last executing test programs: 18m52.541239393s ago: executing program 32 (id=2): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'tunl0\x00', r1, 0x700, 0x20, 0x5, 0xf, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x68, 0x0, 0x7f, 0x4, 0x0, @remote, @multicast2, {[@end]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x8, 0xdf, &(0x7f00000003c0)=""/223, 0x41100, 0x11, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x1, 0x8001, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000640)=[{0x3, 0x4, 0x0, 0x9}, {0x2, 0x4, 0x6, 0x9}], 0x10, 0xffff}, 0x94) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = socket(0x2, 0x3, 0x800000) unshare(0x20000400) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r8, 0x0, r8, 0x0, 0x9, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18m46.99123392s ago: executing program 33 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x2440, 0x0) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r2, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) syz_usb_connect(0x5, 0x19e, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xff, 0xf6, 0xc6, 0x8, 0x6e1, 0xa333, 0x2ddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18c, 0x2, 0x3, 0x40, 0x40, 0xf, "", [{{0x9, 0x4, 0xd3, 0x5, 0x8, 0xc5, 0xf4, 0xa2, 0x2, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x6, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x5a, 0xca, 0x1, [@generic={0x30, 0xe, "77f5b3ee55b9c73590dbf9296d76347f743b49d49136b2d4b9843618bd7072868598123e3cba2122cb5c2d666ad2"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xfe, 0x5b, 0xe}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x4, 0x8, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xd0, 0x1, 0x40, [@generic={0x31, 0x21, "44868f368b90ac1b87e4e69c71585c271189217792ed29fc473106927fdf9a545a26f643b7e298f618e9dcbe477c32"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x10, 0x6, 0x1}, @generic={0x4, 0x9, "944b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x460, 0x8, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x2, 0x8, 0x3, [@generic={0x4c, 0x22, "8689f2288c0463f9d0fdab5f23754a857ec48ff0163e8308ce1a5d5bc33758d790cbeda06132aec9114d07416baf202c52f14fa7b174f5af7f5da1caaa62441db080cd28738da8f31f03"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x80}]}}]}}, {{0x9, 0x4, 0x1e, 0xcf, 0x4, 0x18, 0x19, 0x47, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x2a}, [@feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x8], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x403, 0x6, 0x6, 0x4}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x10, "b0"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x5, "13fcc6"}]}], [{{0x9, 0x5, 0xf, 0x1, 0x3ff, 0xf9, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x8}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x2, 0x10, 0xb8}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x630, 0x7, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}]}}]}}]}}, 0x0) 15m21.287520085s ago: executing program 5 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0xb, 0x10, 0x4, "f05b8df0e4c390553edef4d6479ccebe1b71e5c9906c4bc27d3e735881be951f269d987405ae5219e17d60885cf63a3f93c33b31485562b803767f0e2113b9", 0x35}, 0x60) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 15m19.588818707s ago: executing program 5 (id=341): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x801ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0xc, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x0, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x1e, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 15m7.071293997s ago: executing program 5 (id=359): syz_open_dev$dvb_demux(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/30, 0x1e) 15m6.031310943s ago: executing program 5 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m4.485565251s ago: executing program 5 (id=365): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10041, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 14m47.080543422s ago: executing program 34 (id=365): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10041, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 13m40.251759938s ago: executing program 0 (id=483): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x0, 0x0, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x100, 0xae, 0xa, 0x401, 0x8}, &(0x7f0000000340)={0x1, 0x390, 0xf, 0x1, 0x9, 0xc, 0xffffffffffffffff, 0x8}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) syz_open_dev$media(&(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 13m37.178309474s ago: executing program 0 (id=488): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x8000, 0x80) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93eb, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 13m30.708401744s ago: executing program 0 (id=493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) shmdt(0x0) msync(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x5) 13m29.103378414s ago: executing program 0 (id=498): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, 0x0) 13m26.42415304s ago: executing program 0 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) open(0x0, 0x240000, 0x10a) getpgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 13m22.339635561s ago: executing program 0 (id=505): syz_open_dev$dvb_demux(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/30, 0x1e) 13m14.002109298s ago: executing program 35 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) readlink(&(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', &(0x7f00000001c0)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0', 0xb) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x15, 0x4, 0x5, 0xffff32eb, 0x2, 0x5, 0x2d7b, 0x3ff, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd0, 0x80000002], 0x2, 0x4000003}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) 13m6.262653239s ago: executing program 36 (id=505): syz_open_dev$dvb_demux(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/30, 0x1e) 9m55.714229009s ago: executing program 7 (id=759): r0 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 9m47.902655082s ago: executing program 7 (id=772): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xe, 0x4) 9m42.142762225s ago: executing program 7 (id=780): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) shmdt(0x0) 9m37.295422085s ago: executing program 7 (id=785): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='of', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9m34.263552151s ago: executing program 7 (id=791): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000d40)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) membarrier(0x2, 0x0) 9m33.4775854s ago: executing program 7 (id=794): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 9m18.067266532s ago: executing program 37 (id=794): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 9m12.751540763s ago: executing program 4 (id=822): membarrier(0x2, 0x0) 9m10.545701518s ago: executing program 4 (id=825): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027"], 0x50}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x30d, 0xfffffff7, 0x6, 0x9, 0x4]}, @sack={0x5, 0x6, [0x3]}, @generic={0x2, 0xf, "2808ffa1d36cc4f33ed47e15c0"}, @md5sig={0x13, 0x12, "2cd45d6cfd84ae2ce4ba5cfb363ef023"}]}}}}}}}}, 0x0) 9m7.496008793s ago: executing program 4 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 9m6.851842459s ago: executing program 4 (id=830): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000740)={0x40, 0xf, 0x3, "f2543f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m2.731455581s ago: executing program 4 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m1.138706661s ago: executing program 4 (id=838): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x8a, 0x0}}, {0x6, @remote}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 'vlan0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000001900010400001000fcdbdf25000000000000000087bfc04800000000fe8000000000000000000000000000bb0000000000000000021c1ff241000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000004000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000bf6b6e000100000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) r6 = getpid() syz_pidfd_open(r6, 0x0) 8m45.354581912s ago: executing program 38 (id=838): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x8a, 0x0}}, {0x6, @remote}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 'vlan0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000001900010400001000fcdbdf25000000000000000087bfc04800000000fe8000000000000000000000000000bb0000000000000000021c1ff241000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000004000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000bf6b6e000100000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) r6 = getpid() syz_pidfd_open(r6, 0x0) 4m23.304039508s ago: executing program 9 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48810) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$TIOCGPTPEER(r2, 0x5441, 0x12) 4m17.235774851s ago: executing program 9 (id=1243): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[]) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x58}}, 0x4080) write$cgroup_int(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa005}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() r6 = syz_open_dev$usbmon(&(0x7f0000000300), 0xa, 0x10b080) read$usbmon(r6, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xe, 0x4) 4m5.531247245s ago: executing program 9 (id=1255): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbb95bb4377f4f5000000000086dd6084000000082c00ee8000000000000010000000000000bbfe8000000000000000000000b6a29ea403dc000000aa73000000000000"], 0x0) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x40, 0x2, 0x20}, {0x20, 0x0, 0x3, 0x89d0}, {0x6, 0x0, 0x88, 0x9a85}]}, 0x10) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)="0c5ead47", 0x4}], 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 4m4.764864044s ago: executing program 9 (id=1256): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x20000005) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r8, 0x0, 0x0) 3m54.341722366s ago: executing program 9 (id=1269): mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x850003d1) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 3m51.036478259s ago: executing program 9 (id=1271): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r4 = gettid() tkill(r4, 0x16) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(r6) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) 3m34.998427973s ago: executing program 39 (id=1271): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r4 = gettid() tkill(r4, 0x16) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000001c0)={0x2, 0x100, 0x3, {0x4, 0xfffffffe, 0x6, 0x870}}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup(r6) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) 1m19.751546754s ago: executing program 1 (id=1510): sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffffff, 0x0, 0xa1) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x1, 0x2c) 1m16.815494208s ago: executing program 1 (id=1515): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 1m11.616061199s ago: executing program 1 (id=1518): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0xb) ftruncate(r2, 0x1000006) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 1m11.119344982s ago: executing program 1 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9e, 0x40a00, 0x1000002, 0x93, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb096, 0x8000, 0x3, 0x208, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x11, 0xffffffff}}], 0x1, 0x0, 0x0) 1m9.749775706s ago: executing program 1 (id=1524): syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) pipe(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 1m7.535271842s ago: executing program 1 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x5, 0x8000, 0x1, 0x4dc, 0x81, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x5, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x7, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x403, 0x4, 0x1, 0x50200523, 0xfffffffb, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf1, 0x2, 0x9, 0x8, 0x40fff, 0x1ff, 0x8000, 0x18e8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x65, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xa, 0x196, 0x91, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0xa, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x3, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x7fffffff, 0x7ff, 0x2ace, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x0, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x403, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0x1ba5, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0xe6e, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000002, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x5, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0x4, 0xd, 0x805, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0xc, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x5, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0xb, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x0) 52.175532148s ago: executing program 40 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x5, 0x8000, 0x1, 0x4dc, 0x81, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x5, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x7, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x403, 0x4, 0x1, 0x50200523, 0xfffffffb, 0x1, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x0, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf1, 0x2, 0x9, 0x8, 0x40fff, 0x1ff, 0x8000, 0x18e8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x65, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xa, 0x196, 0x91, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0xa, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x3, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x7fffffff, 0x7ff, 0x2ace, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x0, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x403, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0x1ba5, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x2, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0xe6e, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000002, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x5, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0x4, 0xd, 0x805, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0xc, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x5, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0xb, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x0) 13.975441489s ago: executing program 3 (id=1622): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 12.515605115s ago: executing program 3 (id=1626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x40) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x40280, 0x6f) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {0xee00}, 0x4, 0x9}) write(r0, &(0x7f00000001c0)='my_midi_interface\x00', 0x12) 11.990396919s ago: executing program 3 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0xb, 0x10, 0x4, "f05b8df0e4c390553edef4d6479ccebe1b71e5c9906c4bc27d3e735881be951f269d987405ae5219e17d60885cf63a3f93c33b31485562b803767f0e2113b9", 0x35}, 0x60) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 10.395034779s ago: executing program 3 (id=1630): mkdirat(0xffffffffffffff9c, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 10.323317121s ago: executing program 6 (id=1631): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.029646588s ago: executing program 6 (id=1637): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 7.96858209s ago: executing program 8 (id=1638): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0xb) ftruncate(r3, 0x1000006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 6.861377097s ago: executing program 6 (id=1640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf2501000000040008801400020077673100000000000000000025a70000"], 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r5}}, 0x18) r6 = syz_open_dev$I2C(&(0x7f00000005c0), 0xa, 0x20c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r7, 0x40104d00, &(0x7f0000000a00)="00000200000000000000020001") ioctl$I2C_PEC(r6, 0x708, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x0, 0xc0, 0x2, 0x0, 0x7, 0x9}) write$qrtrtun(r3, &(0x7f0000000180)="ce444082475a52c3428b9ffe01bcb1bf05198f1115a82d36d7d2bd9d41fbc8b0288309318dfa47cae5ddcbac3a5ca49025a1b885e0cf315c12e9734bebf312ccd347ed79bac2c333c139ed3b33d181fa732458fecffe1ae614c513d98aa440d5b0a9ec292db3c275a83b7a544755979f788d29d8bf41d05662eb8c35427643e468531e4f", 0x84) 5.410217664s ago: executing program 2 (id=1641): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x7b0c, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x3}, {0xa, 0x4e21, 0x9, @mcast1, 0x30}, r3, 0x8004}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.659318893s ago: executing program 6 (id=1642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9e, 0x40a00, 0x1000002, 0x93, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb096, 0x8000, 0x3, 0x208, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x11, 0xffffffff}}], 0x1, 0x0, 0x0) 3.485192173s ago: executing program 6 (id=1643): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 3.447877434s ago: executing program 3 (id=1644): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0x4, &(0x7f0000000440)="d4aefde56a9e31d9289753bb70f128219a4acf18d08c9431373ac9da1a0d293b788be707c231902cb79ec7477e761a9343ca46e141ae66b37ba2fda4dbe25945f849aff6a20190f5b1798a2afbe872b1c1ae2849d6cae2e3cb032ef849ecd6cbe40cf5e13405234d872ee3f6bbbd227155428178211849e384faa7a79eec6e9d71370ac3b127ad90dd519a73a870b56eb919d384896c0c252b4a44d0b3b1aaae195ae1bbc21fd9c9dc12953bba1f6533f5a1af022ceef8b0e7050e9a8409a2cce8e1131a844490", 0xc7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 3.257836718s ago: executing program 2 (id=1645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x8cff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x48810) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$TIOCGPTPEER(r2, 0x5441, 0x12) 2.728972921s ago: executing program 8 (id=1646): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0xb) ftruncate(r4, 0x1000006) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 2.584693775s ago: executing program 5 (id=1291): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68000, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x128) open$dir(0x0, 0xc402, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050000008100000002"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 2.518206767s ago: executing program 2 (id=1647): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = inotify_init1(0x800) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) inotify_rm_watch(r2, r1) 2.468231478s ago: executing program 8 (id=1648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xe, @private2, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}]}, &(0x7f0000000240)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r1, &(0x7f0000000200), 0x1000) 2.326413302s ago: executing program 2 (id=1649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a3100000000050001"], 0x60}}, 0x0) 2.083395598s ago: executing program 2 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0xb, 0x10, 0x4, "f05b8df0e4c390553edef4d6479ccebe1b71e5c9906c4bc27d3e735881be951f269d987405ae5219e17d60885cf63a3f93c33b31485562b803767f0e2113b9", 0x35}, 0x60) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbfc, {0x79, 0x0, 0x1, r0, 0xb53, 0x2, 0x6, 0x9, 0x0, 0x401, 0x1}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044090}, 0x4004800) open(0x0, 0x240000, 0x10a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 614.624625ms ago: executing program 2 (id=1651): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x800001, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 545.508936ms ago: executing program 8 (id=1652): r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 432.558649ms ago: executing program 3 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e9e, 0x40a00, 0x1000002, 0x93, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb096, 0x8000, 0x3, 0x208, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x11, 0xffffffff}}], 0x1, 0x0, 0x0) 296.607953ms ago: executing program 8 (id=1654): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000001c0), 0x7b0c, 0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0x3}, {0xa, 0x4e21, 0x9, @mcast1, 0x30}, r2, 0x8004}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 187.344965ms ago: executing program 6 (id=1655): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0xb) ftruncate(r3, 0x1000006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 0s ago: executing program 8 (id=1656): mkdirat(0xffffffffffffff9c, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) kernel console output (not intermixed with test programs): 8748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.264029][ T8748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.298315][ T8903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 803.343183][ T5546] device hsr_slave_0 left promiscuous mode [ 803.378958][ T5546] device hsr_slave_1 left promiscuous mode [ 803.434620][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.462888][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.483141][ T5546] device bridge_slave_1 left promiscuous mode [ 803.520827][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.724338][ T5546] device bridge_slave_0 left promiscuous mode [ 803.731757][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.616573][ T9096] syz.9.977 (9096): drop_caches: 2 [ 808.639979][ T9109] jffs2: notice: (9109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 809.057801][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 809.076652][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 809.310216][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 809.336580][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 809.348729][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 809.358682][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.690310][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 809.752338][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 809.802326][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.858213][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.498821][ T8820] Bluetooth: hci4: command 0x0409 tx timeout [ 811.607488][ T5546] bond0 (unregistering): Released all slaves [ 812.117017][ T8903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 812.124175][ T8820] Bluetooth: hci6: command 0xfc11 tx timeout [ 812.124942][ T4283] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 812.597328][ T8903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 813.059118][ T8903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 813.564988][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 813.647324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.653971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.645359][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 818.483574][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 818.852983][ T9114] chnl_net:caif_netlink_parms(): no params data found [ 818.907663][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.713428][ T8903] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.736735][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 820.752128][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 820.819041][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 820.850183][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.136830][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.144114][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.242408][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 821.431356][ T5546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.462095][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 821.515465][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 821.526513][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.533669][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.598628][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 821.640295][ T4320] Bluetooth: hci1: Frame reassembly failed (-84) [ 823.221454][ T5546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.505369][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.538747][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.644089][ T4283] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 823.644162][ T8820] Bluetooth: hci1: command 0xfc11 tx timeout [ 823.864425][ T9114] device bridge_slave_0 entered promiscuous mode [ 824.105195][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 824.322467][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.461359][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.802636][ T9114] device bridge_slave_1 entered promiscuous mode [ 827.570249][ T5546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.653709][ T8903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 827.723003][ T8903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 827.785723][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 827.815455][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 827.854383][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 827.863316][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 827.919217][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.964724][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.004052][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 828.044465][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.159524][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.225063][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.359810][ T5546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.401195][ T9114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.455729][ T9114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.646679][ T9114] team0: Port device team_slave_0 added [ 828.701450][ T9114] team0: Port device team_slave_1 added [ 828.738838][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.746156][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.823596][ T9114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.903284][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.910859][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.937763][ T9114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.934210][ T4283] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 832.934289][ T8820] Bluetooth: hci1: command 0xfc11 tx timeout [ 833.888645][ T9114] device hsr_slave_0 entered promiscuous mode [ 833.913258][ T9114] device hsr_slave_1 entered promiscuous mode [ 833.925974][ T9114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.936302][ T9114] Cannot create hsr debugfs directory [ 835.454721][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.462279][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.050969][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.157313][ T9292] syz.9.1020 (9292): drop_caches: 2 [ 836.406548][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 836.425545][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 836.719989][ T6702] Bluetooth: hci1: Frame reassembly failed (-84) [ 836.734174][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 836.953299][ T126] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 837.005479][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.208944][ T126] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 837.349525][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.467446][ T126] usb 4-1: Product: syz [ 837.527800][ T126] usb 4-1: Manufacturer: syz [ 837.582096][ T126] usb 4-1: SerialNumber: syz [ 838.183520][ T126] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 838.765961][ T4283] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 838.766074][ T8820] Bluetooth: hci1: command 0xfc11 tx timeout [ 840.420844][ T9114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.766672][ T5546] device hsr_slave_0 left promiscuous mode [ 842.074045][ T5546] device hsr_slave_1 left promiscuous mode [ 842.094500][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.152761][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.205491][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.289577][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.344643][ T8820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 842.354588][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 842.362497][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 842.370916][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 842.378891][ T8820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 842.386766][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 842.438713][ T5546] device bridge_slave_1 left promiscuous mode [ 842.478429][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.528113][ T5546] device bridge_slave_0 left promiscuous mode [ 842.535067][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.603457][ T5546] device veth1_macvtap left promiscuous mode [ 842.626093][ T5546] device veth0_macvtap left promiscuous mode [ 842.690356][ T26] audit: type=1804 audit(1787277805.531:30): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1031" name="file1" dev="ramfs" ino=60403 res=1 errno=0 [ 842.711521][ T5546] device veth1_vlan left promiscuous mode [ 842.733305][ T5546] device veth0_vlan left promiscuous mode [ 842.897032][ T9349] process 'syz.8.1031' launched './file1' with NULL argv: empty string added [ 843.494835][ T3624] bcm5974 4-1:1.0: could not read from device [ 844.402842][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 844.408967][ T9350] binder: 9348:9350 ioctl 4018620d 200000000040 returned -16 [ 844.448516][ T9350] syz.9.1032 (9350): drop_caches: 2 [ 844.455409][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 844.498686][ T126] bcm5974 4-1:1.0: could not read from device [ 844.544220][ T3624] bcm5974 4-1:1.0: could not read from device [ 844.664365][ T126] input: failed to attach handler mousedev to device input23, error: -5 [ 844.679936][ T3624] bcm5974 4-1:1.0: could not read from device [ 844.702526][ T126] usb 4-1: USB disconnect, device number 10 [ 844.739178][ T3624] bcm5974 4-1:1.0: could not read from device [ 846.524176][ T8820] Bluetooth: hci1: command 0x041b tx timeout [ 848.285653][ T4283] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 848.294471][ T8820] Bluetooth: hci0: command 0xfc11 tx timeout [ 848.604248][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 849.519463][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 849.661609][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 849.758614][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.861879][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.693660][ T5546] bond0 (unregistering): Released all slaves [ 850.694803][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 850.796325][ T9114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.807461][ T9114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.927502][ T9114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.261396][ T9404] syz.9.1042 (9404): drop_caches: 2 [ 851.286324][ T9114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.451952][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.462039][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.537116][ T9114] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.290650][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 852.447230][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 852.552513][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.559833][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.890637][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 852.972065][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.129535][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.138248][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.145416][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.188736][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 853.259243][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.488015][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.656485][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.805968][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.948222][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 854.108020][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 854.274078][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 854.387961][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 854.612024][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 854.719568][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 855.197841][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 855.313129][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 855.325669][ T4283] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 855.333449][ T8820] Bluetooth: hci0: command 0xfc11 tx timeout [ 857.429023][ T9446] syz.3.1052 (9446): drop_caches: 2 [ 857.480607][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.493596][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.535896][ T9342] device bridge_slave_0 entered promiscuous mode [ 857.611356][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.639313][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.662056][ T9342] device bridge_slave_1 entered promiscuous mode [ 857.750246][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.811746][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.944243][ T6265] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 857.989305][ T9342] team0: Port device team_slave_0 added [ 858.023341][ T9342] team0: Port device team_slave_1 added [ 858.164071][ T6265] usb 4-1: Using ep0 maxpacket: 16 [ 858.191712][ T6265] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 858.234094][ T6265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.245277][ T6265] usb 4-1: Product: syz [ 858.249508][ T6265] usb 4-1: Manufacturer: syz [ 858.265203][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.273994][ T6265] usb 4-1: SerialNumber: syz [ 858.274053][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.286810][ T6265] usb 4-1: config 0 descriptor?? [ 858.337129][ T6265] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 858.353519][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.434644][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.441717][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.511907][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.753174][ T6265] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 859.419645][ T6265] visor: probe of 4-1:0.0 failed with error -71 [ 859.429031][ T6265] usb 4-1: USB disconnect, device number 11 [ 859.595861][ T9114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.627272][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 859.635518][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 861.513517][ T9342] device hsr_slave_0 entered promiscuous mode [ 861.522928][ T9342] device hsr_slave_1 entered promiscuous mode [ 861.529749][ T9342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.537402][ T9342] Cannot create hsr debugfs directory [ 861.654214][ T4359] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 861.674336][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.697372][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.804719][ T9500] syz.8.1061 (9500): drop_caches: 2 [ 861.868025][ T4359] usb 10-1: config index 0 descriptor too short (expected 1572, got 36) [ 861.881587][ T4359] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.926598][ T4359] usb 10-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 861.937045][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.951431][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.972059][ T4359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.003611][ T4359] usb 10-1: Product: syz [ 862.015958][ T4359] usb 10-1: Manufacturer: syz [ 862.027513][ T4359] usb 10-1: SerialNumber: syz [ 862.062305][ T4359] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input24 [ 862.085834][ T9114] device veth0_vlan entered promiscuous mode [ 862.108265][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.122622][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.157160][ T5546] device hsr_slave_0 left promiscuous mode [ 862.166229][ T5546] device hsr_slave_1 left promiscuous mode [ 862.177522][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.199878][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.219089][ T5546] device bridge_slave_1 left promiscuous mode [ 862.229740][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.254858][ T5546] device bridge_slave_0 left promiscuous mode [ 862.263608][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.299550][ T3624] bcm5974 10-1:1.0: could not read from device [ 862.316326][ T4359] bcm5974 10-1:1.0: could not read from device [ 862.324714][ T3624] bcm5974 10-1:1.0: could not read from device [ 862.342472][ T4359] input: failed to attach handler mousedev to device input24, error: -5 [ 862.366583][ T3624] bcm5974 10-1:1.0: could not read from device [ 862.380797][ T4359] usb 10-1: USB disconnect, device number 5 [ 862.397710][ T3624] bcm5974 10-1:1.0: could not read from device [ 862.812051][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 862.863244][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 862.919660][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.975489][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.244262][ T4283] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 866.651671][ T5546] bond0 (unregistering): Released all slaves [ 867.109009][ T9540] syz.3.1070 (9540): drop_caches: 2 [ 867.814973][ T8820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.830133][ T8820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.839401][ T8820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 868.616666][ T8820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 868.625451][ T8820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 868.644275][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 869.894101][ T4276] Bluetooth: hci6: command 0xfc11 tx timeout [ 870.063123][ T4277] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 870.684182][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 870.762097][ T9342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.807104][ T9583] syz.3.1079 (9583): drop_caches: 2 [ 871.086207][ T9342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.126520][ T9342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.290270][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 871.311863][ T9342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.653028][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.705072][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.713349][ T9558] device bridge_slave_0 entered promiscuous mode [ 871.811422][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.824765][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.831902][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.847278][ T9558] device bridge_slave_1 entered promiscuous mode [ 871.901828][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 871.910688][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.937465][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.981938][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.993177][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 872.013769][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 872.041937][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.049163][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.096626][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.133720][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 872.157675][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 872.175417][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 872.198981][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.206174][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.244795][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.260276][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.301286][ T9558] team0: Port device team_slave_0 added [ 872.387494][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.427745][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 872.456453][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 872.542019][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 872.653323][ T9558] team0: Port device team_slave_1 added [ 872.764214][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 873.445098][ T26] audit: type=1804 audit(1787277836.291:31): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1083" name="file1" dev="ramfs" ino=63164 res=1 errno=0 [ 874.923989][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 875.088535][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.095128][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.699336][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 877.004136][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 877.990353][ T9342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.065455][ T9342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.091405][ T9627] syz.8.1088 (9627): drop_caches: 2 [ 878.253751][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 878.276596][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 878.288866][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 878.315632][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 878.330582][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 878.413593][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.434720][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.579963][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.309751][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.324171][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.366454][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.686537][ T9558] device hsr_slave_0 entered promiscuous mode [ 879.699446][ T9558] device hsr_slave_1 entered promiscuous mode [ 879.723004][ T9558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.753294][ T9558] Cannot create hsr debugfs directory [ 881.365073][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 881.372636][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 881.610709][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.827774][ T5546] device hsr_slave_0 left promiscuous mode [ 881.880454][ T5546] device hsr_slave_1 left promiscuous mode [ 881.904437][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.940132][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.965469][ T5546] device bridge_slave_1 left promiscuous mode [ 881.971848][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.997546][ T5546] device bridge_slave_0 left promiscuous mode [ 882.004003][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.063781][ T5546] device veth0_vlan left promiscuous mode [ 890.284871][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 890.474679][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 890.695242][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.874458][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.465972][ T5546] bond0 (unregistering): Released all slaves [ 894.736704][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 894.772658][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 894.881165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 894.894797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 895.021810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 895.049445][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 895.070363][ T9342] device veth0_vlan entered promiscuous mode [ 895.151523][ T9342] device veth1_vlan entered promiscuous mode [ 895.306207][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 895.346564][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 895.379317][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 895.407411][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 895.442072][ T9342] device veth0_macvtap entered promiscuous mode [ 895.523495][ T9342] device veth1_macvtap entered promiscuous mode [ 895.606265][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.645180][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.682389][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.721720][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.754659][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.785504][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 895.814584][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 895.875701][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 895.904679][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.962637][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.044083][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.073994][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.094573][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.320325][ T26] audit: type=1804 audit(1787277859.161:32): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1110" name="file1" dev="ramfs" ino=63613 res=1 errno=0 [ 897.987313][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.048880][ T9558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 898.156983][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 898.176092][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 898.229004][ T9558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 898.279499][ T9342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.291185][ T9342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.321714][ T9342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.341287][ T9342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.373238][ T9558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 898.453736][ T9558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 900.160191][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.229403][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.241462][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.340483][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.354307][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.494779][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.289475][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.296671][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.621766][ T9782] MTD: Couldn't look up './dev/mtdblock0': -2 [ 901.648848][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.701839][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.721287][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.754559][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.761711][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.848158][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.960431][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.987141][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.005686][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 903.571939][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 903.635408][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 903.678042][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 903.727890][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.741479][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.756952][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.765461][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.773382][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.781259][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 903.788630][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.845862][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.870693][ T9558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 903.965463][ T9558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.022447][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 904.040894][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 904.800122][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.039920][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.200638][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.418877][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.658418][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 905.717308][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 905.749421][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.884445][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 905.930680][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 905.950145][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 906.057824][ T9792] chnl_net:caif_netlink_parms(): no params data found [ 906.102860][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 906.122514][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 906.145530][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 906.180130][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 906.224921][ T9558] device veth0_vlan entered promiscuous mode [ 906.386912][ T9558] device veth1_vlan entered promiscuous mode [ 906.636621][ T9558] device veth0_macvtap entered promiscuous mode [ 906.726698][ T9558] device veth1_macvtap entered promiscuous mode [ 906.914679][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 906.977932][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 907.126784][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 907.290182][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 907.403463][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 907.595232][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 909.043505][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 909.087688][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.124535][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.309791][ T9792] device bridge_slave_0 entered promiscuous mode [ 909.383515][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.417867][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.433757][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.468592][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.485532][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.557658][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.592757][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.674604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.693755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.743446][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.754070][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.779107][ T9792] device bridge_slave_1 entered promiscuous mode [ 909.801322][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.838934][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.888600][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.899786][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.909909][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.920622][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.942714][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.095207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 910.114751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 910.690326][ T9558] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.710351][ T9558] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.733919][ T9558] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.770471][ T9558] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.858608][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.893304][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.084593][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 911.234280][ T9872] MTD: Couldn't look up './dev/mtdblock0': -2 [ 911.330525][ T9792] team0: Port device team_slave_0 added [ 911.488993][ T9792] team0: Port device team_slave_1 added [ 911.810521][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.836535][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.913703][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.936593][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.943590][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.992808][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.072556][ T31] device hsr_slave_0 left promiscuous mode [ 912.086608][ T31] device hsr_slave_1 left promiscuous mode [ 912.103564][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.122996][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.144406][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.151976][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.199417][ T31] device bridge_slave_1 left promiscuous mode [ 912.220084][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.257121][ T31] device bridge_slave_0 left promiscuous mode [ 912.270806][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.409039][ T31] device veth1_macvtap left promiscuous mode [ 912.422873][ T31] device veth0_macvtap left promiscuous mode [ 912.439630][ T31] device veth1_vlan left promiscuous mode [ 912.463727][ T31] device veth0_vlan left promiscuous mode [ 913.164659][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 916.501272][ T31] team0 (unregistering): Port device team_slave_1 removed [ 916.569159][ T31] team0 (unregistering): Port device team_slave_0 removed [ 916.632655][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.703717][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.177020][ T31] bond0 (unregistering): Released all slaves [ 917.414553][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.422481][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.514902][ T9933] MTD: Couldn't look up './dev/mtdblock0': -2 [ 917.571418][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.586858][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.620583][ T9792] device hsr_slave_0 entered promiscuous mode [ 917.764643][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.824238][ T9792] device hsr_slave_1 entered promiscuous mode [ 917.832988][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.873418][ T9792] Cannot create hsr debugfs directory [ 918.519278][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 923.066760][ T9792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 923.135044][ T9792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 923.175058][ T9792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 923.216854][ T9792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 923.474988][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.525703][ T9792] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.657529][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 923.714807][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 923.894455][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 924.173424][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.282604][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.289821][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.374349][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.454725][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.463364][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.470554][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.487947][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.501077][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.525446][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 924.640056][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 924.742816][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 924.761828][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 926.070780][ T9792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 926.090380][ T9792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 926.539931][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 926.568238][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 927.547464][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 927.639189][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 927.762702][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 928.244306][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 928.548798][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 930.968346][T10057] jffs2: notice: (10057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 932.324791][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 932.336341][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 932.380521][ T9792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.427460][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 932.473618][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 932.520206][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.544864][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.566366][ T9792] device veth0_vlan entered promiscuous mode [ 932.581006][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.594787][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.875114][ T9792] device veth1_vlan entered promiscuous mode [ 934.894058][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 934.902436][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 934.971508][ T9792] device veth0_macvtap entered promiscuous mode [ 935.000826][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 935.019140][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 935.181910][ T9792] device veth1_macvtap entered promiscuous mode [ 935.646728][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 935.673062][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 936.191992][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.256762][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.274227][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.284965][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.295107][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.305714][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.319587][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.352244][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.394062][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.464209][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.493069][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.527827][ T9792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.542052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.552979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.559582][ T9792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.585573][ T9792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.676206][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 936.696164][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 936.735075][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 936.771724][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 936.813171][ T9792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.833044][ T9792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.858076][ T9792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.890113][ T9792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.102564][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.148075][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.207614][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 937.346401][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.359094][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.401933][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 937.714490][T10122] syz.9.1186 (10122): drop_caches: 2 [ 938.434622][ T4277] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 939.934411][T10131] jffs2: notice: (10131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 945.387669][T10182] Illegal XDP return value 4294967294 on prog (id 57) dev syz_tun, expect packet loss! [ 945.893059][T10190] device syzkaller0 entered promiscuous mode [ 946.901289][T10193] tty tty1: ldisc open failed (-12), clearing slot 0 [ 946.943995][ T6265] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 947.264121][ T6265] usb 3-1: Using ep0 maxpacket: 16 [ 947.278305][ T6265] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 947.348435][ T6265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.387042][ T6265] usb 3-1: Product: syz [ 947.413987][ T6265] usb 3-1: Manufacturer: syz [ 947.425057][ T6265] usb 3-1: SerialNumber: syz [ 947.469949][ T6265] usb 3-1: config 0 descriptor?? [ 948.007768][ T6265] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 948.028949][ T6265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.056605][ T6265] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 948.228209][T10190] dtv5100: wlen = 0, aborting. [ 948.712407][ T6265] usb 3-1: media controller created [ 948.732946][ T6265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.841276][ T6265] zl10353_read_register: readreg error (reg=127, ret==0) [ 948.864009][ T6265] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 949.004056][ T6265] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 949.054179][ T6265] usb 3-1: USB disconnect, device number 3 [ 950.571868][ T4277] Bluetooth: hci1: command 0xfc11 tx timeout [ 950.572295][ T4276] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 950.647495][ T6265] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 957.353957][ T33] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 957.546161][ T33] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 957.566555][ T33] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.616801][ T33] usb 10-1: config 0 descriptor?? [ 957.635714][ T33] cp210x 10-1:0.0: cp210x converter detected [ 958.050298][ T33] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 958.274697][ T33] usb 10-1: cp210x converter now attached to ttyUSB0 [ 958.477892][ T33] usb 10-1: USB disconnect, device number 6 [ 958.501459][ T33] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 958.577136][ T33] cp210x 10-1:0.0: device disconnected [ 969.191896][T10330] jffs2: notice: (10330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 970.934094][ T4447] Bluetooth: hci1: Frame reassembly failed (-84) [ 974.978594][ T4283] Bluetooth: hci1: command 0xfc11 tx timeout [ 974.985563][ T4276] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 983.616150][T10418] syz.3.1237 (10418): drop_caches: 2 [ 991.286334][ T4283] Bluetooth: hci1: command 0xfc11 tx timeout [ 991.295168][ T4276] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 996.258232][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 997.976696][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.983063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.252586][T10484] device syzkaller0 entered promiscuous mode [ 998.594070][ T9268] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 998.814008][ T9268] usb 10-1: Using ep0 maxpacket: 16 [ 998.845117][ T9268] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 998.883984][ T9268] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.907640][ T9268] usb 10-1: Product: syz [ 998.928234][ T9268] usb 10-1: Manufacturer: syz [ 998.952274][ T9268] usb 10-1: SerialNumber: syz [ 999.040322][T10493] syz.3.1252 (10493): drop_caches: 2 [ 999.175310][ T9268] usb 10-1: config 0 descriptor?? [ 999.843294][ T9268] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 999.972982][ T9268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 999.987737][ T9268] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 999.997268][ T9268] usb 10-1: media controller created [ 1000.132022][ T9268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.093519][ T9268] zl10353_read_register: readreg error (reg=127, ret==0) [ 1001.101109][T10484] dtv5100: wlen = 0, aborting. [ 1002.067525][ T9268] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1002.134408][ T9268] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1002.372549][ T9268] usb 10-1: USB disconnect, device number 7 [ 1003.162609][ T9268] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1003.953925][ T4315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1004.174083][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 1004.192286][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.328596][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.453687][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1004.619664][ T4315] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1004.712167][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.739154][ T4315] usb 3-1: config 0 descriptor?? [ 1007.829552][ T4315] usb 3-1: can't set config #0, error -71 [ 1007.849143][ T4315] usb 3-1: USB disconnect, device number 4 [ 1010.994149][ T4283] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1011.001815][ T4276] Bluetooth: hci1: command 0xfc11 tx timeout [ 1013.918085][T10587] syz.1.1268 (10587): drop_caches: 2 [ 1019.776609][T10623] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1025.359272][T10637] binder: 10635:10637 ioctl 4018620d 0 returned -22 [ 1025.376851][T10637] syz.8.1287 (10637): drop_caches: 2 [ 1027.501316][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 1027.620211][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 1030.765424][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.140437][ T8820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1035.151448][ T4404] Bluetooth: hci3: Frame reassembly failed (-84) [ 1035.166061][ T8820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1035.174743][ T8820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1035.182943][ T8820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1035.191277][ T8820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1035.198973][ T8820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1035.341989][T10693] binder: 10691:10693 ioctl 4018620d 0 returned -22 [ 1035.390445][T10693] syz.1.1301 (10693): drop_caches: 2 [ 1036.393240][ T4416] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.547213][T10703] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1037.073935][ T4416] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.164255][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1037.172275][ T4276] Bluetooth: hci3: command 0xfc11 tx timeout [ 1037.244020][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 1037.383675][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 1037.927236][ T4416] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.943419][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 1039.887834][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 1040.076003][ T4416] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.871728][T10688] chnl_net:caif_netlink_parms(): no params data found [ 1041.056889][T10736] binder: 10730:10736 ioctl 4018620d 0 returned -22 [ 1041.103443][T10736] syz.8.1314 (10736): drop_caches: 2 [ 1041.964761][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 1043.101021][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 1043.200978][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.215916][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.240321][T10688] device bridge_slave_0 entered promiscuous mode [ 1043.327089][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.334571][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.754011][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1044.785818][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 1044.835314][T10688] device bridge_slave_1 entered promiscuous mode [ 1045.077190][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.335878][T10781] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.341995][T10781] binder: 10775:10781 ioctl 4018620d 200000000040 returned -16 [ 1046.385176][T10781] syz.8.1326 (10781): drop_caches: 2 [ 1046.397259][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.689330][T10780] overlayfs: overlapping lowerdir path [ 1047.414303][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.524123][ T9268] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 1047.697108][T10688] team0: Port device team_slave_0 added [ 1047.760286][ T9268] usb 3-1: string descriptor 0 read error: -22 [ 1047.799664][ T9268] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1047.918214][ T9268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.092869][ T9268] usb 3-1: config 0 descriptor?? [ 1048.120993][ T9268] usbtest 3-1:0.0: FX2 device [ 1048.173639][ T9268] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1048.294701][T10688] team0: Port device team_slave_1 added [ 1050.154090][ T8821] usb 3-1: USB disconnect, device number 5 [ 1050.230429][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.268021][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.345552][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.156816][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.292665][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.374709][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.611470][T10822] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.618105][T10822] binder: 10820:10822 ioctl 4018620d 200000000040 returned -16 [ 1051.656239][T10822] syz.2.1337 (10822): drop_caches: 2 [ 1052.405743][T10827] overlayfs: overlapping lowerdir path [ 1053.440179][T10688] device hsr_slave_0 entered promiscuous mode [ 1053.632466][T10688] device hsr_slave_1 entered promiscuous mode [ 1053.790918][T10688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.902799][T10688] Cannot create hsr debugfs directory [ 1054.290263][ T4416] device hsr_slave_0 left promiscuous mode [ 1054.308949][ T4416] device hsr_slave_1 left promiscuous mode [ 1054.413008][ T4325] Bluetooth: hci3: Frame reassembly failed (-84) [ 1054.420277][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.444288][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.525960][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1056.583883][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 1056.654772][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.662283][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.974725][ T4416] device bridge_slave_1 left promiscuous mode [ 1057.038145][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.080026][ T4416] device bridge_slave_0 left promiscuous mode [ 1057.240688][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.789644][ T4416] device veth1_macvtap left promiscuous mode [ 1057.798278][ T4416] device veth0_macvtap left promiscuous mode [ 1057.809190][ T4416] device veth1_vlan left promiscuous mode [ 1057.819866][ T4416] device veth0_vlan left promiscuous mode [ 1058.458642][T10880] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.464966][T10880] binder: 10878:10880 ioctl 4018620d 200000000040 returned -16 [ 1058.495077][T10880] syz.2.1351 (10880): drop_caches: 2 [ 1058.633937][ T3599] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1059.417007][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.419656][ T3599] usb 9-1: Using ep0 maxpacket: 16 [ 1059.423469][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.435534][ T3599] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.634952][ T3599] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.368913][ T3599] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.415980][ T3599] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1060.451784][ T3599] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.533410][ T3599] usb 9-1: config 0 descriptor?? [ 1060.621697][ T3599] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input25 [ 1060.667658][ T3624] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1061.244612][ T3624] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1061.249185][ T3599] usb 9-1: USB disconnect, device number 2 [ 1065.021682][ T4276] Bluetooth: Wrong link type (-22) [ 1065.047194][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 1065.181051][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 1065.184533][ T5219] Bluetooth: hci3: Frame reassembly failed (-84) [ 1065.245980][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.322599][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.469681][T10921] binder: 10918:10921 ioctl c0306201 0 returned -14 [ 1065.515953][T10921] syz.8.1361 (10921): drop_caches: 2 [ 1066.320413][T10923] No source specified [ 1067.250137][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1067.256691][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1067.380262][ T4416] bond0 (unregistering): Released all slaves [ 1070.124759][ T126] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1070.333979][ T126] usb 9-1: Using ep0 maxpacket: 8 [ 1073.671450][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1073.728384][ T126] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1073.840784][ T126] usb 9-1: can't read configurations, error -71 [ 1079.341744][T10907] Bluetooth: hci3: Frame reassembly failed (-84) [ 1081.403918][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1081.404709][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1082.653142][T10688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1082.843725][T10688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1082.948800][T10688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1082.995254][T10688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1083.234424][T10688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.295665][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1083.470012][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1085.389350][T10688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.648095][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1085.748814][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1085.758603][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.765818][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.478132][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1086.502409][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1086.557841][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.594024][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.601320][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.670394][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1086.718422][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1086.727526][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1086.738749][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.752356][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1087.651197][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1087.676435][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1088.023341][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1088.035434][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1093.372546][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.382431][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.392118][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.414009][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.421678][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1093.429532][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1095.494068][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1096.525796][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1098.547860][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 1100.617874][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 1100.941928][T11095] chnl_net:caif_netlink_parms(): no params data found [ 1101.445939][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.489805][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.551834][T11095] device bridge_slave_0 entered promiscuous mode [ 1101.582303][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.589953][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.694445][T11095] device bridge_slave_1 entered promiscuous mode [ 1101.853436][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.890459][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.930958][ T9268] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1101.948756][T11095] team0: Port device team_slave_0 added [ 1102.644032][ T9268] usb 3-1: Using ep0 maxpacket: 8 [ 1102.657689][ T9268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.684073][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1102.726303][ T9268] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1102.776138][ T9268] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1102.790590][ T9268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.803742][T11095] team0: Port device team_slave_1 added [ 1102.813079][ T9268] hub 3-1:1.0: bad descriptor, ignoring hub [ 1102.823731][ T9268] hub: probe of 3-1:1.0 failed with error -5 [ 1103.004413][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.430574][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.735128][ T33] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 1104.916270][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.192350][ T5546] Bluetooth: hci3: Frame reassembly failed (-84) [ 1105.540925][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.550173][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.615301][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.772940][T11095] device hsr_slave_0 entered promiscuous mode [ 1106.784797][ T33] usb 3-1: USB disconnect, device number 6 [ 1107.245376][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1107.253075][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1107.854824][T11095] device hsr_slave_1 entered promiscuous mode [ 1108.618169][ T5219] device hsr_slave_0 left promiscuous mode [ 1108.655594][ T5219] device hsr_slave_1 left promiscuous mode [ 1108.694621][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.203896][ T3599] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1109.554552][ T5219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.657955][ T5219] device bridge_slave_1 left promiscuous mode [ 1109.796463][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.056113][ T5219] device bridge_slave_0 left promiscuous mode [ 1110.178811][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.245616][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1111.245678][ T4276] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1112.284111][ T3599] usb 3-1: Using ep0 maxpacket: 8 [ 1113.219662][ T3599] usb 3-1: device descriptor read/all, error -71 [ 1117.011425][ T5219] team0 (unregistering): Port device team_slave_1 removed [ 1117.214542][ T5219] team0 (unregistering): Port device team_slave_0 removed [ 1117.556859][ T5219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.212723][ T5219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.541266][ T4320] Bluetooth: hci3: Frame reassembly failed (-84) [ 1120.605870][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1120.613909][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1120.860286][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.867063][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.097122][ T5219] bond0 (unregistering): Released all slaves [ 1127.086717][T11323] overlayfs: conflicting lowerdir path [ 1128.404426][ T4364] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1128.614005][ T4364] usb 4-1: Using ep0 maxpacket: 16 [ 1128.669344][ T4364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.818473][ T4364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.937621][ T4364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1128.966081][ T4364] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1128.975933][ T4364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.005781][ T4364] usb 4-1: config 0 descriptor?? [ 1129.055662][ T4364] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 1129.137365][ T3624] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1129.204404][T11095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1129.266309][T11095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1129.284758][ T4364] usb 4-1: USB disconnect, device number 12 [ 1129.305147][ T3624] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1129.542056][T11095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1130.009372][T11095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1130.407827][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.664588][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.671636][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1132.708577][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.789855][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.864567][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.873311][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.880588][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.707330][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1133.868024][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1134.056517][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1134.217367][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.224675][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.588273][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1134.773018][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1135.019023][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1135.164031][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1135.172261][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1135.243129][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1135.456554][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1135.746154][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1135.922685][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1136.071055][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1136.265598][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1136.524805][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1136.902185][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1136.979871][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1140.554810][T11416] syz.3.1461 (11416): drop_caches: 2 [ 1140.705217][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1140.740765][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1141.299421][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.164811][ T4283] Bluetooth: hci3: command 0xfc11 tx timeout [ 1145.166015][ T4277] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1146.950442][T11446] jffs2: notice: (11446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1147.439462][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1147.474983][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1147.582826][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1148.335290][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1148.690885][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1148.729764][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1149.287571][T11479] syz.3.1482 (11479): drop_caches: 2 [ 1150.399973][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.410157][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.418591][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1150.427413][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1150.435791][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1150.443176][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1151.924349][T11501] ALSA: mixer_oss: invalid OSS volume 'PHlв6ћћqУ†ШИМONEOUT' [ 1153.550643][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1154.419437][T11512] jffs2: notice: (11512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1155.644228][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 1155.723143][T11528] syz.1.1493 (11528): drop_caches: 2 [ 1156.938253][T11489] chnl_net:caif_netlink_parms(): no params data found [ 1157.042220][ T26] audit: type=1800 audit(1787278119.881:33): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1497" name="zoned" dev="configfs" ino=70162 res=0 errno=0 [ 1157.136172][ T26] audit: type=1800 audit(1787278119.911:34): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1497" name="zone_nr_conv" dev="configfs" ino=70163 res=0 errno=0 [ 1157.214076][ T26] audit: type=1800 audit(1787278119.971:35): pid=11543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1497" name="power" dev="configfs" ino=70208 res=0 errno=0 [ 1157.537093][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.563304][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.581430][T11489] device bridge_slave_0 entered promiscuous mode [ 1157.590974][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.606208][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.621276][T11489] device bridge_slave_1 entered promiscuous mode [ 1157.660388][T11543] null_blk: disk nullb1 created [ 1157.724206][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 1157.762340][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.970347][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.014048][T11489] team0: Port device team_slave_0 added [ 1158.023674][T11489] team0: Port device team_slave_1 added [ 1158.383328][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.410762][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.574263][ T4319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1158.598208][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.621339][T11569] jffs2: notice: (11569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1158.694918][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.710168][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.093172][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1160.121612][T11569] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 1160.129013][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 1160.136341][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.140353][ T4319] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1160.179786][ T4319] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1160.210358][ T4319] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1160.240554][ T4319] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1160.249230][ T4319] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1160.270249][ T4319] usb 2-1: config 0 has no interface number 0 [ 1160.299959][ T4319] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1160.328553][ T4319] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1160.346808][ T4319] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1160.367192][ T4319] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.411183][ T4319] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1160.423673][ T4319] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1160.459869][ T4319] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1160.513734][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.542461][ T4319] usb 2-1: Product: syz [ 1160.559986][ T4319] usb 2-1: Manufacturer: syz [ 1160.575265][ T4319] usb 2-1: SerialNumber: syz [ 1160.619693][ T4319] usb 2-1: config 0 descriptor?? [ 1160.828047][ T4319] usb 2-1: selecting invalid altsetting 2 [ 1160.858285][T11489] device hsr_slave_0 entered promiscuous mode [ 1160.874825][T11489] device hsr_slave_1 entered promiscuous mode [ 1161.026389][T11489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.077998][T11489] Cannot create hsr debugfs directory [ 1161.610873][ C1] usb 2-1: async_complete: urb error -71 [ 1161.616756][ C1] usb 2-1: async_complete: urb error -71 [ 1161.622521][ C1] usb 2-1: async_complete: urb error -71 [ 1161.628293][ C1] usb 2-1: async_complete: urb error -71 [ 1161.636144][ T4319] get_1284_register: usb error -71 [ 1161.665170][ T4319] usb 2-1: USB disconnect, device number 4 [ 1162.757771][T11612] loop7: detected capacity change from 0 to 7 [ 1162.792123][T11612] Dev loop7: unable to read RDB block 7 [ 1162.798505][T11612] loop7: unable to read partition table [ 1162.805120][T11612] loop7: partition table beyond EOD, truncated [ 1162.811402][T11612] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 1162.925728][T11613] TCP: TCP_TX_DELAY enabled [ 1163.177808][T11613] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1165.393430][ T47] device hsr_slave_0 left promiscuous mode [ 1167.804379][T11631] binder: 11624:11631 ioctl 4018620d 0 returned -22 [ 1168.314392][ T47] device hsr_slave_1 left promiscuous mode [ 1168.343568][T11625] syz.2.1505 (11625): drop_caches: 2 [ 1168.373242][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.429643][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.502752][ T47] device bridge_slave_1 left promiscuous mode [ 1168.534366][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.595625][ T47] device bridge_slave_0 left promiscuous mode [ 1168.601920][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.785387][ T47] team0 (unregistering): Port device team_slave_1 removed [ 1174.999837][ T47] team0 (unregistering): Port device team_slave_0 removed [ 1176.999762][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.686520][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.906304][ T47] bond0 (unregistering): Released all slaves [ 1179.164166][ T8821] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1179.896539][ T8821] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1179.955789][ T8821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.099096][ T8821] usb 9-1: config 0 descriptor?? [ 1181.218870][ T8821] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1181.273686][ T8821] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1181.314561][ T8821] [drm:udl_init] *ERROR* Selecting channel failed [ 1181.406443][ T8821] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2 [ 1181.436824][ T8821] [drm] Initialized udl on minor 2 [ 1181.495550][ T8821] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1182.337008][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.098611][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.493670][ T8821] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1183.537611][ T8821] usb 9-1: USB disconnect, device number 5 [ 1183.572589][ T4364] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1183.611593][ T4364] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1183.627699][ T4364] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1183.702339][T11698] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1183.909124][ T26] audit: type=1800 audit(1787278146.751:36): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1541" name="zoned" dev="configfs" ino=71412 res=0 errno=0 [ 1183.961304][ T26] audit: type=1800 audit(1787278146.751:37): pid=11758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1541" name="zone_nr_conv" dev="configfs" ino=71413 res=0 errno=0 [ 1184.030646][ T26] audit: type=1800 audit(1787278146.851:38): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1541" name="power" dev="configfs" ino=71416 res=0 errno=0 [ 1186.845264][ T4283] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1186.853077][ T4277] Bluetooth: hci3: command 0xfc11 tx timeout [ 1189.300372][ T4364] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1189.485309][ T4364] usb 3-1: device descriptor read/64, error -71 [ 1189.820365][ T4364] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1190.004781][ T4364] usb 3-1: device descriptor read/64, error -71 [ 1190.132215][ T4364] usb usb3-port1: attempt power cycle [ 1190.349578][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1190.361462][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1190.370944][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1190.380517][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1537'. [ 1190.401996][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1190.419634][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1190.434371][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1190.457078][T11741] device bridge_slave_1 left promiscuous mode [ 1190.463318][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.473391][T11741] device bridge_slave_0 left promiscuous mode [ 1190.480386][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.564083][ T4364] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1190.610575][ T4364] usb 3-1: device descriptor read/8, error -71 [ 1190.897523][ T4364] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1190.934609][ T4364] usb 3-1: device descriptor read/8, error -71 [ 1191.040533][T11792] tmpfs: Bad value for 'mpol' [ 1191.108992][ T4364] usb usb3-port1: unable to enumerate USB device [ 1191.181008][T11489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1191.246265][T11489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1191.282929][T11489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1191.311933][T11489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1192.526079][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 1193.277495][T11785] chnl_net:caif_netlink_parms(): no params data found [ 1193.514197][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.625133][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1193.642834][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1193.725821][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.792632][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1193.845950][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1194.875443][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 1194.922465][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.929715][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.962237][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1194.970894][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.981030][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.993828][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.001009][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.011224][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1195.051655][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1195.080872][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1195.116248][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1195.141747][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1195.198206][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.229975][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.261396][T11785] device bridge_slave_0 entered promiscuous mode [ 1195.296095][T11489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.338921][T11489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.399437][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1195.432001][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1195.466863][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1195.494821][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.515845][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.554750][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.573226][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.581046][ T4283] Bluetooth: hci6: command 0xfc11 tx timeout [ 1195.589651][ T4277] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1195.629483][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.662063][T11785] device bridge_slave_1 entered promiscuous mode [ 1195.680129][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1195.761332][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.810727][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.930141][T11785] team0: Port device team_slave_0 added [ 1196.001643][T11785] team0: Port device team_slave_1 added [ 1196.099262][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.125276][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.211264][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.296382][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.303592][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.333136][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.409797][T11785] device hsr_slave_0 entered promiscuous mode [ 1196.425304][T11785] device hsr_slave_1 entered promiscuous mode [ 1196.672827][ T5546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.871213][ T26] audit: type=1800 audit(1787278159.711:39): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1558" name="zoned" dev="configfs" ino=72732 res=0 errno=0 [ 1196.924123][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 1196.957737][ T26] audit: type=1800 audit(1787278159.731:40): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1558" name="zone_nr_conv" dev="configfs" ino=72733 res=0 errno=0 [ 1196.992101][ T5546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.360479][ T26] audit: type=1800 audit(1787278160.171:41): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1558" name="power" dev="configfs" ino=71759 res=0 errno=0 [ 1197.538542][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1197.556513][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1197.581318][ T126] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1197.617470][ T5546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.810398][T11489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.893906][ T126] usb 3-1: device descriptor read/64, error -71 [ 1197.975941][T11869] loop7: detected capacity change from 0 to 7 [ 1198.013616][T11869] Dev loop7: unable to read RDB block 7 [ 1198.019745][T11869] loop7: unable to read partition table [ 1198.026429][T11869] loop7: partition table beyond EOD, truncated [ 1198.032826][T11869] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 1198.250653][ T126] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1198.423656][T11870] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1198.707238][ T5546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.764249][ T126] usb 3-1: device descriptor read/64, error -71 [ 1198.913147][ T126] usb usb3-port1: attempt power cycle [ 1199.013984][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 1199.334356][ T126] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1199.428570][ T126] usb 3-1: device descriptor read/8, error -71 [ 1199.814301][ T126] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1199.864620][ T126] usb 3-1: device descriptor read/8, error -71 [ 1199.994246][ T126] usb usb3-port1: unable to enumerate USB device [ 1201.443896][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1201.474881][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.580183][T11489] device veth0_vlan entered promiscuous mode [ 1201.614784][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1201.635827][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.673141][T11489] device veth1_vlan entered promiscuous mode [ 1201.752002][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.775359][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.808201][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1202.171226][ T26] audit: type=1800 audit(1787278165.011:42): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1573" name="zoned" dev="configfs" ino=71892 res=0 errno=0 [ 1202.245045][ T26] audit: type=1800 audit(1787278165.041:43): pid=11919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1573" name="zone_nr_conv" dev="configfs" ino=71893 res=0 errno=0 [ 1202.440734][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1202.456076][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1202.470325][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1202.515152][ T26] audit: type=1800 audit(1787278165.361:44): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1574" name="zoned" dev="configfs" ino=71898 res=0 errno=0 [ 1202.522203][T11489] device veth0_macvtap entered promiscuous mode [ 1202.592414][ T26] audit: type=1800 audit(1787278165.361:45): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1574" name="zone_nr_conv" dev="configfs" ino=71899 res=0 errno=0 [ 1202.675538][ T26] audit: type=1800 audit(1787278165.461:46): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1574" name="power" dev="configfs" ino=71900 res=0 errno=0 [ 1202.707938][T11489] device veth1_macvtap entered promiscuous mode [ 1202.913768][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.938537][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.970647][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.999644][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.029354][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1203.061451][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.084369][ T4283] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1203.116370][T11489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.148390][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1203.186018][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1203.267064][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1203.294642][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.336586][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.369344][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.380856][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.391430][T11489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1203.402923][T11489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1203.421958][T11489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.271773][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1204.281994][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1204.293947][T11785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1204.338713][T11489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.364623][T11489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.382757][T11489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.406533][T11489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.445714][T11785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1204.915639][T11785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1204.934021][ T33] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1205.167623][ T47] Bluetooth: hci0: Frame reassembly failed (-84) [ 1205.190707][T11785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.524938][T11959] loop7: detected capacity change from 0 to 7 [ 1206.694941][ T33] usb 4-1: device descriptor read/64, error -71 [ 1206.744408][T11959] Dev loop7: unable to read RDB block 7 [ 1206.750126][T11959] loop7: unable to read partition table [ 1206.755997][T11959] loop7: partition table beyond EOD, truncated [ 1206.762225][T11959] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 1206.771198][T11960] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1206.932462][ T5546] device hsr_slave_0 left promiscuous mode [ 1206.961692][ T5546] device hsr_slave_1 left promiscuous mode [ 1206.973950][ T33] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1206.986672][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.003672][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.023503][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.037924][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.064542][ T5546] device bridge_slave_1 left promiscuous mode [ 1207.099496][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.134134][ T33] usb 4-1: device descriptor read/64, error -71 [ 1207.243975][ T4283] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1207.251975][ T4277] Bluetooth: hci0: command 0xfc11 tx timeout [ 1207.984958][ T5546] device bridge_slave_0 left promiscuous mode [ 1207.991359][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.064209][ T33] usb usb4-port1: attempt power cycle [ 1208.151695][ T5546] device veth1_macvtap left promiscuous mode [ 1209.060285][ T5546] device veth0_macvtap left promiscuous mode [ 1209.066527][ T5546] device veth1_vlan left promiscuous mode [ 1209.074129][ T5546] device veth0_vlan left promiscuous mode [ 1210.653014][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1210.662604][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1210.670625][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1210.678418][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1210.694101][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1210.706764][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1211.784814][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 1211.957796][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 1212.154420][ T4314] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1212.413932][ T4314] usb 3-1: device descriptor read/64, error -71 [ 1212.524024][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.694270][ T4314] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1212.705893][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.766743][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 1212.793858][T11997] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1212.890724][ T4314] usb 3-1: device descriptor read/64, error -71 [ 1213.027074][ T4314] usb usb3-port1: attempt power cycle [ 1213.454128][ T4314] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1213.576215][ T4314] usb 3-1: device descriptor read/8, error -71 [ 1213.857678][ T4314] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1213.906982][ T4314] usb 3-1: device descriptor read/8, error -71 [ 1214.034297][ T4314] usb usb3-port1: unable to enumerate USB device [ 1214.089045][ T5546] bond0 (unregistering): Released all slaves [ 1214.843986][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 1214.913655][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.932525][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1215.014668][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1215.121516][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.216137][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1215.235906][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1215.284903][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.292160][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.377414][T11986] chnl_net:caif_netlink_parms(): no params data found [ 1215.449060][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1215.462679][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1215.478948][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.506137][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.513272][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.591050][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1215.658376][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1215.854059][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1215.884697][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1215.923120][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1215.950132][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1216.044032][ T4283] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1216.146728][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1216.412911][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1216.443104][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1216.506609][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1216.577757][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1216.633434][T11785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.189375][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 1217.282332][ T5546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.468945][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.489954][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.534170][T11986] device bridge_slave_0 entered promiscuous mode [ 1217.672050][ T5546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.936227][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.943372][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.310729][T11986] device bridge_slave_1 entered promiscuous mode [ 1219.130751][ T5546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.244484][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 1219.340493][ T5546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.452540][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.505852][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.515200][ T8821] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1219.632785][T11986] team0: Port device team_slave_0 added [ 1219.667936][T11986] team0: Port device team_slave_1 added [ 1219.683986][ T8821] usb 4-1: device descriptor read/64, error -71 [ 1219.755618][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.783324][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.874225][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.931002][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.947464][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.974271][ T8821] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1220.024230][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.147234][ T8821] usb 4-1: device descriptor read/64, error -71 [ 1220.195438][T11986] device hsr_slave_0 entered promiscuous mode [ 1220.213207][T11986] device hsr_slave_1 entered promiscuous mode [ 1220.222780][T11986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.242260][T11986] Cannot create hsr debugfs directory [ 1220.264061][ T8821] usb usb4-port1: attempt power cycle [ 1220.305184][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1220.312715][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1220.426511][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.677191][ T8821] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1220.735682][ T8821] usb 4-1: device descriptor read/8, error -71 [ 1221.013848][ T8821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1221.086359][ T8821] usb 4-1: device descriptor read/8, error -71 [ 1221.214729][ T8821] usb usb4-port1: unable to enumerate USB device [ 1221.863810][ T4359] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1221.917132][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1221.959514][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1222.053822][ T4359] usb 9-1: Using ep0 maxpacket: 8 [ 1222.060295][ T4359] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1222.097079][T11986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1222.104822][ T4359] usb 9-1: config 10 has an invalid interface number: 91 but max is 0 [ 1222.130982][ T4359] usb 9-1: config 10 has no interface number 0 [ 1222.144567][T11986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1222.171773][ T4359] usb 9-1: config 10 interface 91 has no altsetting 0 [ 1222.182613][T11986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1222.208759][ T4359] usb 9-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 1222.232573][ T4359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.236003][T11986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1222.250998][ T4359] usb 9-1: Product: syz [ 1222.279336][ T4359] usb 9-1: Manufacturer: syz [ 1222.301769][ T4359] usb 9-1: SerialNumber: syz [ 1222.400834][ T5546] device hsr_slave_0 left promiscuous mode [ 1222.426219][ T5546] device hsr_slave_1 left promiscuous mode [ 1222.463712][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.484190][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.527284][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.701110][ T4359] usb 9-1: Found UVC 0.00 device syz (097b:61f6) [ 1222.799012][ T4359] usb 9-1: No valid video chain found. [ 1222.826300][ T4447] Bluetooth: hci1: Frame reassembly failed (-84) [ 1222.836091][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.917816][ T4359] usb 9-1: USB disconnect, device number 6 [ 1222.978665][ T5546] device bridge_slave_1 left promiscuous mode [ 1222.986403][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.059499][ T5546] device bridge_slave_0 left promiscuous mode [ 1223.091502][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.219272][ T5546] device veth1_macvtap left promiscuous mode [ 1223.232200][ T5546] device veth0_macvtap left promiscuous mode [ 1223.250097][ T5546] device veth1_vlan left promiscuous mode [ 1223.270854][ T5546] device veth0_vlan left promiscuous mode [ 1223.824918][T12119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 1224.731736][ T26] audit: type=1800 audit(1787278187.571:47): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1612" name="zoned" dev="configfs" ino=72639 res=0 errno=0 [ 1224.784236][ T26] audit: type=1800 audit(1787278187.621:48): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1612" name="zone_nr_conv" dev="configfs" ino=72641 res=0 errno=0 [ 1224.809669][ T26] audit: type=1800 audit(1787278187.651:49): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1612" name="power" dev="configfs" ino=72642 res=0 errno=0 [ 1224.845749][ T4276] Bluetooth: hci1: command 0xfc11 tx timeout [ 1224.854215][ T4283] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1225.193657][ T5546] team0 (unregistering): Port device team_slave_1 removed [ 1225.306135][ T5546] team0 (unregistering): Port device team_slave_0 removed [ 1225.386669][ T5546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.485045][ T5546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.769392][T12144] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 1225.784365][T12144] netlink: 'syz.3.1615': attribute type 2 has an invalid length. [ 1226.111041][ T5546] bond0 (unregistering): Released all slaves [ 1226.194028][ T126] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1226.241039][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1226.250265][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1226.267767][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1226.292505][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1226.319903][T11785] device veth0_vlan entered promiscuous mode [ 1226.379159][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 1226.396381][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.412821][T11785] device veth1_vlan entered promiscuous mode [ 1226.456015][ T126] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1226.481356][ T126] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1226.527596][T11785] device veth0_macvtap entered promiscuous mode [ 1226.541914][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.582781][ T126] usb 4-1: config 0 descriptor?? [ 1226.603053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.634226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.658430][T11785] device veth1_macvtap entered promiscuous mode [ 1226.700105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1226.727126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.769353][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.823824][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.845923][ T126] usb 4-1: USB disconnect, device number 20 [ 1226.864061][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.893785][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.931929][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.958379][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.008562][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.038974][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.089053][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.135195][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.147652][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1227.165179][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1227.186399][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1227.217419][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.257208][T11785] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.289392][T11785] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.338073][T11785] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.368129][T11785] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.507934][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.604539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.623074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.690180][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.737839][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.755300][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.796778][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.803956][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.855022][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.899952][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.922439][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.942237][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.949519][ T5546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.005489][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1228.035564][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.058817][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.081761][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1228.104796][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1228.181912][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1228.206279][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1228.235759][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1228.257588][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1228.271625][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1228.280776][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1228.296629][T11986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1228.339284][T11986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1228.372950][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1228.394499][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1228.430952][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1228.472211][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.484895][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.511593][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1229.798073][ T26] audit: type=1800 audit(1787278192.641:50): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1625" name="zoned" dev="configfs" ino=73952 res=0 errno=0 [ 1229.852554][ T26] audit: type=1800 audit(1787278192.671:51): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1625" name="zone_nr_conv" dev="configfs" ino=73953 res=0 errno=0 [ 1230.141236][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1230.151317][ T5430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1230.206383][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.255801][ T4321] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1231.843978][ T4321] usb 9-1: Using ep0 maxpacket: 16 [ 1231.851053][ T4321] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.892458][ T4321] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1231.933008][ T4321] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1232.043228][ T4321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.298354][ T4321] usb 9-1: config 0 descriptor?? [ 1233.450709][ T4321] usb 9-1: can't set config #0, error -71 [ 1233.509305][ T4321] usb 9-1: USB disconnect, device number 7 [ 1235.007315][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1235.132992][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1235.239230][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1235.285325][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1235.317556][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1236.794705][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1236.826404][T11986] device veth0_vlan entered promiscuous mode [ 1236.846659][ T26] audit: type=1800 audit(1787278199.691:52): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1640" name="zoned" dev="configfs" ino=74807 res=0 errno=0 [ 1236.883244][T11986] device veth1_vlan entered promiscuous mode [ 1236.907816][ T26] audit: type=1800 audit(1787278199.711:53): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1640" name="zone_nr_conv" dev="configfs" ino=74808 res=0 errno=0 [ 1237.052862][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1237.085467][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1237.116370][T11986] device veth0_macvtap entered promiscuous mode [ 1237.134588][T11986] device veth1_macvtap entered promiscuous mode [ 1237.197978][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.218928][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.239518][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.260924][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.299839][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.333126][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.377962][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.423344][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1237.447488][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.517876][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1237.551676][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1237.581598][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.611730][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.644525][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.685674][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.722775][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1237.769918][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.833878][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.878856][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1237.918989][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1238.661738][T11986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.703899][T11986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.733062][T11986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.769951][T11986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.997839][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.022154][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.047854][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1239.285277][ T5546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.310531][ T5546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.396561][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1239.914131][ T9268] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1241.500005][ T9268] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1241.533892][ T9268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.561300][ T9268] usb 6-1: Product: syz [ 1241.573826][ T9268] usb 6-1: Manufacturer: syz [ 1241.583965][ T9268] usb 6-1: SerialNumber: syz [ 1241.785425][ T9268] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1243.296145][ T9268] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1243.334963][ T9268] ath9k_htc: Failed to initialize the device [ 1243.354159][T12343] mmap: syz.5.1291 (12343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1243.366356][T12343] [ 1243.368712][T12343] ====================================================== [ 1243.375764][T12343] WARNING: possible circular locking dependency detected [ 1243.382815][T12343] syzkaller #0 Not tainted [ 1243.387261][T12343] ------------------------------------------------------ [ 1243.394304][T12343] syz.5.1291/12343 is trying to acquire lock: [ 1243.400404][T12343] ffff888059035af0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1243.411167][T12343] [ 1243.411167][T12343] but task is already holding lock: [ 1243.418559][T12343] ffff88807bf126d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1243.428608][T12343] [ 1243.428608][T12343] which lock already depends on the new lock. [ 1243.428608][T12343] [ 1243.439035][T12343] [ 1243.439035][T12343] the existing dependency chain (in reverse order) is: [ 1243.448075][T12343] [ 1243.448075][T12343] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1243.455666][T12343] down_read_killable+0x4c/0x340 [ 1243.461150][T12343] mmap_read_lock_killable+0x1d/0x60 [ 1243.466981][T12343] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1243.472725][T12343] do_user_addr_fault+0x2e8/0xb20 [ 1243.478297][T12343] exc_page_fault+0x60/0x100 [ 1243.483438][T12343] asm_exc_page_fault+0x22/0x30 [ 1243.488835][T12343] fault_in_readable+0x13e/0x1f0 [ 1243.494329][T12343] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1243.500645][T12343] generic_perform_write+0x1f1/0x5c0 [ 1243.506498][T12343] __generic_file_write_iter+0x148/0x2a0 [ 1243.512674][T12343] generic_file_write_iter+0xab/0x2e0 [ 1243.518594][T12343] vfs_write+0x482/0x9a0 [ 1243.523383][T12343] ksys_write+0x14d/0x260 [ 1243.528256][T12343] do_syscall_64+0x4c/0xa0 [ 1243.533218][T12343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.539654][T12343] [ 1243.539654][T12343] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1243.548369][T12343] __lock_acquire+0x2d18/0x7c40 [ 1243.553768][T12343] lock_acquire+0x1bb/0x4a0 [ 1243.558827][T12343] down_write+0x36/0x60 [ 1243.563518][T12343] process_measurement+0x3af/0x1c40 [ 1243.569270][T12343] ima_file_mmap+0xe9/0x140 [ 1243.574314][T12343] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1243.580509][T12343] do_syscall_64+0x4c/0xa0 [ 1243.585469][T12343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.591905][T12343] [ 1243.591905][T12343] other info that might help us debug this: [ 1243.591905][T12343] [ 1243.602142][T12343] Possible unsafe locking scenario: [ 1243.602142][T12343] [ 1243.609599][T12343] CPU0 CPU1 [ 1243.614977][T12343] ---- ---- [ 1243.620350][T12343] lock(&mm->mmap_lock); [ 1243.624692][T12343] lock(&sb->s_type->i_mutex_key#13); [ 1243.632710][T12343] lock(&mm->mmap_lock); [ 1243.639568][T12343] lock(&sb->s_type->i_mutex_key#13); [ 1243.645054][T12343] [ 1243.645054][T12343] *** DEADLOCK *** [ 1243.645054][T12343] [ 1243.653223][T12343] 1 lock held by syz.5.1291/12343: [ 1243.658346][T12343] #0: ffff88807bf126d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1243.668832][T12343] [ 1243.668832][T12343] stack backtrace: [ 1243.674748][T12343] CPU: 1 PID: 12343 Comm: syz.5.1291 Not tainted syzkaller #0 [ 1243.682234][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1243.692348][T12343] Call Trace: [ 1243.695657][T12343] [ 1243.698613][T12343] dump_stack_lvl+0x188/0x24e [ 1243.703336][T12343] ? load_image+0x410/0x410 [ 1243.707868][T12343] ? show_regs_print_info+0x12/0x12 [ 1243.713126][T12343] ? print_circular_bug+0x12b/0x1a0 [ 1243.718359][T12343] check_noncircular+0x296/0x330 [ 1243.723327][T12343] ? look_up_lock_class+0x75/0x140 [ 1243.728472][T12343] ? add_chain_block+0x9b0/0x9b0 [ 1243.733438][T12343] ? lockdep_lock+0xf1/0x1f0 [ 1243.738058][T12343] ? _find_first_zero_bit+0xd2/0x100 [ 1243.743372][T12343] __lock_acquire+0x2d18/0x7c40 [ 1243.748253][T12343] ? ima_match_policy+0x10d/0x21b0 [ 1243.753395][T12343] ? __lock_acquire+0x7c40/0x7c40 [ 1243.758441][T12343] ? verify_lock_unused+0x140/0x140 [ 1243.763669][T12343] ? ima_match_policy+0x10d/0x21b0 [ 1243.768804][T12343] ? ima_match_policy+0x211c/0x21b0 [ 1243.774036][T12343] lock_acquire+0x1bb/0x4a0 [ 1243.778562][T12343] ? process_measurement+0x3af/0x1c40 [ 1243.783986][T12343] ? __might_sleep+0xd0/0xd0 [ 1243.788592][T12343] ? read_lock_is_recursive+0x10/0x10 [ 1243.793998][T12343] ? ima_get_action+0x71/0xa0 [ 1243.798698][T12343] down_write+0x36/0x60 [ 1243.802870][T12343] ? process_measurement+0x3af/0x1c40 [ 1243.808283][T12343] process_measurement+0x3af/0x1c40 [ 1243.813511][T12343] ? ima_file_mmap+0x140/0x140 [ 1243.818299][T12343] ? aa_file_perm+0x112/0xf00 [ 1243.823017][T12343] ? mtree_load+0x100/0xa70 [ 1243.827551][T12343] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1243.833737][T12343] ima_file_mmap+0xe9/0x140 [ 1243.838281][T12343] ? ima_file_free+0x3e0/0x3e0 [ 1243.843069][T12343] ? common_file_perm+0x171/0x1c0 [ 1243.848120][T12343] ? bpf_lsm_mmap_file+0x5/0x10 [ 1243.853007][T12343] ? security_mmap_file+0x11b/0x180 [ 1243.858232][T12343] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1243.863896][T12343] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1243.869649][T12343] ? lock_chain_count+0x20/0x20 [ 1243.874525][T12343] ? lockdep_hardirqs_on+0x94/0x140 [ 1243.879743][T12343] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1243.885494][T12343] do_syscall_64+0x4c/0xa0 [ 1243.889937][T12343] ? clear_bhb_loop+0x60/0xb0 [ 1243.894644][T12343] ? clear_bhb_loop+0x60/0xb0 [ 1243.899343][T12343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.905366][T12343] RIP: 0033:0x7ff5b319e0d9 [ 1243.909802][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.929432][T12343] RSP: 002b:00007ff5b40bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1243.937872][T12343] RAX: ffffffffffffffda RBX: 00007ff5b3426270 RCX: 00007ff5b319e0d9 [ 1243.945863][T12343] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1243.953855][T12343] RBP: 00007ff5b3235024 R08: 0000000000000000 R09: 0000000000000000 [ 1243.961841][T12343] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1243.969832][T12343] R13: 00007ff5b3426308 R14: 00007ff5b3426270 R15: 00007ffd4ba55f88 [ 1243.977827][T12343] [ 1244.010541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.017005][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.099530][ T9268] usb 6-1: ath9k_htc: USB layer deinitialized [ 1244.879274][ T4439] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.932681][ T4321] usb 6-1: USB disconnect, device number 3 [ 1244.951103][ T4439] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.367424][ T4439] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.505245][ T4439] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.314780][ T4439] device hsr_slave_0 left promiscuous mode [ 1246.321278][ T4439] device hsr_slave_1 left promiscuous mode [ 1246.329348][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.337085][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.345066][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.352530][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.360471][ T4439] device bridge_slave_1 left promiscuous mode [ 1246.366877][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.379423][ T4439] device bridge_slave_0 left promiscuous mode [ 1246.386580][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.398294][ T4439] device veth1_macvtap left promiscuous mode [ 1246.404593][ T4439] device veth0_macvtap left promiscuous mode [ 1246.410741][ T4439] device veth1_vlan left promiscuous mode [ 1246.416922][ T4439] device veth0_vlan left promiscuous mode [ 1246.594028][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 1246.631701][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 1246.664156][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.678979][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.747411][ T4439] bond0 (unregistering): Released all slaves [ 1247.205302][ T4325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.261918][ T4325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.330352][ T4325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.379513][ T4325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.472315][ T4325] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.543596][ T4325] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.589395][ T4325] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.648670][ T4325] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.748836][ T4325] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.778135][ T4325] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.839074][ T4325] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.878248][ T4325] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.979067][ T4325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.019938][ T4325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.088565][ T4325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.128690][ T4325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.524427][ T4325] device hsr_slave_0 left promiscuous mode [ 1249.530834][ T4325] device hsr_slave_1 left promiscuous mode [ 1249.538769][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.547419][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.556258][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.563699][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.571744][ T4325] device bridge_slave_1 left promiscuous mode [ 1249.578281][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.586640][ T4325] device bridge_slave_0 left promiscuous mode [ 1249.592869][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.606270][ T4325] device hsr_slave_0 left promiscuous mode [ 1249.612644][ T4325] device hsr_slave_1 left promiscuous mode [ 1249.619331][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.628166][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.636315][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.645081][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.652765][ T4325] device bridge_slave_1 left promiscuous mode [ 1249.659259][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.669312][ T4325] device bridge_slave_0 left promiscuous mode [ 1249.675786][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.689157][ T4325] device hsr_slave_0 left promiscuous mode [ 1249.695513][ T4325] device hsr_slave_1 left promiscuous mode [ 1249.706362][ T4325] device hsr_slave_0 left promiscuous mode [ 1249.712684][ T4325] device hsr_slave_1 left promiscuous mode [ 1249.720537][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.729316][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.737312][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.746083][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.754054][ T4325] device bridge_slave_1 left promiscuous mode [ 1249.760279][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.769763][ T4325] device bridge_slave_0 left promiscuous mode [ 1249.776569][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.792601][ T4325] device veth1_macvtap left promiscuous mode [ 1249.800017][ T4325] device veth0_macvtap left promiscuous mode [ 1249.806318][ T4325] device veth1_vlan left promiscuous mode [ 1249.815938][ T4325] device veth0_vlan left promiscuous mode [ 1249.822874][ T4325] device veth1_macvtap left promiscuous mode [ 1249.829242][ T4325] device veth0_macvtap left promiscuous mode [ 1249.835423][ T4325] device veth1_vlan left promiscuous mode [ 1249.841239][ T4325] device veth0_vlan left promiscuous mode [ 1249.848499][ T4325] device veth1_macvtap left promiscuous mode [ 1249.854611][ T4325] device veth0_macvtap left promiscuous mode [ 1249.860702][ T4325] device veth1_vlan left promiscuous mode [ 1249.866902][ T4325] device veth0_vlan left promiscuous mode [ 1249.874084][ T4325] device veth1_macvtap left promiscuous mode [ 1249.880142][ T4325] device veth0_macvtap left promiscuous mode [ 1249.886675][ T4325] device veth1_vlan left promiscuous mode [ 1249.892496][ T4325] device veth0_vlan left promiscuous mode [ 1250.322588][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 1250.357011][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 1250.372995][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.411434][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.478971][ T4325] bond0 (unregistering): Released all slaves [ 1250.681612][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 1250.713146][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 1250.748150][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.780368][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.852115][ T4325] bond0 (unregistering): Released all slaves [ 1251.020604][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 1251.048551][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 1251.059765][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.072590][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.123998][ T4325] bond0 (unregistering): Released all slaves [ 1251.198565][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 1251.210040][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 1251.239635][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.267437][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.325991][ T4325] bond0 (unregistering): Released all slaves