last executing test programs: 32m50.851751152s ago: executing program 3 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00e31e00000109022400010000000009040000010300000009210000000122f804090581030000000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) syz_usb_control_io(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2102, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="22cf01000000"], 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 32m47.386730665s ago: executing program 3 (id=130): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x20, r1}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="203105000000c90100dd"], 0x0, 0x0}) getresgid(&(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000c40)) getegid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x1, 0x0, '\x00', {0x7ff, 0x3ff, 0xadf, 0x10, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x7, 0x1, 0x3, {0xff, 0x6}, {0x4000000000006, 0xb}, {0x2000001, 0xd}, {0x4fffffffff, 0xa00}, 0x200, 0x6, 0xfff, 0x7}}}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004e00)={{{@in=@private, @in=@multicast2}}, {{@in=@loopback}}}, &(0x7f0000000cc0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000004f00), 0x2000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000054c0)={{{@in6=@private1, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000d40)=0xe8) lstat(&(0x7f00000055c0)='./file0\x00', &(0x7f0000005600)) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) 32m45.457743531s ago: executing program 3 (id=135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@deltaction={0xb4, 0x31, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x20000088) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 32m43.523091931s ago: executing program 3 (id=139): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1c, 0x2, @l2={'eth', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000000102e301000000f9ff0000000a000000440001800c000280050801002f00000006000340000300002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x30001000}, 0x24040844) close(0x4) 32m43.200227872s ago: executing program 3 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$kcm(0x23, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 32m42.73145875s ago: executing program 3 (id=141): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @llc={@llc={0xd4, 0x7e, "b1bb", "356db886ca827def4f015e583252baf980260000"}}}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$kcm(0xa, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 32m27.515787796s ago: executing program 32 (id=141): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @llc={@llc={0xd4, 0x7e, "b1bb", "356db886ca827def4f015e583252baf980260000"}}}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$kcm(0xa, 0x1, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 31m16.680111747s ago: executing program 0 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) 31m15.467158484s ago: executing program 0 (id=291): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000002c0)={0x100, 0x6, 0x0, 0x40}, 0x10) socket$netlink(0x10, 0x3, 0x9) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) 31m13.773824813s ago: executing program 0 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xeb9, 0x0, 0x1, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x32, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x20, 0x0, 0x0) 31m10.799982965s ago: executing program 0 (id=300): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 31m7.638054424s ago: executing program 0 (id=301): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) mq_open(&(0x7f0000000080)='veth0_vlan\x00', 0x40, 0x1, &(0x7f0000000100)={0x8, 0x9, 0x9, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x301200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x20}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x81c0, 0x0) 31m6.024651765s ago: executing program 0 (id=303): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x4080000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) alarm(0x8) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 30m49.94320415s ago: executing program 33 (id=303): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x4080000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) alarm(0x8) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 18m26.159158467s ago: executing program 6 (id=2348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, 0x0) io_submit(0x0, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) close_range(r0, 0xffffffffffffffff, 0x0) 18m26.095738373s ago: executing program 6 (id=2349): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044004) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sched_getaffinity(0x0, 0x8, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000580)=""/174, 0xff56) 18m25.635280994s ago: executing program 6 (id=2350): r0 = socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0xa4e, 0xd9, 0x8, 0x7, 0x8, 0xc, {0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff8, 0x5, 0xf85, 0x2, 0x2}}, &(0x7f0000000100)=0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) 18m24.184352931s ago: executing program 6 (id=2354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) 18m24.089622079s ago: executing program 6 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000700)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000080}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7400fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500000800002c00128009000100626f6e64000000001c0002800500010004000000060019007004"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x46) 18m24.001445078s ago: executing program 6 (id=2356): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f00000001c0)={0x0, 0xb, 0x3, "b8290c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17m19.425356819s ago: executing program 5 (id=2510): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 17m14.267433121s ago: executing program 5 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r0) socket(0xa, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17m6.249739758s ago: executing program 5 (id=2534): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="0800000000000000cc010000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="00010000000000000100"/27]) 17m5.683583989s ago: executing program 5 (id=2536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) semop(0x0, &(0x7f0000000240), 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x5, 0x1000}], 0x1, 0x0) 17m3.600782574s ago: executing program 5 (id=2538): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03e, 0x30}, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8bd3ddfe2546ebd4ea346", 0xb2}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x160) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 16m59.200623168s ago: executing program 5 (id=2551): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="86fb4e44162ce0274207fa0cf9", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m43.769620408s ago: executing program 34 (id=2551): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xd, 0x0, &(0x7f0000000040)="86fb4e44162ce0274207fa0cf9", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m14.362180149s ago: executing program 4 (id=3813): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(r3, 0x0, 0x112) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, 0x0) 2m12.225157885s ago: executing program 4 (id=3815): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1008004, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m9.194409933s ago: executing program 4 (id=3818): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x54005) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x300}, 0x8040) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 2m3.911459128s ago: executing program 4 (id=3822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m3.801877824s ago: executing program 4 (id=3823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) semop(0x0, &(0x7f0000000240), 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x5, 0x1000}], 0x1, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x1) keyctl$read(0xb, r4, 0x0, 0x0) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000540)="b4e0dd11fdeafc96f3d2afb0e8c848e7847b7ed0ba5bfa9585dd8c104822bb375713fdba82abb9dc6925c90457c932c8819029b55a5e7414bc1428a17acae2af2bf2ffdaa32780652c1f5e38a30eb6228fb7b0cc8d78db9d20069c88fde488266a8264f210956b61683d0a6006f504b8510698d10a962ce7ad29137f3e369d0e175461d93ffbef744a1857af713b0e6e12418b482a208ef6da5067c68628ef0cfb4b34ffadee170634e6ed9aa8408e19a66883f67c317a70c2cbba21c31044489357a8ab4e6cd33c7e7f4cbf8cdf6621ff5360fae534f4550baa48ef6accb263b4d3c73d3c65ff376600c8c3474694a079b5b5e2e8abb34a80bc104aef345c431902fbc1bdd65a3dcb8f1fb45beb39bce964d33b63529745d5f84654fd2c9dc1058c8810be774a8379a8a10c214256f6d1d320aa7144f15e032ba76f34638d0c6227f6db42016e2ba0becf4de75fc8dd9ed1a0baadc1bceb531ffb33ef026bdb29c806ed54be1c51c736a6924e141c1afdc16102f0782564e127c80eec0d4fadb17d05fef3495eb0f71308b1a8dff38c85131150a0e0a088c20ce930b8144849e87d1c9d4bec075560d537f90e2b05391497e5ce24d8aef9d9a8edfa3f114c3d5819d6fa755e8e86561e33c747c42882391fc2ab4bffe4a7dd19e106fa6e9ced8201c38654930818ba6bb280957efb5646d95ee809e7ba4c1f4284e8daaa48386d4b2c6b2416196f423d05ad4b6a27b2e089ad15096cc74f2cc0100ad58d1d1a3fc7937dbd7e5d4d01c0c3716bb3d26283e5eae1959ca3f1b1f77a1b8c4c40cf6c4e674ce7632c7b1030cd04aaeb0e6d331e343adb98902e533e9ffe7dd6b47cbd7ce29ea5aa57b0be02d0e4fb38eaef56a898c0494f54a22e5447eeb40a4b732dfa7be3aeaa548e89ab2b20d71fd6d13dda33605c685e1bc41fb4837c8b8e1f7f85eeb5782045cca821458c3f6f36d7019949a916278a275cfc5e35de965170bc7989f563903a1637e409f4ef43c99e44f0ebe090a1463baf699d71fde5d240d69af902a73a732ebf34c8524208dcaf2f0d4aeda7e28ae369223139a9848af6a17bd90bd621edef330cdc2d2868c3efa1f141a89d9f87dc3bfd5ec9be8fb2ba098835fb82dca946ce79809dea3cae1d6da0c178b1b2d469f74ab02e3d1d1786364a23274794d309f179bac26221ecba85213050f79aadad38217bbd39062f27702edff21136d55bbe73f3fae9b7929de191b845f03def2ca80456cd1099faef7bdeb8563893d2ce4acf6069310a001d474da4ec28a00858ba301a6083652b38f834b67562cb94fed9946d9ce344682df01f3f9b76350c99eba354358faa4a609f07879d683278515e028eac49fab14e311e7c7a6e88f41b3e00f2f6013ef17a1b49eede29ef513e4eb81b4650f1715853e8eb9ae247c3363aa86581668a52c52c4cab96daaf38eab8a01b4064aebe9f8e8749fde3851bc79721061c3f75a61b0878ecb7072b25ddfa6ec4a68de612ebdacc3480fb6684865faf7f7a0b872a301e3027150cbaca8ed4aaca45ac39745d5f94332d0e02e1f24b7662946caa595a05b28d55671109efeb3ecec62760b80fb11e44e95ed885021cce7ec98707d1d264750f75c44d8af1ed6b76c281e3fb7dd566c04ef2db8483c6c5ebedb572da6c6baf998c4f551b18888835c44c92d35f562d6f910df2f9e73d7892eb7297c126a9d3bde546cee5ca9bbb87506d7999a00838c8d0edbdd4a6a6a6f143b7946dde48ac022a24c3177ec66a20ca15d70f2f554ea94a47870a165d033b97d1df10f0de419e63ba28136b587f35a4f09d62535e76f6c1bd64d794e716d5f9d6b51e7a18187dad8e1d9b53aba115f5600813ea0bf3597c584e66d44798dfc28b6026e986d4cedbbb6f9544ba2801c183e836593e691ecef8979d33b105e374ca373015d9399f0a4efcf114ff28a38afd309afb4c475b2af4eeee45ec49088c56d91bc298e619c7c6071e537b9c6c680636243e7326edc02799b6813b9e99b4df986932c8f88d08e3c5e576fc80884e0ea22c608e9cff9127fc03543903456ecb7bba438e361f81c7e34eb85a31727ca20534a3b76218ae2235fa8dcef28998e96769157fc18e0063bf8c1f76060f224db7b2b52ced992bca2d1bd2afe0caa42f411008640bc40c15db86e4abca9f1edc390c01101edd1498c6c1ff0fadb4c54e3afe025be5145ef436b6359775c31ff3880450999492eb358238da549e97173451832f34fad2826caa8db58c62df30b4fcb97ad2726eb1237fa6d0ed20a9684cd5ad62a5e9fff87e308255d4cc46472288d6be9d2236828f69c388350544e200a34ba27338fe635519cce9b3b1ef967368c5f58fcd67152e4a8e7e02fb1777ef3067426f9a3cfa7af2288b2c06e446ed53f6c9c6fc259c0ac4b730ec5f15f5f968fd32121bf266a330ecee9308ca6cce838b6b61d2207e594de66a87d8fafa8373d89918c6d7ddfcac26e8f845b40a7be5e53e7b3f0f80dce84252e462f3c59428241d64c679e880e645a45ae4a5173702a06736d39cd1fe0fc2c35d3eb512b59d5fb6d4cd0323e37d915cbb97fd223ee7db063a23b6011cc8dc5cdb88b87ab461664cfd9bbfb6af4d00fe447468acee4380d87dde451a0a77c1eab9c8fab00fc5ed97bc70d529d936ebfe5022c49906ae290bd89cabbd5c55c5696caac51dfd4103efd61acfc4a02bbd6f294bfba5eb138d5796ccb557b2bbee148193747bf799514cca5ea92385c38e49a604bd9b5f258aa5ac8d6934921725d990107bae7d1d69cf0266067398fbd9b7598fe912259363497a6e45e7559176d8379b952045ea4624527b99e68678a06107f3410030a7b24bbf0687ff76b32e628692f994a3e517ae360948f245c15e3fd26db10168c189b2ba6358a0e5833b7fa89f527093f1462e9d555564b54dc71df5d0ba5718ea401718ed7c2559de0a604f4430e78aa8fc5bc8c82419c0a8e85362ebab06316616933a96c68ae3ca20afdf0f1998eeff4ce4e441ea5bf5915c6cb559e7d6ea1cc6fdb59a846eef9a36fbab05e812d404b084f1ecfb9ff3138a5ddf30c9b9a501929c8369050547d805110dc1622ff66e43c251694f21023f717b7760c32878b01424be380fcca22b937b69506d09710d88308fab86e765146dfaa6d7589e3753dc06f139e896dd5c840fbd9d72eab57036d68179d19b00217a298a273208890bdfd6f1ba91c83114f6a35d1e6b313197ea21e6fb0002f19f3e5b696ad8e6e799aedeaa5ca552b7fdf24a9ee862aa6965f49ccdaccafbd1d171ce88720b21f41e5da801bed4aeb19bb84ef6efca3dcbf08459ddf0ca78d27fc603a5044faccd6fe6789bd748000103faccb656b0402f56847b59b37e4670296e7a948426519b8f6682b88113e96ab855b9aa6b6b9d7449d29bcbb9bd68eb81f7f192a92727fab00beaa8a7ed1768cf6f66e598aa7d1a0b4e8f37431fb45348d74986766d51737747c0a097835a99c3292a447111d3ed6547d0949361e8038d2ae39e2dea73b79a1960cc3b68e33c2b7edaa46bf455df3b42b321c1fe89c19acbae5ab8435efe43c8cca337d18356ef35fcbcfea329a2db57a9349add168bc05d9da81abaca57bb3d96af4f30931a1778cf6be41956045169b144b1d03e4d90b44bda88fa873ecdae6f0a12931f8d47aaa96a1d92510b3a43af239ba55a2752fdc04238f0fbe57d3c435f65f0412b00e24d969e98f291e51e1d81e3ca8ec26042cd3967581801b8083edfb15464caaca9161ae6f5b942e1be04d80de5c93632d64a8965c38487b561eb8847df1646f6e14635c390b1cff70bd3b2ccc1aebf5023d252909fdce4319f8825fecd037f73f8b758a00e5c50c05c2b028af279ebf530df832b48fbefb463fd6b180151823988d5e88640be78681f0a4dc7da5bf6c7885e0a6e25995672d8c61c26c64562c6acd96fbde839cd41051a36f258d3c2c76bac5d80261bd9b7ff15e2436780421f3cc7ed15242bd7dfeccd42353696a787121ea6c38251aae1585bea2d47ad9bd2a072e94c73aff874a330e8dcad9440077034d19c261b5ceb10346ab563d66e1ef65bdfad692293d09e223f6067e2e16a5b4cb86f85808c40c3c8792735818bb4aae1b59c11c17ef654d5eba9ad25363c7a32892507e9d8a089bfc2acbc9765ef81cd3a53a38e750b0e3fdc53c0b1960dfa864a846f5d21b56fa7aafbcdc3b1ba1dd92802d0ce3268acf83ca4443e2deeed8c3c7ff1a9ebb64215ac16745d3240aeda4aeec8bd45c24f2fb62881edd27a2a1b7f10ae3a6f8352c7b23bde432b662d6ef6b4ec3fa5a50110093cdb198e3a0f324fdd0f5cb11402a6b1ba4cf296ecf2af1e6e531381218793a9442c6a0e6d03daf5d789dbc5f040b808aa1873c12661b68a9a18628cec94791ce8b608486680fb2b2cab71f3c0414667b95f048476042d3374c6c9f6b49545cf47ccef97ccbc9e759978c1ded0664e7270f381fa5a39c730d2c58ad1f6f1087a4965831240ff846aaf234f8e2c655fe87fc93a6ce0e5e5501c7713231b50ad5b6706e4e962afc4052a4f880bb14f6ea4cc95ecb2795a9025e377014240d2f08a74898f23f4875740801bd2873aa78baa90080fead70507733138348ba9ba1b2392e0ab90098a373f0d735072a6aed876963fc7e3b3c060df0fc27d327b56059473e99e944f387ffe9591d071442d260ed7405a8c86f168d25d39601d0d400530a33337e8c6cb75da666943c8e41ff2acab96afa39642ec6136960144e5fb8e80e3060f3a4a846c24af336fd464b3b0a0e22d18cff540f0b8136678b3f8da7739c08c22ccef2261ad598f9f80f5c9778836c80f0ed394a9b499c450a0ca9da984a8069a090c78df8ab3236f6b2951db35c1f70055b2b2e8d1dd5f1cc4325d4e3b96140a42dd15b6827637d4fe3450ba63be3e7503e0be8e716f4de258aad48fce0baf76560ec513ffaa63044206094c17c0f61543ced53df452429ac9db10933558b53e4b640a8e2d7b1a11d414697dc7df29459a12d6c48be39ce85c81e58a2b3747d6d4de3a0be44e6de432a122000061369b59b2286182cf64c3381d3c69cb53156e497a122de7c30725165f23ec1ca501667896a11664a323ae061713d61b2d986929cdb2c1fc0f71068496acadc95e26327568b87a2010efd915d574bded7bfcbb52df2790cdc870178cb59e8c3185b2230fbe9f41d0016d11c1088972bcb5a0d67c11ae89813d758a41e182a6549d1bc8c16bc2037aa316af5cffa36ec4ecca4067d6addd157c4e52dc0579c4079a9b9980460b482b483f2e8894791f022fadd542bf7e3328e9302bb3bff946ffc18da9d08fd5f6e5c53435fa330e83957d430855435340ec17a2d1c62e3bf813fe92221f304a5aaaa48e3e2d24c2c4e4cdc413a84ad6dbefdb6ba799abef8957c123f9502f6e5fee5c50b0240591ad758af05a8fe00a69e29ea2ebfee0a9e7f9d462ff454e81855f20f792ced17a467ffc50916f03cee123d7f39655b4ef8a6c5bf47c1dea2d91d1be8da381db9c4021b3fdba81aee7b710b2e1601d43fc82942dd689424447faed07288d25ccbbcf3065bd9aeadb3479a73a4535f5e0fb351e5264436dbffd10bf183fba6f3c6f02895aac561245d7e7b3ae13ea130fb04351f1059935a8c666f17bf4024bb77db28494bd6789a3a8b9a2bae7c024510c0255ca3ebca9d66932cdec39d1f551687def065c96b5496f5faa08349f5f4c0f44458d7e99ba082c241d4c336604237c76", 0x1000, r4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2m1.009603826s ago: executing program 4 (id=3826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="4e4ab000000100ff7f000000000000f7af8a41c09f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 1m45.261027467s ago: executing program 35 (id=3826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="4e4ab000000100ff7f000000000000f7af8a41c09f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 1m10.502776653s ago: executing program 2 (id=3892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mkdir(0x0, 0xfffffffffffffffe) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i']) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x24004059}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102368, 0x18fe0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) write(r1, &(0x7f00000002c0)="180000000100", 0x6) 1m8.668958568s ago: executing program 2 (id=3893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m3.801309902s ago: executing program 2 (id=3895): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f08f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x1ff) sendto$inet(r4, &(0x7f00000004c0), 0x0, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) 1m2.40991604s ago: executing program 2 (id=3897): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a402d00383afefc010000000000000000000000000601ff020000000000000000000000000001010390780500000064bbcf090009ff0000000000000000000000ffff6401010100000000000000000000ffffac1e01018ff940c9431ec2cc"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000000000000020"], 0x24, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x8000000000b400, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffd9e5}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0x9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) 58.204251535s ago: executing program 2 (id=3900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001f0e762b056800080000faff", @ANYRESOCT=r1], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x24004084) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) fsopen(&(0x7f0000000300)='exfat\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 57.215955398s ago: executing program 2 (id=3902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="4e4ab000000100ff7f000000000000f7af8a41c09f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240), 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 42.095710994s ago: executing program 36 (id=3902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="4e4ab000000100ff7f000000000000f7af8a41c09f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000240), 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@empty, @loopback, @local}, 0xc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.705904038s ago: executing program 1 (id=3960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001f0e762b056800080000faff8141", @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x24004084) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) fsopen(&(0x7f0000000300)='exfat\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="a644aebac2f418a026", 0x9, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 1.651935477s ago: executing program 1 (id=3961): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|=\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6Y\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\"DnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xca\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x972\x80\x1c\n\xed\xb7\x8f\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c\x96\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x00\x00\x00', 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000094}, 0x40000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x80, 0x80000000, 0x27, @loopback, @mcast1, 0x700, 0x20, 0xffffff7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x29, 0x3, 0xd, 0x5, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x700, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00000008000100"/18, @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff07000008000600", @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB], 0x2e8}}, 0x48000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) 1.315470744s ago: executing program 1 (id=3962): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|=\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6Y\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\"DnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xca\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x972\x80\x1c\n\xed\xb7\x8f\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c\x96\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x00\x00\x00', 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000094}, 0x40000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x80, 0x80000000, 0x27, @loopback, @mcast1, 0x700, 0x20, 0xffffff7f, 0x9}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8020000", @ANYRES16=0x0, @ANYBLOB="00000008000100"/18, @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400c000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff07000008000600", @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB], 0x2e8}}, 0x48000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.000134856s ago: executing program 1 (id=3963): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 612.516831ms ago: executing program 1 (id=3964): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100010059000000040046000a0034000101010101010000080026006c090000300051802c000080110001009197caaa33f6a1d0bf0f4fa0bd00000011000100a3446ceb1c5a6525e8f56e2add000000"], 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) read$hidraw(r2, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4606ff78a002efff000000000002003e00cd000002cb030000000000004000000000000000ea02000000000000000001000500380006"], 0x78) 0s ago: executing program 1 (id=3965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/330], 0x4) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x3, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = socket$alg(0x26, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)={0x4f4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf, 0x0, "40f677d84a270de3f128fe"}, @NL80211_BAND_6GHZ={0x35, 0x3, "1e95da2b40d214d450d80bd1f72f7a114b2ab44d5a362fe138df2f1e0df942b800c9f826298cb79f849fddad64cdbabe9d"}, @NL80211_BAND_5GHZ={0x19, 0x1, "246fc18703aa0341d1b86209d908fc7598ddd58110"}, @NL80211_BAND_2GHZ={0x46f, 0x0, "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"}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) kernel console output (not intermixed with test programs): ck. [ 1707.755268][T18640] hsr_slave_0: entered promiscuous mode [ 1707.756007][T18640] hsr_slave_1: entered promiscuous mode [ 1707.756504][T18640] debugfs: 'hsr0' already exists in 'hsr' [ 1707.756519][T18640] Cannot create hsr debugfs directory [ 1707.757070][ T6220] bridge_slave_1: left allmulticast mode [ 1707.757088][ T6220] bridge_slave_1: left promiscuous mode [ 1707.757232][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.854361][ T6220] bridge_slave_0: left allmulticast mode [ 1707.854382][ T6220] bridge_slave_0: left promiscuous mode [ 1707.854561][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.944740][ T6220] bridge_slave_1: left allmulticast mode [ 1707.944761][ T6220] bridge_slave_1: left promiscuous mode [ 1707.944912][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.569778][T18773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1709.530557][ T6220] bridge_slave_0: left allmulticast mode [ 1709.530576][ T6220] bridge_slave_0: left promiscuous mode [ 1709.530742][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.068151][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.154181][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.195193][ T6220] bond0 (unregistering): Released all slaves [ 1711.393446][ T936] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1711.534128][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.543735][ T936] usb 5-1: Using ep0 maxpacket: 8 [ 1711.559880][ T936] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1711.559910][ T936] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1711.559930][ T936] usb 5-1: config 0 has no interface number 0 [ 1711.559976][ T936] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1711.560002][ T936] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1711.560028][ T936] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 8192, setting to 1024 [ 1711.561591][ T936] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1711.561620][ T936] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1711.561641][ T936] usb 5-1: Product: syz [ 1711.680683][ T936] usb 5-1: config 0 descriptor?? [ 1711.693913][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.726437][ T6220] bond0 (unregistering): Released all slaves [ 1712.783057][T18794] input: syz0 as /devices/virtual/input/input38 [ 1713.018875][ T936] usb 5-1: USB disconnect, device number 119 [ 1715.421387][T18807] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 1716.299873][T18817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1717.474544][T18820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1718.013563][ T6220] hsr_slave_0: left promiscuous mode [ 1718.074147][ T6220] hsr_slave_1: left promiscuous mode [ 1718.075129][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.141888][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.383262][ T6220] hsr_slave_0: left promiscuous mode [ 1718.428610][ T6220] hsr_slave_1: left promiscuous mode [ 1718.429529][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.494302][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.209157][T18837] binder: 18835:18837 ioctl c0306201 0 returned -14 [ 1720.213883][T18840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3406'. [ 1721.464668][T18845] vivid-007: disconnect [ 1722.245885][T18842] vivid-007: reconnect [ 1723.851975][T18858] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 1724.151557][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 1725.052355][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 1726.052719][T18880] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 1727.097635][T16227] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1727.414353][T16227] usb 5-1: Using ep0 maxpacket: 32 [ 1727.516075][T16227] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1727.516155][T16227] usb 5-1: config 0 has no interface number 0 [ 1727.516757][T16227] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1728.014532][T16227] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1728.014552][T16227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.014563][T16227] usb 5-1: Product: syz [ 1728.014571][T16227] usb 5-1: Manufacturer: syz [ 1728.014578][T16227] usb 5-1: SerialNumber: syz [ 1728.026338][T16227] usb 5-1: config 0 descriptor?? [ 1728.027549][T18882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1728.274222][T18882] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1728.561129][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1729.437645][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1729.441351][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1729.454151][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1729.462097][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1729.467865][T16227] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1729.666798][T16227] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1729.666838][T16227] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1729.667121][T16227] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1729.900293][T16227] usb 5-1: USB disconnect, device number 120 [ 1730.124345][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 1731.197054][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.197125][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.566408][ T5802] Bluetooth: hci4: command tx timeout [ 1731.583922][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 1734.640072][ T5802] Bluetooth: hci4: command tx timeout [ 1736.973404][T18936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3430'. [ 1737.278927][ T5802] Bluetooth: hci4: command tx timeout [ 1739.325717][ T5802] Bluetooth: hci4: command tx timeout [ 1739.428788][T18891] lo speed is unknown, defaulting to 1000 [ 1739.431234][T18891] lo speed is unknown, defaulting to 1000 [ 1742.238243][T18977] overlayfs: failed to clone upperpath [ 1742.834707][T18980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1745.060660][T19004] ufs: You didn't specify the type of your ufs filesystem [ 1745.060660][T19004] [ 1745.060660][T19004] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1745.060660][T19004] [ 1745.060660][T19004] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1745.060700][T19004] ufs: ufstype=old is supported read-only [ 1745.061860][T19004] ufs: ufs_fill_super(): bad magic number [ 1746.153988][T18891] chnl_net:caif_netlink_parms(): no params data found [ 1748.918032][T19012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3448'. [ 1750.353864][T18891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.372887][T18891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.373158][T18891] bridge_slave_0: entered allmulticast mode [ 1750.389511][T18891] bridge_slave_0: entered promiscuous mode [ 1750.399579][T18891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.399788][T18891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.400048][T18891] bridge_slave_1: entered allmulticast mode [ 1750.402473][T18891] bridge_slave_1: entered promiscuous mode [ 1750.886661][T18891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1750.938328][T18891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.066247][T18891] team0: Port device team_slave_0 added [ 1751.082306][T18891] team0: Port device team_slave_1 added [ 1751.225926][T17067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1751.231060][T17067] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1751.232409][T17067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1751.244324][T17067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1751.248432][T17067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1751.851534][T18891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.851549][T18891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.851564][T18891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.854168][T18891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.854184][T18891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.854211][T18891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.033525][ T6220] bridge_slave_1: left allmulticast mode [ 1752.033553][ T6220] bridge_slave_1: left promiscuous mode [ 1752.033801][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.127034][ T6220] bridge_slave_0: left allmulticast mode [ 1752.127055][ T6220] bridge_slave_0: left promiscuous mode [ 1752.127232][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.833211][T19067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1753.662289][ T5802] Bluetooth: hci2: command tx timeout [ 1754.566356][T19097] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 1754.888672][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1754.994107][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1755.116251][ T6220] bond0 (unregistering): Released all slaves [ 1755.183653][T19095] team0: No ports can be present during mode change [ 1756.333334][ T5802] Bluetooth: hci2: command tx timeout [ 1756.921397][T19068] lo speed is unknown, defaulting to 1000 [ 1757.544913][ T6220] hsr_slave_0: left promiscuous mode [ 1757.856723][T19120] netlink: 'syz.4.3461': attribute type 13 has an invalid length. [ 1757.856833][T19120] netlink: 'syz.4.3461': attribute type 17 has an invalid length. [ 1758.033438][ T6220] hsr_slave_1: left promiscuous mode [ 1758.034458][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.104669][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.363928][ T5802] Bluetooth: hci2: command tx timeout [ 1758.543385][ T9] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1758.795200][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1759.368920][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1759.368951][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.368970][ T9] usb 5-1: Product: syz [ 1759.368984][ T9] usb 5-1: Manufacturer: syz [ 1759.368998][ T9] usb 5-1: SerialNumber: syz [ 1759.407953][ T9] usb 5-1: config 0 descriptor?? [ 1759.427493][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1760.058527][ T9] gspca_ov534_9: reg_w failed -110 [ 1760.466471][ T5802] Bluetooth: hci2: command tx timeout [ 1760.493286][ T9] gspca_ov534_9: Unknown sensor 0000 [ 1760.493364][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1760.613330][ T5951] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1760.763324][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 1760.769075][ T5951] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1760.769113][ T5951] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1760.769133][ T5951] usb 3-1: config 0 has no interface number 0 [ 1760.769180][ T5951] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1760.769205][ T5951] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1760.769229][ T5951] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1760.771409][ T5951] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1760.771439][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1760.771459][ T5951] usb 3-1: Product: syz [ 1760.904298][ T5951] usb 3-1: config 0 descriptor?? [ 1760.954253][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 1761.164420][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 1761.602074][ T5951] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input39 [ 1761.763595][ T5951] input: failed to attach handler kbd to device input39, error: -5 [ 1761.793487][ T5951] usb 3-1: USB disconnect, device number 102 [ 1763.020422][T19169] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1763.140012][T19068] lo speed is unknown, defaulting to 1000 [ 1763.264360][T19120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1763.295129][T18891] hsr_slave_0: entered promiscuous mode [ 1763.298636][T18891] hsr_slave_1: entered promiscuous mode [ 1763.299829][T18891] debugfs: 'hsr0' already exists in 'hsr' [ 1763.299868][T18891] Cannot create hsr debugfs directory [ 1763.496847][ T5951] usb 5-1: USB disconnect, device number 121 [ 1763.815935][T11039] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1763.983463][T11039] usb 3-1: Using ep0 maxpacket: 8 [ 1763.990659][T11039] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1763.990688][T11039] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1763.990708][T11039] usb 3-1: config 0 has no interface number 0 [ 1763.990754][T11039] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1763.990780][T11039] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1763.990811][T11039] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1763.994919][T11039] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1763.994961][T11039] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1763.994980][T11039] usb 3-1: Product: syz [ 1764.016598][T11039] usb 3-1: config 0 descriptor?? [ 1765.202978][T11039] usb 3-1: USB disconnect, device number 103 [ 1766.673807][T19068] chnl_net:caif_netlink_parms(): no params data found [ 1766.781578][T18891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1767.224556][T18891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1767.774212][T18891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1768.831765][ T6220] bridge_slave_1: left allmulticast mode [ 1768.831794][ T6220] bridge_slave_1: left promiscuous mode [ 1768.832045][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.915351][ T6220] bridge_slave_0: left allmulticast mode [ 1768.915379][ T6220] bridge_slave_0: left promiscuous mode [ 1768.915675][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.341517][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1772.476348][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1772.579107][ T6220] bond0 (unregistering): Released all slaves [ 1772.633760][T18891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1775.038269][T19275] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3487'. [ 1777.144543][ T6220] hsr_slave_0: left promiscuous mode [ 1779.074230][ T6220] hsr_slave_1: left promiscuous mode [ 1779.075211][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.123636][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.213906][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 1782.313876][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 1783.123973][T19068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.124093][T19068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.124297][T19068] bridge_slave_0: entered allmulticast mode [ 1783.159804][T19068] bridge_slave_0: entered promiscuous mode [ 1783.188882][T19068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.189004][T19068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.189245][T19068] bridge_slave_1: entered allmulticast mode [ 1783.206946][T19068] bridge_slave_1: entered promiscuous mode [ 1785.075735][T19068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.106125][T19068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.233681][T19068] team0: Port device team_slave_0 added [ 1785.237997][T19068] team0: Port device team_slave_1 added [ 1785.260229][T19334] netlink: 'syz.4.3500': attribute type 1 has an invalid length. [ 1785.602272][T19068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.602284][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.602298][T19068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1785.606187][T19068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1785.606205][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1785.606231][T19068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.692500][T19068] hsr_slave_0: entered promiscuous mode [ 1786.700444][T19068] hsr_slave_1: entered promiscuous mode [ 1786.738174][T19068] debugfs: 'hsr0' already exists in 'hsr' [ 1786.738353][T19068] Cannot create hsr debugfs directory [ 1786.823551][T11039] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1787.038395][T11039] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1787.038426][T11039] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.038445][T11039] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1787.038474][T11039] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.040295][T11039] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1787.040317][T11039] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1787.040328][T11039] usb 3-1: Product: syz [ 1787.040335][T11039] usb 3-1: Manufacturer: syz [ 1787.057479][T18891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1787.087038][T11039] cdc_wdm 3-1:1.0: skipping garbage [ 1787.087060][T11039] cdc_wdm 3-1:1.0: skipping garbage [ 1787.162341][T11039] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1787.162357][T11039] cdc_wdm 3-1:1.0: Unknown control protocol [ 1787.344902][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.344930][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.345137][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.345149][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.345336][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.345347][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.345579][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.345591][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.346010][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.346035][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.346277][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.346297][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.349167][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.349192][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.349370][T16227] usb 3-1: USB disconnect, device number 104 [ 1787.349456][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1787.349476][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1787.349493][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1787.556430][T18891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.578673][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.580264][T16868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.670305][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.670539][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.742619][T19352] team0: No ports can be present during mode change [ 1788.967287][T19068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1789.133241][T11039] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1789.141069][T19068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1789.174984][T19068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1789.224209][T19068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1789.293329][T11039] usb 3-1: Using ep0 maxpacket: 16 [ 1789.295246][T11039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.295278][T11039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.295308][T11039] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1789.295321][T11039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.298945][T11039] usb 3-1: config 0 descriptor?? [ 1789.411451][T19068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.434905][T19068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.465504][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.465727][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.763075][T11039] corsair 0003:1B1C:1B02.001F: unknown main item tag 0x0 [ 1789.763113][T11039] corsair 0003:1B1C:1B02.001F: unknown main item tag 0x0 [ 1789.763141][T11039] corsair 0003:1B1C:1B02.001F: unknown main item tag 0x0 [ 1789.763966][T11039] corsair 0003:1B1C:1B02.001F: unknown main item tag 0x0 [ 1789.763996][T11039] corsair 0003:1B1C:1B02.001F: unknown main item tag 0x0 [ 1789.784358][T11039] corsair 0003:1B1C:1B02.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1789.964606][T11039] corsair 0003:1B1C:1B02.001F: Failed to get K90 initial state (error 0). [ 1789.972511][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.972636][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.566601][ T9] usb 3-1: USB disconnect, device number 105 [ 1790.867114][T17067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1790.901366][T17067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1790.902884][T17067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1790.943897][T17067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1790.964513][T17067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1791.223487][ T5947] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1791.896099][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.897086][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.123299][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 1792.125895][ T5947] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1792.125923][ T5947] usb 5-1: config 0 has no interface number 0 [ 1792.125970][ T5947] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1792.125993][ T5947] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1792.129000][ T5947] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1792.129029][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.129050][ T5947] usb 5-1: Product: syz [ 1792.129065][ T5947] usb 5-1: Manufacturer: syz [ 1792.129079][ T5947] usb 5-1: SerialNumber: syz [ 1792.266780][ T5947] usb 5-1: config 0 descriptor?? [ 1792.312039][ T5947] asix 5-1:0.188: probe with driver asix failed with error -22 [ 1792.367261][T19381] lo speed is unknown, defaulting to 1000 [ 1793.010682][T17067] Bluetooth: hci4: command tx timeout [ 1795.099564][T17067] Bluetooth: hci4: command tx timeout [ 1795.130113][T11572] usb 5-1: USB disconnect, device number 122 [ 1795.172502][T19381] lo speed is unknown, defaulting to 1000 [ 1795.536188][T19412] netlink: 'syz.4.3520': attribute type 13 has an invalid length. [ 1795.536232][T19412] netlink: 'syz.4.3520': attribute type 17 has an invalid length. [ 1795.973376][T11572] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1796.033402][T19412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1796.143333][T11572] usb 5-1: Using ep0 maxpacket: 32 [ 1796.149805][T11572] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1796.149836][T11572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.149856][T11572] usb 5-1: Product: syz [ 1796.149871][T11572] usb 5-1: Manufacturer: syz [ 1796.149886][T11572] usb 5-1: SerialNumber: syz [ 1796.198279][T11572] usb 5-1: config 0 descriptor?? [ 1796.215520][T11572] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1796.751855][T11572] gspca_ov534_9: reg_w failed -110 [ 1797.348926][T17067] Bluetooth: hci4: command tx timeout [ 1797.403382][T11572] gspca_ov534_9: Unknown sensor 0000 [ 1797.404451][T11572] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1798.434136][T11572] usb 5-1: USB disconnect, device number 123 [ 1799.258625][T19381] chnl_net:caif_netlink_parms(): no params data found [ 1799.693273][T17067] Bluetooth: hci4: command tx timeout [ 1801.351740][T19068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1801.408145][T19381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.409503][T19381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.409754][T19381] bridge_slave_0: entered allmulticast mode [ 1801.440271][T19381] bridge_slave_0: entered promiscuous mode [ 1801.452944][T19381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.463536][T19381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.463812][T19381] bridge_slave_1: entered allmulticast mode [ 1801.466487][T19381] bridge_slave_1: entered promiscuous mode [ 1801.528046][ T2220] bridge_slave_1: left allmulticast mode [ 1801.528077][ T2220] bridge_slave_1: left promiscuous mode [ 1801.528378][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.456581][ T2220] bridge_slave_0: left allmulticast mode [ 1802.456611][ T2220] bridge_slave_0: left promiscuous mode [ 1802.456893][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.663303][T11039] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1802.813330][T11039] usb 3-1: Using ep0 maxpacket: 16 [ 1802.815343][T11039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.815373][T11039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.815412][T11039] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1802.815434][T11039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.313915][T11039] usb 3-1: config 0 descriptor?? [ 1803.730929][T11039] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 1803.730967][T11039] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 1803.730993][T11039] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 1803.731018][T11039] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 1803.731043][T11039] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 1803.746443][T11039] corsair 0003:1B1C:1B02.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1803.953367][T11039] corsair 0003:1B1C:1B02.0020: Failed to get K90 initial state (error 0). [ 1804.070202][T19485] netlink: 'syz.4.3533': attribute type 1 has an invalid length. [ 1804.133882][T11572] usb 3-1: USB disconnect, device number 106 [ 1804.319726][T19483] fido_id[19483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1806.245911][T19496] netlink: 'syz.2.3535': attribute type 13 has an invalid length. [ 1806.245927][T19496] netlink: 'syz.2.3535': attribute type 17 has an invalid length. [ 1806.563541][T11572] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1806.713368][T11572] usb 3-1: Using ep0 maxpacket: 32 [ 1806.772468][T11572] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1806.772488][T11572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.772500][T11572] usb 3-1: Product: syz [ 1806.772507][T11572] usb 3-1: Manufacturer: syz [ 1806.772515][T11572] usb 3-1: SerialNumber: syz [ 1806.789201][T11572] usb 3-1: config 0 descriptor?? [ 1806.815909][T11572] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1806.853925][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.905031][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.947634][ T2220] bond0 (unregistering): Released all slaves [ 1807.244299][T19496] team0: left promiscuous mode [ 1807.244319][T19496] team0: left allmulticast mode [ 1807.318004][T19496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1807.326363][T11572] gspca_ov534_9: reg_w failed -110 [ 1807.881373][ T2220] hsr_slave_0: left promiscuous mode [ 1807.893778][T11572] gspca_ov534_9: Unknown sensor 0000 [ 1807.894704][T11572] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1808.143761][ T2220] hsr_slave_1: left promiscuous mode [ 1808.144567][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.182420][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.261839][T11572] usb 3-1: USB disconnect, device number 107 [ 1808.306295][T19516] netlink: 'syz.4.3539': attribute type 13 has an invalid length. [ 1808.306429][T19516] netlink: 'syz.4.3539': attribute type 17 has an invalid length. [ 1808.793426][T11039] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1808.943306][T11039] usb 5-1: Using ep0 maxpacket: 32 [ 1808.983360][T11039] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1808.983389][T11039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.983408][T11039] usb 5-1: Product: syz [ 1808.983421][T11039] usb 5-1: Manufacturer: syz [ 1808.983434][T11039] usb 5-1: SerialNumber: syz [ 1808.990475][T11039] usb 5-1: config 0 descriptor?? [ 1808.997510][T11039] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1809.507841][T11039] gspca_ov534_9: reg_w failed -110 [ 1809.794231][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1810.063539][T11039] gspca_ov534_9: Unknown sensor 0000 [ 1810.063642][T11039] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1810.173954][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1813.172721][T19530] afs: Unknown parameter 'dy' [ 1814.301753][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1814.323569][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1814.332203][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1814.453049][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1814.455799][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1814.523842][T19516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1814.551278][T19381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.580326][T19381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.722318][T11039] usb 5-1: USB disconnect, device number 124 [ 1814.748577][T19381] team0: Port device team_slave_0 added [ 1814.766271][T19532] lo speed is unknown, defaulting to 1000 [ 1814.780280][T19381] team0: Port device team_slave_1 added [ 1814.780355][T19532] lo speed is unknown, defaulting to 1000 [ 1814.964282][T19381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.964299][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.964326][T19381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.026332][T19381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.026350][T19381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.026378][T19381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.409794][T19381] hsr_slave_0: entered promiscuous mode [ 1815.411101][T19381] hsr_slave_1: entered promiscuous mode [ 1815.411831][T19381] debugfs: 'hsr0' already exists in 'hsr' [ 1815.411851][T19381] Cannot create hsr debugfs directory [ 1816.611220][ T5802] Bluetooth: hci5: command tx timeout [ 1816.636973][T11572] libceph: connect (1)[c::]:6789 error -101 [ 1816.637106][T11572] libceph: mon0 (1)[c::]:6789 connect error [ 1816.824093][T19557] ceph: No mds server is up or the cluster is laggy [ 1818.146928][T19579] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1818.703618][T17067] Bluetooth: hci5: command tx timeout [ 1820.796604][T17067] Bluetooth: hci5: command tx timeout [ 1821.623318][T11039] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1821.793267][T11039] usb 3-1: Using ep0 maxpacket: 32 [ 1821.795476][T11039] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1821.795503][T11039] usb 3-1: config 0 has no interface number 0 [ 1821.795545][T11039] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1821.799380][T11039] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1821.799409][T11039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.799429][T11039] usb 3-1: Product: syz [ 1821.799443][T11039] usb 3-1: Manufacturer: syz [ 1821.799458][T11039] usb 3-1: SerialNumber: syz [ 1821.879746][T11039] usb 3-1: config 0 descriptor?? [ 1821.894426][T11039] smsc75xx v1.0.0 [ 1822.846178][T16227] libceph: connect (1)[c::]:6789 error -101 [ 1822.846382][T16227] libceph: mon0 (1)[c::]:6789 connect error [ 1822.846790][T17067] Bluetooth: hci5: command tx timeout [ 1822.976962][T19609] ceph: No mds server is up or the cluster is laggy [ 1823.105631][T19532] chnl_net:caif_netlink_parms(): no params data found [ 1823.264073][T11039] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1823.264103][T11039] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1824.109121][T11039] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1824.109155][T11039] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1824.109176][T11039] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1824.109480][T11039] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 1825.376826][T16641] usb 3-1: USB disconnect, device number 108 [ 1827.300335][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.300555][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.300788][T19532] bridge_slave_0: entered allmulticast mode [ 1827.313500][T19532] bridge_slave_0: entered promiscuous mode [ 1829.638591][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.638717][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.638965][T19532] bridge_slave_1: entered allmulticast mode [ 1829.642523][T19532] bridge_slave_1: entered promiscuous mode [ 1830.316169][T16641] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1830.962946][T16641] usb 5-1: Using ep0 maxpacket: 32 [ 1830.964762][T16641] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1830.964786][T16641] usb 5-1: config 0 has no interface number 0 [ 1830.964827][T16641] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1830.993427][T16641] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1830.993462][T16641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.993480][T16641] usb 5-1: Product: syz [ 1830.993493][T16641] usb 5-1: Manufacturer: syz [ 1830.993505][T16641] usb 5-1: SerialNumber: syz [ 1831.006571][T16641] usb 5-1: config 0 descriptor?? [ 1831.021617][T16641] smsc75xx v1.0.0 [ 1831.322637][T19532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.380056][T19532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.398212][T19696] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 1831.654491][T16641] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1831.654511][T16641] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1832.122078][T19532] team0: Port device team_slave_0 added [ 1832.164348][T19532] team0: Port device team_slave_1 added [ 1832.504091][T16641] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1832.504113][T16641] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1832.504124][T16641] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1832.504308][T16641] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1832.592834][T19532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.592851][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.592871][T19532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1832.651786][T19532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1832.651802][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.651825][T19532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.431002][T19701] team0: Unable to change to the same mode the team is in [ 1833.815935][T16227] usb 5-1: USB disconnect, device number 125 [ 1834.176535][T19532] hsr_slave_0: entered promiscuous mode [ 1834.184816][T19532] hsr_slave_1: entered promiscuous mode [ 1834.185685][T19532] debugfs: 'hsr0' already exists in 'hsr' [ 1834.185710][T19532] Cannot create hsr debugfs directory [ 1834.718421][T19714] sp0: Synchronizing with TNC [ 1835.406196][ T2220] bridge_slave_1: left allmulticast mode [ 1835.406225][ T2220] bridge_slave_1: left promiscuous mode [ 1835.406468][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.357141][ T2220] bridge_slave_0: left allmulticast mode [ 1836.357171][ T2220] bridge_slave_0: left promiscuous mode [ 1836.357458][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.493959][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1839.602040][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1839.678810][ T2220] bond0 (unregistering): Released all slaves [ 1839.823322][T19381] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1839.990150][T19381] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1841.234378][T19381] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1842.524722][T19381] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1842.733436][T16227] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1842.883344][T16227] usb 5-1: Using ep0 maxpacket: 32 [ 1842.886130][T16227] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1842.886158][T16227] usb 5-1: config 0 has no interface number 0 [ 1842.886209][T16227] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1842.889276][T16227] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1842.889306][T16227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.889327][T16227] usb 5-1: Product: syz [ 1842.889342][T16227] usb 5-1: Manufacturer: syz [ 1842.889357][T16227] usb 5-1: SerialNumber: syz [ 1842.970805][T16227] usb 5-1: config 0 descriptor?? [ 1843.067818][ T2220] hsr_slave_0: left promiscuous mode [ 1843.131156][T16227] smsc75xx v1.0.0 [ 1843.139090][ T2220] hsr_slave_1: left promiscuous mode [ 1843.139954][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1843.164839][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1843.433558][T19794] netlink: 'syz.1.3589': attribute type 1 has an invalid length. [ 1843.604728][T16227] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1843.604759][T16227] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1844.422358][T16227] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1844.422378][T16227] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1844.422389][T16227] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1844.422565][T16227] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1845.717542][T16227] usb 5-1: USB disconnect, device number 126 [ 1845.874781][T19819] overlayfs: missing 'lowerdir' [ 1851.002553][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1851.326483][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1853.075053][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1853.091278][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1853.204528][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1853.229577][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1853.246322][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1853.359942][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.360018][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.385507][T19854] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1855.733326][ T5802] Bluetooth: hci2: command tx timeout [ 1855.805044][T19869] Driver unsupported XDP return value 0 on prog (id 155) dev N/A, expect packet loss! [ 1856.224509][ T936] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1856.447685][T19381] kthread_run failed with err -4 [ 1856.583503][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 1856.597866][ T936] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1856.597895][ T936] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1856.597916][ T936] usb 3-1: config 0 has no interface number 0 [ 1856.597961][ T936] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1856.597987][ T936] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1856.598012][ T936] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1856.599488][ T936] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1856.599517][ T936] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1856.599538][ T936] usb 3-1: Product: syz [ 1856.730529][ T936] usb 3-1: config 0 descriptor?? [ 1856.808368][T19850] lo speed is unknown, defaulting to 1000 [ 1857.017945][T19850] lo speed is unknown, defaulting to 1000 [ 1857.417106][ T936] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input42 [ 1857.658198][ T936] input: failed to attach handler kbd to device input42, error: -5 [ 1857.684180][T19887] netlink: 'syz.1.3609': attribute type 13 has an invalid length. [ 1857.684197][T19887] netlink: 'syz.1.3609': attribute type 17 has an invalid length. [ 1857.710539][ T936] usb 3-1: USB disconnect, device number 109 [ 1857.811184][ T5802] Bluetooth: hci2: command tx timeout [ 1857.816644][T19887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1859.928505][ T5802] Bluetooth: hci2: command tx timeout [ 1862.191963][ T5802] Bluetooth: hci2: command tx timeout [ 1864.741452][T19936] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1865.309654][T19927] netlink: 'syz.2.3616': attribute type 13 has an invalid length. [ 1865.309671][T19927] netlink: 'syz.2.3616': attribute type 17 has an invalid length. [ 1865.500900][T19927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1865.687264][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1865.896793][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1865.929349][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1865.929381][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.929402][ T9] usb 3-1: Product: syz [ 1865.929417][ T9] usb 3-1: Manufacturer: syz [ 1865.929431][ T9] usb 3-1: SerialNumber: syz [ 1865.937650][ T9] usb 3-1: config 0 descriptor?? [ 1865.948062][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1866.172576][ T9] gspca_ov534_9: reg_w failed -71 [ 1866.268449][T19850] chnl_net:caif_netlink_parms(): no params data found [ 1866.603282][ T9] gspca_ov534_9: Unknown sensor 0000 [ 1866.603378][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1866.605951][ T9] usb 3-1: USB disconnect, device number 110 [ 1869.337130][T19968] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 1871.698694][T19532] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1871.842763][T19850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.842892][T19850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.843100][T19850] bridge_slave_0: entered allmulticast mode [ 1871.865919][T19850] bridge_slave_0: entered promiscuous mode [ 1871.894015][T19532] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1873.229894][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1873.230190][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1873.244876][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1873.245095][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1873.324465][T19850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.324590][T19850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.324855][T19850] bridge_slave_1: entered allmulticast mode [ 1873.331651][T19850] bridge_slave_1: entered promiscuous mode [ 1873.404116][T19987] ceph: No mds server is up or the cluster is laggy [ 1873.608968][T19850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.635292][T19850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.792131][T19850] team0: Port device team_slave_0 added [ 1873.878472][T19850] team0: Port device team_slave_1 added [ 1874.255176][T19850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.255195][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.255223][T19850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.307236][T19850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.307254][T19850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.307280][T19850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.098023][T17067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1875.244839][T20014] ufs: You didn't specify the type of your ufs filesystem [ 1875.244839][T20014] [ 1875.244839][T20014] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1875.244839][T20014] [ 1875.244839][T20014] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1875.245061][T20014] ufs: ufstype=old is supported read-only [ 1875.247469][T20014] ufs: ufs_fill_super(): bad magic number [ 1875.933810][T17067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1875.967378][T17067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1875.969569][T17067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1875.970537][T17067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1876.184446][T20022] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 1876.473509][ T2220] bridge_slave_1: left allmulticast mode [ 1876.473528][ T2220] bridge_slave_1: left promiscuous mode [ 1876.473676][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.704815][ T2220] bridge_slave_0: left allmulticast mode [ 1876.704845][ T2220] bridge_slave_0: left promiscuous mode [ 1876.705113][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.844130][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1878.014161][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1878.044041][T17067] Bluetooth: hci4: command tx timeout [ 1878.241978][ T2220] bond0 (unregistering): Released all slaves [ 1878.287216][T19850] hsr_slave_0: entered promiscuous mode [ 1878.288140][T19850] hsr_slave_1: entered promiscuous mode [ 1878.289329][T19850] debugfs: 'hsr0' already exists in 'hsr' [ 1878.292334][T19850] Cannot create hsr debugfs directory [ 1879.770618][T20009] lo speed is unknown, defaulting to 1000 [ 1879.905448][T20009] lo speed is unknown, defaulting to 1000 [ 1880.062085][ T2220] hsr_slave_0: left promiscuous mode [ 1880.113655][ T2220] hsr_slave_1: left promiscuous mode [ 1880.114320][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.123522][T17067] Bluetooth: hci4: command tx timeout [ 1880.145190][T20041] netlink: 'syz.4.3638': attribute type 1 has an invalid length. [ 1880.258845][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.453668][T20046] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 1882.203387][T17067] Bluetooth: hci4: command tx timeout [ 1883.563918][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1885.086754][T17067] Bluetooth: hci4: command tx timeout [ 1885.405108][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1886.776248][T20083] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 1887.483280][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1888.433338][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1888.435185][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1888.435212][ T9] usb 3-1: config 0 has no interface number 0 [ 1888.435263][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1888.437875][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1888.437900][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.437915][ T9] usb 3-1: Product: syz [ 1888.437924][ T9] usb 3-1: Manufacturer: syz [ 1888.437932][ T9] usb 3-1: SerialNumber: syz [ 1888.441321][ T9] usb 3-1: config 0 descriptor?? [ 1888.442892][T20085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1888.653650][T20085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1889.263904][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1889.264069][ T9] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1889.267382][ T9] usb 3-1: USB disconnect, device number 111 [ 1897.049776][T20009] chnl_net:caif_netlink_parms(): no params data found [ 1902.017796][T20009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.017922][T20009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.018168][T20009] bridge_slave_0: entered allmulticast mode [ 1902.033468][T20009] bridge_slave_0: entered promiscuous mode [ 1902.123529][T20009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.123639][T20009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.123888][T20009] bridge_slave_1: entered allmulticast mode [ 1902.126626][T20009] bridge_slave_1: entered promiscuous mode [ 1902.421937][T20184] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 1904.454956][T20009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1904.496476][T20009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1904.879739][ T5912] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1905.733511][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1905.751014][ T5912] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1905.751031][ T5912] usb 5-1: config 0 has no interface number 0 [ 1905.751059][ T5912] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1905.759821][ T5912] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1905.759851][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.759862][ T5912] usb 5-1: Product: syz [ 1905.759870][ T5912] usb 5-1: Manufacturer: syz [ 1905.759877][ T5912] usb 5-1: SerialNumber: syz [ 1905.814757][ T5912] usb 5-1: config 0 descriptor?? [ 1905.815612][T20196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1906.801132][T20196] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1907.298973][T20009] team0: Port device team_slave_0 added [ 1907.300074][T19850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1907.378557][T20009] team0: Port device team_slave_1 added [ 1907.413466][ T5912] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1907.413742][ T5912] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1907.479311][T19850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1907.481719][ T5912] usb 5-1: USB disconnect, device number 127 [ 1907.603470][T19850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1907.934355][T20009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.934372][T20009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.934401][T20009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.935122][T19850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1908.018654][T20009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.018671][T20009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.018696][T20009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.529377][T20009] hsr_slave_0: entered promiscuous mode [ 1910.530670][T20009] hsr_slave_1: entered promiscuous mode [ 1910.569541][T20009] debugfs: 'hsr0' already exists in 'hsr' [ 1910.569571][T20009] Cannot create hsr debugfs directory [ 1912.447204][T20252] netlink: 'syz.1.3687': attribute type 1 has an invalid length. [ 1912.597105][ T2220] bridge_slave_1: left allmulticast mode [ 1912.597136][ T2220] bridge_slave_1: left promiscuous mode [ 1912.597377][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.728672][ T2220] bridge_slave_0: left allmulticast mode [ 1912.728700][ T2220] bridge_slave_0: left promiscuous mode [ 1912.728963][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.816917][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1913.833654][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1913.839045][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1913.841373][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1913.842599][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1913.994218][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.106978][T20277] netlink: 'syz.4.3689': attribute type 1 has an invalid length. [ 1914.157817][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.720785][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.720827][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.749314][ T2220] bond0 (unregistering): Released all slaves [ 1916.465386][ T5802] Bluetooth: hci2: command tx timeout [ 1917.256899][ T2220] hsr_slave_0: left promiscuous mode [ 1917.280121][ T2220] hsr_slave_1: left promiscuous mode [ 1917.282043][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1917.334221][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1917.955001][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1918.115606][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1918.524000][ T5802] Bluetooth: hci2: command tx timeout [ 1918.526787][T20305] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 1919.759437][T20270] lo speed is unknown, defaulting to 1000 [ 1919.760851][T20270] lo speed is unknown, defaulting to 1000 [ 1920.623610][T17067] Bluetooth: hci2: command tx timeout [ 1923.003539][T17067] Bluetooth: hci2: command tx timeout [ 1923.043253][T16227] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1923.234133][T16227] usb 3-1: Using ep0 maxpacket: 8 [ 1923.237439][T16227] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1923.237456][T16227] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1923.237467][T16227] usb 3-1: config 0 has no interface number 0 [ 1923.237492][T16227] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1923.237512][T16227] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1923.237525][T16227] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1923.238396][T16227] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1923.238410][T16227] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1923.238421][T16227] usb 3-1: Product: syz [ 1923.241753][T16227] usb 3-1: config 0 descriptor?? [ 1923.646841][T20270] chnl_net:caif_netlink_parms(): no params data found [ 1924.363813][T16227] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input43 [ 1925.093485][T20270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.093611][T20270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.093862][T20270] bridge_slave_0: entered allmulticast mode [ 1925.096408][T20270] bridge_slave_0: entered promiscuous mode [ 1925.159255][T16227] input: failed to attach handler kbd to device input43, error: -5 [ 1925.186284][T16227] usb 3-1: USB disconnect, device number 112 [ 1925.548388][T20270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.548506][T20270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.548837][T20270] bridge_slave_1: entered allmulticast mode [ 1925.551604][T20270] bridge_slave_1: entered promiscuous mode [ 1931.259476][T20270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.299949][T20270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.626458][T20406] netlink: 'syz.2.3719': attribute type 13 has an invalid length. [ 1932.626474][T20406] netlink: 'syz.2.3719': attribute type 17 has an invalid length. [ 1933.028862][T20406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1933.083698][T16227] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1934.013305][T16227] usb 3-1: Using ep0 maxpacket: 32 [ 1934.056828][T16227] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1934.056858][T16227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.056878][T16227] usb 3-1: Product: syz [ 1934.056892][T16227] usb 3-1: Manufacturer: syz [ 1934.056907][T16227] usb 3-1: SerialNumber: syz [ 1934.113566][T20009] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1934.124157][T16227] usb 3-1: config 0 descriptor?? [ 1935.238854][T16227] usb 3-1: can't set config #0, error -71 [ 1935.252580][T16227] usb 3-1: USB disconnect, device number 113 [ 1935.405501][T20270] team0: Port device team_slave_0 added [ 1935.406177][T20009] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1935.461983][T20270] team0: Port device team_slave_1 added [ 1935.788150][T20270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1935.788169][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1935.788185][T20270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1935.794318][T20270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1935.794335][T20270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1935.794361][T20270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1935.906626][T20270] hsr_slave_0: entered promiscuous mode [ 1935.907433][T20270] hsr_slave_1: entered promiscuous mode [ 1935.907979][T20270] debugfs: 'hsr0' already exists in 'hsr' [ 1935.908001][T20270] Cannot create hsr debugfs directory [ 1936.732530][ T2220] bridge_slave_1: left allmulticast mode [ 1936.732571][ T2220] bridge_slave_1: left promiscuous mode [ 1936.732823][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.818109][ T2220] bridge_slave_0: left allmulticast mode [ 1936.818139][ T2220] bridge_slave_0: left promiscuous mode [ 1936.818429][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.766046][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1939.388764][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1939.392397][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1939.396950][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1939.443402][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1939.540489][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1939.540633][ T5912] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1939.540654][ T5912] usb 5-1: config 0 has no interface number 0 [ 1939.541146][ T5912] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1939.541251][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1940.416163][ T5912] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1940.416192][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.416210][ T5912] usb 5-1: Product: syz [ 1940.427246][ T5912] usb 5-1: config 0 descriptor?? [ 1940.433321][ T5912] usb 5-1: can't set config #0, error -71 [ 1940.439079][ T5912] usb 5-1: USB disconnect, device number 2 [ 1940.709062][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1942.226184][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1942.266565][ T2220] bond0 (unregistering): Released all slaves [ 1942.478609][T17067] Bluetooth: hci4: command tx timeout [ 1943.414711][ T2220] hsr_slave_0: left promiscuous mode [ 1943.474782][ T2220] hsr_slave_1: left promiscuous mode [ 1943.475707][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1943.721700][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1944.382310][T20476] delete_channel: no stack [ 1944.523229][T17067] Bluetooth: hci4: command tx timeout [ 1946.343274][ T5947] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1946.538101][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 1946.540490][ T5947] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1946.540519][ T5947] usb 3-1: config 0 has no interface number 0 [ 1946.540569][ T5947] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1946.563870][ T5947] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1946.563902][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.563921][ T5947] usb 3-1: Product: syz [ 1946.563933][ T5947] usb 3-1: Manufacturer: syz [ 1946.563946][ T5947] usb 3-1: SerialNumber: syz [ 1946.603204][T17067] Bluetooth: hci4: command tx timeout [ 1946.615642][ T5947] usb 3-1: config 0 descriptor?? [ 1946.616609][T20503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1946.694563][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1946.853011][T20503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1946.939155][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1947.492968][ T5947] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1947.503744][ T5947] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1947.536696][ T5947] usb 3-1: USB disconnect, device number 114 [ 1947.894245][T20447] lo speed is unknown, defaulting to 1000 [ 1947.899549][T20474] warning: `syz.4.3732' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1947.999308][T20447] lo speed is unknown, defaulting to 1000 [ 1949.648989][T17067] Bluetooth: hci4: command tx timeout [ 1950.342365][T20447] chnl_net:caif_netlink_parms(): no params data found [ 1952.251563][T20270] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1952.299883][T20447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.299994][T20447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.300116][T20447] bridge_slave_0: entered allmulticast mode [ 1952.301477][T20447] bridge_slave_0: entered promiscuous mode [ 1952.330464][T20270] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1952.350787][T20447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.350865][T20447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.350989][T20447] bridge_slave_1: entered allmulticast mode [ 1952.352364][T20447] bridge_slave_1: entered promiscuous mode [ 1952.384302][T20270] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1952.448005][T20270] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1952.579408][T20447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1952.608427][T20447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1953.120534][T20447] team0: Port device team_slave_0 added [ 1953.314430][T20447] team0: Port device team_slave_1 added [ 1953.395619][T20447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1953.395631][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.395645][T20447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1953.410697][T20447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1953.410715][T20447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1953.410741][T20447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.453276][ T5912] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1953.603196][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 1953.605736][ T5912] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1953.605764][ T5912] usb 3-1: config 0 has no interface number 0 [ 1953.605819][ T5912] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1953.610861][ T5912] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1953.610891][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.610912][ T5912] usb 3-1: Product: syz [ 1953.610927][ T5912] usb 3-1: Manufacturer: syz [ 1953.610942][ T5912] usb 3-1: SerialNumber: syz [ 1953.622536][ T5912] usb 3-1: config 0 descriptor?? [ 1953.627708][T20581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1953.839724][T20581] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1954.411724][T20447] hsr_slave_0: entered promiscuous mode [ 1954.413015][T20447] hsr_slave_1: entered promiscuous mode [ 1954.436172][T20447] debugfs: 'hsr0' already exists in 'hsr' [ 1954.436201][T20447] Cannot create hsr debugfs directory [ 1954.455419][ T5912] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1954.455661][ T5912] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1954.475884][ T5912] usb 3-1: USB disconnect, device number 115 [ 1954.898665][T20270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.998427][T20270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1955.212251][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.212328][T15526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.300922][T15526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.301169][T15526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1956.242662][T20601] delete_channel: no stack [ 1956.546148][ T2220] bridge_slave_1: left allmulticast mode [ 1956.546168][ T2220] bridge_slave_1: left promiscuous mode [ 1956.546317][ T2220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.855622][ T2220] bridge_slave_0: left allmulticast mode [ 1956.855652][ T2220] bridge_slave_0: left promiscuous mode [ 1956.855908][ T2220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.193301][ T5912] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1958.353245][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 1958.355542][ T5912] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1958.355568][ T5912] usb 3-1: config 0 has no interface number 0 [ 1958.355620][ T5912] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1958.358835][ T5912] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1958.358862][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.358882][ T5912] usb 3-1: Product: syz [ 1958.358897][ T5912] usb 3-1: Manufacturer: syz [ 1958.358911][ T5912] usb 3-1: SerialNumber: syz [ 1958.362188][ T2220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.365462][ T5912] usb 3-1: config 0 descriptor?? [ 1958.366675][T20622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1958.823898][T20622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1959.172590][ T2220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1959.844198][ T2220] bond0 (unregistering): Released all slaves [ 1961.093649][ T5912] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1961.093927][ T5912] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1961.103991][ T5912] usb 3-1: USB disconnect, device number 116 [ 1961.674191][ T2220] hsr_slave_0: left promiscuous mode [ 1961.733262][ T2220] hsr_slave_1: left promiscuous mode [ 1961.734247][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1962.493578][ T2220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1969.009743][ T2220] team0 (unregistering): Port device team_slave_1 removed [ 1969.327813][ T2220] team0 (unregistering): Port device team_slave_0 removed [ 1973.986205][T20447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1974.095410][T20447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1974.159376][T20447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1974.282584][T20447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1974.817141][T20447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.846689][T20447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1974.878117][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.904232][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.907575][ T736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1974.907720][ T736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.882369][T20447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.143349][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.143420][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.709821][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1977.747821][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1978.743552][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1978.779416][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1978.784371][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1980.354345][T20764] lo speed is unknown, defaulting to 1000 [ 1980.367932][T20764] lo speed is unknown, defaulting to 1000 [ 1980.923617][ T5802] Bluetooth: hci2: command tx timeout [ 1981.384736][T20447] veth0_vlan: entered promiscuous mode [ 1981.985325][T20447] veth1_vlan: entered promiscuous mode [ 1983.312429][ T5802] Bluetooth: hci2: command tx timeout [ 1983.363653][T20764] chnl_net:caif_netlink_parms(): no params data found [ 1984.747594][T20820] ufs: You didn't specify the type of your ufs filesystem [ 1984.747594][T20820] [ 1984.747594][T20820] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1984.747594][T20820] [ 1984.747594][T20820] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1984.747811][T20820] ufs: ufstype=old is supported read-only [ 1984.764570][T20820] ufs: ufs_fill_super(): bad magic number [ 1985.396711][ T5802] Bluetooth: hci2: command tx timeout [ 1985.565786][T16868] bridge_slave_1: left allmulticast mode [ 1985.565816][T16868] bridge_slave_1: left promiscuous mode [ 1985.566051][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.642355][ T5802] Bluetooth: hci2: command tx timeout [ 1988.514045][T20836] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 1989.054492][T16868] bridge_slave_0: left allmulticast mode [ 1989.054519][T16868] bridge_slave_0: left promiscuous mode [ 1989.054787][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.404075][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1997.463813][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1997.486049][T16868] bond0 (unregistering): Released all slaves [ 1997.539014][T20868] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1997.539059][T20868] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1997.539090][T20868] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1997.573027][ T37] audit: type=1800 audit(1769716518.273:7): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3821" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1997.732790][T20764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.733006][T20764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1997.733990][T20764] bridge_slave_0: entered allmulticast mode [ 1997.736895][T20764] bridge_slave_0: entered promiscuous mode [ 1997.747941][T20764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.748196][T20764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1997.748557][T20764] bridge_slave_1: entered allmulticast mode [ 1997.751404][T20764] bridge_slave_1: entered promiscuous mode [ 1997.894752][T20764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1997.898788][T20764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1998.223404][T16868] hsr_slave_0: left promiscuous mode [ 1998.263387][T16868] hsr_slave_1: left promiscuous mode [ 1998.264353][T16868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.319966][T16868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1999.004355][T17067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1999.026423][T17067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1999.031865][T17067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1999.033045][T17067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1999.054753][T17067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2001.176811][T17067] Bluetooth: hci4: command tx timeout [ 2003.651243][T17067] Bluetooth: hci4: command tx timeout [ 2004.147275][T16868] team0 (unregistering): Port device team_slave_1 removed [ 2004.993978][T16868] team0 (unregistering): Port device team_slave_0 removed [ 2005.901673][T17067] Bluetooth: hci4: command tx timeout [ 2007.963741][T17067] Bluetooth: hci4: command tx timeout [ 2014.563205][T20985] netlink: 'syz.2.3844': attribute type 13 has an invalid length. [ 2014.563221][T20985] netlink: 'syz.2.3844': attribute type 17 has an invalid length. [ 2014.924431][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2014.966144][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2014.967455][T11039] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2014.988508][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2014.997610][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2015.039586][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2015.273245][T11039] usb 3-1: Using ep0 maxpacket: 32 [ 2015.313393][T11039] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2015.313416][T11039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.313427][T11039] usb 3-1: Product: syz [ 2015.313434][T11039] usb 3-1: Manufacturer: syz [ 2015.313442][T11039] usb 3-1: SerialNumber: syz [ 2015.317005][T11039] usb 3-1: config 0 descriptor?? [ 2015.363095][T11039] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2015.784520][T20985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2015.897043][T11039] gspca_ov534_9: reg_w failed -110 [ 2016.383229][T11039] gspca_ov534_9: Unknown sensor 0000 [ 2016.383327][T11039] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2016.386578][T11039] usb 3-1: USB disconnect, device number 117 [ 2016.533862][T20764] team0: Port device team_slave_0 added [ 2016.544038][T20764] team0: Port device team_slave_1 added [ 2016.803362][T20764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.803374][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2016.803388][T20764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2016.845254][T20764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2016.845273][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2016.845300][T20764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.846192][T20900] lo speed is unknown, defaulting to 1000 [ 2017.547509][T17067] Bluetooth: hci5: command tx timeout [ 2017.643544][T20993] lo speed is unknown, defaulting to 1000 [ 2017.644983][T20900] lo speed is unknown, defaulting to 1000 [ 2017.650963][T20993] lo speed is unknown, defaulting to 1000 [ 2018.078063][T20764] hsr_slave_0: entered promiscuous mode [ 2018.079460][T20764] hsr_slave_1: entered promiscuous mode [ 2018.080427][T20764] debugfs: 'hsr0' already exists in 'hsr' [ 2018.080449][T20764] Cannot create hsr debugfs directory [ 2019.975975][T17067] Bluetooth: hci5: command tx timeout [ 2020.843849][T21021] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 2022.068629][ T5802] Bluetooth: hci5: command tx timeout [ 2022.583741][T21037] netlink: 'syz.2.3855': attribute type 13 has an invalid length. [ 2022.583756][T21037] netlink: 'syz.2.3855': attribute type 17 has an invalid length. [ 2022.664742][T21037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2022.903270][T16931] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2023.058886][T16931] usb 3-1: Using ep0 maxpacket: 32 [ 2023.068632][T16931] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2023.068666][T16931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.068685][T16931] usb 3-1: Product: syz [ 2023.068700][T16931] usb 3-1: Manufacturer: syz [ 2023.068713][T16931] usb 3-1: SerialNumber: syz [ 2023.080991][T16931] usb 3-1: config 0 descriptor?? [ 2023.118262][T16931] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2023.285267][T16931] gspca_ov534_9: reg_w failed -71 [ 2023.440153][T20993] chnl_net:caif_netlink_parms(): no params data found [ 2023.460663][T20900] chnl_net:caif_netlink_parms(): no params data found [ 2023.698350][T16931] gspca_ov534_9: Unknown sensor 0000 [ 2023.698471][T16931] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2023.701771][T16931] usb 3-1: USB disconnect, device number 118 [ 2024.534682][ T5802] Bluetooth: hci5: command tx timeout [ 2027.048079][T21083] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2027.048117][T21083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2027.048137][T21083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2027.073417][ T37] audit: type=1800 audit(1769716547.783:8): pid=21083 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3862" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2028.234721][T20993] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.234852][T20993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.235096][T20993] bridge_slave_0: entered allmulticast mode [ 2028.237887][T20993] bridge_slave_0: entered promiscuous mode [ 2028.275486][T20900] bridge0: port 1(bridge_slave_0) entered blocking state [ 2028.275603][T20900] bridge0: port 1(bridge_slave_0) entered disabled state [ 2028.275788][T20900] bridge_slave_0: entered allmulticast mode [ 2028.285525][T20900] bridge_slave_0: entered promiscuous mode [ 2028.309853][T20993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.309967][T20993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.310166][T20993] bridge_slave_1: entered allmulticast mode [ 2028.311579][T20993] bridge_slave_1: entered promiscuous mode [ 2028.312784][T20900] bridge0: port 2(bridge_slave_1) entered blocking state [ 2028.312894][T20900] bridge0: port 2(bridge_slave_1) entered disabled state [ 2028.313036][T20900] bridge_slave_1: entered allmulticast mode [ 2028.348772][T20900] bridge_slave_1: entered promiscuous mode [ 2032.508879][T21108] netlink: 'syz.1.3869': attribute type 13 has an invalid length. [ 2032.508897][T21108] netlink: 'syz.1.3869': attribute type 17 has an invalid length. [ 2032.618934][T21108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2032.674041][T20993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2032.717739][T20993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2033.110455][T20900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.227328][T20900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2033.291494][T20993] team0: Port device team_slave_0 added [ 2033.358367][T20993] team0: Port device team_slave_1 added [ 2033.375027][T20900] team0: Port device team_slave_0 added [ 2033.478477][T20900] team0: Port device team_slave_1 added [ 2033.714250][T20993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2033.714262][T20993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2033.714277][T20993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2034.493391][T20993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2034.493404][T20993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.493420][T20993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2034.985735][T20900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2034.985749][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2034.985765][T20900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.867839][T20900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.867856][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.867885][T20900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2035.870684][T20764] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2037.053707][T20764] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2037.355236][T20993] hsr_slave_0: entered promiscuous mode [ 2037.356581][T20993] hsr_slave_1: entered promiscuous mode [ 2037.357488][T20993] debugfs: 'hsr0' already exists in 'hsr' [ 2037.357513][T20993] Cannot create hsr debugfs directory [ 2037.524639][T20900] hsr_slave_0: entered promiscuous mode [ 2037.525462][T20900] hsr_slave_1: entered promiscuous mode [ 2037.526001][T20900] debugfs: 'hsr0' already exists in 'hsr' [ 2037.526016][T20900] Cannot create hsr debugfs directory [ 2037.588369][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.588413][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.881141][T16868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.546350][T16868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2038.885897][T17067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2038.911818][T17067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2038.924678][T17067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2038.926098][T17067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2039.805497][T17067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2040.018768][T16868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.215477][T21144] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3875'. [ 2041.883228][ T5802] Bluetooth: hci0: command tx timeout [ 2043.075739][T16868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.277227][T21137] lo speed is unknown, defaulting to 1000 [ 2043.322185][T21137] lo speed is unknown, defaulting to 1000 [ 2044.598865][ T5802] Bluetooth: hci0: command tx timeout [ 2046.858883][ T5802] Bluetooth: hci0: command tx timeout [ 2047.400616][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 2047.602995][T20993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2047.850682][T21225] : entered promiscuous mode [ 2047.975099][T20993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2048.925916][T17067] Bluetooth: hci0: command tx timeout [ 2049.093281][T20993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2049.373930][T16868] bridge_slave_1: left allmulticast mode [ 2049.373961][T16868] bridge_slave_1: left promiscuous mode [ 2049.374209][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.253946][T16868] bridge_slave_0: left allmulticast mode [ 2050.253967][T16868] bridge_slave_0: left promiscuous mode [ 2050.254146][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.306624][T16868] bridge_slave_1: left allmulticast mode [ 2050.306646][T16868] bridge_slave_1: left promiscuous mode [ 2050.306809][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.354123][T16868] bridge_slave_0: left allmulticast mode [ 2050.354145][T16868] bridge_slave_0: left promiscuous mode [ 2050.354306][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.085838][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2053.144155][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2053.165588][T16868] bond0 (unregistering): Released all slaves [ 2054.793793][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2054.855669][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2054.875406][T16868] bond0 (unregistering): Released all slaves [ 2055.836398][T16868] bond1 (unregistering): Released all slaves [ 2055.879420][T21253] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2055.879463][T21253] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2055.879484][T21253] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2055.980405][T20993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2055.980953][ T37] audit: type=1800 audit(1769716576.613:9): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3891" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 2056.437335][T21276] netlink: 'syz.2.3895': attribute type 2 has an invalid length. [ 2056.437382][T21276] netlink: 'syz.2.3895': attribute type 8 has an invalid length. [ 2056.437419][T21276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3895'. [ 2057.092951][T21274] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 2057.423159][T16868] tipc: Disabling bearer [ 2057.423472][T16868] tipc: Left network mode [ 2057.548104][T21137] chnl_net:caif_netlink_parms(): no params data found [ 2057.764830][T21291] netlink: 'syz.2.3897': attribute type 13 has an invalid length. [ 2057.764851][T21291] netlink: 'syz.2.3897': attribute type 17 has an invalid length. [ 2058.325515][T21291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2058.343307][ T5912] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2058.476535][T21282] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 2058.493291][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 2058.499205][ T5912] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2058.499224][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.499235][ T5912] usb 3-1: Product: syz [ 2058.499242][ T5912] usb 3-1: Manufacturer: syz [ 2058.499250][ T5912] usb 3-1: SerialNumber: syz [ 2058.502218][ T5912] usb 3-1: config 0 descriptor?? [ 2058.531985][ T5912] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2058.835200][ T5912] gspca_ov534_9: reg_w failed -71 [ 2060.283239][ T5912] gspca_ov534_9: Unknown sensor 0000 [ 2060.283342][ T5912] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2060.305761][ T5912] usb 3-1: USB disconnect, device number 119 [ 2060.677240][T21137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.677385][T21137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.677540][T21137] bridge_slave_0: entered allmulticast mode [ 2060.678934][T21137] bridge_slave_0: entered promiscuous mode [ 2060.715174][T21137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.715358][T21137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.715618][T21137] bridge_slave_1: entered allmulticast mode [ 2060.718241][T21137] bridge_slave_1: entered promiscuous mode [ 2060.899930][T21137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.269995][T21137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2061.533437][T16868] hsr_slave_0: left promiscuous mode [ 2061.584072][T16868] hsr_slave_1: left promiscuous mode [ 2061.584742][T16868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.615197][T16868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2062.160958][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2062.258321][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2062.297269][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2062.344448][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2062.372398][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2062.581350][T16868] hsr_slave_0: left promiscuous mode [ 2062.693358][T16868] hsr_slave_1: left promiscuous mode [ 2062.694315][T16868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2062.694341][T16868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2062.881065][T21320] netlink: 'syz.1.3903': attribute type 1 has an invalid length. [ 2062.884527][T16868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2062.884565][T16868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2063.854044][T16868] veth1_vlan: left promiscuous mode [ 2063.854147][T16868] veth0_vlan: left promiscuous mode [ 2063.883431][T16868] veth1_macvtap: left promiscuous mode [ 2063.883491][T16868] veth0_macvtap: left promiscuous mode [ 2063.883627][T16868] veth1_vlan: left promiscuous mode [ 2063.883670][T16868] veth0_vlan: left promiscuous mode [ 2064.564530][T17067] Bluetooth: hci2: command tx timeout [ 2066.523699][T16868] team0 (unregistering): Port device team_slave_1 removed [ 2066.618559][T17067] Bluetooth: hci2: command tx timeout [ 2066.757340][T16868] team0 (unregistering): Port device team_slave_0 removed [ 2068.838255][T17067] Bluetooth: hci2: command tx timeout [ 2069.940801][T21346] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 2070.843501][T17067] Bluetooth: hci2: command tx timeout [ 2073.159236][T21353] delete_channel: no stack [ 2073.915033][T16868] team0 (unregistering): Port device team_slave_1 removed [ 2074.173831][T16868] team0 (unregistering): Port device team_slave_0 removed [ 2075.577999][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2075.637674][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2075.642476][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2075.697944][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2075.701422][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2077.792774][ T5802] Bluetooth: hci4: command tx timeout [ 2078.939065][T17067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2079.021859][T17067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2079.032762][T17067] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2079.095095][T17067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2079.098417][T17067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2079.835126][T17067] Bluetooth: hci4: command tx timeout [ 2081.273501][T17067] Bluetooth: hci6: command tx timeout [ 2081.941914][T21137] team0: Port device team_slave_0 added [ 2081.959410][T21137] team0: Port device team_slave_1 added [ 2082.105820][T21137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.105839][T21137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.105867][T21137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.108317][T21137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.108331][T21137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.108367][T21137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2082.292204][T17067] Bluetooth: hci4: command tx timeout [ 2082.463235][T21382] lo speed is unknown, defaulting to 1000 [ 2083.569293][T17067] Bluetooth: hci6: command tx timeout [ 2083.733584][T21382] lo speed is unknown, defaulting to 1000 [ 2083.750839][T21311] lo speed is unknown, defaulting to 1000 [ 2083.893585][T21311] lo speed is unknown, defaulting to 1000 [ 2083.945336][T21366] lo speed is unknown, defaulting to 1000 [ 2083.981044][T21137] hsr_slave_0: entered promiscuous mode [ 2083.990645][T21137] hsr_slave_1: entered promiscuous mode [ 2083.992756][T21366] lo speed is unknown, defaulting to 1000 [ 2084.391097][T17067] Bluetooth: hci4: command tx timeout [ 2085.085168][T21425] lo: entered allmulticast mode [ 2085.085653][T21425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2085.649232][T17067] Bluetooth: hci6: command tx timeout [ 2087.461764][T21311] chnl_net:caif_netlink_parms(): no params data found [ 2087.491904][T21382] chnl_net:caif_netlink_parms(): no params data found [ 2087.592529][T16868] IPVS: stop unused estimator thread 0... [ 2087.602604][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 2087.602646][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 2087.723173][T17067] Bluetooth: hci6: command tx timeout [ 2088.054931][T21366] chnl_net:caif_netlink_parms(): no params data found [ 2089.011848][T21382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.011934][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.012122][T21382] bridge_slave_0: entered allmulticast mode [ 2089.014118][T21382] bridge_slave_0: entered promiscuous mode [ 2089.698183][T21311] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.698308][T21311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.698544][T21311] bridge_slave_0: entered allmulticast mode [ 2089.701086][T21311] bridge_slave_0: entered promiscuous mode [ 2089.702480][T21382] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.702638][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.702817][T21382] bridge_slave_1: entered allmulticast mode [ 2089.705427][T21382] bridge_slave_1: entered promiscuous mode [ 2090.770954][T21311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.771102][T21311] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.771344][T21311] bridge_slave_1: entered allmulticast mode [ 2090.772898][T21311] bridge_slave_1: entered promiscuous mode [ 2091.196663][T21382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.830235][T21382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.830480][T21366] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.830701][T21366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.830868][T21366] bridge_slave_0: entered allmulticast mode [ 2092.832275][T21366] bridge_slave_0: entered promiscuous mode [ 2092.925360][T21311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.963799][T21366] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.963921][T21366] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.964118][T21366] bridge_slave_1: entered allmulticast mode [ 2092.966580][T21366] bridge_slave_1: entered promiscuous mode [ 2093.229583][T21513] overlayfs: failed to resolve './file1': -2 [ 2093.388447][T21311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2093.549690][T21382] team0: Port device team_slave_0 added [ 2093.679290][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 2093.679317][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 2094.710592][T21382] team0: Port device team_slave_1 added [ 2094.715797][T21366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2094.720379][T21311] team0: Port device team_slave_0 added [ 2094.952366][T21311] team0: Port device team_slave_1 added [ 2094.961375][T21366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2095.098788][T21137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2096.475077][T21382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.475095][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.475123][T21382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.566837][T21137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2096.620320][T21382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.620337][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.620365][T21382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2096.627927][T21366] team0: Port device team_slave_0 added [ 2096.629924][T21311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.629938][T21311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.629962][T21311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.630647][T21137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2096.696368][T21366] team0: Port device team_slave_1 added [ 2096.697483][T21311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.697498][T21311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.697523][T21311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2096.699054][T21137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2096.878829][T21366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2096.878848][T21366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.878875][T21366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.986539][T21366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.986556][T21366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.986584][T21366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2097.045993][T21382] hsr_slave_0: entered promiscuous mode [ 2097.047095][T21382] hsr_slave_1: entered promiscuous mode [ 2097.047687][T21382] debugfs: 'hsr0' already exists in 'hsr' [ 2097.047706][T21382] Cannot create hsr debugfs directory [ 2097.100876][T21311] hsr_slave_0: entered promiscuous mode [ 2097.101712][T21311] hsr_slave_1: entered promiscuous mode [ 2097.102249][T21311] debugfs: 'hsr0' already exists in 'hsr' [ 2097.102268][T21311] Cannot create hsr debugfs directory [ 2097.399910][T21366] hsr_slave_0: entered promiscuous mode [ 2097.401274][T21366] hsr_slave_1: entered promiscuous mode [ 2097.402226][T21366] debugfs: 'hsr0' already exists in 'hsr' [ 2097.402249][T21366] Cannot create hsr debugfs directory [ 2097.509558][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 2097.509583][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 2097.782014][T16868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.827243][T21547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2098.198138][T16868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2098.539958][T16868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2099.142651][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.145980][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.937244][T16868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.464695][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2100.478337][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2100.480049][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2100.481375][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2100.482781][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2100.581015][T21559] lo speed is unknown, defaulting to 1000 [ 2100.584024][T21559] lo speed is unknown, defaulting to 1000 [ 2101.608692][T21382] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2101.841285][T21382] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2102.089325][T21382] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2102.167581][T21382] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2102.603204][T17067] Bluetooth: hci0: command tx timeout [ 2102.700302][T16868] bridge_slave_1: left allmulticast mode [ 2102.700323][T16868] bridge_slave_1: left promiscuous mode [ 2102.700470][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.774574][T16868] bridge_slave_0: left allmulticast mode [ 2102.774595][T16868] bridge_slave_0: left promiscuous mode [ 2102.774763][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.851961][T16868] bridge_slave_1: left allmulticast mode [ 2102.851981][T16868] bridge_slave_1: left promiscuous mode [ 2102.852137][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.935198][T16868] bridge_slave_0: left allmulticast mode [ 2102.935218][T16868] bridge_slave_0: left promiscuous mode [ 2102.935394][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.016216][T16868] bridge_slave_1: left allmulticast mode [ 2103.016238][T16868] bridge_slave_1: left promiscuous mode [ 2103.016389][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.094808][T16868] bridge_slave_0: left allmulticast mode [ 2103.094827][T16868] bridge_slave_0: left promiscuous mode [ 2103.094986][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.122502][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 2104.034494][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2104.113818][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2104.186210][T16868] bond0 (unregistering): Released all slaves [ 2104.683252][T17067] Bluetooth: hci0: command tx timeout [ 2105.633811][T16868] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 2105.673753][T16868] bridge3 (unregistering): left promiscuous mode [ 2105.673774][T16868] bridge3 (unregistering): left allmulticast mode [ 2105.895396][T16868] bond0 (unregistering): Released all slaves [ 2106.763353][T17067] Bluetooth: hci0: command tx timeout [ 2106.896814][T16868] bond1 (unregistering): Released all slaves [ 2107.922678][T16868] bond2 (unregistering): Released all slaves [ 2108.206368][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2108.284466][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2108.348631][T16868] bond0 (unregistering): Released all slaves [ 2108.663787][T16868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2108.745254][T16868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2108.806254][T16868] bond0 (unregistering): Released all slaves [ 2108.832260][T21591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2108.848496][T17067] Bluetooth: hci0: command tx timeout [ 2109.171745][T16868] : left promiscuous mode [ 2110.360935][T21559] chnl_net:caif_netlink_parms(): no params data found [ 2110.827886][T16868] tipc: Disabling bearer [ 2110.828118][T16868] tipc: Left network mode [ 2110.961790][T21559] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.961911][T21559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.962174][T21559] bridge_slave_0: entered allmulticast mode [ 2110.966972][T21559] bridge_slave_0: entered promiscuous mode [ 2110.972369][T21311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2111.037634][T21559] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.037701][T21559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.037857][T21559] bridge_slave_1: entered allmulticast mode [ 2111.039312][T21559] bridge_slave_1: entered promiscuous mode [ 2111.121135][T21311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2111.217322][T21311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2111.246693][T21559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2111.246778][T21311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2111.251762][T21616] netlink: 'syz.1.3956': attribute type 13 has an invalid length. [ 2111.251777][T21616] netlink: 'syz.1.3956': attribute type 17 has an invalid length. [ 2111.296230][T21616] lo: left allmulticast mode [ 2111.342134][T21616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2111.436966][T21559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2111.490044][T16868] rxrpc: Call ffff888028ff0000 still in use (1,Complete,1489,0)! [ 2111.589753][T21559] team0: Port device team_slave_0 added [ 2111.599430][T21559] team0: Port device team_slave_1 added [ 2111.771317][T21382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.967095][T21559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2111.967113][T21559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2111.967139][T21559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2111.986195][T21559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2111.986212][T21559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2111.986239][T21559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2111.986724][T21366] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2112.125954][T21366] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2112.204951][T21366] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2112.298865][T21366] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2113.328548][T21559] hsr_slave_0: entered promiscuous mode [ 2113.330054][T21559] hsr_slave_1: entered promiscuous mode [ 2113.330967][T21559] debugfs: 'hsr0' already exists in 'hsr' [ 2113.330991][T21559] Cannot create hsr debugfs directory [ 2113.378989][T21382] 8021q: adding VLAN 0 to HW filter on device team0 [ 2115.735774][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.735853][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.862023][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.862251][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.136144][T21311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2118.379867][T21311] 8021q: adding VLAN 0 to HW filter on device team0 [ 2118.407583][T21366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2118.431783][T21202] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.431955][T21202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.460477][T21202] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.465185][T21202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.716002][T21366] 8021q: adding VLAN 0 to HW filter on device team0 [ 2118.751236][T21198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.751540][T21198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.801602][T21198] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.801767][T21198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.825513][T21382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2119.658732][T21559] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2119.699052][T21559] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2119.746105][T21559] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2119.801077][T21559] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2119.908123][T21311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2119.924522][T21723] lo: entered allmulticast mode [ 2119.924970][T21723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2120.027457][T21366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.173468][T21382] veth0_vlan: entered promiscuous mode [ 2120.252048][T21382] veth1_vlan: entered promiscuous mode [ 2120.424805][T21382] veth0_macvtap: entered promiscuous mode [ 2120.448909][T21382] veth1_macvtap: entered promiscuous mode [ 2120.501305][T21559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.791062][T21382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2120.948431][T21559] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.709911][T21382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2121.903960][T21206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.904104][T21206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.929178][T21206] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.930273][T21206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.931013][ T6221] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.953957][ T6221] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.958162][ T6221] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.970631][ T6221] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.281711][T21366] veth0_vlan: entered promiscuous mode [ 2122.408680][T21198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.408702][T21198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.438440][T21366] veth1_vlan: entered promiscuous mode [ 2122.907917][T21202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.907939][T21202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.986869][T21366] veth0_macvtap: entered promiscuous mode [ 2123.002229][T21366] veth1_macvtap: entered promiscuous mode [ 2123.058456][T21559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2123.066861][T21366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.125470][T21366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2123.195677][T21206] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.197590][T21206] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.198658][T21206] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.198699][T21206] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.706190][T21206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.706210][T21206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.920855][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2123.942652][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2123.947170][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2123.975872][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2123.977351][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2124.111357][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.111379][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.405032][T21559] veth0_vlan: entered promiscuous mode [ 2124.583200][T21787] lo speed is unknown, defaulting to 1000 [ 2124.617557][T21787] lo speed is unknown, defaulting to 1000 [ 2124.868455][T21559] veth1_vlan: entered promiscuous mode [ 2124.955720][T21800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3969'. [ 2126.193138][ T5802] Bluetooth: hci1: command tx timeout [ 2126.193996][T21559] veth0_macvtap: entered promiscuous mode [ 2126.304866][T21559] veth1_macvtap: entered promiscuous mode [ 2127.804923][T21559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2127.897767][T21559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2127.953931][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.955770][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.957196][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.989668][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.002219][T21787] chnl_net:caif_netlink_parms(): no params data found [ 2128.203313][ T5802] Bluetooth: hci1: command tx timeout [ 2128.522108][T21787] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.522226][T21787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.522514][T21787] bridge_slave_0: entered allmulticast mode [ 2128.560462][T21787] bridge_slave_0: entered promiscuous mode [ 2128.569869][T21787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.570072][T21787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.570335][T21787] bridge_slave_1: entered allmulticast mode [ 2128.581392][T21787] bridge_slave_1: entered promiscuous mode [ 2128.682359][T21202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.682379][T21202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.710673][T21787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.746103][T21787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.882637][T21787] team0: Port device team_slave_0 added [ 2128.897971][T21787] team0: Port device team_slave_1 added [ 2128.898788][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.898805][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.979128][T21787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2128.979146][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2128.979172][T21787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2128.988723][T21787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2128.988739][T21787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2128.988765][T21787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2129.115774][T21787] hsr_slave_0: entered promiscuous mode [ 2129.117130][T21787] hsr_slave_1: entered promiscuous mode [ 2129.118038][T21787] debugfs: 'hsr0' already exists in 'hsr' [ 2129.118063][T21787] Cannot create hsr debugfs directory [ 2130.645360][ T5802] Bluetooth: hci1: command tx timeout [ 2132.686397][ T5802] Bluetooth: hci1: command tx timeout [ 2132.761879][T21787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2132.809271][T21787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2132.875188][T21787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2132.897212][T21787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2133.157893][T21787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2133.199993][T21787] 8021q: adding VLAN 0 to HW filter on device team0 [ 2133.216077][T21196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2133.223328][T21196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2133.257752][T21196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2133.258027][T21196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2133.616072][T21787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.065139][T21787] veth0_vlan: entered promiscuous mode [ 2134.084380][T21787] veth1_vlan: entered promiscuous mode [ 2134.135905][T21787] veth0_macvtap: entered promiscuous mode [ 2134.149882][T21787] veth1_macvtap: entered promiscuous mode [ 2134.176547][T21787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2134.194422][T21787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2134.214850][ T1374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.215842][ T1374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.217390][ T1374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.218904][ T1374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.574287][ T1374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.574309][ T1374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.673376][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.673397][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.460401][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.460470][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.363718][T17067] Bluetooth: hci4: command 0x0406 tx timeout [ 2203.483171][T17067] Bluetooth: hci6: command 0x0406 tx timeout [ 2221.886928][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.887026][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.963380][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 2249.574218][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 2263.483413][ T38] INFO: task kworker/u8:3:16868 blocked for more than 143 seconds. [ 2263.483442][ T38] Tainted: G L syzkaller #0 [ 2263.483454][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2263.483464][ T38] task:kworker/u8:3 state:D stack:21248 pid:16868 tgid:16868 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2263.483526][ T38] Workqueue: netns cleanup_net [ 2263.483562][ T38] Call Trace: [ 2263.483570][ T38] [ 2263.483586][ T38] __schedule+0x1472/0x4fe0 [ 2263.483634][ T38] ? rt_spin_lock+0x1e0/0x400 [ 2263.483658][ T38] ? __pfx___schedule+0x10/0x10 [ 2263.483692][ T38] ? schedule+0x90/0x360 [ 2263.483719][ T38] schedule+0x164/0x360 [ 2263.483745][ T38] rxrpc_destroy_all_calls+0x57e/0x6a0 [ 2263.483781][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 2263.483813][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 2263.483836][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2263.483863][ T38] ? __timer_delete_sync+0x53e/0x610 [ 2263.483889][ T38] rxrpc_exit_net+0x6f/0xc0 [ 2263.483919][ T38] ops_undo_list+0x49f/0x940 [ 2263.483950][ T38] ? rt_spin_unlock+0x1d0/0x200 [ 2263.483970][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 2263.483996][ T38] ? rt_spin_unlock+0x14f/0x200 [ 2263.484021][ T38] ? rt_spin_unlock+0x160/0x200 [ 2263.484044][ T38] cleanup_net+0x4e5/0x7b0 [ 2263.484076][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 2263.484109][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 2263.484139][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 2263.484170][ T38] process_scheduled_works+0xaec/0x17a0 [ 2263.484228][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2263.484257][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2263.484298][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2263.484324][ T38] ? schedule+0x90/0x360 [ 2263.484356][ T38] worker_thread+0xda6/0x1360 [ 2263.484393][ T38] ? __kthread_parkme+0x19c/0x1f0 [ 2263.484421][ T38] kthread+0x726/0x8b0 [ 2263.484470][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2263.484488][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.484508][ T38] ? rt_spin_unlock+0x14f/0x200 [ 2263.484531][ T38] ? rt_spin_unlock+0x160/0x200 [ 2263.484549][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.484573][ T38] ret_from_fork+0x51b/0xa40 [ 2263.484597][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2263.484617][ T38] ? __switch_to+0xc82/0x1410 [ 2263.484651][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.484676][ T38] ret_from_fork_asm+0x1a/0x30 [ 2263.484722][ T38] [ 2263.484821][ T38] [ 2263.484821][ T38] Showing all locks held in the system: [ 2263.484834][ T38] 1 lock held by khungtaskd/38: [ 2263.484846][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2263.484933][ T38] 2 locks held by getty/5558: [ 2263.484945][ T38] #0: ffff888027a830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2263.484999][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 2263.485059][ T38] 3 locks held by kworker/u8:3/16868: [ 2263.485071][ T38] #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2263.485125][ T38] #1: ffffc9000574fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2263.485181][ T38] #2: ffffffff8ef2c9a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 2263.485237][ T38] 7 locks held by kworker/u8:8/21198: [ 2263.485257][ T38] [ 2263.485263][ T38] ============================================= [ 2263.485263][ T38] [ 2263.485283][ T38] NMI backtrace for cpu 1 [ 2263.485300][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2263.485327][ T38] Tainted: [L]=SOFTLOCKUP [ 2263.485335][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2263.485348][ T38] Call Trace: [ 2263.485355][ T38] [ 2263.485363][ T38] dump_stack_lvl+0xe8/0x150 [ 2263.485391][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2263.485411][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2263.485434][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2263.485457][ T38] sys_info+0x135/0x170 [ 2263.485485][ T38] watchdog+0xf90/0xfe0 [ 2263.485517][ T38] ? watchdog+0x209/0xfe0 [ 2263.485550][ T38] kthread+0x726/0x8b0 [ 2263.485577][ T38] ? __pfx_watchdog+0x10/0x10 [ 2263.485602][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.485624][ T38] ? rt_spin_unlock+0x14f/0x200 [ 2263.485648][ T38] ? rt_spin_unlock+0x160/0x200 [ 2263.485667][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.485692][ T38] ret_from_fork+0x51b/0xa40 [ 2263.485715][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2263.485732][ T38] ? __switch_to+0xc82/0x1410 [ 2263.485764][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.485789][ T38] ret_from_fork_asm+0x1a/0x30 [ 2263.485826][ T38] [ 2263.485832][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2263.485862][ C0] NMI backtrace for cpu 0 [ 2263.485885][ C0] CPU: 0 UID: 0 PID: 6780 Comm: ipvs-e:2:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2263.485911][ C0] Tainted: [L]=SOFTLOCKUP [ 2263.485918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2263.485930][ C0] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 2263.485959][ C0] Code: 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 2263.485975][ C0] RSP: 0018:ffffc90003ef7768 EFLAGS: 00000806 [ 2263.485991][ C0] RAX: 0000000000000000 RBX: ffffffff8b10ded0 RCX: 0000000080000002 [ 2263.486005][ C0] RDX: 0000000000000000 RSI: ffffffff8b10ded0 RDI: 1ffffffff32c767b [ 2263.486018][ C0] RBP: ffffffff849a7de1 R08: 0000000000000001 R09: 0000000000000000 [ 2263.486035][ C0] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: 0000000000000000 [ 2263.486048][ C0] R13: ffffffff9963b3d8 R14: ffffffff9963b3d8 R15: 0000000000000001 [ 2263.486062][ C0] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 2263.486077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2263.486090][ C0] CR2: 000055b534e6e150 CR3: 000000000d9b4000 CR4: 00000000003526f0 [ 2263.486107][ C0] Call Trace: [ 2263.486114][ C0] [ 2263.486121][ C0] __kasan_check_byte+0x12/0x40 [ 2263.486146][ C0] lock_acquire+0x84/0x330 [ 2263.486171][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 2263.486194][ C0] ? debug_object_assert_init+0xa1/0x300 [ 2263.486212][ C0] debug_object_assert_init+0xa1/0x300 [ 2263.486234][ C0] __mod_timer+0x4a/0xf60 [ 2263.486250][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2263.486273][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2263.486300][ C0] schedule_timeout+0x153/0x2c0 [ 2263.486321][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2263.486342][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2263.486375][ C0] ip_vs_estimation_kthread+0x2b09/0x3ab0 [ 2263.486398][ C0] ? ip_vs_estimation_kthread+0x2938/0x3ab0 [ 2263.486435][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 2263.486467][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2263.486485][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 2263.486504][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 2263.486525][ C0] kthread+0x726/0x8b0 [ 2263.486547][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 2263.486568][ C0] ? __pfx_kthread+0x10/0x10 [ 2263.486588][ C0] ? rt_spin_unlock+0x14f/0x200 [ 2263.486608][ C0] ? rt_spin_unlock+0x160/0x200 [ 2263.486625][ C0] ? __pfx_kthread+0x10/0x10 [ 2263.486646][ C0] ret_from_fork+0x51b/0xa40 [ 2263.486665][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2263.486682][ C0] ? __switch_to+0xc82/0x1410 [ 2263.486708][ C0] ? __pfx_kthread+0x10/0x10 [ 2263.486729][ C0] ret_from_fork_asm+0x1a/0x30 [ 2263.486762][ C0] [ 2263.486864][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2263.486883][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2263.486910][ T38] Tainted: [L]=SOFTLOCKUP [ 2263.486918][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2263.486929][ T38] Call Trace: [ 2263.486937][ T38] [ 2263.486946][ T38] vpanic+0x1e0/0x670 [ 2263.486976][ T38] panic+0xc5/0xd0 [ 2263.486999][ T38] ? __pfx_panic+0x10/0x10 [ 2263.487027][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2263.487042][ T38] watchdog+0xfda/0xfe0 [ 2263.487058][ T38] ? watchdog+0x209/0xfe0 [ 2263.487075][ T38] kthread+0x726/0x8b0 [ 2263.487088][ T38] ? __pfx_watchdog+0x10/0x10 [ 2263.487102][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.487113][ T38] ? rt_spin_unlock+0x14f/0x200 [ 2263.487125][ T38] ? rt_spin_unlock+0x160/0x200 [ 2263.487134][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.487147][ T38] ret_from_fork+0x51b/0xa40 [ 2263.487158][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2263.487168][ T38] ? __switch_to+0xc82/0x1410 [ 2263.487184][ T38] ? __pfx_kthread+0x10/0x10 [ 2263.487197][ T38] ret_from_fork_asm+0x1a/0x30 [ 2263.487218][ T38] [ 2263.487660][ T38] Kernel Offset: disabled