2083.589330][T21730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2083.600712][T21730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2083.612550][T21730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2084.564195][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.572696][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.911557][ T7026] Bluetooth: hci2: command tx timeout [ 2084.966877][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.975737][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.988330][T21748] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 2085.021195][T21748] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4073'. [ 2085.146713][T21748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4073'. [ 2085.711385][ T7026] Bluetooth: hci5: command tx timeout [ 2086.413852][T21421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2086.482784][T21421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2086.991588][ T7026] Bluetooth: hci2: command tx timeout [ 2087.093376][T21756] input: syz1 as /devices/virtual/input/input14 [ 2088.001613][ T7026] Bluetooth: hci5: command tx timeout [ 2088.382170][ T1132] bridge_slave_1: left allmulticast mode [ 2088.388238][ T1132] bridge_slave_1: left promiscuous mode [ 2088.454779][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.576027][ T1132] bridge_slave_0: left allmulticast mode [ 2088.612522][ T1132] bridge_slave_0: left promiscuous mode [ 2088.619038][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.071144][ T7026] Bluetooth: hci2: command tx timeout [ 2089.226999][T21770] sd 0:0:1:0: device reset [ 2089.822132][T21730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2089.834972][T21730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2089.845206][T21730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2089.854040][T21730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2089.863107][T21730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2090.044152][ T5832] Bluetooth: hci5: command tx timeout [ 2091.152472][T21730] Bluetooth: hci2: command tx timeout [ 2092.061164][T21730] Bluetooth: hci0: command tx timeout [ 2092.111275][T21730] Bluetooth: hci5: command tx timeout [ 2092.830670][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2092.856942][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2092.876743][ T1132] bond0 (unregistering): Released all slaves [ 2093.232736][T21728] chnl_net:caif_netlink_parms(): no params data found [ 2093.362342][ T1132] hsr_slave_0: left promiscuous mode [ 2093.393564][ T1132] hsr_slave_1: left promiscuous mode [ 2093.412847][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2093.438023][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2094.191584][T21730] Bluetooth: hci0: command tx timeout [ 2096.286193][T21730] Bluetooth: hci0: command tx timeout [ 2096.574014][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2096.742101][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2098.351130][T21730] Bluetooth: hci0: command tx timeout [ 2098.409264][T21799] bridge1: entered allmulticast mode [ 2098.432888][T21802] ªªªªª»: renamed from hsr0 (while UP) [ 2098.723305][T21738] chnl_net:caif_netlink_parms(): no params data found [ 2099.250279][T21556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2100.386112][T21556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2100.577107][T21556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2100.665510][T21728] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.699654][T21728] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.711778][T21728] bridge_slave_0: entered allmulticast mode [ 2100.743599][T21728] bridge_slave_0: entered promiscuous mode [ 2101.013853][T21556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2101.129337][T21728] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.154617][T21728] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.172806][T21819] fuse: root generation should be zero [ 2101.179590][T21728] bridge_slave_1: entered allmulticast mode [ 2101.199714][T21728] bridge_slave_1: entered promiscuous mode [ 2101.776609][T21738] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.802285][T21738] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.871864][T21738] bridge_slave_0: entered allmulticast mode [ 2101.901509][T21738] bridge_slave_0: entered promiscuous mode [ 2102.154160][T21738] bridge0: port 2(bridge_slave_1) entered blocking state [ 2102.178815][T21738] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.203285][T21738] bridge_slave_1: entered allmulticast mode [ 2102.233813][T21738] bridge_slave_1: entered promiscuous mode [ 2102.289325][T21728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2102.588532][T21775] chnl_net:caif_netlink_parms(): no params data found [ 2102.623721][T21728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.043838][T21839] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2103.050684][T21839] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2103.081726][T21839] vhci_hcd vhci_hcd.0: Device attached [ 2103.106403][T21738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.257190][T21738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.271310][ T5927] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2103.344138][ T5927] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 2103.355893][T21840] vhci_hcd: connection closed [ 2103.356571][ T3557] vhci_hcd vhci_hcd.5: stop threads [ 2103.405015][T21728] team0: Port device team_slave_0 added [ 2103.410008][ T3557] vhci_hcd vhci_hcd.5: release socket [ 2103.440865][ T3557] vhci_hcd vhci_hcd.5: disconnect device [ 2103.603049][T21728] team0: Port device team_slave_1 added [ 2104.056277][T21738] team0: Port device team_slave_0 added [ 2104.196804][T21738] team0: Port device team_slave_1 added [ 2104.302432][T21728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.330952][T21728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.427271][T21728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.544534][T21775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.581431][T21775] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.590787][T21775] bridge_slave_0: entered allmulticast mode [ 2104.633040][T21775] bridge_slave_0: entered promiscuous mode [ 2104.685742][T21728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.739045][T21728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.835103][T21728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.010862][T21775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.041944][T21775] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.050797][T21775] bridge_slave_1: entered allmulticast mode [ 2105.105010][T21775] bridge_slave_1: entered promiscuous mode [ 2105.371546][T21738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2105.405601][T21738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2105.450859][T21738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2105.684244][T21738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2105.717117][T21738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2105.808953][T21738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2105.865507][T21775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.623507][T21775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2106.697137][T21728] hsr_slave_0: entered promiscuous mode [ 2106.732753][T21728] hsr_slave_1: entered promiscuous mode [ 2106.752641][T21728] debugfs: 'hsr0' already exists in 'hsr' [ 2106.758727][T21728] Cannot create hsr debugfs directory [ 2107.886502][T21775] team0: Port device team_slave_0 added [ 2108.138494][T21775] team0: Port device team_slave_1 added [ 2108.208252][T21738] hsr_slave_0: entered promiscuous mode [ 2108.238710][T21738] hsr_slave_1: entered promiscuous mode [ 2108.272287][T21738] debugfs: 'hsr0' already exists in 'hsr' [ 2108.278447][T21738] Cannot create hsr debugfs directory [ 2108.447407][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.454791][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.472344][ T1132] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.541361][ T5927] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2109.021059][ T31] audit: type=1326 audit(1766584499.050:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.5.4093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa062d8f749 code=0x0 [ 2109.056880][ T1132] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.210897][T21775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2109.231538][T21775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2109.371387][T21775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2109.807509][ T1132] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.932840][T21775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2109.940367][T21775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2110.035602][T21775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2110.433288][ T1132] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.300837][T21775] hsr_slave_0: entered promiscuous mode [ 2111.359652][T21775] hsr_slave_1: entered promiscuous mode [ 2111.398216][T21775] debugfs: 'hsr0' already exists in 'hsr' [ 2111.431307][T21775] Cannot create hsr debugfs directory [ 2112.110753][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2112.221823][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2112.231700][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2112.310223][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2112.322512][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2112.951652][ T1132] bridge_slave_1: left allmulticast mode [ 2112.957867][ T1132] bridge_slave_1: left promiscuous mode [ 2112.981227][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.008464][ T1132] bridge_slave_0: left allmulticast mode [ 2113.035347][ T1132] bridge_slave_0: left promiscuous mode [ 2113.041922][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.089964][ T1132] bridge_slave_1: left allmulticast mode [ 2113.106120][ T1132] bridge_slave_1: left promiscuous mode [ 2113.114164][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.431566][ T5832] Bluetooth: hci6: command tx timeout [ 2114.684764][T21883] [U] ÿ [ 2116.531142][ T5832] Bluetooth: hci6: command tx timeout [ 2117.066493][T21887] fuse: Unknown parameter '0x0000000000000003' [ 2117.384912][T21885] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2117.392216][T21885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2117.445573][T21885] vhci_hcd vhci_hcd.0: Device attached [ 2117.460234][T21891] vhci_hcd: connection closed [ 2117.460618][ T1093] vhci_hcd vhci_hcd.5: stop threads [ 2117.501377][ T1093] vhci_hcd vhci_hcd.5: release socket [ 2117.508124][ T1093] vhci_hcd vhci_hcd.5: disconnect device [ 2117.565393][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2117.595351][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2117.613627][ T1132] bond0 (unregistering): Released all slaves [ 2118.408389][ T1132] team0: Port device bond0 removed [ 2118.418301][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2118.432834][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2118.473866][ T1132] bond0 (unregistering): Released all slaves [ 2118.591140][ T5832] Bluetooth: hci6: command tx timeout [ 2119.675819][T21900] binder: BINDER_SET_CONTEXT_MGR already set [ 2119.691783][T21900] binder: 21899:21900 ioctl 4018620d 200000004a80 returned -16 [ 2120.671335][ T5832] Bluetooth: hci6: command tx timeout [ 2121.004808][ T1132] hsr_slave_0: left promiscuous mode [ 2121.012624][ T1132] hsr_slave_1: left promiscuous mode [ 2121.022064][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2121.030522][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2121.118137][ T1132] hsr_slave_0: left promiscuous mode [ 2121.803889][ T1132] hsr_slave_1: left promiscuous mode [ 2121.841762][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2121.884029][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2122.032532][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2122.081775][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2122.484761][ T1132] veth1_macvtap: left promiscuous mode [ 2122.490639][ T1132] veth0_macvtap: left promiscuous mode [ 2122.511777][ T1132] veth1_vlan: left promiscuous mode [ 2122.518556][ T1132] veth0_vlan: left promiscuous mode [ 2124.322878][T21920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4113'. [ 2124.404583][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2124.571802][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2128.108642][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2128.187884][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2129.085670][T16531] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2129.267484][T16531] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2129.302177][T16531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.348919][T16531] usb 3-1: Product: syz [ 2129.368758][T16531] usb 3-1: Manufacturer: syz [ 2129.384614][T16531] usb 3-1: SerialNumber: syz [ 2129.398204][T21870] chnl_net:caif_netlink_parms(): no params data found [ 2129.437768][T16531] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2129.599832][T10746] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2130.680245][T10746] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2130.722420][T10746] ath9k_htc: Failed to initialize the device [ 2130.848832][T10746] usb 3-1: ath9k_htc: USB layer deinitialized [ 2130.970955][T21953] input: syz1 as /devices/virtual/input/input15 [ 2131.116231][T14823] usb 3-1: USB disconnect, device number 15 [ 2131.143128][T21870] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.159365][T21870] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.176024][T21870] bridge_slave_0: entered allmulticast mode [ 2131.185937][T21870] bridge_slave_0: entered promiscuous mode [ 2131.198386][T21870] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.299883][T21870] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.316133][T21870] bridge_slave_1: entered allmulticast mode [ 2131.361855][T21870] bridge_slave_1: entered promiscuous mode [ 2131.412173][ T1132] IPVS: stop unused estimator thread 0... [ 2131.530073][T21870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.587368][T21870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.884845][T21870] team0: Port device team_slave_0 added [ 2131.914040][T21870] team0: Port device team_slave_1 added [ 2132.030833][T21870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.159676][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2132.191258][T21870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2135.302778][T21870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2135.323758][T21870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2135.359438][T21870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2135.382474][T21728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2135.516622][T21728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2135.571197][ T6126] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 2135.587393][T21728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2135.602198][T21728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2135.719737][T21870] hsr_slave_0: entered promiscuous mode [ 2135.740043][T21870] hsr_slave_1: entered promiscuous mode [ 2135.760751][T21870] debugfs: 'hsr0' already exists in 'hsr' [ 2135.776747][ T6126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2136.612368][ T6126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.620715][ T6126] usb 3-1: Product: syz [ 2136.625190][T21870] Cannot create hsr debugfs directory [ 2136.637028][ T6126] usb 3-1: Manufacturer: syz [ 2136.643512][ T6126] usb 3-1: SerialNumber: syz [ 2136.668495][ T6126] usb 3-1: config 0 descriptor?? [ 2137.259538][T21993] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2138.409927][ T6126] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 2140.833417][ T6126] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2140.863264][ T6126] usb 3-1: USB disconnect, device number 16 [ 2143.107250][T21775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2143.150013][T21775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2143.262392][T21775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2143.312453][T21999] fuse: Unknown parameter '0x0000000000000003' [ 2143.375501][T21775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2143.607832][T21730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2143.618593][T21730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2143.627731][T21730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2143.641131][T21730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2143.662982][T21730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2143.722395][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2143.732770][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2143.741412][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2143.758856][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2143.767598][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2143.819877][ T1132] bridge_slave_1: left allmulticast mode [ 2143.839058][ T1132] bridge_slave_1: left promiscuous mode [ 2143.849827][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.876613][ T1132] bridge_slave_0: left allmulticast mode [ 2143.884039][ T1132] bridge_slave_0: left promiscuous mode [ 2143.910677][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.217230][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2144.230420][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2144.244449][ T1132] bond0 (unregistering): Released all slaves [ 2144.304097][T22015] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 2144.351612][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.585257][ T1132] hsr_slave_0: left promiscuous mode [ 2144.600176][ T1132] hsr_slave_1: left promiscuous mode [ 2144.608734][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2144.622478][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2144.744388][T22022] 9pnet: p9_errstr2errno: server reported unknown error [ 2145.007535][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2145.162801][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2145.727086][ T5832] Bluetooth: hci1: command tx timeout [ 2145.871293][ T5832] Bluetooth: hci2: command tx timeout [ 2147.145837][T22044] binder: BINDER_SET_CONTEXT_MGR already set [ 2147.164848][T22044] binder: 22042:22044 ioctl 4018620d 200000004a80 returned -16 [ 2147.318562][T22006] chnl_net:caif_netlink_parms(): no params data found [ 2147.393100][T22000] chnl_net:caif_netlink_parms(): no params data found [ 2147.635451][T22051] netlink: 'syz.2.4146': attribute type 1 has an invalid length. [ 2147.644455][T22051] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4146'. [ 2147.658295][T22051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4146'. [ 2147.861068][ T5832] Bluetooth: hci1: command tx timeout [ 2147.956028][ T5832] Bluetooth: hci2: command tx timeout [ 2148.037219][T21775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.822327][T22000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.829644][T22000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.854745][T22000] bridge_slave_0: entered allmulticast mode [ 2148.873536][T22000] bridge_slave_0: entered promiscuous mode [ 2149.033834][T22000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.061259][T22000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.068998][T22000] bridge_slave_1: entered allmulticast mode [ 2149.093202][T22000] bridge_slave_1: entered promiscuous mode [ 2149.112619][T21870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2149.135271][T22006] bridge0: port 1(bridge_slave_0) entered blocking state [ 2149.161636][T22006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.169030][T22006] bridge_slave_0: entered allmulticast mode [ 2149.191399][T22006] bridge_slave_0: entered promiscuous mode [ 2149.256338][T21870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2149.286370][T22006] bridge0: port 2(bridge_slave_1) entered blocking state [ 2149.302567][T22006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.311839][T22006] bridge_slave_1: entered allmulticast mode [ 2149.331270][T22006] bridge_slave_1: entered promiscuous mode [ 2149.423133][T21870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2149.457078][T21870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2149.710565][T22000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2149.752182][T22006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2149.767367][T22006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2149.787083][T22000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2149.951484][ T5832] Bluetooth: hci1: command tx timeout [ 2150.031545][ T5832] Bluetooth: hci2: command tx timeout [ 2150.098415][T22006] team0: Port device team_slave_0 added [ 2150.147034][T21730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2150.159208][T21730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2150.168849][T21730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2150.206224][T21730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2150.219461][T21730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2150.245052][T22000] team0: Port device team_slave_0 added [ 2150.314439][T15716] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2150.347682][T22006] team0: Port device team_slave_1 added [ 2150.501798][T15716] usb 6-1: Using ep0 maxpacket: 8 [ 2150.511822][T15716] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2150.520955][T15716] usb 6-1: config 0 has no interfaces? [ 2150.530190][T15716] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 2150.544831][T15716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.560321][T15716] usb 6-1: Product: syz [ 2150.569978][T22000] team0: Port device team_slave_1 added [ 2150.576825][T15716] usb 6-1: Manufacturer: syz [ 2150.599814][T15716] usb 6-1: SerialNumber: syz [ 2150.625521][T15716] usb 6-1: config 0 descriptor?? [ 2150.727607][T22006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2150.735242][T22006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.796658][T22006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2150.944782][T22006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2150.959981][T22006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.993695][T22006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2151.083309][ T1132] bridge_slave_1: left allmulticast mode [ 2151.088998][ T1132] bridge_slave_1: left promiscuous mode [ 2151.096622][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.228888][ T1132] bridge_slave_0: left allmulticast mode [ 2151.236261][ T1132] bridge_slave_0: left promiscuous mode [ 2151.242311][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.494757][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.804028][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.835011][ T1132] bond0 (unregistering): Released all slaves [ 2151.882306][T22000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2151.894610][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2151.992629][T22000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2152.036030][T21730] Bluetooth: hci1: command tx timeout [ 2152.066114][ T1132] hsr_slave_0: left promiscuous mode [ 2152.082607][ T1132] hsr_slave_1: left promiscuous mode [ 2152.133961][T21730] Bluetooth: hci2: command tx timeout [ 2152.167792][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2152.193729][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2152.271501][T21730] Bluetooth: hci5: command tx timeout [ 2153.613401][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2153.675752][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2154.221578][T22000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2154.231973][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2154.304613][T22000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2154.351453][T21730] Bluetooth: hci5: command tx timeout [ 2154.431603][ T5967] usb 6-1: USB disconnect, device number 19 [ 2154.573594][T22006] hsr_slave_0: entered promiscuous mode [ 2154.671482][T22006] hsr_slave_1: entered promiscuous mode [ 2155.036602][T22000] hsr_slave_0: entered promiscuous mode [ 2155.048374][T22000] hsr_slave_1: entered promiscuous mode [ 2155.061277][T22000] debugfs: 'hsr0' already exists in 'hsr' [ 2155.067640][T22000] Cannot create hsr debugfs directory [ 2156.431292][T21730] Bluetooth: hci5: command tx timeout [ 2156.450951][T21870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.824127][T22072] chnl_net:caif_netlink_parms(): no params data found [ 2157.934306][T21870] 8021q: adding VLAN 0 to HW filter on device team0 [ 2158.109426][T19839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.116697][T19839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2158.292273][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.299429][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2158.310256][T22111] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 2158.327911][T22111] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4155'. [ 2158.565780][T21730] Bluetooth: hci5: command tx timeout [ 2158.624035][T22072] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.638767][T22072] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.659291][T22072] bridge_slave_0: entered allmulticast mode [ 2158.676036][T22072] bridge_slave_0: entered promiscuous mode [ 2158.760117][T22072] bridge0: port 2(bridge_slave_1) entered blocking state [ 2158.784406][T22072] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.793841][T22072] bridge_slave_1: entered allmulticast mode [ 2158.809408][T22072] bridge_slave_1: entered promiscuous mode [ 2158.894726][ T1132] bridge_slave_1: left allmulticast mode [ 2158.900647][ T1132] bridge_slave_1: left promiscuous mode [ 2158.923019][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.923376][T15716] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2158.952359][ T1132] bridge_slave_0: left allmulticast mode [ 2158.958164][ T1132] bridge_slave_0: left promiscuous mode [ 2158.964625][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.024445][ T1132] bridge_slave_1: left allmulticast mode [ 2159.030117][ T1132] bridge_slave_1: left promiscuous mode [ 2159.051393][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.068698][ T1132] bridge_slave_0: left allmulticast mode [ 2159.078909][ T1132] bridge_slave_0: left promiscuous mode [ 2159.089266][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.118364][T15716] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2159.128605][T15716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.137360][T15716] usb 6-1: Product: syz [ 2159.151634][T15716] usb 6-1: Manufacturer: syz [ 2159.156462][T15716] usb 6-1: SerialNumber: syz [ 2159.180600][T15716] usb 6-1: config 0 descriptor?? [ 2159.474563][T22117] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2160.474707][T15716] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 2162.521108][T15716] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2162.846901][T10746] usb 6-1: USB disconnect, device number 20 [ 2163.336993][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2163.389331][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2163.425087][ T1132] bond0 (unregistering): Released all slaves [ 2164.504935][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2164.551296][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2164.565046][ T1132] bond0 (unregistering): Released all slaves [ 2164.817222][T22072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2164.880483][ T1132] hsr_slave_0: left promiscuous mode [ 2164.912989][ T1132] hsr_slave_1: left promiscuous mode [ 2164.919053][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.937643][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2164.984238][ T1132] hsr_slave_0: left promiscuous mode [ 2165.011143][ T1132] hsr_slave_1: left promiscuous mode [ 2165.017507][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2165.034756][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2166.361218][T15716] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2166.533573][T15716] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2166.544442][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2166.551976][T15716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.571725][T15716] usb 3-1: Product: syz [ 2166.576105][T15716] usb 3-1: Manufacturer: syz [ 2166.605075][T15716] usb 3-1: SerialNumber: syz [ 2166.625160][T15716] usb 3-1: config 0 descriptor?? [ 2166.637771][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2167.705245][T22148] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2167.751390][T15716] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 2167.758911][T15716] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2169.910428][T22152] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2169.916183][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.051645][ T5967] usb 3-1: USB disconnect, device number 17 [ 2170.452828][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2170.496404][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2171.155954][T22162] Can't find ip_set type hash:net,po [ 2171.224800][T22072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2171.690186][T22167] 9pnet_virtio: no channels available for device syz [ 2171.748743][T22072] team0: Port device team_slave_0 added [ 2171.758312][T22072] team0: Port device team_slave_1 added [ 2171.924738][T22072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2171.943647][T22072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2172.001827][T22072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2172.030921][T22072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2172.053555][T22072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2172.113274][T22072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2172.265778][T22072] hsr_slave_0: entered promiscuous mode [ 2172.284333][T22072] hsr_slave_1: entered promiscuous mode [ 2172.290857][T22072] debugfs: 'hsr0' already exists in 'hsr' [ 2172.308985][T22072] Cannot create hsr debugfs directory [ 2172.539301][T22000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2172.558950][T22000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2173.038364][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2173.048288][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2173.058535][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2173.069450][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2173.811764][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2173.866320][T22000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2173.920700][T22000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2174.504114][T22006] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2174.592423][T22006] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2174.647699][T22006] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2174.714144][T22006] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2175.871185][T21730] Bluetooth: hci0: command tx timeout [ 2176.001127][T10746] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2176.056127][T22006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2176.079963][T22006] 8021q: adding VLAN 0 to HW filter on device team0 [ 2176.167252][T10746] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2176.184056][T22006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2176.195137][T10746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.219272][T10746] usb 3-1: Product: syz [ 2176.224759][T22006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2176.235771][T10746] usb 3-1: Manufacturer: syz [ 2176.240890][T10746] usb 3-1: SerialNumber: syz [ 2176.301864][T10746] usb 3-1: config 0 descriptor?? [ 2176.340323][T19839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.347599][T19839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.702259][T19839] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.709736][T19839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2177.020745][T22209] Can't find ip_set type hash:net,po [ 2177.422532][T10746] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 2177.499689][T10746] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2177.576944][T22212] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2178.640927][T22178] chnl_net:caif_netlink_parms(): no params data found [ 2178.969454][ T1132] bridge_slave_1: left allmulticast mode [ 2178.993337][ T1132] bridge_slave_1: left promiscuous mode [ 2179.015473][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.094363][ T1132] bridge_slave_0: left allmulticast mode [ 2179.137261][ T1132] bridge_slave_0: left promiscuous mode [ 2179.183246][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.887754][T13457] usb 3-1: USB disconnect, device number 18 [ 2180.206040][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2180.217630][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2180.229434][ T1132] bond0 (unregistering): Released all slaves [ 2180.327456][T22000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2180.411323][T22072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2180.438777][T22072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2180.512909][T22072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2180.548723][ T1132] hsr_slave_0: left promiscuous mode [ 2180.587098][ T1132] hsr_slave_1: left promiscuous mode [ 2180.624616][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2180.656450][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2181.774578][T22236] [ 2181.776940][T22236] ====================================================== [ 2181.783954][T22236] WARNING: possible circular locking dependency detected [ 2181.790965][T22236] syzkaller #0 Tainted: G L [ 2181.796960][T22236] ------------------------------------------------------ [ 2181.804244][T22236] syz.5.4187/22236 is trying to acquire lock: [ 2181.810399][T22236] ffff888029e08c68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 2181.819621][T22236] [ 2181.819621][T22236] but task is already holding lock: [ 2181.826984][T22236] ffff888028ea3148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 2181.836774][T22236] [ 2181.836774][T22236] which lock already depends on the new lock. [ 2181.836774][T22236] [ 2181.847177][T22236] [ 2181.847177][T22236] the existing dependency chain (in reverse order) is: [ 2181.856183][T22236] [ 2181.856183][T22236] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2181.863946][T22236] __mutex_lock+0x1aa/0x1ca0 [ 2181.869084][T22236] autofs_notify_daemon+0x4a6/0xd60 [ 2181.874945][T22236] autofs_wait+0x10f3/0x1ac0 [ 2181.880071][T22236] autofs_mount_wait+0x132/0x3c0 [ 2181.885605][T22236] autofs_d_automount+0x4b2/0x960 [ 2181.891186][T22236] __traverse_mounts+0x1b9/0x830 [ 2181.896697][T22236] step_into_slowpath+0x772/0xf50 [ 2181.902345][T22236] path_lookupat+0x627/0xc40 [ 2181.907565][T22236] filename_lookup+0x224/0x5f0 [ 2181.912875][T22236] kern_path+0x35/0x50 [ 2181.917489][T22236] lookup_bdev+0xd8/0x280 [ 2181.922352][T22236] resume_store+0x1d6/0x490 [ 2181.927404][T22236] kobj_attr_store+0x58/0x80 [ 2181.932552][T22236] sysfs_kf_write+0xf2/0x150 [ 2181.937715][T22236] kernfs_fop_write_iter+0x3af/0x570 [ 2181.943634][T22236] vfs_write+0x7d3/0x11d0 [ 2181.948511][T22236] ksys_write+0x12a/0x250 [ 2181.953375][T22236] do_syscall_64+0xcd/0xf80 [ 2181.958431][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.964945][T22236] [ 2181.964945][T22236] -> #2 (&of->mutex){+.+.}-{4:4}: [ 2181.972189][T22236] __mutex_lock+0x1aa/0x1ca0 [ 2181.977314][T22236] kernfs_seq_start+0x4f/0x2a0 [ 2181.982628][T22236] seq_read_iter+0x2c1/0x12d0 [ 2181.987935][T22236] kernfs_fop_read_iter+0x46c/0x610 [ 2181.993691][T22236] vfs_read+0x8bf/0xcf0 [ 2181.998465][T22236] ksys_read+0x12a/0x250 [ 2182.003239][T22236] do_syscall_64+0xcd/0xf80 [ 2182.008302][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.014732][T22236] [ 2182.014732][T22236] -> #1 (&p->lock){+.+.}-{4:4}: [ 2182.021843][T22236] __mutex_lock+0x1aa/0x1ca0 [ 2182.026972][T22236] seq_read_iter+0xe1/0x12d0 [ 2182.032102][T22236] proc_reg_read_iter+0x220/0x310 [ 2182.037668][T22236] copy_splice_read+0x618/0xc20 [ 2182.043057][T22236] do_splice_read+0x285/0x370 [ 2182.048278][T22236] splice_file_to_pipe+0x109/0x120 [ 2182.053962][T22236] do_sendfile+0x400/0xe50 [ 2182.058919][T22236] __x64_sys_sendfile64+0x1d8/0x220 [ 2182.064665][T22236] do_syscall_64+0xcd/0xf80 [ 2182.069720][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.076230][T22236] [ 2182.076230][T22236] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 2182.083648][T22236] __lock_acquire+0x1669/0x2890 [ 2182.089075][T22236] lock_acquire+0x179/0x330 [ 2182.094120][T22236] __mutex_lock+0x1aa/0x1ca0 [ 2182.099238][T22236] anon_pipe_write+0x15d/0x1bd0 [ 2182.104633][T22236] __kernel_write_iter+0x720/0xb10 [ 2182.110279][T22236] __kernel_write+0xf5/0x140 [ 2182.115402][T22236] autofs_notify_daemon+0x4db/0xd60 [ 2182.121223][T22236] autofs_wait+0x10f3/0x1ac0 [ 2182.126345][T22236] autofs_mount_wait+0x132/0x3c0 [ 2182.131839][T22236] autofs_d_automount+0x4b2/0x960 [ 2182.137417][T22236] __traverse_mounts+0x1b9/0x830 [ 2182.142928][T22236] step_into_slowpath+0x772/0xf50 [ 2182.148492][T22236] path_lookupat+0x627/0xc40 [ 2182.153617][T22236] filename_lookup+0x224/0x5f0 [ 2182.159008][T22236] kern_path+0x35/0x50 [ 2182.163898][T22236] lookup_bdev+0xd8/0x280 [ 2182.168759][T22236] resume_store+0x1d6/0x490 [ 2182.173810][T22236] kobj_attr_store+0x58/0x80 [ 2182.178957][T22236] sysfs_kf_write+0xf2/0x150 [ 2182.185399][T22236] kernfs_fop_write_iter+0x3af/0x570 [ 2182.191229][T22236] vfs_write+0x7d3/0x11d0 [ 2182.196092][T22236] ksys_write+0x12a/0x250 [ 2182.200958][T22236] do_syscall_64+0xcd/0xf80 [ 2182.206110][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.213141][T22236] [ 2182.213141][T22236] other info that might help us debug this: [ 2182.213141][T22236] [ 2182.223540][T22236] Chain exists of: [ 2182.223540][T22236] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 2182.223540][T22236] [ 2182.236383][T22236] Possible unsafe locking scenario: [ 2182.236383][T22236] [ 2182.244008][T22236] CPU0 CPU1 [ 2182.249372][T22236] ---- ---- [ 2182.254736][T22236] lock(&sbi->pipe_mutex); [ 2182.259249][T22236] lock(&of->mutex); [ 2182.265759][T22236] lock(&sbi->pipe_mutex); [ 2182.272971][T22236] lock(&pipe->mutex); [ 2182.277135][T22236] [ 2182.277135][T22236] *** DEADLOCK *** [ 2182.277135][T22236] [ 2182.285299][T22236] 5 locks held by syz.5.4187/22236: [ 2182.290516][T22236] #0: ffff8880684530b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 2182.300676][T22236] #1: ffff888035394420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2182.310667][T22236] #2: ffff888029b8cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 2182.320595][T22236] #3: ffff88801e2a5008 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 2182.330691][T22236] #4: ffff888028ea3148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 2182.340932][T22236] [ 2182.340932][T22236] stack backtrace: [ 2182.346926][T22236] CPU: 0 UID: 0 PID: 22236 Comm: syz.5.4187 Tainted: G L syzkaller #0 PREEMPT(full) [ 2182.346984][T22236] Tainted: [L]=SOFTLOCKUP [ 2182.346998][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2182.347021][T22236] Call Trace: [ 2182.347034][T22236] [ 2182.347049][T22236] dump_stack_lvl+0x116/0x1f0 [ 2182.347114][T22236] print_circular_bug+0x275/0x340 [ 2182.347160][T22236] check_noncircular+0x146/0x160 [ 2182.347200][T22236] ? arch_stack_walk+0xa6/0x100 [ 2182.347255][T22236] __lock_acquire+0x1669/0x2890 [ 2182.347308][T22236] lock_acquire+0x179/0x330 [ 2182.347350][T22236] ? anon_pipe_write+0x15d/0x1bd0 [ 2182.347399][T22236] ? __pfx___might_resched+0x10/0x10 [ 2182.347434][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347484][T22236] __mutex_lock+0x1aa/0x1ca0 [ 2182.347518][T22236] ? anon_pipe_write+0x15d/0x1bd0 [ 2182.347563][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347608][T22236] ? sched_clock+0x38/0x60 [ 2182.347640][T22236] ? anon_pipe_write+0x15d/0x1bd0 [ 2182.347686][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347733][T22236] ? __pfx___mutex_lock+0x10/0x10 [ 2182.347769][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347816][T22236] ? finish_task_switch.isra.0+0x207/0xbd0 [ 2182.347879][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347925][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.347974][T22236] ? rcu_is_watching+0x12/0xc0 [ 2182.348008][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.348053][T22236] ? trace_sched_exit_tp+0xd1/0x110 [ 2182.348096][T22236] ? anon_pipe_write+0x15d/0x1bd0 [ 2182.348140][T22236] anon_pipe_write+0x15d/0x1bd0 [ 2182.348194][T22236] ? __pfx_anon_pipe_write+0x10/0x10 [ 2182.348239][T22236] ? __pfx___schedule+0x10/0x10 [ 2182.348296][T22236] ? preempt_schedule_thunk+0x16/0x30 [ 2182.348334][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.348382][T22236] ? __pfx_anon_pipe_write+0x10/0x10 [ 2182.348427][T22236] __kernel_write_iter+0x720/0xb10 [ 2182.348470][T22236] ? __pfx___kernel_write_iter+0x10/0x10 [ 2182.348511][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.348556][T22236] ? __mutex_lock+0x669/0x1ca0 [ 2182.348587][T22236] ? __kernel_text_address+0xd/0x40 [ 2182.348641][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.348687][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.348736][T22236] __kernel_write+0xf5/0x140 [ 2182.348775][T22236] ? __pfx___kernel_write+0x10/0x10 [ 2182.348816][T22236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2182.348890][T22236] autofs_notify_daemon+0x4db/0xd60 [ 2182.348932][T22236] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 2182.348974][T22236] ? kernfs_fop_write_iter+0x3af/0x570 [ 2182.349026][T22236] ? vfs_write+0x7d3/0x11d0 [ 2182.349063][T22236] ? ksys_write+0x12a/0x250 [ 2182.349123][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349168][T22236] ? lockdep_init_map_type+0x5c/0x270 [ 2182.349214][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349259][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349304][T22236] ? lockdep_init_map_type+0x5c/0x270 [ 2182.349350][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349399][T22236] autofs_wait+0x10f3/0x1ac0 [ 2182.349440][T22236] ? __pfx_autofs_wait+0x10/0x10 [ 2182.349476][T22236] ? __pfx_path_check_mount+0x10/0x10 [ 2182.349530][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349576][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349621][T22236] ? find_held_lock+0x2b/0x80 [ 2182.349678][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349725][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349771][T22236] ? do_raw_spin_unlock+0x172/0x230 [ 2182.349823][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349868][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.349913][T22236] ? find_held_lock+0x2b/0x80 [ 2182.349974][T22236] autofs_mount_wait+0x132/0x3c0 [ 2182.350038][T22236] autofs_d_automount+0x4b2/0x960 [ 2182.350077][T22236] __traverse_mounts+0x1b9/0x830 [ 2182.350135][T22236] step_into_slowpath+0x772/0xf50 [ 2182.350173][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.350219][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.350264][T22236] ? __up_read+0x2d1/0x700 [ 2182.350313][T22236] ? __pfx_step_into_slowpath+0x10/0x10 [ 2182.350353][T22236] ? __entry_text_end+0x1020b5/0x1020b9 [ 2182.350406][T22236] path_lookupat+0x627/0xc40 [ 2182.350451][T22236] filename_lookup+0x224/0x5f0 [ 2182.350521][T22236] ? __pfx_filename_lookup+0x10/0x10 [ 2182.350588][T22236] ? getname_kernel+0x52/0x370 [ 2182.350651][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.350705][T22236] ? __asan_memcpy+0x3c/0x60 [ 2182.350776][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.350834][T22236] kern_path+0x35/0x50 [ 2182.350874][T22236] lookup_bdev+0xd8/0x280 [ 2182.350909][T22236] ? __pfx_lookup_bdev+0x10/0x10 [ 2182.350944][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.350997][T22236] ? __asan_memcpy+0x3c/0x60 [ 2182.351063][T22236] resume_store+0x1d6/0x490 [ 2182.351123][T22236] ? __pfx_resume_store+0x10/0x10 [ 2182.351185][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.351236][T22236] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2182.351286][T22236] ? find_held_lock+0x2b/0x80 [ 2182.351349][T22236] ? __pfx_resume_store+0x10/0x10 [ 2182.351402][T22236] kobj_attr_store+0x58/0x80 [ 2182.351461][T22236] ? __pfx_kobj_attr_store+0x10/0x10 [ 2182.351521][T22236] sysfs_kf_write+0xf2/0x150 [ 2182.351580][T22236] kernfs_fop_write_iter+0x3af/0x570 [ 2182.351630][T22236] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2182.351691][T22236] vfs_write+0x7d3/0x11d0 [ 2182.351731][T22236] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2182.351785][T22236] ? __pfx_vfs_write+0x10/0x10 [ 2182.351840][T22236] ksys_write+0x12a/0x250 [ 2182.351879][T22236] ? __pfx_ksys_write+0x10/0x10 [ 2182.351925][T22236] do_syscall_64+0xcd/0xf80 [ 2182.351991][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.352029][T22236] RIP: 0033:0x7fa062d8f749 [ 2182.352057][T22236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2182.352094][T22236] RSP: 002b:00007fa060ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2182.352129][T22236] RAX: ffffffffffffffda RBX: 00007fa062fe6090 RCX: 00007fa062d8f749 [ 2182.352154][T22236] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000007 [ 2182.352177][T22236] RBP: 00007fa062e13f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2182.352200][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2182.352223][T22236] R13: 00007fa062fe6128 R14: 00007fa062fe6090 R15: 00007ffd388c9af8 [ 2182.352261][T22236] [ 2183.023193][T22236] PM: Image not found (code -22) [ 2183.933464][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2184.050855][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2184.321883][T22178] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 2184.322635][T22072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2185.648170][ T1132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.667425][ T1132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.718239][ T1132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.786005][ T1132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.860506][ T1132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.907477][ T1132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2185.957802][ T1132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.017225][ T1132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2186.090958][ T1132] bridge_slave_1: left allmulticast mode [ 2186.097823][ T1132] bridge_slave_1: left promiscuous mode [ 2186.103982][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.113490][ T1132] bridge_slave_0: left allmulticast mode [ 2186.119273][ T1132] bridge_slave_0: left promiscuous mode [ 2186.125112][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.134400][ T1132] bridge_slave_1: left allmulticast mode [ 2186.140700][ T1132] bridge_slave_1: left promiscuous mode [ 2186.146674][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.155699][ T1132] bridge_slave_0: left allmulticast mode [ 2186.162083][ T1132] bridge_slave_0: left promiscuous mode [ 2186.167775][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.178023][ T1132] bridge_slave_1: left allmulticast mode [ 2186.183834][ T1132] bridge_slave_1: left promiscuous mode [ 2186.189480][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.198303][ T1132] bridge_slave_0: left allmulticast mode [ 2186.204165][ T1132] bridge_slave_0: left promiscuous mode [ 2186.209822][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.220934][ T1132] bridge_slave_1: left allmulticast mode [ 2186.226863][ T1132] bridge_slave_1: left promiscuous mode [ 2186.234134][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.243915][ T1132] bridge_slave_0: left allmulticast mode [ 2186.249545][ T1132] bridge_slave_0: left promiscuous mode [ 2186.255266][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.430730][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.441667][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.452141][ T1132] bond0 (unregistering): Released all slaves [ 2186.510449][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.520703][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.530542][ T1132] bond0 (unregistering): Released all slaves [ 2186.585724][ T1132] bond0 (unregistering): Released all slaves [ 2186.777103][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.787221][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.797322][ T1132] bond0 (unregistering): Released all slaves [ 2186.960793][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.970969][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.981178][ T1132] bond0 (unregistering): Released all slaves [ 2187.312207][ T1132] hsr_slave_0: left promiscuous mode [ 2187.318029][ T1132] hsr_slave_1: left promiscuous mode [ 2187.326108][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2187.333738][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.344086][ T1132] hsr_slave_0: left promiscuous mode [ 2187.350560][ T1132] hsr_slave_1: left promiscuous mode [ 2187.358307][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2187.367254][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.378458][ T1132] hsr_slave_0: left promiscuous mode [ 2187.384364][ T1132] hsr_slave_1: left promiscuous mode [ 2187.390175][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2187.398022][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2187.405793][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2187.413209][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.424182][ T1132] hsr_slave_0: left promiscuous mode [ 2187.429914][ T1132] hsr_slave_1: left promiscuous mode [ 2187.435843][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2187.443331][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2187.451053][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2187.458438][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.474294][ T1132] veth1_macvtap: left promiscuous mode [ 2187.479821][ T1132] veth0_macvtap: left promiscuous mode [ 2187.485836][ T1132] veth1_vlan: left promiscuous mode [ 2187.491175][ T1132] veth0_vlan: left promiscuous mode [ 2187.497370][ T1132] veth1_macvtap: left promiscuous mode [ 2187.503581][ T1132] veth0_macvtap: left promiscuous mode [ 2187.509134][ T1132] veth1_vlan: left promiscuous mode [ 2187.514555][ T1132] veth0_vlan: left promiscuous mode [ 2187.744835][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2187.767723][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2187.917140][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2187.939864][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2188.144253][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2188.176665][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2188.325585][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2188.340535][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 2189.409423][ T1132] IPVS: stop unused estimator thread 0... [ 2189.417056][ T1132] IPVS: stop unused estimator thread 0... [ 2189.697163][ T1132] bridge_slave_1: left allmulticast mode [ 2189.704145][ T1132] bridge_slave_1: left promiscuous mode [ 2189.709837][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.718797][ T1132] bridge_slave_0: left allmulticast mode [ 2189.725027][ T1132] bridge_slave_0: left promiscuous mode [ 2189.730690][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.822543][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2189.832750][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2189.842894][ T1132] bond0 (unregistering): Released all slaves [ 2189.944938][ T1132] hsr_slave_0: left promiscuous mode [ 2189.950673][ T1132] hsr_slave_1: left promiscuous mode [ 2189.956812][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2189.964911][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.088479][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 2190.116687][ T1132] team0 (unregistering): Port device team_slave_0 removed