last executing test programs: 11m3.095700439s ago: executing program 1 (id=146): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 11m2.894893416s ago: executing program 1 (id=147): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xc8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045ba002800650000020690780a010100ac1414bb4e244e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2ff00feb0284721fef5"], 0x0) 11m2.644322681s ago: executing program 1 (id=151): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000887859af287edc648c62b559d79bc530ce1ee629ab984477596874164bf187fa0702c74723bdcfd165e305164206822dab7932c521c5a1b510497d6d93f6665f47692891434b5cb89b413a4f60ed85be"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x61}, 0x23) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000001180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, '\x00', 0xd0b, 0x21, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x35}, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, 0x1, "c3a8e4", 0x4, "9d4060"}, "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"}}}}}}, 0x0) 11m2.084960304s ago: executing program 1 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020400) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 11m0.761637653s ago: executing program 1 (id=156): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r0, 0x4004743c, 0x0) 10m59.958380287s ago: executing program 1 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000700)={0x7, 0x0, [{0x0, 0x0, 0x2}, {0x8}, {0x0, 0x0, 0x80000000}, {0x6, 0x0, 0x8001}, {0x4, 0x0, 0x6be}, {0x9, 0x0, 0x3}, {}, {0x2, 0x0, 0xd}, {0x4, 0x0, 0x2}, {0x10001, 0x0, 0x3ff}, {0x140, 0x0, 0x2a23}, {0x6, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x5, 0x0, 0x9}, {0x1, 0x0, 0xbd}, {0x7, 0x0, 0xbba46aa}]}) 10m59.431517069s ago: executing program 32 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000700)={0x7, 0x0, [{0x0, 0x0, 0x2}, {0x8}, {0x0, 0x0, 0x80000000}, {0x6, 0x0, 0x8001}, {0x4, 0x0, 0x6be}, {0x9, 0x0, 0x3}, {}, {0x2, 0x0, 0xd}, {0x4, 0x0, 0x2}, {0x10001, 0x0, 0x3ff}, {0x140, 0x0, 0x2a23}, {0x6, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x5, 0x0, 0x9}, {0x1, 0x0, 0xbd}, {0x7, 0x0, 0xbba46aa}]}) 9m40.303643764s ago: executing program 4 (id=413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x74}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 9m40.114130531s ago: executing program 4 (id=415): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m39.150827137s ago: executing program 4 (id=423): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10001}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b00"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x20048840) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9m32.11230978s ago: executing program 4 (id=441): socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=a']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 9m31.860207726s ago: executing program 4 (id=443): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 9m29.043063063s ago: executing program 4 (id=447): syz_usb_connect(0x3, 0x73, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1cd}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9m13.473510603s ago: executing program 33 (id=447): syz_usb_connect(0x3, 0x73, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1cd}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7m48.096096002s ago: executing program 2 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0) 7m47.453293019s ago: executing program 2 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) chdir(&(0x7f0000002240)='./file0/file0\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f0000006700)={0x10, 0xfffffffffffffffe}, 0x10) 7m46.563024467s ago: executing program 2 (id=656): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', 0x0]}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) 7m44.211987277s ago: executing program 3 (id=659): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 7m44.126873633s ago: executing program 2 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) setregid(0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000380)) getpeername(r3, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7m42.835022189s ago: executing program 3 (id=662): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4, 0x79, 0x1, 0xc}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) 7m41.520342437s ago: executing program 2 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000340)="c4e1fd7f5900410f01cfb9800000c00f3235002000000f303ef3420fc77200260f38062465000000000f20d835200000000f22d83e66450f3881362e0f23ef490fc74a000f08", 0x46}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m40.594512378s ago: executing program 3 (id=665): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x10, 0x3}}, 0x50) chdir(&(0x7f0000002240)='./file0/file0\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f0000006700)={0x10, 0xfffffffffffffffe}, 0x10) 7m40.466766716s ago: executing program 3 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m40.239673714s ago: executing program 3 (id=668): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x3, 0x0, 0x3, 0x0, 0x77f, 0x4000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/84, 0x54}], 0x1, 0x5, 0xfffffffd) 7m40.070263127s ago: executing program 3 (id=670): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 7m37.581613056s ago: executing program 2 (id=675): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x8000, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x635, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x42309411, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "45fa12dbaf83ad52c1f7f0d322ada1261cc4e65e569733bee67d3ff624e50d490d2ab837172787615f9321fbec96ddff06930ddfca3d32d10fe4bfcda2a66560", 0x17}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r5, r1, 0xee00) 7m25.012543308s ago: executing program 34 (id=670): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 7m22.465891962s ago: executing program 35 (id=675): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x4e23, @remote}, {0x2, 0x8000, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x635, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) socket$pppl2tp(0x18, 0x1, 0x1) syz_clone(0x42309411, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "45fa12dbaf83ad52c1f7f0d322ada1261cc4e65e569733bee67d3ff624e50d490d2ab837172787615f9321fbec96ddff06930ddfca3d32d10fe4bfcda2a66560", 0x17}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r5, r1, 0xee00) 6m25.389677614s ago: executing program 5 (id=798): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x23328fa3312a3cb, 0x4000000) 6m24.469075613s ago: executing program 5 (id=800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m15.593599996s ago: executing program 5 (id=807): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x23328fa3312a3cb, 0x4000000) 6m15.070908646s ago: executing program 5 (id=808): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000000)="89380755a08cc2cc146beea3425e1aba4ffc65780ffce74987613cb561cf8afa47b3169bb5eab3a9ecfc2787c70ea93f0e3c6bbdd2d4d66cfa126dc28c11baa3e16f78cdd3e8163bf3e56a96267f6a0ebf45e14a689194df817bf43b9bd4fb8a12f1e428faa41a9b1d0c19765dbfbae0b3d35f1e6d1e2b50d9f19ee717"}, {&(0x7f0000001300)="5645ffd3a3a07a6c4ceee3fb390e04aa7c564a215dddae0a10bc705607cd6a2d9bc3b5419b0327bdb569a6909f78904549c8d1351a5408d889d2f8edcc2ddc5cbba0edbdeae9d0dc9ca7a60b1af33dc70c"}, {&(0x7f00000000c0)="255aa126dcd296696a2e5e3e0655e643a3ed6e70de8b3a7bf38bdb953491c5eee2c297ed71c4a14a86a0982982588667c3"}], 0xffffffffffffdad) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x6, 0x3, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/4096, 0xffffffffffffffdc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc71", 0xa2, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") 6m12.579817916s ago: executing program 5 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 6m11.303892683s ago: executing program 5 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x76, &(0x7f0000001180)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb88a8100081a13b3db319213e7f854bd30d5e00000086dd6300000000383aff00000000000000000000ffff7f000001fe800000000000000300000020000016acaa9ed48dd739e873db253a0baa040090780000004860fd3a8500ff8900ff020000000000000000000000000001fe80000000000000000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[], 0x80}}, 0x8804) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000000)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000040)=0x1f) 5m56.195027266s ago: executing program 36 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x76, &(0x7f0000001180)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb88a8100081a13b3db319213e7f854bd30d5e00000086dd6300000000383aff00000000000000000000ffff7f000001fe800000000000000300000020000016acaa9ed48dd739e873db253a0baa040090780000004860fd3a8500ff8900ff020000000000000000000000000001fe80000000000000000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[], 0x80}}, 0x8804) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000000)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000040)=0x1f) 1m16.160056156s ago: executing program 0 (id=2035): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="88280000000000002400128009000100626f6e64000000001400028008206c000000000000001d00000000"], 0x44}}, 0x0) sendmsg(r1, 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)) r3 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) r4 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000580)=ANY=[@ANYBLOB="a68fb50da686b14c59080981c01ea39f8e5e8946fa496ca6b56f561e262ba582bc13131faa43e05941bb72c9397007291a1b84402c54d818643c2f3f72d1903ebfc8c793a702dff5e6974caf8e607faf0f2abc961638ccbd7a6932d7221e77eae49fe75ffe368ccc312183e2db55ae6d95738a1f2c2f0ab83e858ea33acc4bf148342c35e4e8aba882182e06f18e9ba4576c2d8e75d3a858fd54a2ee6f784a86b2ef3609133af9d1f100f9ab72908bbeb280063271a91c77bf6ef6cf1d6f34b3a6a2996b9831002a4a5831f941be7f5298a31cf4b23273d8474fcb7fba1e095a2eb946f10e2f65d996290000000000"]) 59.494983324s ago: executing program 7 (id=2090): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 58.389557624s ago: executing program 7 (id=2093): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', 0x0]}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000c00)={@loopback}, &(0x7f0000002c40)=0x14) 46.939196109s ago: executing program 0 (id=2036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r3, 0x2) 43.827286522s ago: executing program 7 (id=2112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 42.407370771s ago: executing program 7 (id=2115): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 40.872144673s ago: executing program 7 (id=2118): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x10000, 0x1, 0x100020b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 39.765536214s ago: executing program 0 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)) syz_clone3(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 39.639875989s ago: executing program 0 (id=2121): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) lstat(0x0, 0x0) 38.435218315s ago: executing program 7 (id=2123): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', 0x0]}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000c00)={@loopback}, &(0x7f0000002c40)=0x14) 38.176562353s ago: executing program 0 (id=2125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 37.142921521s ago: executing program 0 (id=2126): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 32.10816312s ago: executing program 6 (id=2134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000019"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 27.081730248s ago: executing program 6 (id=2139): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x4e21, 0x18, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0xfc00000000000000, 0x7fffffffffffffff}, {0xfffffffc}, 0x70bd28, 0x3500, 0xa, 0x4, 0x40}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{0x0}], 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000440)={0x11, 0x0, {0x1f, 0x2, 0x15, 0x18, 0x0, 0x60, 0x3, 0x58, 0x1}}) 26.804215843s ago: executing program 9 (id=2140): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000927000/0x7000)=nil, 0x2) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000180)={0x10, 0x7, 0xa42, 0x4, 0x14, "8a466797cbf29488d3c72c5c79641d443a95b8"}) sendmmsg$inet6(r4, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 25.660874406s ago: executing program 9 (id=2141): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0x7fff, 0x1, 0x0, [0x0]}}, 0x29) 25.097589399s ago: executing program 9 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000006c0)) syz_clone3(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 24.872118291s ago: executing program 9 (id=2143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 24.415078257s ago: executing program 9 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0x33c6, 0x3}) 24.010327184s ago: executing program 9 (id=2146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25030000000c00080040000000000000000c000200030000000000000008000100000000000c000800ffff0000000000000c0006000100000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 22.402240658s ago: executing program 37 (id=2123): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', 0x0]}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0xc, {0xf8000001, 0x4, 0x2008, 0xffffbfff}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000c00)={@loopback}, &(0x7f0000002c40)=0x14) 22.278559755s ago: executing program 6 (id=2149): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x3, 0xffffffff, 0xffffffc0, 0xffff, 0x2, "83843c556dec3a9a90800124b904cfc27929a3", 0xf57, 0x81}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa0c65) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x9, 0x10000, 0x242, 0x3, 0xe, 0x9, 0x80008071, 0x9, 0x17, 0x1, 0xb, 0x5, 0x3e, 0x8e, 0x40006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xffff, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x1, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0xc, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0xb, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0x2bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x4, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x3, 0x1, 0x5, 0x1, 0x2000002, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x2, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r5, &(0x7f0000001740)={0x1f, @none, 0xa}, 0xa) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d02, &(0x7f0000000100)=0x4d) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 20.675993234s ago: executing program 38 (id=2126): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 20.481265314s ago: executing program 6 (id=2151): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) clock_settime(0xfffffffb, 0x0) 20.126985027s ago: executing program 6 (id=2153): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf25020000000400388010000180"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 19.439802023s ago: executing program 8 (id=2154): sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 18.042582415s ago: executing program 8 (id=2155): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="770f18", 0x3}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 16.500062204s ago: executing program 6 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.300326242s ago: executing program 8 (id=2157): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) listen(0xffffffffffffffff, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.010413336s ago: executing program 8 (id=2158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) 15.837220899s ago: executing program 8 (id=2159): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 15.735772272s ago: executing program 8 (id=2160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008819}, 0x4000000) 8.557573315s ago: executing program 39 (id=2146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25030000000c00080040000000000000000c000200030000000000000008000100000000000c000800ffff0000000000000c0006000100000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 987.882386ms ago: executing program 40 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 41 (id=2160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008819}, 0x4000000) kernel console output (not intermixed with test programs): to HW filter on device bond0 [ 569.184459][ T9525] Bluetooth: hci1: command tx timeout [ 569.198673][ T9585] team0: Port device team_slave_0 added [ 570.396652][ T9585] team0: Port device team_slave_1 added [ 571.030316][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.030336][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.030365][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.173960][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.173980][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.174011][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.243815][ T9525] Bluetooth: hci1: command tx timeout [ 571.250023][ T9376] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.897583][ T9585] hsr_slave_0: entered promiscuous mode [ 571.899137][ T9585] hsr_slave_1: entered promiscuous mode [ 571.900167][ T9585] debugfs: 'hsr0' already exists in 'hsr' [ 571.900194][ T9585] Cannot create hsr debugfs directory [ 572.146386][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.146573][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.658094][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.658321][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.441162][ T9525] Bluetooth: hci1: command tx timeout [ 573.923900][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 574.890674][ T49] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 575.059930][ T49] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.062075][ T140] bridge_slave_1: left allmulticast mode [ 575.062104][ T140] bridge_slave_1: left promiscuous mode [ 575.062360][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.145097][ T140] bridge_slave_0: left allmulticast mode [ 575.145132][ T140] bridge_slave_0: left promiscuous mode [ 575.145447][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.234018][ T140] bridge_slave_1: left allmulticast mode [ 575.234049][ T140] bridge_slave_1: left promiscuous mode [ 575.234313][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.306470][ T140] bridge_slave_0: left allmulticast mode [ 575.306505][ T140] bridge_slave_0: left promiscuous mode [ 575.306788][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.388441][ T140] bridge_slave_1: left allmulticast mode [ 575.388474][ T140] bridge_slave_1: left promiscuous mode [ 575.388744][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.475763][ T140] bridge_slave_0: left allmulticast mode [ 575.475795][ T140] bridge_slave_0: left promiscuous mode [ 575.476059][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.359912][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.414476][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.487297][ T140] bond0 (unregistering): Released all slaves [ 577.964303][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.054294][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.116721][ T140] bond0 (unregistering): Released all slaves [ 579.147147][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.224138][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.264080][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.299871][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.300818][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.665296][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.806453][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.879072][ T140] bond0 (unregistering): Released all slaves [ 580.874037][ T9538] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.994236][ T9538] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 581.081675][ T9538] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 581.323465][ T61] Bluetooth: hci2: command tx timeout [ 581.573915][ T9538] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 581.614774][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 581.853671][ T140] hsr_slave_0: left promiscuous mode [ 581.893646][ T140] hsr_slave_1: left promiscuous mode [ 581.896158][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.916669][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.073794][ T140] hsr_slave_0: left promiscuous mode [ 582.116291][ T140] hsr_slave_1: left promiscuous mode [ 582.117824][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.139065][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.273901][ T140] hsr_slave_0: left promiscuous mode [ 582.313610][ T140] hsr_slave_1: left promiscuous mode [ 582.314290][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.351227][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.054175][ T140] team0 (unregistering): Port device team_slave_1 removed [ 583.217328][ T140] team0 (unregistering): Port device team_slave_0 removed [ 583.403575][ T61] Bluetooth: hci2: command tx timeout [ 584.635047][ T140] team0 (unregistering): Port device team_slave_1 removed [ 584.794525][ T140] team0 (unregistering): Port device team_slave_0 removed [ 585.483906][ T61] Bluetooth: hci2: command tx timeout [ 585.954190][ T140] team0 (unregistering): Port device team_slave_1 removed [ 586.094427][ T140] team0 (unregistering): Port device team_slave_0 removed [ 587.085074][ T9524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 587.294255][ T9524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 587.671694][ T61] Bluetooth: hci2: command tx timeout [ 588.397711][ T9524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.550546][ T9524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 590.781425][ T9748] chnl_net:caif_netlink_parms(): no params data found [ 591.511432][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.511655][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.511872][ T9748] bridge_slave_0: entered allmulticast mode [ 591.525938][ T9748] bridge_slave_0: entered promiscuous mode [ 591.561864][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.562005][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.562230][ T9748] bridge_slave_1: entered allmulticast mode [ 591.566222][ T9748] bridge_slave_1: entered promiscuous mode [ 591.866209][ T9748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.931707][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.951265][ T9748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.128291][ T9748] team0: Port device team_slave_0 added [ 592.446998][ T9748] team0: Port device team_slave_1 added [ 592.447523][ T9585] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 592.542548][ T9585] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 592.646473][ T9585] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 592.682156][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.682176][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.682203][ T9748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.684448][ T9585] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.790591][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.790610][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.790639][ T9748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.848872][ T9538] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.970746][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.980780][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.078680][ T9748] hsr_slave_0: entered promiscuous mode [ 593.080301][ T9748] hsr_slave_1: entered promiscuous mode [ 593.081348][ T9748] debugfs: 'hsr0' already exists in 'hsr' [ 593.081373][ T9748] Cannot create hsr debugfs directory [ 594.076805][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.077042][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.229441][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.778918][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.894079][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.894371][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.001718][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.001873][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.771583][ T9585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.080350][ T9538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.642330][ T9585] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.670142][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.670387][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.727010][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.727131][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.964726][ T140] bridge_slave_1: left allmulticast mode [ 599.964758][ T140] bridge_slave_1: left promiscuous mode [ 599.965043][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.058486][ T140] bridge_slave_0: left allmulticast mode [ 600.058521][ T140] bridge_slave_0: left promiscuous mode [ 600.058802][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.334783][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.414499][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.437491][ T140] bond0 (unregistering): Released all slaves [ 602.453591][ T9917] lo: entered allmulticast mode [ 602.453756][ T9917] tunl0: entered allmulticast mode [ 602.455213][ T9917] gre0: entered allmulticast mode [ 602.455612][ T9917] gretap0: entered allmulticast mode [ 602.456115][ T9917] erspan0: entered allmulticast mode [ 602.456781][ T9917] ip_vti0: entered allmulticast mode [ 602.457155][ T9917] ip6_vti0: entered allmulticast mode [ 602.457470][ T9917] sit0: entered allmulticast mode [ 602.457773][ T9917] ip6tnl0: entered allmulticast mode [ 602.458097][ T9917] ip6gre0: entered allmulticast mode [ 602.458407][ T9917] syz_tun: entered allmulticast mode [ 602.459090][ T9917] ip6gretap0: entered allmulticast mode [ 602.459582][ T9917] bridge0: entered allmulticast mode [ 602.459725][ T9917] vcan0: entered allmulticast mode [ 602.460100][ T9917] bond0: entered allmulticast mode [ 602.460110][ T9917] bond_slave_0: entered allmulticast mode [ 602.460984][ T9917] team0: entered allmulticast mode [ 602.460995][ T9917] team_slave_0: entered allmulticast mode [ 602.461006][ T9917] team_slave_1: entered allmulticast mode [ 602.461740][ T9917] dummy0: entered allmulticast mode [ 602.462120][ T9917] nlmon0: entered allmulticast mode [ 602.462486][ T9917] caif0: entered allmulticast mode [ 602.462593][ T9917] batadv0: entered allmulticast mode [ 602.463634][ T9917] vxcan0: entered allmulticast mode [ 602.464138][ T9917] vxcan1: entered allmulticast mode [ 602.464494][ T9917] veth0: entered allmulticast mode [ 602.465072][ T9917] veth1: entered allmulticast mode [ 602.465768][ T9917] wg0: entered allmulticast mode [ 602.466152][ T9917] wg1: entered allmulticast mode [ 602.466500][ T9917] wg2: entered allmulticast mode [ 602.466857][ T9917] veth0_to_bridge: entered allmulticast mode [ 602.468341][ T9917] veth1_to_bridge: entered allmulticast mode [ 602.469780][ T9917] veth0_to_bond: entered allmulticast mode [ 602.470763][ T9917] veth1_to_bond: entered allmulticast mode [ 602.471288][ T9917] bond_slave_1: entered allmulticast mode [ 602.471410][ T9917] veth0_to_team: entered allmulticast mode [ 602.472931][ T9917] veth1_to_team: entered allmulticast mode [ 602.474255][ T9917] veth0_to_batadv: entered allmulticast mode [ 602.474803][ T9917] batadv_slave_0: entered allmulticast mode [ 602.475348][ T9917] veth1_to_batadv: entered allmulticast mode [ 602.475968][ T9917] batadv_slave_1: entered allmulticast mode [ 602.476506][ T9917] xfrm0: entered allmulticast mode [ 602.476882][ T9917] veth0_to_hsr: entered allmulticast mode [ 602.480119][ T9917] hsr_slave_0: entered allmulticast mode [ 602.480680][ T9917] veth1_to_hsr: entered allmulticast mode [ 602.482029][ T9917] hsr_slave_1: entered allmulticast mode [ 602.482571][ T9917] hsr0: entered allmulticast mode [ 602.483254][ T9917] veth1_virt_wifi: entered allmulticast mode [ 602.483882][ T9917] veth0_virt_wifi: entered allmulticast mode [ 602.484413][ T9917] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 602.484518][ T9917] veth1_vlan: entered allmulticast mode [ 602.485073][ T9917] veth0_vlan: entered allmulticast mode [ 602.485774][ T9917] vlan0: entered allmulticast mode [ 602.486436][ T9917] vlan1: entered allmulticast mode [ 602.486971][ T9917] macvlan0: entered allmulticast mode [ 602.487540][ T9917] macvlan1: entered allmulticast mode [ 602.488084][ T9917] ipvlan0: entered allmulticast mode [ 602.488192][ T9917] ipvlan1: entered allmulticast mode [ 602.488312][ T9917] veth1_macvtap: entered allmulticast mode [ 602.488826][ T9917] veth0_macvtap: entered allmulticast mode [ 602.489395][ T9917] macvtap0: entered allmulticast mode [ 602.489915][ T9917] macsec0: entered allmulticast mode [ 602.490426][ T9917] geneve0: entered allmulticast mode [ 602.490937][ T9917] geneve1: entered allmulticast mode [ 602.491495][ T9917] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 602.492078][ T9917] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 602.492620][ T9917] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 602.493136][ T9917] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 602.493815][ T9917] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 602.494359][ T9917] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 602.494884][ T9917] erspan0.1: entered allmulticast mode [ 602.494991][ T9917] veth0_to_team.0: entered allmulticast mode [ 602.495102][ T9917] gre1: left promiscuous mode [ 602.495113][ T9917] gre1: entered allmulticast mode [ 603.128195][ T140] hsr_slave_0: left promiscuous mode [ 603.163701][ T140] hsr_slave_1: left promiscuous mode [ 603.164802][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.353335][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.291356][ T140] team0 (unregistering): Port device team_slave_1 removed [ 608.664275][ T140] team0 (unregistering): Port device team_slave_0 removed [ 611.775035][ T9525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.829087][ T9525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.830412][ T9525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.831821][ T9525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.832631][ T9525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.873508][ T5975] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 611.945329][ T9748] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 611.996443][ T9748] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 612.023521][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 612.025915][ T5975] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.025943][ T5975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.025963][ T5975] usb 1-1: config 0 has no interface number 0 [ 612.026014][ T5975] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.026047][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.031763][ T5975] usb 1-1: config 0 descriptor?? [ 612.119972][ T5975] ldusb 1-1:0.55: Interrupt in endpoint not found [ 612.125397][ T9748] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 612.184040][ T9748] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 612.328846][ T5975] usb 1-1: USB disconnect, device number 16 [ 612.820468][ T9585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.278834][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 613.282453][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 613.325560][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.341283][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.354807][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.906863][ T9525] Bluetooth: hci3: command tx timeout [ 614.459359][ T9966] chnl_net:caif_netlink_parms(): no params data found [ 615.345530][ T9748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.413370][ T9525] Bluetooth: hci4: command tx timeout [ 615.963724][ T9525] Bluetooth: hci3: command tx timeout [ 616.671183][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.671509][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.671638][ T9966] bridge_slave_0: entered allmulticast mode [ 616.673251][ T9966] bridge_slave_0: entered promiscuous mode [ 616.973849][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.974924][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.975101][ T9966] bridge_slave_1: entered allmulticast mode [ 616.979700][ T9966] bridge_slave_1: entered promiscuous mode [ 617.111500][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.157132][ T9748] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.188771][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.399026][ T9966] team0: Port device team_slave_0 added [ 617.473977][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.474183][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.484309][ T9525] Bluetooth: hci4: command tx timeout [ 617.668955][ T9966] team0: Port device team_slave_1 added [ 617.754514][ T9585] veth0_vlan: entered promiscuous mode [ 617.835729][ T5975] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 617.867895][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.869364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.884912][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.884929][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.884958][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.976151][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.976169][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.976198][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.983568][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 617.985959][ T5975] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 617.985983][ T5975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.986000][ T5975] usb 1-1: config 0 has no interface number 0 [ 617.986045][ T5975] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 617.986067][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.992194][ T9986] chnl_net:caif_netlink_parms(): no params data found [ 618.011199][ T5975] usb 1-1: config 0 descriptor?? [ 618.028794][ T5975] ldusb 1-1:0.55: Interrupt in endpoint not found [ 618.044504][ T9525] Bluetooth: hci3: command tx timeout [ 618.174055][ T9585] veth1_vlan: entered promiscuous mode [ 618.215859][ T140] bridge_slave_1: left allmulticast mode [ 618.215891][ T140] bridge_slave_1: left promiscuous mode [ 618.216174][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.230874][ T5997] usb 1-1: USB disconnect, device number 17 [ 618.305193][ T140] bridge_slave_0: left allmulticast mode [ 618.305227][ T140] bridge_slave_0: left promiscuous mode [ 618.305513][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.595807][ T9525] Bluetooth: hci4: command tx timeout [ 620.123434][ T9525] Bluetooth: hci3: command tx timeout [ 620.294610][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.374402][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.410449][ T140] bond0 (unregistering): Released all slaves [ 620.836612][ T9966] hsr_slave_0: entered promiscuous mode [ 620.838185][ T9966] hsr_slave_1: entered promiscuous mode [ 620.839226][ T9966] debugfs: 'hsr0' already exists in 'hsr' [ 620.839251][ T9966] Cannot create hsr debugfs directory [ 621.116783][ T140] hsr_slave_0: left promiscuous mode [ 621.133476][ T140] hsr_slave_1: left promiscuous mode [ 621.134572][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.188813][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.643535][ T9525] Bluetooth: hci4: command tx timeout [ 623.876982][ T140] team0 (unregistering): Port device team_slave_1 removed [ 624.216618][ T140] team0 (unregistering): Port device team_slave_0 removed [ 624.543592][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.543679][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.853578][ T9760] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 625.023542][ T9760] usb 1-1: Using ep0 maxpacket: 8 [ 625.057997][ T9760] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 625.058018][ T9760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.058029][ T9760] usb 1-1: config 0 has no interface number 0 [ 625.058064][ T9760] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 625.058084][ T9760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.062746][ T9760] usb 1-1: config 0 descriptor?? [ 625.077212][ T9760] ldusb 1-1:0.55: Interrupt in endpoint not found [ 625.306118][ T9760] usb 1-1: USB disconnect, device number 18 [ 625.468112][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.500099][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.502574][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.512706][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.516410][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.643502][ T9525] Bluetooth: hci5: command tx timeout [ 628.382247][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.382491][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.382697][ T9986] bridge_slave_0: entered allmulticast mode [ 628.390696][ T9986] bridge_slave_0: entered promiscuous mode [ 628.464179][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.464337][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.464588][ T9986] bridge_slave_1: entered allmulticast mode [ 628.467517][ T9986] bridge_slave_1: entered promiscuous mode [ 628.777682][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.832805][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.319040][ T9986] team0: Port device team_slave_0 added [ 629.506676][ T9986] team0: Port device team_slave_1 added [ 629.733538][ T9525] Bluetooth: hci5: command tx timeout [ 630.227939][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.227959][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.227988][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.282207][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.282226][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.282257][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.393493][ T5997] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 630.543519][ T5997] usb 1-1: Using ep0 maxpacket: 8 [ 630.546961][ T5997] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 630.546992][ T5997] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.547013][ T5997] usb 1-1: config 0 has no interface number 0 [ 630.547062][ T5997] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 630.547083][ T5997] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.547130][ T5997] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 630.547154][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.552706][ T5997] usb 1-1: config 0 descriptor?? [ 630.616543][ T5997] ldusb 1-1:0.55: Interrupt in endpoint not found [ 630.801316][ T5997] usb 1-1: USB disconnect, device number 19 [ 631.042772][ T9986] hsr_slave_0: entered promiscuous mode [ 631.044773][ T9986] hsr_slave_1: entered promiscuous mode [ 631.045662][ T9986] debugfs: 'hsr0' already exists in 'hsr' [ 631.045686][ T9986] Cannot create hsr debugfs directory [ 631.807136][ T9525] Bluetooth: hci5: command tx timeout [ 633.885307][ T9525] Bluetooth: hci5: command tx timeout [ 634.254041][ T9748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.751496][T10077] chnl_net:caif_netlink_parms(): no params data found [ 636.119663][ T9966] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 636.140526][T10077] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.140943][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.141093][T10077] bridge_slave_0: entered allmulticast mode [ 636.142754][T10077] bridge_slave_0: entered promiscuous mode [ 636.234091][ T9966] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 636.257691][T10077] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.257854][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.258079][T10077] bridge_slave_1: entered allmulticast mode [ 636.259719][T10077] bridge_slave_1: entered promiscuous mode [ 636.565016][ T9966] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 636.611774][ T9966] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 636.653548][ T5890] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 636.813628][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 636.817159][ T5890] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 636.817188][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.817209][ T5890] usb 1-1: config 0 has no interface number 0 [ 636.817245][ T5890] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.817258][ T5890] usb 1-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.817285][ T5890] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 636.817299][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.820349][ T5890] usb 1-1: config 0 descriptor?? [ 636.901673][ T5890] ldusb 1-1:0.55: Interrupt in endpoint not found [ 636.929914][T10077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.979151][T10077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.029066][ T5890] usb 1-1: USB disconnect, device number 20 [ 637.352231][T10077] team0: Port device team_slave_0 added [ 637.537271][T10077] team0: Port device team_slave_1 added [ 637.630530][T10077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.630548][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.630574][T10077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.644570][ T9748] veth0_vlan: entered promiscuous mode [ 637.662143][T10077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.662161][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.662190][T10077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.722738][ T9748] veth1_vlan: entered promiscuous mode [ 637.838742][T10077] hsr_slave_0: entered promiscuous mode [ 637.840409][T10077] hsr_slave_1: entered promiscuous mode [ 637.841512][T10077] debugfs: 'hsr0' already exists in 'hsr' [ 637.841538][T10077] Cannot create hsr debugfs directory [ 638.885932][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.943955][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.948676][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.949827][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.954815][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.356725][ T140] bridge_slave_1: left allmulticast mode [ 640.356760][ T140] bridge_slave_1: left promiscuous mode [ 640.357102][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.554408][ T140] bridge_slave_0: left allmulticast mode [ 640.554431][ T140] bridge_slave_0: left promiscuous mode [ 640.554606][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.655716][ T140] bridge_slave_1: left allmulticast mode [ 640.655740][ T140] bridge_slave_1: left promiscuous mode [ 640.655905][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.724855][ T140] bridge_slave_0: left allmulticast mode [ 640.724879][ T140] bridge_slave_0: left promiscuous mode [ 640.725074][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.023635][ T61] Bluetooth: hci1: command tx timeout [ 642.797985][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.874349][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.901157][ T140] bond0 (unregistering): Released all slaves [ 643.083745][ T61] Bluetooth: hci1: command tx timeout [ 644.033885][T10268] nbd0: detected capacity change from 0 to 63 [ 644.304311][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.367538][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.406870][ T140] bond0 (unregistering): Released all slaves [ 644.668589][ T61] block nbd0: Receive control failed (result -104) [ 645.148941][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.163597][ T61] Bluetooth: hci1: command tx timeout [ 645.625462][ T140] hsr_slave_0: left promiscuous mode [ 645.709835][ T140] hsr_slave_1: left promiscuous mode [ 645.886140][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.914478][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.069595][ T140] hsr_slave_0: left promiscuous mode [ 646.113688][ T140] hsr_slave_1: left promiscuous mode [ 646.124981][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.226120][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.339475][ T140] veth1_vlan: left promiscuous mode [ 646.339677][ T140] veth0_vlan: left promiscuous mode [ 647.244027][ T61] Bluetooth: hci1: command tx timeout [ 650.045271][ T140] team0 (unregistering): Port device team_slave_1 removed [ 651.444246][ T140] team0 (unregistering): Port device team_slave_0 removed [ 652.747896][T10299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.260961][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 656.654062][ T140] team0 (unregistering): Port device team_slave_1 removed [ 656.925000][ T140] team0 (unregistering): Port device team_slave_0 removed [ 659.094283][ T9986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 659.149212][ T9986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.201754][ T9986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.456091][ T9986] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 660.398955][ T9966] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.182480][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.182725][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.325993][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.326594][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.373620][ T5875] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 661.543152][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 661.559306][ T5875] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 661.559338][ T5875] usb 1-1: config 0 has no interface number 0 [ 661.559388][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.559414][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 661.559440][ T5875] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 661.559476][ T5875] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 661.559521][ T5875] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 661.559545][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.569493][ T5875] usb 1-1: config 0 descriptor?? [ 661.605736][ T5875] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 661.670296][T10242] chnl_net:caif_netlink_parms(): no params data found [ 661.819745][ T9760] usb 1-1: USB disconnect, device number 21 [ 661.883789][ T9760] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 662.139558][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.139772][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.139991][T10242] bridge_slave_0: entered allmulticast mode [ 662.141714][T10242] bridge_slave_0: entered promiscuous mode [ 662.156153][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.156322][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.156532][T10242] bridge_slave_1: entered allmulticast mode [ 662.160115][T10242] bridge_slave_1: entered promiscuous mode [ 662.444268][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.515208][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.724176][T10242] team0: Port device team_slave_0 added [ 662.771828][T10242] team0: Port device team_slave_1 added [ 662.892890][T10077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.961983][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.962002][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.962028][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.013510][T10077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 663.061112][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.061131][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.061161][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.066555][T10077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 663.233853][T10077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.283186][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.601210][T10242] hsr_slave_0: entered promiscuous mode [ 663.602145][T10242] hsr_slave_1: entered promiscuous mode [ 663.627480][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.720032][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.875392][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.875603][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.045350][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.053681][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.452048][ T9966] veth0_vlan: entered promiscuous mode [ 665.465958][T10077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.521469][T10077] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.548815][ T9966] veth1_vlan: entered promiscuous mode [ 665.566460][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.566559][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.618852][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.619005][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.059953][ T140] bridge_slave_1: left allmulticast mode [ 666.059987][ T140] bridge_slave_1: left promiscuous mode [ 666.060250][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.149351][ T140] bridge_slave_0: left allmulticast mode [ 666.149374][ T140] bridge_slave_0: left promiscuous mode [ 666.149546][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.666543][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.744518][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.785352][ T140] bond0 (unregistering): Released all slaves [ 668.048104][ T9966] veth0_macvtap: entered promiscuous mode [ 668.096262][ T9966] veth1_macvtap: entered promiscuous mode [ 668.121234][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.333749][ T140] hsr_slave_0: left promiscuous mode [ 668.373565][ T140] hsr_slave_1: left promiscuous mode [ 668.375438][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.424808][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.517856][ T140] veth1_vlan: left promiscuous mode [ 668.518069][ T140] veth0_vlan: left promiscuous mode [ 670.863614][ T140] team0 (unregistering): Port device team_slave_1 removed [ 671.174218][ T140] team0 (unregistering): Port device team_slave_0 removed [ 672.333033][ T9525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.351702][ T9525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.356998][ T9525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.375864][ T9525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.379301][ T9525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.078794][ T9525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 674.116935][ T9525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 674.118537][ T9525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 674.119983][ T9525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 674.120876][ T9525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 674.523581][ T61] Bluetooth: hci2: command tx timeout [ 674.543543][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 30 seconds [ 674.546075][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 30 seconds [ 674.546113][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 30 seconds [ 674.546142][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 30 seconds [ 676.031174][T10077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.203589][ T61] Bluetooth: hci6: command tx timeout [ 676.317031][T10242] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 676.605884][ T61] Bluetooth: hci2: command tx timeout [ 676.608957][T10242] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 676.690573][T10242] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 676.765944][T10242] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 677.458018][T10657] chnl_net:caif_netlink_parms(): no params data found [ 677.783212][T10692] chnl_net:caif_netlink_parms(): no params data found [ 678.254324][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.254589][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.254818][T10657] bridge_slave_0: entered allmulticast mode [ 678.258211][T10657] bridge_slave_0: entered promiscuous mode [ 678.283568][ T61] Bluetooth: hci6: command tx timeout [ 678.310423][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.310569][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.310844][T10657] bridge_slave_1: entered allmulticast mode [ 678.316364][T10657] bridge_slave_1: entered promiscuous mode [ 678.467649][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.467894][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.468098][T10692] bridge_slave_0: entered allmulticast mode [ 678.471068][T10692] bridge_slave_0: entered promiscuous mode [ 678.562608][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.567515][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.567661][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.567879][T10692] bridge_slave_1: entered allmulticast mode [ 678.570599][T10692] bridge_slave_1: entered promiscuous mode [ 678.597269][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.683755][ T61] Bluetooth: hci2: command tx timeout [ 678.722033][T10077] veth0_vlan: entered promiscuous mode [ 678.759308][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.786550][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.788365][T10657] team0: Port device team_slave_0 added [ 679.036407][T10657] team0: Port device team_slave_1 added [ 679.428224][T10692] team0: Port device team_slave_0 added [ 679.429228][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.429243][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.429271][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.430626][T10077] veth1_vlan: entered promiscuous mode [ 679.437077][T10692] team0: Port device team_slave_1 added [ 679.444905][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.444920][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.444946][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.833444][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.833463][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.833480][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.075181][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.075201][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.075231][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.246429][T10657] hsr_slave_0: entered promiscuous mode [ 680.247939][T10657] hsr_slave_1: entered promiscuous mode [ 680.249051][T10657] debugfs: 'hsr0' already exists in 'hsr' [ 680.249076][T10657] Cannot create hsr debugfs directory [ 680.373994][ T61] Bluetooth: hci6: command tx timeout [ 680.598274][T10692] hsr_slave_0: entered promiscuous mode [ 680.599177][T10692] hsr_slave_1: entered promiscuous mode [ 680.599805][T10692] debugfs: 'hsr0' already exists in 'hsr' [ 680.599822][T10692] Cannot create hsr debugfs directory [ 680.763425][ T61] Bluetooth: hci2: command tx timeout [ 680.959400][T10077] veth0_macvtap: entered promiscuous mode [ 680.997601][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.144091][T10077] veth1_macvtap: entered promiscuous mode [ 681.470564][ T140] bridge_slave_1: left allmulticast mode [ 681.470597][ T140] bridge_slave_1: left promiscuous mode [ 681.470905][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.545275][ T140] bridge_slave_0: left allmulticast mode [ 681.545308][ T140] bridge_slave_0: left promiscuous mode [ 681.545620][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.641587][ T140] bridge_slave_1: left allmulticast mode [ 681.641609][ T140] bridge_slave_1: left promiscuous mode [ 681.641792][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.745307][ T140] bridge_slave_0: left allmulticast mode [ 681.745340][ T140] bridge_slave_0: left promiscuous mode [ 681.745636][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.473440][ T61] Bluetooth: hci6: command tx timeout [ 683.464300][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.556544][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.607638][ T140] bond0 (unregistering): Released all slaves [ 685.005036][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.084460][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.127405][ T140] bond0 (unregistering): Released all slaves [ 685.258127][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.586084][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.586253][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.601330][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.601469][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.834161][ T140] hsr_slave_0: left promiscuous mode [ 685.855325][ T140] hsr_slave_1: left promiscuous mode [ 685.856479][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.894660][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.972196][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.972278][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.133728][ T140] hsr_slave_0: left promiscuous mode [ 686.173965][ T140] hsr_slave_1: left promiscuous mode [ 686.175062][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.200960][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.219748][ T9525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.233921][ T9525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.250581][ T9525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.251948][ T9525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.271628][ T9525] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.403701][ T140] veth1_macvtap: left promiscuous mode [ 686.403817][ T140] veth0_macvtap: left promiscuous mode [ 686.404091][ T140] veth1_vlan: left promiscuous mode [ 686.404291][ T140] veth0_vlan: left promiscuous mode [ 687.889595][ T140] team0 (unregistering): Port device team_slave_1 removed [ 688.214430][ T140] team0 (unregistering): Port device team_slave_0 removed [ 688.379262][ T61] Bluetooth: hci3: command tx timeout [ 690.444574][ T61] Bluetooth: hci3: command tx timeout [ 692.523461][ T61] Bluetooth: hci3: command tx timeout [ 693.544347][ T140] team0 (unregistering): Port device team_slave_1 removed [ 693.837617][ T140] team0 (unregistering): Port device team_slave_0 removed [ 694.603430][ T61] Bluetooth: hci3: command tx timeout [ 698.310696][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.312076][T11107] chnl_net:caif_netlink_parms(): no params data found [ 698.897754][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.897980][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.898216][T11107] bridge_slave_0: entered allmulticast mode [ 698.926917][T11107] bridge_slave_0: entered promiscuous mode [ 699.056536][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.057350][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.057582][T11107] bridge_slave_1: entered allmulticast mode [ 699.060542][T11107] bridge_slave_1: entered promiscuous mode [ 699.351108][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.512760][ T9525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.538486][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.555851][ T9525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.559441][ T9525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.560816][ T9525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.563074][ T9525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 700.067111][T11107] team0: Port device team_slave_0 added [ 700.068128][T10657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 700.209351][T11107] team0: Port device team_slave_1 added [ 700.209457][T10657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 700.292034][T10657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 700.412411][T10657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 700.464667][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.464686][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.464713][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.524621][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.524642][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.524671][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.175876][T11107] hsr_slave_0: entered promiscuous mode [ 701.176762][T11107] hsr_slave_1: entered promiscuous mode [ 701.177369][T11107] debugfs: 'hsr0' already exists in 'hsr' [ 701.177387][T11107] Cannot create hsr debugfs directory [ 701.182609][T10692] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 701.271891][T10692] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 701.525604][T10692] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 701.617369][T10692] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 701.644661][ T61] Bluetooth: hci4: command tx timeout [ 703.055399][T11545] chnl_net:caif_netlink_parms(): no params data found [ 703.738331][ T61] Bluetooth: hci4: command tx timeout [ 704.186018][T11545] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.187089][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.187353][T11545] bridge_slave_0: entered allmulticast mode [ 704.195051][T11545] bridge_slave_0: entered promiscuous mode [ 704.213731][T11545] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.214733][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.214962][T11545] bridge_slave_1: entered allmulticast mode [ 704.223633][T11545] bridge_slave_1: entered promiscuous mode [ 704.328068][T11545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.338085][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.367862][T11545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.470741][T11545] team0: Port device team_slave_0 added [ 704.502095][T11545] team0: Port device team_slave_1 added [ 704.532581][ T140] bridge_slave_1: left allmulticast mode [ 704.532607][ T140] bridge_slave_1: left promiscuous mode [ 704.532858][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.624887][ T140] bridge_slave_0: left allmulticast mode [ 704.624910][ T140] bridge_slave_0: left promiscuous mode [ 704.625072][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.726755][ T140] bridge_slave_1: left allmulticast mode [ 704.726778][ T140] bridge_slave_1: left promiscuous mode [ 704.726955][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.805169][ T140] bridge_slave_0: left allmulticast mode [ 704.805203][ T140] bridge_slave_0: left promiscuous mode [ 704.805468][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.243185][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 60 seconds [ 705.264501][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 60 seconds [ 705.264529][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 60 seconds [ 705.264546][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 60 seconds [ 705.806459][ T61] Bluetooth: hci4: command tx timeout [ 706.435233][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.514380][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.537210][ T140] bond0 (unregistering): Released all slaves [ 707.503521][ T5175] udevd[5175]: worker [10122] /devices/virtual/block/nbd0 is taking a long time [ 707.883380][ T61] Bluetooth: hci4: command tx timeout [ 707.924470][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.005853][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.048804][ T140] bond0 (unregistering): Released all slaves [ 708.394971][T11545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.394990][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.395018][T11545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.397476][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.458821][T11545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.458840][T11545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.458867][T11545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.598505][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.631673][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.631808][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.873478][ T140] hsr_slave_0: left promiscuous mode [ 708.913526][ T140] hsr_slave_1: left promiscuous mode [ 708.914666][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.963939][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.143626][ T140] hsr_slave_0: left promiscuous mode [ 709.183550][ T140] hsr_slave_1: left promiscuous mode [ 709.184600][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.234760][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.393793][ T140] veth1_macvtap: left promiscuous mode [ 709.393915][ T140] veth0_macvtap: left promiscuous mode [ 709.394200][ T140] veth1_vlan: left promiscuous mode [ 709.394407][ T140] veth0_vlan: left promiscuous mode [ 710.844665][ T140] team0 (unregistering): Port device team_slave_1 removed [ 711.114606][ T140] team0 (unregistering): Port device team_slave_0 removed [ 716.464301][ T140] team0 (unregistering): Port device team_slave_1 removed [ 716.734439][ T140] team0 (unregistering): Port device team_slave_0 removed [ 719.476588][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.476764][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.517869][T11545] hsr_slave_0: entered promiscuous mode [ 719.532125][T11545] hsr_slave_1: entered promiscuous mode [ 719.561497][T11107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.639469][T11107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.719254][T11107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.751774][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.827972][T11107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.022247][ T981] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.022382][ T981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.249910][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.250073][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.725663][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.795690][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.318253][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.366965][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.367219][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.426635][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.427090][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.613066][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.863024][T11545] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 722.937215][T11545] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 723.000499][T11545] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 723.060372][T11545] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 723.286908][T10657] veth0_vlan: entered promiscuous mode [ 723.375507][T10657] veth1_vlan: entered promiscuous mode [ 723.632054][T10692] veth0_vlan: entered promiscuous mode [ 723.739647][T10657] veth0_macvtap: entered promiscuous mode [ 723.784040][T10692] veth1_vlan: entered promiscuous mode [ 723.789196][T10657] veth1_macvtap: entered promiscuous mode [ 723.942248][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.006463][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.031252][T11545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.094490][ T3575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.098909][ T3575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.101505][ T3575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.103100][T10692] veth0_macvtap: entered promiscuous mode [ 724.117585][ T3575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.130532][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.162472][T11545] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.167569][T10692] veth1_macvtap: entered promiscuous mode [ 724.290342][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.290479][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.353342][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.353532][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.591385][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.667240][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.776608][ T981] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.806817][ T981] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.829407][ T981] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.836662][ T981] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.859003][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.859025][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.151131][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.151155][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.541977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.542002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.625622][T11107] veth0_vlan: entered promiscuous mode [ 726.085861][T11107] veth1_vlan: entered promiscuous mode [ 727.101263][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.101289][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.376735][T11545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.701473][T11107] veth0_macvtap: entered promiscuous mode [ 727.774772][T11107] veth1_macvtap: entered promiscuous mode [ 728.038418][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.102756][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.161890][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.161949][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.161988][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.162026][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.670494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.670519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.712189][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1997'. [ 732.574943][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.574968][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.974224][T11545] veth0_vlan: entered promiscuous mode [ 732.979798][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2013'. [ 733.041560][T12582] loop7: detected capacity change from 0 to 16384 [ 734.722431][T11545] veth1_vlan: entered promiscuous mode [ 734.909522][T11545] veth0_macvtap: entered promiscuous mode [ 734.930490][T11545] veth1_macvtap: entered promiscuous mode [ 735.050558][T11545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.395959][T11545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.427591][ T1003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.442371][ T1003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.442410][ T1003] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.442432][ T1003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.953468][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 90 seconds [ 735.953520][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 90 seconds [ 735.953551][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 90 seconds [ 735.953578][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 90 seconds [ 736.821524][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.821549][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.256920][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.256945][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.138756][ T9525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.165517][ T9525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.168176][ T9525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.171877][ T9525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.200802][ T9525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.307123][T12665] overlayfs: overlapping lowerdir path [ 739.360054][T12666] overlayfs: overlapping lowerdir path [ 741.333406][ T9525] Bluetooth: hci1: command tx timeout [ 742.704571][T12712] overlayfs: overlapping lowerdir path [ 742.727152][T12712] overlayfs: overlapping lowerdir path [ 743.403654][ T9525] Bluetooth: hci1: command tx timeout [ 743.603380][ T6055] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 744.665757][ T6055] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 744.665790][ T6055] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.667401][ T6055] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 744.667429][ T6055] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 744.667450][ T6055] usb 10-1: SerialNumber: syz [ 745.484186][ T9525] Bluetooth: hci1: command tx timeout [ 745.785368][ T6055] usb 10-1: 0:2 : does not exist [ 745.978621][ T6055] usb 10-1: USB disconnect, device number 2 [ 746.191120][T12658] chnl_net:caif_netlink_parms(): no params data found [ 746.342334][T10234] udevd[10234]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.721319][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.721669][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.721943][T12658] bridge_slave_0: entered allmulticast mode [ 746.751524][T12658] bridge_slave_0: entered promiscuous mode [ 746.890721][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.893043][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.893860][T12658] bridge_slave_1: entered allmulticast mode [ 746.916817][T12658] bridge_slave_1: entered promiscuous mode [ 747.119727][T12755] overlayfs: overlapping lowerdir path [ 747.150193][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.171771][T12756] overlayfs: overlapping lowerdir path [ 747.186021][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.418557][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.418634][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.564998][ T9525] Bluetooth: hci1: command tx timeout [ 747.631097][T12658] team0: Port device team_slave_0 added [ 747.647898][T12658] team0: Port device team_slave_1 added [ 748.515049][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.515064][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.515080][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.520678][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.520691][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.520706][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.951567][T12787] overlayfs: overlapping lowerdir path [ 749.003527][T12788] overlayfs: overlapping lowerdir path [ 749.380983][T12658] hsr_slave_0: entered promiscuous mode [ 749.382705][T12658] hsr_slave_1: entered promiscuous mode [ 749.386751][T12658] debugfs: 'hsr0' already exists in 'hsr' [ 749.386777][T12658] Cannot create hsr debugfs directory [ 749.489123][ T5814] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 749.489413][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 749.673411][ T5814] usb 10-1: device descriptor read/64, error -32 [ 749.919862][ T5814] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 749.941769][T12802] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2071'. [ 750.113394][ T5814] usb 10-1: Using ep0 maxpacket: 8 [ 750.115440][ T5814] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 750.115470][ T5814] usb 10-1: config 179 has no interface number 0 [ 750.115521][ T5814] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 750.115548][ T5814] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 750.115576][ T5814] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 750.115604][ T5814] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 750.115632][ T5814] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 750.115659][ T5814] usb 10-1: config 179 interface 65 has no altsetting 0 [ 750.115693][ T5814] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 750.115716][ T5814] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.244312][T12790] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 750.316639][ T5814] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input15 [ 750.559802][ T5160] input input15: unable to receive magic message: -110 [ 750.655957][T12802] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.784316][T12802] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.792144][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 750.927470][ T809] usb 10-1: USB disconnect, device number 4 [ 750.929388][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 753.434981][T12658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.971889][T12845] overlayfs: overlapping lowerdir path [ 754.015949][T12845] overlayfs: overlapping lowerdir path [ 754.452105][T12658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.574748][T12867] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2091'. [ 755.732482][T12872] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2092'. [ 755.836230][T12872] netlink: 'syz.9.2092': attribute type 4 has an invalid length. [ 755.958395][T12658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.802612][T12658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.975861][T12658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 758.154229][T12658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 758.223125][T12658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 758.363606][T12658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 758.796025][T12894] netlink: 'syz.8.2094': attribute type 39 has an invalid length. [ 760.828676][T12903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 761.178109][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.307817][T12658] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.370769][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.371007][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.395929][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.396168][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.463689][T12658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.841587][T12658] veth0_vlan: entered promiscuous mode [ 763.934520][T12926] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2103'. [ 764.163162][T12658] veth1_vlan: entered promiscuous mode [ 764.318573][T12658] veth0_macvtap: entered promiscuous mode [ 764.330296][T12658] veth1_macvtap: entered promiscuous mode [ 764.490509][T12658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.538538][T12658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.587120][ T1013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.618953][ T1003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.619006][ T1003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.619044][ T1003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.373528][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.373555][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.618797][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.618823][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.044923][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 120 seconds [ 766.044974][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 120 seconds [ 766.045005][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 120 seconds [ 766.045035][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 120 seconds [ 768.234560][T12944] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.197841][T12981] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.557509][T12988] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2117'. [ 780.076466][T13028] netlink: 'syz.9.2130': attribute type 1 has an invalid length. [ 780.960718][T13033] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 784.184855][T13055] fuse: Unknown parameter '0x0000000000000003' [ 784.188089][T13055] loop7: detected capacity change from 0 to 16384 [ 785.764440][T13064] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2138'. [ 788.934392][T13087] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 793.087756][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 793.110199][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 793.126254][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 793.150108][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 793.151240][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 793.948039][T13122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.956997][T13122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.998485][T13122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.999988][T13122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.054147][T13122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 794.057990][T13123] netlink: 'syz.6.2153': attribute type 1 has an invalid length. [ 794.058188][T13123] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2153'. [ 795.185517][T13108] chnl_net:caif_netlink_parms(): no params data found [ 795.243375][T13122] Bluetooth: hci0: command tx timeout [ 795.563514][T13122] Bluetooth: hci2: command 0x0406 tx timeout [ 796.377127][ T9525] Bluetooth: hci5: command tx timeout [ 796.433442][ T49] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 796.586082][ T49] usb 9-1: Using ep0 maxpacket: 8 [ 796.594716][ T49] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 796.594746][ T49] usb 9-1: config 0 has no interface number 0 [ 796.594800][ T49] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 796.594826][ T49] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 796.594852][ T49] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 796.594879][ T49] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 796.594925][ T49] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 796.594949][ T49] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.630342][ T49] usb 9-1: config 0 descriptor?? [ 796.733504][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 150 seconds [ 796.733555][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 150 seconds [ 796.733587][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 150 seconds [ 796.733620][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 150 seconds [ 796.830335][ T49] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 797.054549][ T49] usb 9-1: USB disconnect, device number 2 [ 797.068571][ T49] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 797.326597][T13122] Bluetooth: hci0: command tx timeout [ 797.396301][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.396527][T13108] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.396737][T13108] bridge_slave_0: entered allmulticast mode [ 797.401764][T13108] bridge_slave_0: entered promiscuous mode [ 797.826547][T13108] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.829332][T13108] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.829526][T13108] bridge_slave_1: entered allmulticast mode [ 797.831062][T13108] bridge_slave_1: entered promiscuous mode [ 798.303058][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.443578][ T9525] Bluetooth: hci5: command tx timeout [ 798.590500][T13108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.960114][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.029437][T13108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.366863][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.405486][ T9525] Bluetooth: hci0: command tx timeout [ 799.508197][T13108] team0: Port device team_slave_0 added [ 799.508708][T13120] chnl_net:caif_netlink_parms(): no params data found [ 799.711736][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.748695][T13108] team0: Port device team_slave_1 added [ 799.869917][T13108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.869932][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.869947][T13108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.881874][T13108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.881890][T13108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.881915][T13108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.034846][T13108] hsr_slave_0: entered promiscuous mode [ 800.035757][T13108] hsr_slave_1: entered promiscuous mode [ 800.036371][T13108] debugfs: 'hsr0' already exists in 'hsr' [ 800.036397][T13108] Cannot create hsr debugfs directory [ 800.036771][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.040620][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.040858][T13120] bridge_slave_0: entered allmulticast mode [ 800.060189][T13120] bridge_slave_0: entered promiscuous mode [ 800.083052][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.083181][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.083610][T13120] bridge_slave_1: entered allmulticast mode [ 800.090475][T13120] bridge_slave_1: entered promiscuous mode [ 800.261233][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.319300][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.421959][T13120] team0: Port device team_slave_0 added [ 800.431186][T13120] team0: Port device team_slave_1 added [ 800.478738][ T3522] bridge_slave_1: left allmulticast mode [ 800.478771][ T3522] bridge_slave_1: left promiscuous mode [ 800.479025][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.526090][ T9525] Bluetooth: hci5: command tx timeout [ 800.540178][ T3522] bridge_slave_0: left allmulticast mode [ 800.540200][ T3522] bridge_slave_0: left promiscuous mode [ 800.540397][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.687978][ T9525] Bluetooth: hci6: command 0x0406 tx timeout [ 801.507833][T13122] Bluetooth: hci0: command tx timeout [ 802.215445][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.294852][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.320928][ T3522] bond0 (unregistering): Released all slaves [ 802.379931][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.379951][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.379980][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.603704][T13122] Bluetooth: hci5: command tx timeout [ 802.648039][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.648060][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.648077][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.662933][T13120] hsr_slave_0: entered promiscuous mode [ 803.694344][T13120] hsr_slave_1: entered promiscuous mode [ 803.696651][T13120] debugfs: 'hsr0' already exists in 'hsr' [ 803.696678][T13120] Cannot create hsr debugfs directory [ 803.823527][ T3522] hsr_slave_0: left promiscuous mode [ 803.863643][ T3522] hsr_slave_1: left promiscuous mode [ 803.865061][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.865083][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.894724][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.894751][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.969307][ T3522] veth1_macvtap: left promiscuous mode [ 803.969428][ T3522] veth0_macvtap: left promiscuous mode [ 803.969719][ T3522] veth1_vlan: left promiscuous mode [ 803.969918][ T3522] veth0_vlan: left promiscuous mode [ 805.573059][ T9525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.606935][ T9525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.647038][ T9525] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.649091][ T9525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.649929][ T9525] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 807.214837][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 807.476228][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 807.738096][ T9525] Bluetooth: hci1: command tx timeout [ 808.851842][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.851948][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.808315][T13122] Bluetooth: hci1: command tx timeout [ 810.943584][T13122] Bluetooth: hci3: command 0x0406 tx timeout [ 811.257505][T13162] chnl_net:caif_netlink_parms(): no params data found [ 811.883439][ T9525] Bluetooth: hci1: command tx timeout [ 811.944461][T13162] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.944684][T13162] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.944904][T13162] bridge_slave_0: entered allmulticast mode [ 811.947829][T13162] bridge_slave_0: entered promiscuous mode [ 811.951769][T13162] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.951977][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.952167][T13162] bridge_slave_1: entered allmulticast mode [ 811.968669][T13162] bridge_slave_1: entered promiscuous mode [ 812.347532][T13162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.610837][T13162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.781024][ T3522] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.844265][T13162] team0: Port device team_slave_0 added [ 812.848729][T13162] team0: Port device team_slave_1 added [ 812.909478][T13162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.909504][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.909534][T13162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.146243][T13122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.149977][T13122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.151429][T13122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.153175][T13122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.162892][ T3522] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.194279][T13122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.207426][T13162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.207445][T13162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.207472][T13162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.492051][ T3522] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.607017][T13162] hsr_slave_0: entered promiscuous mode [ 813.607990][T13162] hsr_slave_1: entered promiscuous mode [ 813.608619][T13162] debugfs: 'hsr0' already exists in 'hsr' [ 813.608637][T13162] Cannot create hsr debugfs directory [ 813.788223][ T3522] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.963529][ T9525] Bluetooth: hci1: command tx timeout [ 814.245867][T13122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 814.275052][T13122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 814.278404][T13122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 814.280062][T13122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 814.280809][T13122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 814.937677][ T3522] bridge_slave_1: left allmulticast mode [ 814.937709][ T3522] bridge_slave_1: left promiscuous mode [ 814.937982][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.005126][ T3522] bridge_slave_0: left allmulticast mode [ 815.005152][ T3522] bridge_slave_0: left promiscuous mode [ 815.005347][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.337068][ T9525] Bluetooth: hci2: command tx timeout [ 816.365987][ T9525] Bluetooth: hci7: command tx timeout [ 816.654489][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.714103][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.735971][ T3522] bond0 (unregistering): Released all slaves [ 817.413560][ T9525] Bluetooth: hci2: command tx timeout [ 817.614987][T13171] chnl_net:caif_netlink_parms(): no params data found [ 818.403770][ T3522] hsr_slave_0: left promiscuous mode [ 818.423528][ T3522] hsr_slave_1: left promiscuous mode [ 818.424283][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.424302][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.453420][ T9525] Bluetooth: hci7: command tx timeout [ 818.475095][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.475126][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.562578][ T3522] veth1_macvtap: left promiscuous mode [ 818.562648][ T3522] veth0_macvtap: left promiscuous mode [ 818.562803][ T3522] veth1_vlan: left promiscuous mode [ 818.562903][ T3522] veth0_vlan: left promiscuous mode [ 819.484439][ T9525] Bluetooth: hci2: command tx timeout [ 820.523536][ T9525] Bluetooth: hci7: command tx timeout [ 821.563405][ T9525] Bluetooth: hci2: command tx timeout [ 821.648058][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 821.926718][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 822.603472][ T9525] Bluetooth: hci7: command tx timeout [ 824.335288][ T5175] udevd[5175]: worker [10122] /devices/virtual/block/nbd0 timeout; kill it [ 824.335388][ T5175] udevd[5175]: seq 20031 '/devices/virtual/block/nbd0' killed [ 824.420350][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.420559][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.420825][T13171] bridge_slave_0: entered allmulticast mode [ 824.433374][T13171] bridge_slave_0: entered promiscuous mode [ 824.490249][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.490434][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.490662][T13171] bridge_slave_1: entered allmulticast mode [ 824.492857][T13171] bridge_slave_1: entered promiscuous mode [ 824.611408][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.640782][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.743157][T13171] team0: Port device team_slave_0 added [ 824.743868][T13175] chnl_net:caif_netlink_parms(): no params data found [ 824.767667][T13171] team0: Port device team_slave_1 added [ 824.922419][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.922433][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.922448][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.976383][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.976395][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.976412][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.127494][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.127626][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.127825][T13175] bridge_slave_0: entered allmulticast mode [ 825.129791][T13175] bridge_slave_0: entered promiscuous mode [ 825.141964][T13171] hsr_slave_0: entered promiscuous mode [ 825.143999][T13171] hsr_slave_1: entered promiscuous mode [ 825.144975][T13171] debugfs: 'hsr0' already exists in 'hsr' [ 825.144999][T13171] Cannot create hsr debugfs directory [ 825.145530][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.145653][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.145863][T13175] bridge_slave_1: entered allmulticast mode [ 825.152333][T13175] bridge_slave_1: entered promiscuous mode [ 825.268799][T13175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.289486][T13175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.362777][T13175] team0: Port device team_slave_0 added [ 825.421752][T13175] team0: Port device team_slave_1 added [ 825.855832][T13175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.855853][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.855869][T13175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.870731][T13175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.870748][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.870773][T13175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.205803][T13175] hsr_slave_0: entered promiscuous mode [ 826.206776][T13175] hsr_slave_1: entered promiscuous mode [ 826.207408][T13175] debugfs: 'hsr0' already exists in 'hsr' [ 826.207426][T13175] Cannot create hsr debugfs directory [ 826.293482][ T9525] Bluetooth: hci4: command 0x0406 tx timeout [ 826.813567][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 180 seconds [ 826.813617][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 180 seconds [ 826.813648][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 180 seconds [ 826.813678][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 180 seconds [ 852.077327][ T9525] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 852.084411][ T9525] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 852.105492][ T9525] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 852.107740][ T9525] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 852.108510][ T9525] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 852.333959][T13189] chnl_net:caif_netlink_parms(): no params data found [ 852.430183][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.430331][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.430467][T13189] bridge_slave_0: entered allmulticast mode [ 852.432143][T13189] bridge_slave_0: entered promiscuous mode [ 852.458293][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.458521][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.458735][T13189] bridge_slave_1: entered allmulticast mode [ 852.461871][T13189] bridge_slave_1: entered promiscuous mode [ 852.505038][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.510197][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.545538][T13189] team0: Port device team_slave_0 added [ 852.548067][T13189] team0: Port device team_slave_1 added [ 852.579077][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.579091][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.579107][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.580545][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.580554][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.580570][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.647031][T13189] hsr_slave_0: entered promiscuous mode [ 852.649642][T13189] hsr_slave_1: entered promiscuous mode [ 852.650594][T13189] debugfs: 'hsr0' already exists in 'hsr' [ 852.650618][T13189] Cannot create hsr debugfs directory [ 853.566109][ T9525] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 853.592851][ T9525] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 853.602246][ T9525] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 853.612301][ T9525] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 853.624681][ T9525] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 853.901618][T13198] chnl_net:caif_netlink_parms(): no params data found [ 853.991236][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.991387][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.991810][T13198] bridge_slave_0: entered allmulticast mode [ 853.997276][T13198] bridge_slave_0: entered promiscuous mode [ 854.000900][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.001123][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.001340][T13198] bridge_slave_1: entered allmulticast mode [ 854.005710][T13198] bridge_slave_1: entered promiscuous mode [ 854.075611][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.080124][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.118593][T13198] team0: Port device team_slave_0 added [ 854.121096][T13198] team0: Port device team_slave_1 added [ 854.156654][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.156668][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.156683][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.158260][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.158270][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.158284][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.203357][ T9525] Bluetooth: hci8: command tx timeout [ 854.234117][T13198] hsr_slave_0: entered promiscuous mode [ 854.235644][T13198] hsr_slave_1: entered promiscuous mode [ 854.236729][T13198] debugfs: 'hsr0' already exists in 'hsr' [ 854.236753][T13198] Cannot create hsr debugfs directory [ 855.723507][ T9525] Bluetooth: hci9: command tx timeout [ 856.293433][ T9525] Bluetooth: hci8: command tx timeout [ 856.895249][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 210 seconds [ 856.895303][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 210 seconds [ 856.895335][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 210 seconds [ 856.895366][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 210 seconds [ 857.803514][ T9525] Bluetooth: hci9: command tx timeout [ 858.363406][ T9525] Bluetooth: hci8: command tx timeout [ 859.883695][ T9525] Bluetooth: hci9: command tx timeout [ 860.443422][ T9525] Bluetooth: hci8: command tx timeout [ 861.964695][ T9525] Bluetooth: hci9: command tx timeout [ 865.586682][T13122] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 865.592279][T13122] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 865.609215][T13122] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 865.610922][T13122] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 865.611731][T13122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 865.854259][T13207] chnl_net:caif_netlink_parms(): no params data found [ 865.950789][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.950949][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.951110][T13207] bridge_slave_0: entered allmulticast mode [ 865.956033][T13207] bridge_slave_0: entered promiscuous mode [ 865.959458][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.959654][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.960084][T13207] bridge_slave_1: entered allmulticast mode [ 865.962724][T13207] bridge_slave_1: entered promiscuous mode [ 866.015662][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.019719][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.054105][T13207] team0: Port device team_slave_0 added [ 866.056554][T13207] team0: Port device team_slave_1 added [ 866.090194][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.090208][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.090224][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.091903][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.091913][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.091927][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.208403][T13207] hsr_slave_0: entered promiscuous mode [ 866.209584][T13207] hsr_slave_1: entered promiscuous mode [ 866.210222][T13207] debugfs: 'hsr0' already exists in 'hsr' [ 866.210240][T13207] Cannot create hsr debugfs directory [ 867.723726][ T9525] Bluetooth: hci10: command tx timeout [ 869.803344][ T9525] Bluetooth: hci10: command tx timeout [ 870.289023][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.289117][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.883533][ T9525] Bluetooth: hci10: command tx timeout [ 873.598605][T13122] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 873.601900][T13122] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 873.618173][T13122] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 873.629030][T13122] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 873.630255][T13122] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 873.867077][T13216] chnl_net:caif_netlink_parms(): no params data found [ 873.962681][T13216] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.962822][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.963836][T13122] Bluetooth: hci10: command tx timeout [ 873.965971][T13216] bridge_slave_0: entered allmulticast mode [ 873.968769][T13216] bridge_slave_0: entered promiscuous mode [ 873.972598][T13216] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.972866][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.973104][T13216] bridge_slave_1: entered allmulticast mode [ 873.976678][T13216] bridge_slave_1: entered promiscuous mode [ 874.032531][T13216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.037268][T13216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.079953][T13216] team0: Port device team_slave_0 added [ 874.083135][T13216] team0: Port device team_slave_1 added [ 874.117932][T13216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.117946][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.117962][T13216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.119656][T13216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.119666][T13216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.119681][T13216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.201734][T13216] hsr_slave_0: entered promiscuous mode [ 874.203958][T13216] hsr_slave_1: entered promiscuous mode [ 874.205000][T13216] debugfs: 'hsr0' already exists in 'hsr' [ 874.205025][T13216] Cannot create hsr debugfs directory [ 874.655374][ T9525] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 874.661413][ T9525] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 874.662798][ T9525] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 874.686869][ T9525] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 874.687635][ T9525] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 875.300216][T13225] chnl_net:caif_netlink_parms(): no params data found [ 875.462563][T13225] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.462712][T13225] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.462871][T13225] bridge_slave_0: entered allmulticast mode [ 875.475872][T13225] bridge_slave_0: entered promiscuous mode [ 875.479458][T13225] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.479698][T13225] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.479946][T13225] bridge_slave_1: entered allmulticast mode [ 875.482671][T13225] bridge_slave_1: entered promiscuous mode [ 875.528282][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.535573][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.574706][T13225] team0: Port device team_slave_0 added [ 875.577287][T13225] team0: Port device team_slave_1 added [ 875.607564][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.607577][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.607593][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.609694][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.609703][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.609718][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.686813][T13225] hsr_slave_0: entered promiscuous mode [ 875.689298][T13225] hsr_slave_1: entered promiscuous mode [ 875.690314][T13225] debugfs: 'hsr0' already exists in 'hsr' [ 875.690338][T13225] Cannot create hsr debugfs directory [ 875.723472][T13122] Bluetooth: hci11: command tx timeout [ 876.763604][T13122] Bluetooth: hci12: command tx timeout [ 877.803550][T13122] Bluetooth: hci11: command tx timeout [ 878.843357][T13122] Bluetooth: hci12: command tx timeout [ 879.893627][ T9525] Bluetooth: hci11: command tx timeout [ 880.923512][ T9525] Bluetooth: hci12: command tx timeout [ 881.963486][ T9525] Bluetooth: hci11: command tx timeout [ 883.003707][ T9525] Bluetooth: hci12: command tx timeout [ 886.963471][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 240 seconds [ 886.963514][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 240 seconds [ 886.963533][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 240 seconds [ 886.963550][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 240 seconds [ 912.161554][T13122] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 912.182726][T13122] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 912.197817][T13122] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 912.201957][T13122] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 912.202730][T13122] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 912.445480][T13234] chnl_net:caif_netlink_parms(): no params data found [ 912.545770][T13234] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.545914][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.546084][T13234] bridge_slave_0: entered allmulticast mode [ 912.547780][T13234] bridge_slave_0: entered promiscuous mode [ 912.550436][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.550559][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.550883][T13234] bridge_slave_1: entered allmulticast mode [ 912.552513][T13234] bridge_slave_1: entered promiscuous mode [ 912.608622][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.611831][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.650409][T13234] team0: Port device team_slave_0 added [ 912.653928][T13234] team0: Port device team_slave_1 added [ 912.688719][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.688732][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.688748][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.690405][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.690417][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.690432][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.766402][T13234] hsr_slave_0: entered promiscuous mode [ 912.767924][T13234] hsr_slave_1: entered promiscuous mode [ 912.768958][T13234] debugfs: 'hsr0' already exists in 'hsr' [ 912.768982][T13234] Cannot create hsr debugfs directory [ 914.154387][T13122] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 914.160906][T13122] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 914.170284][T13122] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 914.187620][T13122] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 914.188396][T13122] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 914.283955][ T9525] Bluetooth: hci13: command tx timeout [ 914.438356][T13243] chnl_net:caif_netlink_parms(): no params data found [ 914.532784][T13243] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.533029][T13243] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.533899][T13243] bridge_slave_0: entered allmulticast mode [ 914.536618][T13243] bridge_slave_0: entered promiscuous mode [ 914.540064][T13243] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.540266][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.540497][T13243] bridge_slave_1: entered allmulticast mode [ 914.545845][T13243] bridge_slave_1: entered promiscuous mode [ 914.594706][T13243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.598605][T13243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.636438][T13243] team0: Port device team_slave_0 added [ 914.639053][T13243] team0: Port device team_slave_1 added [ 914.672219][T13243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.672233][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.672249][T13243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.685087][T13243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.685105][T13243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.685131][T13243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.759206][T13243] hsr_slave_0: entered promiscuous mode [ 914.760795][T13243] hsr_slave_1: entered promiscuous mode [ 914.761869][T13243] debugfs: 'hsr0' already exists in 'hsr' [ 914.761894][T13243] Cannot create hsr debugfs directory [ 916.295900][ T9525] Bluetooth: hci14: command tx timeout [ 916.366137][T13122] Bluetooth: hci13: command tx timeout [ 917.053441][ T32] block nbd0: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 270 seconds [ 917.053490][ T32] block nbd0: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 270 seconds [ 917.053508][ T32] block nbd0: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 270 seconds [ 917.053525][ T32] block nbd0: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 270 seconds [ 918.363616][T13122] Bluetooth: hci14: command tx timeout [ 918.451107][T13122] Bluetooth: hci5: command 0x0406 tx timeout [ 918.451152][T13122] Bluetooth: hci0: command 0x0406 tx timeout [ 918.451188][T13122] Bluetooth: hci13: command tx timeout [ 920.443537][ T9525] Bluetooth: hci14: command tx timeout [ 920.523458][ T9525] Bluetooth: hci13: command tx timeout [ 922.523484][ T9525] Bluetooth: hci14: command tx timeout [ 925.679912][ T61] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 925.700307][ T61] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 925.709352][ T61] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 925.711861][ T61] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 925.712716][ T61] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 925.967191][T13253] chnl_net:caif_netlink_parms(): no params data found [ 926.073390][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.073506][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.073664][T13253] bridge_slave_0: entered allmulticast mode [ 926.075337][T13253] bridge_slave_0: entered promiscuous mode [ 926.078635][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.078761][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.079111][T13253] bridge_slave_1: entered allmulticast mode [ 926.080724][T13253] bridge_slave_1: entered promiscuous mode [ 926.147604][T13253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.151161][T13253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.187102][T13253] team0: Port device team_slave_0 added [ 926.189814][T13253] team0: Port device team_slave_1 added [ 926.232677][T13253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.232690][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.232706][T13253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.236975][T13253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.236990][T13253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.237014][T13253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.307090][T13253] hsr_slave_0: entered promiscuous mode [ 926.308654][T13253] hsr_slave_1: entered promiscuous mode [ 926.309720][T13253] debugfs: 'hsr0' already exists in 'hsr' [ 926.309743][T13253] Cannot create hsr debugfs directory [ 927.803513][ T61] Bluetooth: hci15: command tx timeout [ 928.683632][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 929.883500][ T9525] Bluetooth: hci15: command tx timeout [ 931.729528][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.729638][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.964464][ T9525] Bluetooth: hci15: command tx timeout [ 933.697473][ T61] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 933.705411][ T61] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 933.706975][ T61] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 933.727117][ T61] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 933.727903][ T61] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 933.949818][T13262] chnl_net:caif_netlink_parms(): no params data found [ 934.045132][ T61] Bluetooth: hci15: command tx timeout [ 934.055873][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.056070][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.056325][T13262] bridge_slave_0: entered allmulticast mode [ 934.059099][T13262] bridge_slave_0: entered promiscuous mode [ 934.063064][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.063950][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.064497][T13262] bridge_slave_1: entered allmulticast mode [ 934.067907][T13262] bridge_slave_1: entered promiscuous mode [ 934.124260][T13262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.129023][T13262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.180890][T13262] team0: Port device team_slave_0 added [ 934.184530][T13262] team0: Port device team_slave_1 added [ 934.217502][T13262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.217515][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.217531][T13262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.219032][T13262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.219041][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.219056][T13262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.328864][T13262] hsr_slave_0: entered promiscuous mode [ 934.330560][T13262] hsr_slave_1: entered promiscuous mode [ 934.331410][T13262] debugfs: 'hsr0' already exists in 'hsr' [ 934.331429][T13262] Cannot create hsr debugfs directory [ 934.707842][ T9525] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 934.732313][ T9525] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 934.741339][ T9525] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 934.751646][ T9525] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 934.752780][ T9525] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 935.350881][T13271] chnl_net:caif_netlink_parms(): no params data found [ 935.587320][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.587558][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.587875][T13271] bridge_slave_0: entered allmulticast mode [ 935.589850][T13271] bridge_slave_0: entered promiscuous mode [ 935.630153][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.630262][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.630812][T13271] bridge_slave_1: entered allmulticast mode [ 935.643371][T13271] bridge_slave_1: entered promiscuous mode [ 935.698330][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.702306][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.752819][T13271] team0: Port device team_slave_0 added [ 935.757649][T13271] team0: Port device team_slave_1 added [ 935.786339][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.786352][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.786368][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.787899][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.787908][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.787924][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.803601][ T9525] Bluetooth: hci16: command tx timeout [ 935.881043][T13271] hsr_slave_0: entered promiscuous mode [ 935.882656][T13271] hsr_slave_1: entered promiscuous mode [ 935.886107][T13271] debugfs: 'hsr0' already exists in 'hsr' [ 935.886133][T13271] Cannot create hsr debugfs directory [ 936.845492][T13251] Bluetooth: hci17: command tx timeout [ 937.883397][ T61] Bluetooth: hci16: command tx timeout [ 938.923460][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 938.926132][ T5820] Bluetooth: hci7: command 0x0406 tx timeout [ 938.926174][ T5820] Bluetooth: hci17: command tx timeout [ 939.963389][T13251] Bluetooth: hci16: command tx timeout [ 940.683646][ T38] INFO: task syz.9.2146:13095 blocked for more than 143 seconds. [ 940.683769][ T38] Not tainted syzkaller #0 [ 940.683781][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 940.683792][ T38] task:syz.9.2146 state:D stack:26008 pid:13095 tgid:13094 ppid:11545 task_flags:0x480140 flags:0x00080002 [ 940.683860][ T38] Call Trace: [ 940.683868][ T38] [ 940.683884][ T38] __schedule+0x147b/0x4f50 [ 940.683945][ T38] ? __pfx___schedule+0x10/0x10 [ 940.683984][ T38] ? schedule+0x90/0x360 [ 940.684015][ T38] schedule+0x164/0x360 [ 940.684043][ T38] blk_mq_freeze_queue_wait+0x101/0x180 [ 940.684160][ T38] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 940.684190][ T38] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 940.684214][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 940.684259][ T38] queue_limits_commit_update_frozen+0x55/0xd0 [ 940.684288][ T38] nbd_set_size+0x516/0x6d0 [ 940.684340][ T38] ? __pfx_nbd_set_size+0x10/0x10 [ 940.684384][ T38] ? nla_memcpy+0x5b/0xc0 [ 940.684442][ T38] nbd_genl_size_set+0x32c/0x400 [ 940.684499][ T38] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 940.684528][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.684576][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.684604][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.684633][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 940.684654][ T38] ? nbd_genl_reconfigure+0x38e/0x1a80 [ 940.684699][ T38] nbd_genl_reconfigure+0x428/0x1a80 [ 940.684752][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 940.684783][ T38] ? rcu_is_watching+0x15/0xb0 [ 940.684809][ T38] ? __nla_parse+0x40/0x60 [ 940.684842][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 940.684883][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 940.684919][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 940.684962][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.684996][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.685033][ T38] genl_rcv_msg+0x61c/0x7a0 [ 940.685078][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.685105][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 940.685137][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 940.685178][ T38] netlink_rcv_skb+0x232/0x4b0 [ 940.685203][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 940.685233][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.685273][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.685295][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.685324][ T38] genl_rcv+0x28/0x40 [ 940.685349][ T38] netlink_unicast+0x831/0x9f0 [ 940.685398][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 940.685430][ T38] ? __alloc_skb+0x193/0x390 [ 940.685462][ T38] ? netlink_sendmsg+0x650/0xb40 [ 940.685483][ T38] ? skb_put+0x11b/0x210 [ 940.685508][ T38] netlink_sendmsg+0x813/0xb40 [ 940.685543][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.685576][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.685603][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.685627][ T38] __sock_sendmsg+0x21c/0x270 [ 940.685659][ T38] ____sys_sendmsg+0x4e1/0x800 [ 940.685700][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.685734][ T38] ? import_iovec+0x73/0xa0 [ 940.685789][ T38] ___sys_sendmsg+0x2a5/0x360 [ 940.685810][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 940.685843][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.685875][ T38] ? futex_wait+0x29a/0x380 [ 940.685926][ T38] ? __fget_files+0x2a/0x420 [ 940.685971][ T38] ? __fget_files+0x3a6/0x420 [ 940.686005][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 940.686031][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.686065][ T38] ? rcu_is_watching+0x15/0xb0 [ 940.686100][ T38] do_syscall_64+0xe2/0xf80 [ 940.686128][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.686148][ T38] ? trace_irq_disable+0x37/0x100 [ 940.686170][ T38] ? clear_bhb_loop+0x60/0xb0 [ 940.686196][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.686224][ T38] RIP: 0033:0x7f3359dbacb9 [ 940.686244][ T38] RSP: 002b:00007f3358016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.686267][ T38] RAX: ffffffffffffffda RBX: 00007f335a035fa0 RCX: 00007f3359dbacb9 [ 940.686283][ T38] RDX: 0000000000048000 RSI: 0000200000000380 RDI: 0000000000000004 [ 940.686297][ T38] RBP: 00007f3359e28bf7 R08: 0000000000000000 R09: 0000000000000000 [ 940.686311][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.686325][ T38] R13: 00007f335a036038 R14: 00007f335a035fa0 R15: 00007ffdecf7f1e8 [ 940.686360][ T38] [ 940.686414][ T38] [ 940.686414][ T38] Showing all locks held in the system: [ 940.686425][ T38] 1 lock held by khungtaskd/38: [ 940.686437][ T38] #0: ffffffff8d9c7780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 940.686508][ T38] 6 locks held by kworker/u8:7/1003: [ 940.686523][ T38] 2 locks held by kworker/u8:11/1419: [ 940.686535][ T38] #0: ffff88813fe29138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 940.686588][ T38] #1: ffffc9000535fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 940.686655][ T38] 2 locks held by dhcpcd/5469: [ 940.686676][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.686730][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.686784][ T38] 2 locks held by getty/5561: [ 940.686796][ T38] #0: ffff88814eb3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 940.686874][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 940.686954][ T38] 1 lock held by udevd/10122: [ 940.686965][ T38] #0: ffff88802501a4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 940.687060][ T38] 6 locks held by syz.9.2146/13095: [ 940.687071][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687124][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.687185][ T38] #2: ffff888024fdda48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a80 [ 940.687243][ T38] #3: ffff88814279e1c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 940.687290][ T38] #4: ffff88814279db38 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 940.687346][ T38] #5: ffff88814279db70 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 940.687405][ T38] 2 locks held by syz-executor/13108: [ 940.687416][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687468][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.687522][ T38] 2 locks held by syz-executor/13120: [ 940.687534][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687585][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.687641][ T38] 2 locks held by syz.6.2156/13140: [ 940.687653][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687712][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.687766][ T38] 2 locks held by syz.8.2160/13154: [ 940.687778][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687829][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.687883][ T38] 2 locks held by syz-executor/13162: [ 940.687894][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.687946][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688001][ T38] 2 locks held by syz-executor/13171: [ 940.688012][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688075][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688131][ T38] 2 locks held by syz-executor/13175: [ 940.688143][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688190][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688243][ T38] 2 locks held by syz-executor/13189: [ 940.688255][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688307][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688362][ T38] 2 locks held by syz-executor/13198: [ 940.688374][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688425][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688480][ T38] 2 locks held by syz-executor/13207: [ 940.688492][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688543][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688598][ T38] 2 locks held by syz-executor/13216: [ 940.688609][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688660][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688718][ T38] 2 locks held by syz-executor/13225: [ 940.688729][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688796][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688847][ T38] 2 locks held by syz-executor/13234: [ 940.688858][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.688908][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.688957][ T38] 2 locks held by syz-executor/13243: [ 940.688969][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.689021][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.689073][ T38] 2 locks held by syz-executor/13253: [ 940.689085][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.689133][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.689184][ T38] 2 locks held by syz-executor/13262: [ 940.689195][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.689244][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.689298][ T38] 2 locks held by syz-executor/13271: [ 940.689309][ T38] #0: ffffffff8eda6780 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 940.689360][ T38] #1: ffffffff8eda6578 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 940.689417][ T38] [ 940.689422][ T38] ============================================= [ 940.689422][ T38] [ 940.689431][ T38] NMI backtrace for cpu 0 [ 940.689447][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.689470][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 940.689482][ T38] Call Trace: [ 940.689490][ T38] [ 940.689498][ T38] dump_stack_lvl+0xe8/0x150 [ 940.689528][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 940.689550][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 940.689577][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 940.689610][ T38] sys_info+0x135/0x170 [ 940.689628][ T38] watchdog+0xf90/0xfe0 [ 940.689663][ T38] ? watchdog+0x209/0xfe0 [ 940.689703][ T38] kthread+0x726/0x8b0 [ 940.689737][ T38] ? __pfx_watchdog+0x10/0x10 [ 940.689759][ T38] ? __pfx_kthread+0x10/0x10 [ 940.689785][ T38] ? rt_spin_unlock+0x14f/0x200 [ 940.689819][ T38] ? rt_spin_unlock+0x160/0x200 [ 940.689837][ T38] ? __pfx_kthread+0x10/0x10 [ 940.689875][ T38] ret_from_fork+0x51b/0xa40 [ 940.689901][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 940.689921][ T38] ? __switch_to+0xc82/0x1410 [ 940.689942][ T38] ? __pfx_kthread+0x10/0x10 [ 940.689965][ T38] ret_from_fork_asm+0x1a/0x30 [ 940.689989][ T38] [ 940.689993][ T38] Sending NMI from CPU 0 to CPUs 1: [ 940.690033][ C1] NMI backtrace for cpu 1 [ 940.690048][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.690066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 940.690075][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 940.690098][ C1] Code: a8 4d 02 e9 03 bd 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 81 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 940.690112][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 00000246 [ 940.690127][ C1] RAX: 0000000000a8b939 RBX: ffffffff8197201d RCX: 0000000080000001 [ 940.690139][ C1] RDX: 0000000000000001 RSI: ffffffff8d140965 RDI: ffffffff8b65e700 [ 940.690151][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933c5b R09: 1ffff1101712678b [ 940.690162][ C1] R10: dffffc0000000000 R11: ffffed101712678c R12: ffffffff8f27a370 [ 940.690174][ C1] R13: 1ffff110038d8b58 R14: 0000000000000001 R15: 0000000000000001 [ 940.690185][ C1] FS: 0000000000000000(0000) GS:ffff8881268fc000(0000) knlGS:0000000000000000 [ 940.690199][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.690210][ C1] CR2: 00007fd1a1c05000 CR3: 000000000d7b4000 CR4: 00000000003526f0 [ 940.690227][ C1] Call Trace: [ 940.690234][ C1] [ 940.690239][ C1] default_idle+0x9/0x20 [ 940.690261][ C1] default_idle_call+0x72/0xb0 [ 940.690276][ C1] do_idle+0x1bd/0x500 [ 940.690292][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.690314][ C1] ? __pfx_do_idle+0x10/0x10 [ 940.690333][ C1] cpu_startup_entry+0x43/0x60 [ 940.690348][ C1] start_secondary+0x101/0x110 [ 940.690366][ C1] common_startup_64+0x13e/0x147 [ 940.690394][ C1] [ 940.691014][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 940.691025][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 940.691038][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 940.691045][ T38] Call Trace: [ 940.691050][ T38] [ 940.691055][ T38] vpanic+0x1e0/0x670 [ 940.691072][ T38] panic+0xc5/0xd0 [ 940.691086][ T38] ? __pfx_panic+0x10/0x10 [ 940.691105][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 940.691119][ T38] watchdog+0xfda/0xfe0 [ 940.691135][ T38] ? watchdog+0x209/0xfe0 [ 940.691150][ T38] kthread+0x726/0x8b0 [ 940.691167][ T38] ? __pfx_watchdog+0x10/0x10 [ 940.691179][ T38] ? __pfx_kthread+0x10/0x10 [ 940.691192][ T38] ? rt_spin_unlock+0x14f/0x200 [ 940.691206][ T38] ? rt_spin_unlock+0x160/0x200 [ 940.691217][ T38] ? __pfx_kthread+0x10/0x10 [ 940.691233][ T38] ret_from_fork+0x51b/0xa40 [ 940.691247][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 940.691259][ T38] ? __switch_to+0xc82/0x1410 [ 940.691271][ T38] ? __pfx_kthread+0x10/0x10 [ 940.691287][ T38] ret_from_fork_asm+0x1a/0x30 [ 940.691309][ T38] [ 940.691725][ T38] Kernel Offset: disabled