last executing test programs: 16.064084795s ago: executing program 1 (id=119): syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xf, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0x3, "91"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7", 0x3f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}], 0x2}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.729909871s ago: executing program 1 (id=120): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r1 = openat(r0, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='*', 0x1) 15.6782447s ago: executing program 1 (id=121): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 14.735342452s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 14.676198245s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='retu 0x01\n\x00', 0xa) 11.905503975s ago: executing program 1 (id=168): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.115436511s ago: executing program 32 (id=168): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.071830221s ago: executing program 0 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 10.727010605s ago: executing program 0 (id=178): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc8, 0x3}}}, 0x8) 9.769083533s ago: executing program 0 (id=191): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r1, 0x0, 0x0, 0x6ed}]) 9.657004615s ago: executing program 0 (id=195): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk4ULJ+BQCVGJC0glJG4oceIodkoT9ZDCrQcOCAQS4sCdv4ALPVEhIc5wRxxQEZQgARKS0YztNF8OFqQxyvx+0sQz8zrzvK+t59XMOzOeADLrbPInFzEYEZ9GxNHG4uY3nG28rN2/OZVMuajXL3+TS9+XLLfe2vq/IxGxGhF9EfH04xEv5LbHrS6vzE6Wy6XF5nKxNrdQrC6vXLg2NzlTminNj4xfnJgYHx4bndiztt5+7aXblz54svf9H169d/f1jz5MqjXYLNvYjr3UaHpPHN+w7lBEPPowgnVBodme/m5XhN8k+f7+EhHn0vw/GoX02wSyoF6v13+uH25XvFoHDqx8ug+cyw9FRGM+nx8aauzD/zUG8uVKtfbfq5Wl+enGvvKx6MlfvVYuDTePFY5FTy5ZHknnHyyPblkei0j3gd8o9KfLQ1OV8vT+dnXAFkea+d/fzP/vC438BzJi50P+tgcFwAFiyA+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXXpUjLVW/e/T19fXpqtXL8wXarODs0tTQ1NVRYXhmYqlZn0np25X9teuVJZGPlfLN0o1krVWrG6vHJlrrI0X7uS3td/pdSzL60COnH8zJ3PcxGx+v/+dEr0NsvkKhxs9Xouun0PMtAdhW53QEDXGPqD7HKMD+zwE72b9LUrWNj7ugD7I9/tCgBdc/6U83+QVcb/IbuM/0N22ccHjP9D9hj/h+wabPP8rz9teHbXcET8OSI+K/Qcbj3rCzgI8l/lIvLJ/v/5o/8c3Fram/sxPUXQGxEvv3P5rRuTtdriSLL+2/X1tbeb60e7UX+gU608beUxAJBda/dvTrWm/Yz79WONixC2xz/UHJvsS89RDqzlNl2rkNujaxdWb0XEyZ3i55rPO2+c+RhYK2yLf6L5mmtsIq3vofS56fsT/9SG+P/YEP/07/5UIBvuJP3P8E75l09zOtbzb3P/M7hH10607//y6/1foU3/d6bDGC+++8qXbePfiji9Y/xWvL401tb4Sd3OdxY+d++5Z/7WrrD+XmM7O8Vf30BEFGtzC8Xq8sqF9HfkZkrzI+MXJybGh8dGJ4rpGHWxNVK93SMnP7m7W/sHHsTvj4iO2p+s+3dn7Y+f/v7xs2d3if+vczt//yd2iZ9U9D8dxv9u9Ivn25Ul8afbfP75XeIn68Y6jF998wnPEgeAP5Dq8srsZLlcWjRjxoyZ9Zlu90zAw/Yg6btdEwAAAAAAAAAAAKBT+3E5cbfbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwSAAD//2vj04Y=") setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x800, 0x3, 0x1, 0x0, 0x0, [{{r1}, 0x401}]}) 9.465227522s ago: executing program 0 (id=199): socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BLKRAGET(r3, 0x1263, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.93147101s ago: executing program 0 (id=205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0) 8.757191512s ago: executing program 33 (id=205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0) 2.665780353s ago: executing program 5 (id=262): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4) 2.540308143s ago: executing program 5 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 2.514546294s ago: executing program 5 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001"], 0x2c}}, 0x0) 2.087690877s ago: executing program 5 (id=268): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 1.543989198s ago: executing program 5 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d05010004000009"], 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsn(0x0, 0x1, 0x1) write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1.474797589s ago: executing program 4 (id=274): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1.376424974s ago: executing program 2 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, r2}, 0x10) 1.376130655s ago: executing program 4 (id=276): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.30527617s ago: executing program 2 (id=277): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1127, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1127, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000200)='he', 0x2) write(r2, &(0x7f0000000200)='wo', 0x2) 1.248098148s ago: executing program 6 (id=278): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x70) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.214216184s ago: executing program 6 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8', 0x1) 1.206630851s ago: executing program 2 (id=280): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1.170894055s ago: executing program 2 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x2000, 0x3, 0xfffe, 0x4, 0x2, 0x0, 0xff, 0x0, 0xc, 0x20000000, 0x7882, 0x0, 0x1, 0x1, 0x6, [0x0, 0x80000000]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x20004810) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r9, 0x0, 0x0) 1.167402608s ago: executing program 6 (id=282): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x20000000}, 0x1c) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.020285054s ago: executing program 6 (id=283): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2c"], 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.020111914s ago: executing program 6 (id=284): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010"], 0x68}}, 0x64000004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 779.28458ms ago: executing program 4 (id=285): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10) accept$inet(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000e00)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) 757.805249ms ago: executing program 5 (id=286): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0xc840) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x80, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f0000000040)={[{@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) 737.834907ms ago: executing program 3 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x80482, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 737.661626ms ago: executing program 6 (id=288): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x20}}, 0x0) 676.451069ms ago: executing program 3 (id=289): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}, 0x200000e0) 676.161157ms ago: executing program 3 (id=290): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 627.702096ms ago: executing program 3 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000180"], 0x24}}, 0x0) 584.981768ms ago: executing program 4 (id=292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533"], 0x60}}, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 524.306611ms ago: executing program 3 (id=293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xbc40) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 472.573934ms ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r4, 0x3) shmdt(r3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 339.500441ms ago: executing program 4 (id=295): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e484ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f56b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034916bea1f1", 0x66}, {&(0x7f00000006c0)="1c98baccf3c4dda10bf3823360bf673a135eb5c90ee53a5b0ab6833eee1edc56059d6fdcb3397e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95d1c5ca477757bb1d8b4751f50991ee9849f640186f02f3c82d0752c71bda2fe01268fcfa2e057d57e3c7613be80e9a14d5496614164f56402daa03e33403000000e4e93f02253a60e911cf857dd1b5178e99121b108722c45046dccf4045d4a158c95f4784b4ba9e78352ad34c29bf", 0xc4}, {&(0x7f00000007c0)="cc1e39e7c3db05affefe235e7ad27cff42a4bb04a905a9e180304f85d411c99c4747199dc13ade391fe1017e5baa933f22713c9cc29566ad1d1e6d660370794f5f63881b0479c9eff489ec5a58dbe2d79f651e595d8d5e51b948ed3f1c714d33d554547036037578efda46a511e8fb", 0x6f}, {&(0x7f0000000940)="6f407165ebb4b1cf22e8e2228ec71acdd98d994e9bf95dd6bbd6844e6f65597c0b671be3498a16c02a5935ae7bbba881d0a669167cff8bb61e49a4f70f67c9ac023dac4daf9b83ca2d21213f42907a8930e50d78491357e02bad7a9b2bb42bbbf0f62265da3fcb08418400cee73c258ec675aef84d1212f6b3c3fddcc4319a25fe6a3f2117e31372c5aee3", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121", 0x34}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13", 0xbb}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb6040000", 0xf6}], 0x2}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 58.761822ms ago: executing program 2 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}]}]}, 0x2c}}, 0x0) 394.934µs ago: executing program 4 (id=297): syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 28.726650][ T4702] cgroup: Unknown subsys name 'net' [ 28.806322][ T4702] cgroup: Unknown subsys name 'cpuset' [ 28.808415][ T4702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.978815][ T4702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.776634][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.779985][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.780257][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.780593][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.780805][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.798616][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.800415][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.802211][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.807198][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.808946][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.828000][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.830002][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.832111][ T4734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.832496][ T4734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.832736][ T4734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.833078][ T4734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.833325][ T4734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.833491][ T4734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.833733][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.834490][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.834733][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.838146][ T4734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.846254][ T4716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.854922][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.857244][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.133613][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.135570][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.136502][ T4714] bridge_slave_0: entered allmulticast mode [ 30.137011][ T4714] bridge_slave_0: entered promiscuous mode [ 30.145265][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.146746][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.148121][ T4714] bridge_slave_1: entered allmulticast mode [ 30.149810][ T4714] bridge_slave_1: entered promiscuous mode [ 30.169998][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.173111][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.184687][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.185592][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.185683][ T4719] bridge_slave_0: entered allmulticast mode [ 30.186168][ T4719] bridge_slave_0: entered promiscuous mode [ 30.206239][ T4714] team0: Port device team_slave_0 added [ 30.207033][ T4714] team0: Port device team_slave_1 added [ 30.214288][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.214702][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.215234][ T4719] bridge_slave_1: entered allmulticast mode [ 30.215698][ T4719] bridge_slave_1: entered promiscuous mode [ 30.230235][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.232974][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.234330][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.234910][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.236144][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.236153][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.236167][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.254356][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.259840][ T4714] hsr_slave_0: entered promiscuous mode [ 30.261438][ T4714] hsr_slave_1: entered promiscuous mode [ 30.285722][ T4719] team0: Port device team_slave_0 added [ 30.289014][ T4719] team0: Port device team_slave_1 added [ 30.310780][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.312157][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.316442][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.329703][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.329734][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.330050][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.370820][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.370907][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.370972][ T4715] bridge_slave_0: entered allmulticast mode [ 30.371432][ T4715] bridge_slave_0: entered promiscuous mode [ 30.372779][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.372800][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.372887][ T4715] bridge_slave_1: entered allmulticast mode [ 30.373291][ T4715] bridge_slave_1: entered promiscuous mode [ 30.383561][ T4719] hsr_slave_0: entered promiscuous mode [ 30.383895][ T4719] hsr_slave_1: entered promiscuous mode [ 30.384095][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.384133][ T4719] Cannot create hsr debugfs directory [ 30.413899][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.417827][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.418372][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.418462][ T4726] bridge_slave_0: entered allmulticast mode [ 30.418919][ T4726] bridge_slave_0: entered promiscuous mode [ 30.419712][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.419731][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.419815][ T4726] bridge_slave_1: entered allmulticast mode [ 30.420221][ T4726] bridge_slave_1: entered promiscuous mode [ 30.430567][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.430610][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.430702][ T4721] bridge_slave_0: entered allmulticast mode [ 30.431168][ T4721] bridge_slave_0: entered promiscuous mode [ 30.432245][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.432266][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.432377][ T4721] bridge_slave_1: entered allmulticast mode [ 30.432823][ T4721] bridge_slave_1: entered promiscuous mode [ 30.434443][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.450914][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.452384][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.456622][ T4715] team0: Port device team_slave_0 added [ 30.464139][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.469337][ T4715] team0: Port device team_slave_1 added [ 30.479734][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.480995][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.485762][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.488722][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.496567][ T4726] team0: Port device team_slave_0 added [ 30.501772][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.501804][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.501821][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.506049][ T4721] team0: Port device team_slave_0 added [ 30.506707][ T4726] team0: Port device team_slave_1 added [ 30.516344][ T4721] team0: Port device team_slave_1 added [ 30.527949][ T4714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.530856][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.537889][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.537917][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.537931][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.538662][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.538669][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.538679][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.538854][ T4714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.540054][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.540368][ T4714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.544364][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.549480][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.549491][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.549506][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.550205][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.550212][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.550224][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.569058][ T4714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.572526][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.588981][ T4715] hsr_slave_0: entered promiscuous mode [ 30.589350][ T4715] hsr_slave_1: entered promiscuous mode [ 30.589587][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.589597][ T4715] Cannot create hsr debugfs directory [ 30.591779][ T4726] hsr_slave_0: entered promiscuous mode [ 30.592107][ T4726] hsr_slave_1: entered promiscuous mode [ 30.592329][ T4726] debugfs: 'hsr0' already exists in 'hsr' [ 30.592339][ T4726] Cannot create hsr debugfs directory [ 30.606388][ T4721] hsr_slave_0: entered promiscuous mode [ 30.607818][ T4721] hsr_slave_1: entered promiscuous mode [ 30.609091][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.610167][ T4721] Cannot create hsr debugfs directory [ 30.665124][ T4719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.667713][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.680654][ T4719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.682927][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.685016][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.685061][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.685221][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.685269][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.700963][ T4719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.703380][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.705712][ T4719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.707961][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.751301][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.751346][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.751455][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.751489][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.763474][ T4726] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.767536][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.769463][ T4726] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.771668][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.774821][ T4726] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.777659][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.778004][ T4726] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.781461][ T4726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.798492][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.802171][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.803983][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.806812][ T3416] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.809243][ T3416] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.822007][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.840086][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.840147][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.843201][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.843235][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.847876][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.850440][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.852461][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.855270][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.856978][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.859072][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.862839][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.863838][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.873367][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.883178][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.899060][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.899141][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.899557][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.899575][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.908238][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.910632][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.921959][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.923941][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.931122][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.933892][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.936042][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.939466][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.942647][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.943905][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.992919][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.019703][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.025183][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.047033][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.047078][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.066370][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.071077][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.074394][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.074444][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.079643][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.079683][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.089463][ T4726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.091572][ T4726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.099681][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.099731][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.114713][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.118514][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.125574][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.128624][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.128670][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.148464][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.148510][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.169006][ T4719] veth0_vlan: entered promiscuous mode [ 31.178550][ T4714] veth0_vlan: entered promiscuous mode [ 31.184500][ T4714] veth1_vlan: entered promiscuous mode [ 31.192417][ T4719] veth1_vlan: entered promiscuous mode [ 31.207563][ T4719] veth0_macvtap: entered promiscuous mode [ 31.213564][ T4719] veth1_macvtap: entered promiscuous mode [ 31.222812][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.232197][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.238199][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.243910][ T3667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.244138][ T3667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.244158][ T3667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.244175][ T3667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.252839][ T4714] veth0_macvtap: entered promiscuous mode [ 31.259649][ T4714] veth1_macvtap: entered promiscuous mode [ 31.311476][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.325699][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.331564][ T3667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.331663][ T3667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.331705][ T3667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.331726][ T3667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.376770][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.376796][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.389760][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.398714][ T3713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.398746][ T3713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.404334][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.404365][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.427024][ T3416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.427058][ T3416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.448195][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.455828][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.458095][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.470478][ T4721] veth0_vlan: entered promiscuous mode [ 31.481081][ T4721] veth1_vlan: entered promiscuous mode [ 31.489826][ T4721] veth0_macvtap: entered promiscuous mode [ 31.492222][ T4721] veth1_macvtap: entered promiscuous mode [ 31.501909][ T4715] veth0_vlan: entered promiscuous mode [ 31.503978][ T4715] veth1_vlan: entered promiscuous mode [ 31.523529][ T4893] loop1: detected capacity change from 0 to 512 [ 31.526545][ T4893] EXT4-fs: Ignoring removed bh option [ 31.528627][ T4893] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.528642][ T4893] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.528652][ T4893] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 31.543518][ T4715] veth0_macvtap: entered promiscuous mode [ 31.551280][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.554582][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.569399][ T3416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.569613][ T3416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.569727][ T3416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.569857][ T3416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.580268][ T4893] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2: inode has both inline data and extents flags [ 31.580355][ T4893] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.583787][ T4893] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 31.583864][ T4893] loop1: lost filesystem error report for type 5 error -117 [ 31.585812][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 31.585827][ C1] EXT4-fs (loop1): initial error at time 31: ext4_orphan_get:1399: inode 15 [ 31.585844][ C1] EXT4-fs (loop1): last error at time 31: ext4_orphan_get:1404 [ 31.596325][ T4893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.599869][ T4715] veth1_macvtap: entered promiscuous mode [ 31.620292][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.623824][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.638826][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.652244][ T3713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.652304][ T3713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.652331][ T3713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.652354][ T3713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.679889][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.681474][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.725067][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.725103][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.154992][ T50] Bluetooth: hci2: command tx timeout [ 32.155105][ T50] Bluetooth: hci1: command tx timeout [ 32.155165][ T50] Bluetooth: hci3: command tx timeout [ 32.155215][ T50] Bluetooth: hci4: command tx timeout [ 32.155351][ T4722] Bluetooth: hci0: command tx timeout [ 32.717608][ T4726] veth0_vlan: entered promiscuous mode [ 32.719383][ T4726] veth1_vlan: entered promiscuous mode [ 32.727546][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.727575][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.180701][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.180740][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.258954][ T4726] veth0_macvtap: entered promiscuous mode [ 33.398370][ T4726] veth1_macvtap: entered promiscuous mode [ 33.402971][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.403972][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.406374][ T4716] Bluetooth: hci4: command tx timeout [ 34.406419][ T4716] Bluetooth: hci3: command tx timeout [ 34.406448][ T4716] Bluetooth: hci1: command tx timeout [ 34.406467][ T4716] Bluetooth: hci2: command tx timeout [ 34.410610][ T4722] Bluetooth: hci0: command tx timeout [ 34.459706][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.459811][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.459849][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.459877][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.558126][ T4952] tipc: Started in network mode [ 34.558166][ T4952] tipc: Node identity d2e13d4180c1, cluster identity 4711 [ 34.558246][ T4952] tipc: Enabled bearer , priority 1 [ 34.570428][ T4951] tipc: Resetting bearer [ 34.576411][ T4951] tipc: Disabling bearer [ 34.588686][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.591474][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.617849][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.617884][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.805165][ T4980] Zero length message leads to an empty skb [ 35.887521][ T4995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.893863][ T4995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.243065][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 36.432355][ T1093] IPVS: starting estimator thread 0... [ 36.434964][ T50] Bluetooth: hci2: command tx timeout [ 36.434996][ T50] Bluetooth: hci1: command tx timeout [ 36.435015][ T50] Bluetooth: hci3: command tx timeout [ 36.435031][ T50] Bluetooth: hci4: command tx timeout [ 36.439710][ T4722] Bluetooth: hci0: command tx timeout [ 36.515045][ T5008] IPVS: using max 60 ests per chain, 144000 per kthread [ 36.839791][ T5025] loop1: detected capacity change from 0 to 4096 [ 36.850878][ T5025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.028911][ T5030] hub 1-0:1.0: USB hub found [ 37.029342][ T5030] hub 1-0:1.0: 1 port detected [ 37.237957][ T5032] Config c/1 of g1 needs at least one function. [ 37.239473][ T5032] udc dummy_udc.0: failed to start g1: -22 [ 37.240943][ T5032] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 37.255051][ T5032] UDC core: g1: couldn't find an available UDC or it's busy [ 37.686873][ T5038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 38.597632][ T4722] Bluetooth: hci0: command tx timeout [ 38.597679][ T4722] Bluetooth: hci4: command tx timeout [ 38.597712][ T4722] Bluetooth: hci3: command tx timeout [ 38.597734][ T4722] Bluetooth: hci1: command tx timeout [ 38.597753][ T4722] Bluetooth: hci2: command tx timeout [ 38.680484][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.031595][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.033521][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.201776][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 40.674417][ T5083] hub 1-0:1.0: USB hub found [ 40.674677][ T5083] hub 1-0:1.0: 1 port detected [ 40.753015][ T5088] retu-mfd 0-0001: could not read Retu revision: -5 [ 40.753717][ T5088] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 40.754052][ T5088] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 40.786484][ T5092] loop2: detected capacity change from 0 to 4096 [ 40.786875][ T5092] EXT4-fs: inline encryption not supported [ 40.791134][ T5092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.802770][ T5092] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 40.802807][ T5092] System zones: 0-5 [ 40.807280][ T5092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.184015][ T5108] loop3: detected capacity change from 0 to 4096 [ 41.233733][ T5108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.297870][ T5115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.298072][ T5115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.530778][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.033521][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.080332][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.083262][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.518409][ T5183] loop3: detected capacity change from 0 to 512 [ 42.523636][ T5183] ======================================================= [ 42.523636][ T5183] WARNING: The mand mount option has been deprecated and [ 42.523636][ T5183] and is ignored by this kernel. Remove the mand [ 42.523636][ T5183] option from the mount to silence this warning. [ 42.523636][ T5183] ======================================================= [ 42.552293][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.69: inode has both inline data and extents flags [ 42.552343][ T5183] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.552536][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.69: couldn't read orphan inode 15 (err -117) [ 42.552557][ T5183] loop3: lost filesystem error report for type 5 error -117 [ 42.555215][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 42.555229][ C0] EXT4-fs (loop3): initial error at time 42: ext4_orphan_get:1399: inode 15 [ 42.555247][ C0] EXT4-fs (loop3): last error at time 42: ext4_orphan_get:1404 [ 42.563789][ T5183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.120583][ T5208] capability: warning: `syz.0.72' uses 32-bit capabilities (legacy support in use) [ 43.238129][ T5213] loop2: detected capacity change from 0 to 512 [ 44.088033][ T5213] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.105838][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.119462][ T5213] EXT4-fs (loop2): 1 truncate cleaned up [ 44.123290][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.272949][ T5218] loop4: detected capacity change from 0 to 4096 [ 44.283107][ T5218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.288532][ T5217] loop1: detected capacity change from 0 to 512 [ 44.326469][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.370223][ T5217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.374005][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.382916][ T5233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.383114][ T5233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.411688][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.615229][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 45.867172][ T5259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.867372][ T5259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.883548][ T5261] loop1: detected capacity change from 0 to 4096 [ 45.906661][ T5261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.929570][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.093813][ T5282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.212267][ T5282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.176041][ T5282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.215209][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.280936][ T5282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.375537][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 47.375568][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.375592][ T11] usb 1-1: Product: syz [ 47.375606][ T11] usb 1-1: Manufacturer: syz [ 47.375618][ T11] usb 1-1: SerialNumber: syz [ 47.459678][ T3279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.489005][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.489106][ T3279] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.499021][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.946337][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 47.949852][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 49.227717][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 49.230554][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 49.547677][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 49.550463][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 49.550822][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 49.567576][ T11] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 49.576314][ T11] usb 1-1: USB disconnect, device number 2 [ 49.593355][ T5358] tipc: Started in network mode [ 49.594425][ T5358] tipc: Node identity f23e3918e1a7, cluster identity 4711 [ 49.597702][ T5358] tipc: Enabled bearer , priority 1 [ 49.602164][ T5357] tipc: Disabling bearer [ 49.816911][ T5368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.130'. [ 50.003916][ T5367] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 50.870645][ T5409] tipc: Started in network mode [ 50.870813][ T5409] tipc: Node identity 3e589028df07, cluster identity 4711 [ 50.870862][ T5409] tipc: Enabled bearer , priority 0 [ 50.877155][ T5408] tipc: Disabling bearer [ 51.414353][ T5429] syz.4.157 uses obsolete (PF_INET,SOCK_PACKET) [ 51.457431][ T5433] tipc: Started in network mode [ 51.458542][ T5433] tipc: Node identity 76997587f47b, cluster identity 4711 [ 51.460180][ T5433] tipc: Enabled bearer , priority 0 [ 51.463769][ T5432] tipc: Disabling bearer [ 51.848309][ T5442] loop0: detected capacity change from 0 to 4096 [ 51.866774][ T5442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.896902][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.024727][ T5449] loop0: detected capacity change from 0 to 1024 [ 52.039708][ T5449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.157411][ T5452] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 52.160302][ T5452] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.161170][ T5452] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.161185][ T5452] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.161185][ T5452] [ 52.161193][ T5452] EXT4-fs (loop0): Total free blocks count 0 [ 52.161201][ T5452] EXT4-fs (loop0): Free/Dirty block details [ 52.161211][ T5452] EXT4-fs (loop0): free_blocks=20480 [ 52.161221][ T5452] EXT4-fs (loop0): dirty_blocks=80 [ 52.161228][ T5452] EXT4-fs (loop0): Block reservation details [ 52.161234][ T5452] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 52.163136][ T5452] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 52.295928][ T5454] loop2: detected capacity change from 0 to 512 [ 52.296668][ T5454] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.297953][ T5454] EXT4-fs (loop2): 1 truncate cleaned up [ 52.298495][ T5454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.309112][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.363859][ T4954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.835889][ T4954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.263968][ T4715] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.380101][ T5470] loop4: detected capacity change from 0 to 4096 [ 53.397295][ T5470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.407492][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.409085][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.419251][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.421161][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.422726][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.439118][ T4954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.470419][ T4726] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.524244][ T5479] tipc: Enabled bearer , priority 0 [ 53.527505][ T5478] tipc: Disabling bearer [ 53.598534][ T5491] loop4: detected capacity change from 0 to 7 [ 53.599998][ T5491] Dev loop4: unable to read RDB block 7 [ 53.600388][ T5491] loop4: AHDI p2 p3 [ 53.600406][ T5491] loop4: partition table partially beyond EOD, truncated [ 53.600510][ T5491] loop4: p3 start 335544320 is beyond EOD, truncated [ 53.604597][ T4347] Dev loop4: unable to read RDB block 7 [ 53.604636][ T4347] loop4: AHDI p2 p3 [ 53.604647][ T4347] loop4: partition table partially beyond EOD, truncated [ 53.604740][ T4347] loop4: p3 start 335544320 is beyond EOD, truncated [ 53.641090][ T4954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.647815][ T5493] loop4: detected capacity change from 0 to 256 [ 53.663672][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 53.666166][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 53.667304][ T5493] vfat: Unknown parameter 'showexecp^}? te' [ 53.800288][ T5505] loop3: detected capacity change from 0 to 512 [ 53.800635][ T5505] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.806117][ T5505] EXT4-fs: Ignoring removed oldalloc option [ 53.806168][ T5505] EXT4-fs: Invalid want_extra_isize 0 [ 53.935462][ T4954] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.949174][ T5507] input: syz1 as /devices/virtual/input/input2 [ 53.980935][ T5516] loop3: detected capacity change from 0 to 4096 [ 54.018085][ T5516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.033305][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.033358][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.033516][ T5471] bridge_slave_0: entered allmulticast mode [ 54.033993][ T5471] bridge_slave_0: entered promiscuous mode [ 54.034721][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.034748][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.034807][ T5471] bridge_slave_1: entered allmulticast mode [ 54.054015][ T5471] bridge_slave_1: entered promiscuous mode [ 54.070924][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.115351][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.121486][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.134276][ T4954] bridge_slave_1: left allmulticast mode [ 54.134328][ T4954] bridge_slave_1: left promiscuous mode [ 54.134771][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.154411][ T4954] bridge_slave_0: left allmulticast mode [ 54.154450][ T4954] bridge_slave_0: left promiscuous mode [ 54.154540][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.342672][ T4954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.405650][ T4954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.413900][ T5544] loop4: detected capacity change from 0 to 7 [ 54.417308][ T4954] bond0 (unregistering): Released all slaves [ 54.421189][ T5544] Dev loop4: unable to read RDB block 7 [ 54.421232][ T5544] loop4: AHDI p2 p3 [ 54.421243][ T5544] loop4: partition table partially beyond EOD, truncated [ 54.421329][ T5544] loop4: p3 start 335544320 is beyond EOD, truncated [ 54.456567][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 54.486104][ T5471] team0: Port device team_slave_0 added [ 54.486783][ T5540] tipc: Enabled bearer , priority 0 [ 54.517456][ T5539] tipc: Disabling bearer [ 54.530304][ T5471] team0: Port device team_slave_1 added [ 54.536583][ T4954] tipc: Left network mode [ 54.536675][ T5550] tipc: Enabling of bearer rejected, failed to enable media [ 54.560625][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.560662][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.560674][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.561229][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.561237][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.561251][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.617734][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.617928][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.682761][ T5565] loop2: detected capacity change from 0 to 4096 [ 54.711541][ T5471] hsr_slave_0: entered promiscuous mode [ 54.712030][ T5471] hsr_slave_1: entered promiscuous mode [ 54.712258][ T5471] debugfs: 'hsr0' already exists in 'hsr' [ 54.712268][ T5471] Cannot create hsr debugfs directory [ 54.722595][ T5565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.750159][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.781096][ T5576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.783570][ T5573] syz_tun: entered allmulticast mode [ 54.806908][ T5576] evm: overlay not supported [ 54.885827][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 54.892875][ T4715] EXT4-fs error (device loop0): ext4_lookup:1782: inode #11: comm syz-executor: ' ' linked to parent dir [ 54.894307][ T4715] EXT4-fs error (device loop0): ext4_lookup:1782: inode #11: comm syz-executor: ' ' linked to parent dir [ 54.940064][ T4954] hsr_slave_0: left promiscuous mode [ 54.940457][ T4954] hsr_slave_1: left promiscuous mode [ 54.940715][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.940733][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.941815][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.941826][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.952140][ T4954] veth1_macvtap: left promiscuous mode [ 54.952199][ T4954] veth0_macvtap: left promiscuous mode [ 54.952264][ T4954] veth1_vlan: left promiscuous mode [ 54.952310][ T4954] veth0_vlan: left promiscuous mode [ 55.061741][ T4954] team0 (unregistering): Port device team_slave_1 removed [ 55.072243][ T4954] team0 (unregistering): Port device team_slave_0 removed [ 55.133561][ T5471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.136521][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.136974][ T5471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.139460][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.141329][ T5471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.144225][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.144574][ T5471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.159845][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.189153][ T5599] tipc: Enabled bearer , priority 0 [ 55.198564][ T5594] tipc: Disabling bearer [ 55.252694][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.289582][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.302750][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.302800][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.306167][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.311570][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.311613][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.351052][ T5614] tipc: Enabling of bearer rejected, failed to enable media [ 55.413728][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.443854][ T4954] bridge_slave_1: left allmulticast mode [ 55.443895][ T4954] bridge_slave_1: left promiscuous mode [ 55.444026][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.451406][ T4954] bridge_slave_0: left allmulticast mode [ 55.451444][ T4954] bridge_slave_0: left promiscuous mode [ 55.451575][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.475056][ T4722] Bluetooth: hci2: command tx timeout [ 55.718329][ T4954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.733739][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.740015][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.741778][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.743572][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.746554][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.792163][ T4954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.808303][ T5633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.809734][ T5633] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 55.856199][ T4954] bond0 (unregistering): Released all slaves [ 56.044196][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.297661][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.371555][ T4954] tipc: Left network mode [ 56.411476][ T5680] usb usb2: usbfs: interface 0 claimed by hub while 'syz.2.210' sets config #1 [ 56.433052][ T5682] tipc: Started in network mode [ 56.435442][ T5682] tipc: Node identity 080211000001, cluster identity 4711 [ 56.442013][ T5682] tipc: Enabled bearer , priority 0 [ 56.732395][ T4405] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.737574][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.798574][ T5693] tipc: Enabling of bearer rejected, already enabled [ 56.882065][ T4954] hsr_slave_0: left promiscuous mode [ 56.890300][ T4954] hsr_slave_1: left promiscuous mode [ 56.891806][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.893570][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.896039][ T4954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.897872][ T4954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.918505][ T4954] veth1_macvtap: left promiscuous mode [ 56.919732][ T4954] veth0_macvtap: left promiscuous mode [ 56.921237][ T4954] veth1_vlan: left promiscuous mode [ 56.922606][ T4954] veth0_vlan: left promiscuous mode [ 57.047235][ T4954] team0 (unregistering): Port device team_slave_1 removed [ 57.062747][ T4954] team0 (unregistering): Port device team_slave_0 removed [ 57.238255][ T5471] veth0_vlan: entered promiscuous mode [ 57.241440][ T5471] veth1_vlan: entered promiscuous mode [ 57.249651][ T5471] veth0_macvtap: entered promiscuous mode [ 57.252177][ T5471] veth1_macvtap: entered promiscuous mode [ 57.258502][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.261133][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.287293][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287353][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287373][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287390][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.435871][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.437489][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.442696][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.444241][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.444406][ T5636] bridge_slave_0: entered allmulticast mode [ 57.444980][ T5636] bridge_slave_0: entered promiscuous mode [ 57.450256][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.451738][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.453212][ T5636] bridge_slave_1: entered allmulticast mode [ 57.455100][ T5636] bridge_slave_1: entered promiscuous mode [ 57.476486][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.479779][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.483783][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.483822][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.546410][ T4716] Bluetooth: hci2: command tx timeout [ 57.550471][ T5636] team0: Port device team_slave_0 added [ 57.552908][ T5636] team0: Port device team_slave_1 added [ 57.555997][ T4913] tipc: Node number set to 134418688 [ 57.571802][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.573345][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.578967][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.579635][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.579642][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.579657][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.620320][ T5636] hsr_slave_0: entered promiscuous mode [ 57.621924][ T5636] hsr_slave_1: entered promiscuous mode [ 57.623410][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 57.624722][ T5636] Cannot create hsr debugfs directory [ 57.776655][ T5636] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 57.780596][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.782775][ T5636] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 57.785020][ T4716] Bluetooth: hci1: command tx timeout [ 58.025983][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.040149][ T5636] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 58.044242][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.047121][ T5636] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 58.063566][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.083393][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.085252][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.133375][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.133424][ T5636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.133511][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.133544][ T5636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.200009][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.205317][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.206111][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.232055][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.253437][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.253489][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.253826][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.253845][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.349725][ T5755] Config c/1 of g1 needs at least one function. [ 58.349800][ T5755] udc usbip-vudc.0: failed to start g1: -22 [ 58.349813][ T5755] configfs-gadget.g1 gadget.1: probe with driver configfs-gadget.g1 failed with error -22 [ 58.355861][ T5755] UDC core: g1: couldn't find an available UDC or it's busy [ 58.406985][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.427408][ T5766] Illegal XDP return value 268435456 on prog (id 3) dev syz_tun, expect packet loss! [ 58.509463][ T5636] veth0_vlan: entered promiscuous mode [ 58.512436][ T5636] veth1_vlan: entered promiscuous mode [ 58.520069][ T5636] veth0_macvtap: entered promiscuous mode [ 58.522514][ T5636] veth1_macvtap: entered promiscuous mode [ 58.527494][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.530033][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.584360][ T4954] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.584594][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.584625][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.584651][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.610161][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.610195][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.630450][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.630485][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.804590][ T5787] set_capacity_and_notify: 2 callbacks suppressed [ 58.808276][ T5787] loop6: detected capacity change from 0 to 4096 [ 58.829549][ T5787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.884316][ T5636] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.217003][ T5804] mmap: syz.3.239 (5804) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.624983][ T4716] Bluetooth: hci2: command tx timeout [ 59.742333][ T5821] bridge0: port 3(syz_tun) entered blocking state [ 59.742789][ T5821] bridge0: port 3(syz_tun) entered disabled state [ 59.743184][ T5821] syz_tun: entered allmulticast mode [ 59.744977][ T5821] syz_tun: entered promiscuous mode [ 59.745237][ T5821] bridge0: port 3(syz_tun) entered blocking state [ 59.745274][ T5821] bridge0: port 3(syz_tun) entered forwarding state [ 59.755818][ T5821] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 59.758346][ T5821] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 59.914165][ T4716] Bluetooth: hci1: command tx timeout [ 61.447246][ T5850] loop4: detected capacity change from 0 to 7 [ 61.450096][ T5850] Dev loop4: unable to read RDB block 7 [ 61.450441][ T5850] loop4: AHDI p2 p3 [ 61.451670][ T5850] loop4: partition table partially beyond EOD, truncated [ 61.451788][ T5850] loop4: p3 start 335544320 is beyond EOD, truncated [ 61.541734][ T5854] tipc: Enabling of bearer rejected, already enabled [ 61.704932][ T4716] Bluetooth: hci2: command tx timeout [ 61.982715][ T4716] Bluetooth: hci1: command tx timeout [ 62.897060][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.897269][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.997008][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.998875][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.019429][ T5896] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 63.019470][ T5896] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 63.374689][ T5920] warning: `syz.2.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.594367][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.284'. [ 63.594405][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.6.284'. [ 63.598945][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.284'. [ 63.598980][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.6.284'. [ 63.681357][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.681410][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.682086][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.685391][ T5933] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.687326][ T5933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.692721][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.693068][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.693407][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.693713][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.694348][ T5933] wlan0 speed is unknown, defaulting to 1000 [ 63.696001][ T5924] rdma_rxe: rxe_newlink: failed to add lo [ 63.738092][ T5934] loop5: detected capacity change from 0 to 512 [ 63.739726][ T5934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.743432][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 63.752757][ T5934] EXT4-fs (loop5): 1 truncate cleaned up [ 63.753237][ T5934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.025214][ T4716] Bluetooth: hci1: command tx timeout [ 64.328967][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.329192][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.340604][ T5958] tipc: Enabled bearer , priority 10 [ 64.366374][ T5960] [ 64.366800][ T5960] ============================= [ 64.367690][ T5960] WARNING: suspicious RCU usage [ 64.368561][ T5960] syzkaller #0 Tainted: G L [ 64.369553][ T5960] ----------------------------- [ 64.370508][ T5960] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 64.371954][ T5960] [ 64.371954][ T5960] other info that might help us debug this: [ 64.371954][ T5960] [ 64.373678][ T5960] [ 64.373678][ T5960] rcu_scheduler_active = 2, debug_locks = 1 [ 64.375229][ T5960] 1 lock held by syz.2.298/5960: [ 64.376061][ T5960] #0: ffff0000daca9c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x70/0x9c [ 64.377815][ T5960] [ 64.377815][ T5960] stack backtrace: [ 64.378772][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.2.298 Tainted: G L syzkaller #0 PREEMPT [ 64.380359][ T5960] Tainted: [L]=SOFTLOCKUP [ 64.381028][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.382581][ T5960] Call trace: [ 64.383104][ T5960] show_stack+0x2c/0x3c (C) [ 64.383765][ T5960] __dump_stack+0x30/0x40 [ 64.384461][ T5960] dump_stack_lvl+0xd8/0x12c [ 64.385187][ T5960] dump_stack+0x1c/0x28 [ 64.385846][ T5960] lockdep_rcu_suspicious+0x168/0x26c [ 64.386742][ T5960] xfrm_send_migrate_state+0x6b0/0x958 [ 64.387652][ T5960] xfrm_do_migrate_state+0x1114/0x1728 [ 64.388602][ T5960] xfrm_user_rcv_msg+0x4e0/0x950 [ 64.389387][ T5960] netlink_rcv_skb+0x238/0x414 [ 64.390159][ T5960] xfrm_netlink_rcv+0x80/0x9c [ 64.390916][ T5960] netlink_unicast+0x600/0x7f8 [ 64.391691][ T5960] netlink_sendmsg+0x648/0x948 [ 64.392493][ T5960] __sock_sendmsg+0xc8/0x17c [ 64.393253][ T5960] ____sys_sendmsg+0x3d0/0x6c8 [ 64.394022][ T5960] ___sys_sendmsg+0x198/0x224 [ 64.394775][ T5960] __sys_sendmsg+0x158/0x204 [ 64.395523][ T5960] __arm64_sys_sendmsg+0x80/0x94 [ 64.396312][ T5960] invoke_syscall+0x98/0x244 [ 64.397064][ T5960] el0_svc_common+0xec/0x23c [ 64.397813][ T5960] do_el0_svc+0x4c/0x5c [ 64.398497][ T5960] el0_svc+0x64/0x260 [ 64.399155][ T5960] el0t_64_sync_handler+0x48/0x148 [ 64.400014][ T5960] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.509002][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.510278][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.510559][ T24] cfg80211: failed to load regulatory.db [ 64.558013][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.654103][ T5959] bridge0: port 3(syz_tun) entered disabled state [ 64.657755][ T5959] syz_tun (unregistering): left allmulticast mode [ 64.657782][ T5959] syz_tun (unregistering): left promiscuous mode [ 64.657812][ T5959] bridge0: port 3(syz_tun) entered disabled state [ 64.722486][ T5956] syz_tun (unregistering): left allmulticast mode [ 64.823848][ T3279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.913165][ T3279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.980183][ T3279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.049948][ T3279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.198492][ T3279] bridge_slave_1: left allmulticast mode [ 65.198525][ T3279] bridge_slave_1: left promiscuous mode [ 65.198630][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.201399][ T3279] bridge_slave_0: left allmulticast mode [ 65.201414][ T3279] bridge_slave_0: left promiscuous mode [ 65.201479][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.255756][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.286697][ T3279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.325918][ T3279] bond0 (unregistering): Released all slaves [ 65.382122][ T3279] tipc: Disabling bearer [ 65.389759][ T3279] tipc: Left network mode [ 65.450167][ T4405] 8021q: adding VLAN 0 to HW filter on device eth5 [ 65.575457][ T4405] 8021q: adding VLAN 0 to HW filter on device eth6 [ 65.613177][ T3279] hsr_slave_0: left promiscuous mode [ 65.614510][ T3279] hsr_slave_1: left promiscuous mode [ 65.617068][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.618590][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.620330][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.621821][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.627754][ T3279] veth1_macvtap: left promiscuous mode [ 65.628733][ T3279] veth0_macvtap: left promiscuous mode [ 65.630008][ T3279] veth1_vlan: left promiscuous mode [ 65.631120][ T3279] veth0_vlan: left promiscuous mode [ 65.729340][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 65.733792][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 65.777005][ T4405] 8021q: adding VLAN 0 to HW filter on device eth7 [ 65.898899][ T4405] 8021q: adding VLAN 0 to HW filter on device eth8 [ 66.007497][ T3279] IPVS: stop unused estimator thread 0... [ 66.114457][ T3279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.189789][ T3279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.290511][ T3279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.351085][ T3279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.523452][ T3279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.579589][ T3279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.614526][ T4405] 8021q: adding VLAN 0 to HW filter on device eth9 [ 66.636574][ T3279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.719871][ T3279] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.737622][ T4405] 8021q: adding VLAN 0 to HW filter on device eth10 [ 66.828840][ T3279] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.867617][ T4405] 8021q: adding VLAN 0 to HW filter on device eth11 [ 66.963067][ T3279] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.985975][ T4405] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.041168][ T3279] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.095722][ T3279] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.117286][ T4405] 8021q: adding VLAN 0 to HW filter on device eth13 [ 67.159690][ T3279] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.233096][ T4405] 8021q: adding VLAN 0 to HW filter on device eth14 [ 67.266993][ T3279] bridge_slave_1: left allmulticast mode [ 67.268636][ T3279] bridge_slave_1: left promiscuous mode [ 67.268745][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.272935][ T3279] bridge_slave_0: left allmulticast mode [ 67.272967][ T3279] bridge_slave_0: left promiscuous mode [ 67.273181][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.278139][ T3279] bridge_slave_1: left allmulticast mode [ 67.278165][ T3279] bridge_slave_1: left promiscuous mode [ 67.278232][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.282051][ T3279] bridge_slave_0: left allmulticast mode [ 67.282326][ T3279] bridge_slave_0: left promiscuous mode [ 67.282394][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.290183][ T3279] bridge_slave_1: left allmulticast mode [ 67.290211][ T3279] bridge_slave_1: left promiscuous mode [ 67.290288][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.294159][ T3279] bridge_slave_0: left allmulticast mode [ 67.294185][ T3279] bridge_slave_0: left promiscuous mode [ 67.294241][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.369318][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.376803][ T3279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.380063][ T3279] bond0 (unregistering): Released all slaves [ 67.418831][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.436400][ T3279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.438904][ T3279] bond0 (unregistering): Released all slaves [ 67.473140][ T3279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.516151][ T3279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.556677][ T3279] bond0 (unregistering): Released all slaves [ 67.613182][ T3279] tipc: Disabling bearer [ 67.614611][ T3279] tipc: Left network mode [ 67.690481][ T4405] 8021q: adding VLAN 0 to HW filter on device eth15 [ 67.823555][ T4405] 8021q: adding VLAN 0 to HW filter on device eth16 [ 68.119846][ T4405] 8021q: adding VLAN 0 to HW filter on device eth17 [ 68.242711][ T3279] hsr_slave_0: left promiscuous mode [ 68.243723][ T3279] hsr_slave_1: left promiscuous mode [ 68.243942][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.243953][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.248146][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.248168][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.252281][ T3279] hsr_slave_0: left promiscuous mode [ 68.253368][ T3279] hsr_slave_1: left promiscuous mode [ 68.253898][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.253908][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.256220][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.256231][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.260988][ T3279] hsr_slave_0: left promiscuous mode [ 68.262007][ T3279] hsr_slave_1: left promiscuous mode [ 68.262248][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.262259][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.263348][ T3279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.263357][ T3279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.275494][ T3279] veth1_macvtap: left promiscuous mode [ 68.275537][ T3279] veth0_macvtap: left promiscuous mode [ 68.275585][ T3279] veth1_vlan: left promiscuous mode [ 68.275621][ T3279] veth0_vlan: left promiscuous mode [ 68.279605][ T3279] veth1_macvtap: left promiscuous mode [ 68.279772][ T3279] veth0_macvtap: left promiscuous mode [ 68.279845][ T3279] veth1_vlan: left promiscuous mode [ 68.279876][ T3279] veth0_vlan: left promiscuous mode [ 68.283414][ T3279] veth1_macvtap: left promiscuous mode [ 68.283566][ T3279] veth0_macvtap: left promiscuous mode [ 68.283618][ T3279] veth1_vlan: left promiscuous mode [ 68.283661][ T3279] veth0_vlan: left promiscuous mode [ 68.444169][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 68.447940][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 68.553192][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 68.562122][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 68.671390][ T3279] team0 (unregistering): Port device team_slave_1 removed [ 68.681622][ T3279] team0 (unregistering): Port device team_slave_0 removed [ 68.844133][ T4405] 8021q: adding VLAN 0 to HW filter on device eth19 [ 69.079938][ T4405] 8021q: adding VLAN 0 to HW filter on device eth18 [ 69.206980][ T4405] 8021q: adding VLAN 0 to HW filter on device eth20 [ 69.553077][ T4405] 8021q: adding VLAN 0 to HW filter on device eth21