last executing test programs: 28m45.591126716s ago: executing program 32 (id=21): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x81c0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='net/anycast6\x00') read$midi(r4, &(0x7f0000000740)=""/70, 0xffffffd8) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 25m4.879366191s ago: executing program 2 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x40086602, 0x110e22fff2) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[], 0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) 24m57.668536449s ago: executing program 2 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000300)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 24m54.973397096s ago: executing program 2 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a300000", @ANYRES64], 0xa4}}, 0x20000000) 24m54.608383736s ago: executing program 2 (id=366): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0282d2d20009059f02400007000709050102"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000280)={0x10, 0x13, 0x5, "ed7190d758"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m49.16516798s ago: executing program 2 (id=370): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsn(0x0, 0xee4, 0x206240) sendmsg$NFT_BATCH(r0, 0x0, 0x802) mount(0x0, 0x0, &(0x7f0000000480)='virtiofs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x86, 0x7, 0x7ffffffc, 0x717e387b, 0x40, "1aec4a0624788a22b2fb12dab240794233a5bd", 0x1, 0x2}) pread64(0xffffffffffffffff, &(0x7f0000000940)=""/75, 0x4b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x1) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000a80)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000ac0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000b00)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r4, 0x9dff7ffc}}, 0x4d) 24m47.817207684s ago: executing program 2 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 24m32.56406312s ago: executing program 33 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 23m39.255884414s ago: executing program 1 (id=486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23m38.989455128s ago: executing program 1 (id=488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000600)='driver_override\x00', 0x1, 0xe6) write(r1, &(0x7f0000000040)='a', 0x1) 23m38.125311319s ago: executing program 1 (id=491): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4048, 0xfd0}, {&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {0x0}, {&(0x7f0000003880)=""/141, 0x8d}], 0x7}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}], 0x6, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 23m36.751356584s ago: executing program 1 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d66"], 0xc8}}, 0x0) 23m34.256087487s ago: executing program 1 (id=493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x9, 0xc14002d0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x8000, 0xffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') r10 = openat(r9, &(0x7f0000000580)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r10, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r8, @ANYBLOB="08000200001105000d002b0000007664564458f5f5566b9b2a2567fd7b7ed49cf05fb181fca5621e7901420fe9af12bb2ab0e30c4bb3739ab6254db1ed3cefd817557983ff8fe19da3ef67bb996ede5a56c035a03de6b39461cdc0956fdfc7ccf417e6e1f35e8a6a3fb97a325219e306f8c412716d76d4a526b245e20896d7ebdfd0f20b86cb9a912f47a322eaa5658e69ba816ea2f46edd1979bc6caffc9dae4f4bc677ee84b7e366507bdbd63df2"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 23m31.648078596s ago: executing program 1 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x20004801) 23m30.203341348s ago: executing program 3 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x10ee, 0x0, 0x0) read(r0, &(0x7f0000000900), 0x100) 23m28.993637397s ago: executing program 3 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000600)='driver_override\x00', 0x1, 0xe6) write(r1, &(0x7f0000000040)='a', 0x1) 23m28.865110741s ago: executing program 3 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_io_uring_setup(0x200025fb, 0x0, 0x0, 0x0, &(0x7f0000000680)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) 23m27.635640251s ago: executing program 3 (id=502): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x2) 23m27.512912285s ago: executing program 3 (id=503): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7f, 0x200004d, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x200, 0x4f, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000480)={0x1, 0x4, 0xe608}) close_range(r1, 0xffffffffffffffff, 0x0) 23m27.44208843s ago: executing program 3 (id=504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x9, 0xc14002d0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x8000, 0xffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') r10 = openat(r9, &(0x7f0000000580)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r10, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r8, @ANYBLOB="08000200001105000d002b0000007664564458f5f5566b9b2a2567fd7b7ed49cf05fb181fca5621e7901420fe9af12bb2ab0e30c4bb3739ab6254db1ed3cefd817557983ff8fe19da3ef67bb996ede5a56c035a03de6b39461cdc0956fdfc7ccf417e6e1f35e8a6a3fb97a325219e306f8c412716d76d4a526b245e20896d7ebdfd0f20b86cb9a912f47a322eaa5658e69ba816ea2f46edd1979bc6caffc9dae4f4bc677ee84b7e366507bdbd63df2"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 23m16.537899478s ago: executing program 34 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x7, 0x163, 0x6, 0xfffffff0, 0x7, 0x9, 0x8, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x20004801) 23m11.22383791s ago: executing program 35 (id=504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@loopback, @mcast1, @mcast1, 0x80006, 0x0, 0x5d, 0x200, 0x9, 0xc14002d0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x8000, 0xffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r7) getsockname$packet(r7, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r9 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') r10 = openat(r9, &(0x7f0000000580)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r10, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r8, @ANYBLOB="08000200001105000d002b0000007664564458f5f5566b9b2a2567fd7b7ed49cf05fb181fca5621e7901420fe9af12bb2ab0e30c4bb3739ab6254db1ed3cefd817557983ff8fe19da3ef67bb996ede5a56c035a03de6b39461cdc0956fdfc7ccf417e6e1f35e8a6a3fb97a325219e306f8c412716d76d4a526b245e20896d7ebdfd0f20b86cb9a912f47a322eaa5658e69ba816ea2f46edd1979bc6caffc9dae4f4bc677ee84b7e366507bdbd63df2"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 13m48.404255208s ago: executing program 5 (id=1091): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000019300)='net/ip_vs_stats\x00') lseek(r3, 0x2004, 0x0) sched_setaffinity(r1, 0x47, &(0x7f0000019340)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000019380)={0x0, 0x0, &(0x7f00000193c0)={&(0x7f0000019400)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r5, 0x0, 0x7) 13m42.884502901s ago: executing program 5 (id=1097): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)}}], 0x1, 0x0) 13m42.287183154s ago: executing program 5 (id=1098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000001c200)={0x0, 0x0, &(0x7f000001c240)={&(0x7f000001c280)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000001c640)={0x0, 0x0, &(0x7f000001c680)={&(0x7f000001c6c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) 13m41.897274054s ago: executing program 5 (id=1099): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000019640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x68, r8, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000019880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 13m39.614334149s ago: executing program 5 (id=1101): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x0, 0x300}, 0x38) 13m30.944958891s ago: executing program 5 (id=1113): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m15.150717959s ago: executing program 36 (id=1113): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m53.402190125s ago: executing program 7 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000380)='27', 0x2) r1 = syz_open_dev$mtd(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000400)={0x1, 0x0, 0x98, &(0x7f0000000800)={0x3, 0xfffe, 0x12}}) 12m52.965262936s ago: executing program 7 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000700), 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) 12m52.348932452s ago: executing program 7 (id=1176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r4, &(0x7f0000000540)=""/102356, 0x18fd4, 0x200) 12m50.55921967s ago: executing program 7 (id=1181): socket$xdp(0x2c, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4090) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x89, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r1 = syz_open_pts(r0, 0x141401) write(r1, &(0x7f0000000140)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) 12m49.016693058s ago: executing program 7 (id=1183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r2}, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 12m44.452053114s ago: executing program 7 (id=1188): socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x8000, 0xffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') r9 = openat(r8, &(0x7f0000000580)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r7, @ANYBLOB="08000200001105000d002b0000007664564458f5f5566b9b2a2567fd7b7ed49cf05fb181fca5621e7901420fe9af12bb2ab0e30c4bb3739ab6254db1ed3cefd817557983ff8fe19da3ef67bb996ede5a56c035a03de6b39461cdc0956fdfc7ccf417e6e1f35e8a6a3fb97a325219e306f8c412716d76d4a526b245e20896d7ebdfd0f20b86cb9a912f47a322eaa5658e69ba816ea2f46edd1979bc6caffc9dae4f4bc677ee84b7e366507bdbd63df2"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) syz_io_uring_setup(0x29d7, 0x0, &(0x7f00000026c0), &(0x7f0000002700), &(0x7f0000002740)) 12m28.614029877s ago: executing program 37 (id=1188): socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x8000, 0xffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') r9 = openat(r8, &(0x7f0000000580)='auth.unix.ip/channel\x00', 0x2, 0x0) read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r7, @ANYBLOB="08000200001105000d002b0000007664564458f5f5566b9b2a2567fd7b7ed49cf05fb181fca5621e7901420fe9af12bb2ab0e30c4bb3739ab6254db1ed3cefd817557983ff8fe19da3ef67bb996ede5a56c035a03de6b39461cdc0956fdfc7ccf417e6e1f35e8a6a3fb97a325219e306f8c412716d76d4a526b245e20896d7ebdfd0f20b86cb9a912f47a322eaa5658e69ba816ea2f46edd1979bc6caffc9dae4f4bc677ee84b7e366507bdbd63df2"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) syz_io_uring_setup(0x29d7, 0x0, &(0x7f00000026c0), &(0x7f0000002700), &(0x7f0000002740)) 3m41.922568833s ago: executing program 4 (id=1843): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) inotify_init1(0x800) pipe(&(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000008c0)=r1) r4 = socket(0x10, 0x800, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r4, &(0x7f0000000180)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) connect$unix(r2, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000a00)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000a40)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000007380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007340)={&(0x7f0000007180)=ANY=[@ANYBLOB="ac0100001900200028bd7000ffdbdf25000000000000000000000000000000012001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000ebff00000000000001000000010000000000000000000000762900000000000005000000000000000200000000000000090000000000000002000000000000000300001800000000090000000000000079030000000000000700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d26c000000ac1414bb000000000000000000000000010000000000000001000000000000008305000000000000030000000000000000000100000000004d46000000000000d1000000000000000200000000000000fdffffffffffffff010000000000000009000000000000000600000000000000ff7f0000f5ffffff0700000029bd700006350080020004072200000000000000080029000000000008000c00f8ffffff"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x10) write(r5, &(0x7f0000000c40)='1', 0x1) 3m40.317475336s ago: executing program 4 (id=1844): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3m36.805628849s ago: executing program 4 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x7, 0x1, 0xca8, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x49, 0x1, 0x0, [{@broadcast, 0x1}, {@remote, 0xffffffff}, {@empty, 0x4}]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x4, [0xfffffffd]}, @noop, @generic={0x83, 0xc, "d6687ef5df164e4d22ae"}, @rr={0x7, 0x1b, 0x92, [@multicast1, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xfd, [@private=0xa010100, @local, @multicast2, @rand_addr=0x64010102, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) 3m35.714788385s ago: executing program 4 (id=1849): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x2404c0c0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x8, 0x800000000088}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4855}, 0xc040) r3 = getpid() getrlimit(0x4, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000400)) chroot(&(0x7f0000000440)='./cgroup\x00') sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syslog(0x2, 0xffffffffffffffff, 0xffffffffffffffb0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='prev_state.function ==6', 0x17) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x8d08, 0x1, 0x3, 0x18, 0xa, 0x2}, 0x30, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RGETLOCK(r7, &(0x7f0000000140)={0x20, 0x37, 0x1, {0x1, 0x3, 0x1e70, r3, 0x2, '-&'}}, 0x20) landlock_restrict_self(r6, 0x15) 3m32.398966082s ago: executing program 4 (id=1854): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="0e00000002000204", 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x3, 0x4) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m32.084216217s ago: executing program 4 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000084000000b7000000000000009500"/64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xfffffffb, 0x31b8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x2, 0x7, {{0xf, 0x4, 0x1, 0xe, 0x3c, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x6}, @generic={0x94, 0x12, "9dcfa7499cd05441d63514580faa5627"}, @generic={0x83, 0xe, "fbe2bb4b316bcd83ee610ece"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xae, 0x4, 0x50, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x0, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @multicast2}, &(0x7f0000000700)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000740)={@private2}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@remote, @multicast2}, &(0x7f00000008c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 3m16.589081895s ago: executing program 38 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000084000000b7000000000000009500"/64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xfffffffb, 0x31b8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x2, 0x7, {{0xf, 0x4, 0x1, 0xe, 0x3c, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x6}, @generic={0x94, 0x12, "9dcfa7499cd05441d63514580faa5627"}, @generic={0x83, 0xe, "fbe2bb4b316bcd83ee610ece"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xae, 0x4, 0x50, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x0, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @multicast2}, &(0x7f0000000700)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000740)={@private2}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@remote, @multicast2}, &(0x7f00000008c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 19.622011863s ago: executing program 0 (id=2048): syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x4, 0x80) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8a06900650001000200040009000500020404000200ff0711090200060005ca4b00010108000100040903090f0f00040008000610"], 0x6e) lstat(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000007c0)) 18.248697622s ago: executing program 0 (id=2050): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000019640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019680)={0x0, 0x2a, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYRESDEC=r4], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cb77a2cd}, 0x89) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x68, r8, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000019880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 14.966059297s ago: executing program 0 (id=2052): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) syz_genetlink_get_family_id$fou(0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='14', 0x2) syz_usb_connect(0x0, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030000070581020002000705020200020007058303"], 0x0) 14.530320959s ago: executing program 8 (id=2053): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000240)='6', 0x32) fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) 14.277943226s ago: executing program 8 (id=2055): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) pipe2$watch_queue(&(0x7f0000000100), 0x80) add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="f8", 0x1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000003200)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000001c200)={0x0, 0x0, &(0x7f000001c240)={&(0x7f000001c280)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f000001c3c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f000001c440), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f000001c480)={0x2, @pix={0x2, 0x2002, 0x64737664, 0x0, 0x0, 0x1, 0x6, 0xfeedcaff, 0x3, 0x0, 0x1, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c580)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f000001c5c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000001c640)={0x0, 0x0, &(0x7f000001c680)={&(0x7f000001c6c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 13.622225805s ago: executing program 8 (id=2057): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000000)={0x0, 0x69ee, 0x400, 0x1, 0x244}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 11.73870198s ago: executing program 8 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000740)={0x2, &(0x7f0000000780)=[{0x20, 0x0, 0xa, 0xfffff010}, {0x6, 0xff, 0x3}]}, 0x10) 10.578474708s ago: executing program 8 (id=2060): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000019640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019680)={0x0, 0x2a, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYRESDEC=r4], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cb77a2cd}, 0x89) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x68, r8, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000019880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 10.517843197s ago: executing program 0 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5c7000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(0x0, &(0x7f0000000180)=[0x0], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x4, {0x39, 0x38, 0x16, 0xd, 0x6, 0x4eac, 0x0, 0xce}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) 8.472058796s ago: executing program 0 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0xb0}}, 0x0) 6.881547807s ago: executing program 6 (id=2064): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) mount(0x0, 0x0, &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000240)='6', 0x32) fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) 6.546151201s ago: executing program 6 (id=2065): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x0, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000580), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) 4.164170893s ago: executing program 6 (id=2066): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x0, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit$UBLK(r2, 0x0, r3, &(0x7f0000000480)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 3.932947334s ago: executing program 8 (id=2067): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x60842, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000340)={r0}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000380)={0x33, 0x1f, 0xa, 0xb, 0x0, 0x81}) bind$x25(r1, &(0x7f0000000400), 0x12) connect$x25(r1, &(0x7f0000000440)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 3.382029646s ago: executing program 6 (id=2068): syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000001380)=""/4113, 0x1011) lstat(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000007c0)) 1.849230364s ago: executing program 0 (id=2069): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) syz_genetlink_get_family_id$fou(0x0, r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='14', 0x2) syz_usb_connect(0x0, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030000070581020002000705020200020007058303"], 0x0) 1.747670953s ago: executing program 6 (id=2070): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', 0x0, &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 0s ago: executing program 6 (id=2071): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000001980)=[{0x1, 0x811, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): Opcode 0x0406 failed: -4 [ 1304.191058][T11259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1304.192084][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 1304.192199][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1304.246449][ T5246] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1304.819763][T10891] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1304.866006][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.866286][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.866501][T12732] bridge_slave_0: entered allmulticast mode [ 1304.899928][T12732] bridge_slave_0: entered promiscuous mode [ 1304.985527][T10891] usb 7-1: device descriptor read/64, error -71 [ 1305.032512][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.032791][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.033015][T12732] bridge_slave_1: entered allmulticast mode [ 1305.064369][T12732] bridge_slave_1: entered promiscuous mode [ 1305.251232][T10891] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1305.597193][T10891] usb 7-1: device descriptor read/64, error -71 [ 1306.324349][T10891] usb usb7-port1: attempt power cycle [ 1306.421474][ T5593] Bluetooth: hci6: command 0x0406 tx timeout [ 1306.591923][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 1306.689531][T10891] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1306.716671][T10891] usb 7-1: device descriptor read/8, error -71 [ 1306.947274][T11259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.990947][T11259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.993573][T11259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1307.002623][T11259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1307.012099][T10891] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1307.030311][T10891] usb 7-1: device descriptor read/8, error -71 [ 1307.056447][T11259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1307.144004][T10891] usb usb7-port1: unable to enumerate USB device [ 1308.619578][T11259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1309.687589][T11259] Bluetooth: hci4: command tx timeout [ 1310.913928][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.022480][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.022557][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.069128][ T5246] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1311.092408][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.313955][T12732] team0: Port device team_slave_0 added [ 1311.364306][T12732] team0: Port device team_slave_1 added [ 1311.748817][T11259] Bluetooth: hci4: command tx timeout [ 1312.004129][T13043] ntfs3(loop4): try to read out of volume at offset 0x0 [ 1314.424626][T11259] Bluetooth: hci4: command tx timeout [ 1314.545757][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.545778][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.545807][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.460956][T11259] Bluetooth: hci4: command tx timeout [ 1317.157357][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.157373][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.157395][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.789921][T12732] hsr_slave_0: entered promiscuous mode [ 1317.794598][T12732] hsr_slave_1: entered promiscuous mode [ 1317.798703][T12732] debugfs: 'hsr0' already exists in 'hsr' [ 1317.798735][T12732] Cannot create hsr debugfs directory [ 1319.733013][ T5246] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1319.836618][T13090] netlink: 296 bytes leftover after parsing attributes in process `syz.6.1442'. [ 1319.836650][T13090] openvswitch: netlink: Flow key attr not present in new flow. [ 1322.760253][T13116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1323.326656][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1324.837162][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1324.894466][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1324.921823][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1324.975876][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1327.179502][T11259] Bluetooth: hci5: command tx timeout [ 1327.205558][T13138] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1451'. [ 1329.259748][T11259] Bluetooth: hci5: command tx timeout [ 1330.569892][T13001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.570050][T13001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.570298][T13001] bridge_slave_0: entered allmulticast mode [ 1330.573678][T13001] bridge_slave_0: entered promiscuous mode [ 1330.617456][T13001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.627055][T13001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.627307][T13001] bridge_slave_1: entered allmulticast mode [ 1330.669635][T13001] bridge_slave_1: entered promiscuous mode [ 1330.973527][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.070301][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.631994][T11259] Bluetooth: hci5: command tx timeout [ 1334.433968][T13001] team0: Port device team_slave_0 added [ 1334.483756][T13001] team0: Port device team_slave_1 added [ 1335.013765][T13203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.227571][T13190] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1337.230835][T11259] Bluetooth: hci5: command tx timeout [ 1337.230878][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1337.459738][T13190] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1337.459990][T13190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1337.460215][T13190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1337.460749][T13190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1338.979908][T13190] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1339.260163][ T5593] Bluetooth: hci6: command 0x0406 tx timeout [ 1339.260676][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.260692][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.260723][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.404691][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.404712][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.404739][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.493765][T13190] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1339.493895][T13190] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1339.520229][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 1339.520555][ T5593] Bluetooth: hci1: command 0x0406 tx timeout [ 1339.611151][T13190] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1339.639712][ T5905] bridge_slave_1: left allmulticast mode [ 1339.639755][ T5905] bridge_slave_1: left promiscuous mode [ 1339.640036][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.811373][ T5905] bridge_slave_0: left allmulticast mode [ 1339.811418][ T5905] bridge_slave_0: left promiscuous mode [ 1339.811717][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.541196][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.602110][T13223] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1461'. [ 1340.661868][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.755209][ T5905] bond0 (unregistering): Released all slaves [ 1341.075154][T13001] hsr_slave_0: entered promiscuous mode [ 1341.077989][T13001] hsr_slave_1: entered promiscuous mode [ 1341.078830][T13001] debugfs: 'hsr0' already exists in 'hsr' [ 1341.078852][T13001] Cannot create hsr debugfs directory [ 1342.204064][ T5593] Bluetooth: hci5: command 0x0c1a tx timeout [ 1342.204382][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 1342.213232][T11887] rpcbind: server 127.0.0.1 not responding, timed out [ 1343.265099][ T5905] hsr_slave_0: left promiscuous mode [ 1343.329781][ T5905] hsr_slave_1: left promiscuous mode [ 1343.331105][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.373304][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.299413][T11259] Bluetooth: hci4: command 0x0c1a tx timeout [ 1345.299459][T11259] Bluetooth: hci5: command 0x0c1a tx timeout [ 1345.603443][T11506] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1345.815041][T11506] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1345.815106][T11506] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1345.816624][T11506] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.816670][T11506] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1345.816703][T11506] usb 9-1: config 1 interface 0 has no altsetting 1 [ 1345.829099][T11506] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.829129][T11506] usb 9-1: Product: syz [ 1345.829163][T11506] usb 9-1: Manufacturer: syz [ 1345.829220][T11506] usb 9-1: SerialNumber: syz [ 1345.927289][T13263] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1472'. [ 1346.011747][T11506] smsusb:smsusb_probe: board id=8, interface number 0 [ 1346.202585][T11506] smsusb:smsusb_probe: Device initialized with return code -19 [ 1346.419635][T11506] usb 9-1: USB disconnect, device number 12 [ 1346.641928][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1346.722487][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1348.311936][ T5593] Bluetooth: hci5: command 0x0c1a tx timeout [ 1349.871880][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.969488][ T7551] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1354.147565][ T7551] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1354.155506][ T7551] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1354.155598][ T7551] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.155653][ T7551] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1354.155798][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.155874][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.167167][ T7551] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1354.167250][ T7551] usb 7-1: Product: syz [ 1354.167294][ T7551] usb 7-1: Manufacturer: syz [ 1354.358706][ T7551] cdc_wdm 7-1:1.0: skipping garbage [ 1354.358727][ T7551] cdc_wdm 7-1:1.0: skipping garbage [ 1354.473595][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1477'. [ 1354.473664][T13331] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1355.013540][ T7551] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1355.013701][ T7551] cdc_wdm 7-1:1.0: Unknown control protocol [ 1357.200251][T12684] usb 7-1: USB disconnect, device number 19 [ 1357.535909][T13361] ntfs3(loop4): try to read out of volume at offset 0x0 [ 1358.614910][ T5905] bridge_slave_1: left allmulticast mode [ 1358.614953][ T5905] bridge_slave_1: left promiscuous mode [ 1358.615237][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.781045][ T5905] bridge_slave_0: left allmulticast mode [ 1358.781081][ T5905] bridge_slave_0: left promiscuous mode [ 1358.781318][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.799037][T13374] FAULT_INJECTION: forcing a failure. [ 1358.799037][T13374] name failslab, interval 1, probability 5, space 0, times 9965 [ 1358.799155][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.8.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1358.799247][T13374] Tainted: [L]=SOFTLOCKUP [ 1358.799269][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1358.799293][T13374] Call Trace: [ 1358.799302][T13374] [ 1358.799313][T13374] dump_stack_lvl+0xe8/0x150 [ 1358.799356][T13374] should_fail_ex+0x46b/0x600 [ 1358.799401][T13374] should_failslab+0xa8/0x100 [ 1358.799445][T13374] ? __kernfs_new_node+0xe7/0xa70 [ 1358.799540][T13374] kmem_cache_alloc_noprof+0x9e/0x690 [ 1358.799660][T13374] ? __kernfs_new_node+0xe7/0xa70 [ 1358.799769][T13374] __kernfs_new_node+0xe7/0xa70 [ 1358.799870][T13374] ? __pfx___kernfs_new_node+0x10/0x10 [ 1358.799965][T13374] ? kernfs_root+0x1c/0x230 [ 1358.800071][T13374] ? kernfs_root+0x1c/0x230 [ 1358.800149][T13374] ? kernfs_root+0x1c/0x230 [ 1358.800231][T13374] ? kernfs_root+0x1c/0x230 [ 1358.800326][T13374] kernfs_new_node+0xea/0x140 [ 1358.800431][T13374] __kernfs_create_file+0x4b/0x2e0 [ 1358.800501][T13374] sysfs_add_file_mode_ns+0x237/0x300 [ 1358.800615][T13374] sysfs_create_file_ns+0x12b/0x1b0 [ 1358.800699][T13374] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1358.800776][T13374] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1358.800864][T13374] ? device_create_file+0xf4/0x1b0 [ 1358.800917][T13374] device_add+0x432/0xb80 [ 1358.800948][T13374] iommu_mock_device_add+0x83/0x1e0 [ 1358.801038][T13374] iommufd_test+0x38d9/0x6370 [ 1358.801153][T13374] ? __lock_acquire+0x747/0x2de0 [ 1358.801222][T13374] ? __pfx_iommufd_test+0x10/0x10 [ 1358.801308][T13374] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1358.801411][T13374] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1358.801517][T13374] ? lock_acquire+0x115/0x350 [ 1358.801682][T13374] iommufd_fops_ioctl+0x468/0x600 [ 1358.801812][T13374] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1358.801941][T13374] ? __fget_files+0x2a/0x420 [ 1358.802033][T13374] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1358.802111][T13374] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1358.802205][T13374] __se_sys_ioctl+0xff/0x170 [ 1358.802311][T13374] do_syscall_64+0x166/0x520 [ 1358.802389][T13374] ? trace_irq_disable+0x3b/0x140 [ 1358.802507][T13374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.802587][T13374] ? clear_bhb_loop+0x70/0xc0 [ 1358.802663][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.802721][T13374] RIP: 0033:0x7f913287e2d9 [ 1358.802760][T13374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.802822][T13374] RSP: 002b:00007f9130ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.802887][T13374] RAX: ffffffffffffffda RBX: 00007f9132b05fa0 RCX: 00007f913287e2d9 [ 1358.802938][T13374] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1358.802981][T13374] RBP: 00007f9132915888 R08: 0000000000000000 R09: 0000000000000000 [ 1358.803022][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.803050][T13374] R13: 00007f9132b06038 R14: 00007f9132b05fa0 R15: 00007ffe0d230488 [ 1358.803147][T13374] [ 1359.473622][ T5905] bridge_slave_1: left allmulticast mode [ 1359.473666][ T5905] bridge_slave_1: left promiscuous mode [ 1359.473854][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.675834][ T5905] bridge_slave_0: left allmulticast mode [ 1359.675884][ T5905] bridge_slave_0: left promiscuous mode [ 1359.676158][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.473779][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.593483][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.678296][ T5905] bond0 (unregistering): Released all slaves [ 1361.215808][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.342195][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.433006][ T5905] bond0 (unregistering): Released all slaves [ 1361.573266][T13109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.573423][T13109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.573644][T13109] bridge_slave_0: entered allmulticast mode [ 1361.587004][T13109] bridge_slave_0: entered promiscuous mode [ 1361.627877][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.629594][T13109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.629791][T13109] bridge_slave_1: entered allmulticast mode [ 1361.717284][T13109] bridge_slave_1: entered promiscuous mode [ 1361.818541][T13384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1361.843329][T13384] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1361.843555][T13384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1361.843770][T13384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1361.843981][T13384] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1362.039796][T13109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.120235][T13109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.015532][T11259] Bluetooth: hci5: command 0x0c1a tx timeout [ 1364.015592][T11259] Bluetooth: hci4: command 0x0c1a tx timeout [ 1364.015629][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.015664][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1364.015703][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1367.063219][T13109] team0: Port device team_slave_0 added [ 1367.411332][ T5905] hsr_slave_0: left promiscuous mode [ 1367.547981][ T5905] hsr_slave_1: left promiscuous mode [ 1367.554074][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.630711][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.736964][T11259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1367.800010][ T5905] hsr_slave_0: left promiscuous mode [ 1367.802371][T11259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1367.850361][T11259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1367.866423][T11259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1367.887124][T11259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.025260][ T5905] hsr_slave_1: left promiscuous mode [ 1368.026549][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.138265][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.131991][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1369.193014][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1369.199536][ T5827] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1369.360307][ T5827] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1369.361313][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1369.361337][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1369.363302][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.363321][ T5827] usb 7-1: Product: syz [ 1369.363332][ T5827] usb 7-1: Manufacturer: syz [ 1369.363344][ T5827] usb 7-1: SerialNumber: syz [ 1371.360889][ T5593] Bluetooth: hci0: command tx timeout [ 1371.508080][ T5827] usb 7-1: usb_control_msg returned -71 [ 1371.508125][ T5827] usbtmc 7-1:1.0: can't read capabilities [ 1371.508165][ T5827] usbtmc 7-1:1.0: Failed to submit iin_urb [ 1371.508361][ T5827] usbtmc 7-1:1.0: probe with driver usbtmc failed with error -90 [ 1371.559481][ T5827] usbtouchscreen 7-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 1371.673884][ T5827] usb 7-1: USB disconnect, device number 20 [ 1372.021526][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1372.081014][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1372.463015][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.463094][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.543544][T13109] team0: Port device team_slave_1 added [ 1372.543640][T13438] warning: `syz.4.1502' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1373.420438][ T5593] Bluetooth: hci0: command tx timeout [ 1375.499618][ T5593] Bluetooth: hci0: command tx timeout [ 1375.759028][T13109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.759045][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.759068][T13109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.925184][T13109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.925200][T13109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.925223][T13109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.580316][ T5593] Bluetooth: hci0: command tx timeout [ 1378.845826][T13109] hsr_slave_0: entered promiscuous mode [ 1380.613627][T13109] hsr_slave_1: entered promiscuous mode [ 1380.642918][T13109] debugfs: 'hsr0' already exists in 'hsr' [ 1380.642953][T13109] Cannot create hsr debugfs directory [ 1383.711770][T13520] loop0: detected capacity change from 0 to 4096 [ 1384.578135][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1384.624725][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1384.648159][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1384.677611][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1384.696636][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1386.212702][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.212945][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.213176][T13443] bridge_slave_0: entered allmulticast mode [ 1386.241041][T13443] bridge_slave_0: entered promiscuous mode [ 1386.292830][T13443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.293091][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.293311][T13443] bridge_slave_1: entered allmulticast mode [ 1386.447341][T13555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.954821][T11259] Bluetooth: hci2: command tx timeout [ 1387.455528][T13443] bridge_slave_1: entered promiscuous mode [ 1388.776629][T13443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.789450][ T5827] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1388.808453][T13443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.961614][ T5827] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1388.966067][ T5827] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1388.966103][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1388.966130][ T5827] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1388.966149][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1388.966170][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1388.968578][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.968609][ T5827] usb 9-1: Product: syz [ 1388.968628][ T5827] usb 9-1: Manufacturer: syz [ 1388.968646][ T5827] usb 9-1: SerialNumber: syz [ 1389.020560][T11259] Bluetooth: hci2: command tx timeout [ 1389.119580][ T5827] usb 9-1: config 0 descriptor?? [ 1389.120584][T13561] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1389.164055][ T5827] iguanair 9-1:0.0: probe with driver iguanair failed with error -12 [ 1391.099558][T11259] Bluetooth: hci2: command tx timeout [ 1391.294141][T13443] team0: Port device team_slave_0 added [ 1391.330288][T13443] team0: Port device team_slave_1 added [ 1391.486550][T10891] usb 9-1: USB disconnect, device number 13 [ 1391.598378][T13443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.598399][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.598447][T13443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.654116][T13443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.654136][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.654167][T13443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.412898][T13443] hsr_slave_0: entered promiscuous mode [ 1392.418918][T13443] hsr_slave_1: entered promiscuous mode [ 1392.438179][T13443] debugfs: 'hsr0' already exists in 'hsr' [ 1392.438214][T13443] Cannot create hsr debugfs directory [ 1392.468430][T13594] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1392.484647][T13594] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1392.493638][T13594] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1393.181740][T11259] Bluetooth: hci2: command tx timeout [ 1393.276086][T13603] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1394.939502][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1394.939877][T13594] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1395.000626][ T5905] bridge_slave_1: left allmulticast mode [ 1395.000668][ T5905] bridge_slave_1: left promiscuous mode [ 1395.000951][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.101514][ T5905] bridge_slave_0: left allmulticast mode [ 1395.101560][ T5905] bridge_slave_0: left promiscuous mode [ 1395.101856][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.208319][T13594] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1395.208668][T13594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1395.208951][T13594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1395.209079][T13594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1395.321974][T13594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1395.408320][T13594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1395.408426][T13594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1395.429645][ T5905] bridge_slave_1: left allmulticast mode [ 1395.429689][ T5905] bridge_slave_1: left promiscuous mode [ 1395.429950][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.513152][T13594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1395.595552][ T5905] bridge_slave_0: left allmulticast mode [ 1395.595598][ T5905] bridge_slave_0: left promiscuous mode [ 1395.595894][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.494544][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1397.494590][T11259] Bluetooth: hci0: command 0x0c1a tx timeout [ 1397.494917][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 1397.494950][T11259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1399.584038][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 1399.584096][ T5593] Bluetooth: hci0: command 0x0c1a tx timeout [ 1400.962093][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.080563][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.184157][ T5905] bond0 (unregistering): Released all slaves [ 1401.659586][T11259] Bluetooth: hci0: command 0x0c1a tx timeout [ 1401.659630][T11259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1404.379093][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.490337][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.573434][ T5905] bond0 (unregistering): Released all slaves [ 1404.597549][T13681] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1408.333031][T13697] Bluetooth: MGMT ver 1.23 [ 1409.129539][ T5905] hsr_slave_0: left promiscuous mode [ 1409.321092][ T5905] hsr_slave_1: left promiscuous mode [ 1409.322154][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.421327][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.039998][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1411.132694][T11259] Bluetooth: hci0: command 0x0c1a tx timeout [ 1411.515663][ T5905] hsr_slave_0: left promiscuous mode [ 1411.553781][ T5905] hsr_slave_1: left promiscuous mode [ 1411.558080][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.592714][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.853455][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1414.900609][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1415.571412][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1415.633373][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1417.959457][ T9580] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1418.263335][ T9580] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1418.265477][ T9580] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.265509][ T9580] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1418.272487][ T9580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.272517][ T9580] usb 7-1: Product: syz [ 1418.272536][ T9580] usb 7-1: Manufacturer: syz [ 1418.272553][ T9580] usb 7-1: SerialNumber: syz [ 1418.503803][ T9580] usb 7-1: config 0 descriptor?? [ 1418.775395][ T9580] usb 7-1: USB disconnect, device number 21 [ 1419.858883][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.859023][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.862421][T13528] bridge_slave_0: entered allmulticast mode [ 1419.865705][T13528] bridge_slave_0: entered promiscuous mode [ 1419.877153][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.877390][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.877607][T13528] bridge_slave_1: entered allmulticast mode [ 1419.881355][T13528] bridge_slave_1: entered promiscuous mode [ 1420.320204][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.564519][T13796] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1420.578504][T13796] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1420.601549][T13796] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 1420.665395][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.706248][ T8295] Bluetooth: hci0: command 0x0c1a tx timeout [ 1422.706473][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1422.755967][T13528] team0: Port device team_slave_0 added [ 1422.771835][T13528] team0: Port device team_slave_1 added [ 1422.981916][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.981938][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.981969][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.984606][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.984624][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.984654][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.472747][T13528] hsr_slave_0: entered promiscuous mode [ 1423.473785][T13528] hsr_slave_1: entered promiscuous mode [ 1423.474487][T13528] debugfs: 'hsr0' already exists in 'hsr' [ 1423.474515][T13528] Cannot create hsr debugfs directory [ 1423.768464][T13796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1423.769001][T13796] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1423.769212][T13796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1423.770795][T13796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1423.771027][T13796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1425.951548][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1425.951611][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1426.090264][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1426.090313][ T8295] Bluetooth: hci0: command 0x0c1a tx timeout [ 1426.090347][ T8295] Bluetooth: hci1: command 0x0406 tx timeout [ 1426.414015][T13443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1426.482815][T13443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1426.625259][T13443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1426.787131][T13443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1426.819829][T13443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1426.937695][T13443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1428.224752][T13443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1428.550460][T13443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1430.554069][ T8295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1430.594869][ T8295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1430.601242][ T8295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1430.627573][ T8295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1430.659159][ T8295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1433.025589][T11259] Bluetooth: hci4: command tx timeout [ 1434.059878][ T9580] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1434.479947][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.480018][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.545043][ T9580] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1434.546615][ T9580] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1434.546651][ T9580] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1434.580357][ T9580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.580389][ T9580] usb 7-1: Product: syz [ 1434.580406][ T9580] usb 7-1: Manufacturer: syz [ 1434.580423][ T9580] usb 7-1: SerialNumber: syz [ 1434.826130][ T9580] usb 7-1: usb_control_msg returned -71 [ 1434.826179][ T9580] usbtmc 7-1:1.0: can't read capabilities [ 1434.826225][ T9580] usbtmc 7-1:1.0: Failed to submit iin_urb [ 1434.826311][ T9580] usbtmc 7-1:1.0: probe with driver usbtmc failed with error -90 [ 1435.099452][T11259] Bluetooth: hci4: command tx timeout [ 1435.101519][ T9580] usbtouchscreen 7-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 1435.345520][ T9580] usb 7-1: USB disconnect, device number 22 [ 1435.737741][ T7551] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1435.890624][ T7551] usb 9-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 1435.909112][ T7551] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.909200][ T7551] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.108642][ T7551] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1436.108805][ T7551] dvb_usb_af9035 9-1:1.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1436.935567][ T7551] usb 9-1: USB disconnect, device number 14 [ 1437.179980][T11259] Bluetooth: hci4: command tx timeout [ 1437.629440][ T9580] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1438.882224][ T9580] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1438.883814][ T9580] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1438.883848][ T9580] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.883871][ T9580] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1438.884055][ T9580] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.884088][ T9580] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.946830][ T9580] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1438.946869][ T9580] usb 7-1: Product: syz [ 1438.946881][ T9580] usb 7-1: Manufacturer: syz [ 1439.000619][ T9580] cdc_wdm 7-1:1.0: skipping garbage [ 1439.000643][ T9580] cdc_wdm 7-1:1.0: skipping garbage [ 1439.035328][ T9580] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1439.035356][ T9580] cdc_wdm 7-1:1.0: Unknown control protocol [ 1439.259440][T11259] Bluetooth: hci4: command tx timeout [ 1439.269412][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1577'. [ 1439.269638][T13914] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1441.286930][ T5704] usb 7-1: USB disconnect, device number 23 [ 1443.438863][ T9001] rpcbind: server 127.0.0.1 not responding, timed out [ 1445.950203][ T8295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.054767][ T8295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.074400][ T8295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.084866][ T8295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.105803][ T8295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1446.887844][T13978] ieee802154 phy0 wpan0: encryption failed: -22 [ 1448.304807][T11259] Bluetooth: hci0: command tx timeout [ 1450.439462][ T8295] Bluetooth: hci0: command tx timeout [ 1453.270067][ T8295] Bluetooth: hci0: command tx timeout [ 1453.492185][T14001] FAULT_INJECTION: forcing a failure. [ 1453.492185][T14001] name failslab, interval 1, probability 5, space 0, times 9964 [ 1453.492227][T14001] CPU: 1 UID: 0 PID: 14001 Comm: syz.8.1593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1453.492258][T14001] Tainted: [L]=SOFTLOCKUP [ 1453.492267][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1453.492281][T14001] Call Trace: [ 1453.492291][T14001] [ 1453.492303][T14001] dump_stack_lvl+0xe8/0x150 [ 1453.492345][T14001] should_fail_ex+0x46b/0x600 [ 1453.492383][T14001] ? alloc_inode+0xb8/0x1b0 [ 1453.492409][T14001] should_failslab+0xa8/0x100 [ 1453.492448][T14001] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1453.492485][T14001] ? alloc_inode+0xb8/0x1b0 [ 1453.492515][T14001] alloc_inode+0xb8/0x1b0 [ 1453.492542][T14001] path_from_stashed+0x205/0x580 [ 1453.492583][T14001] open_namespace_file+0x97/0x140 [ 1453.492612][T14001] ? __pfx_open_namespace_file+0x10/0x10 [ 1453.492659][T14001] ? rt_spin_unlock+0x165/0x200 [ 1453.492690][T14001] ? __unlock_mount+0x344/0x380 [ 1453.492729][T14001] open_new_namespace+0x1fc/0xba0 [ 1453.492765][T14001] ? vfs_open_tree+0x32d/0x3d0 [ 1453.492804][T14001] ? __pfx_open_new_namespace+0x10/0x10 [ 1453.492850][T14001] ? do_getname+0x151/0x250 [ 1453.492878][T14001] vfs_open_tree+0x32d/0x3d0 [ 1453.492914][T14001] ? __pfx_vfs_open_tree+0x10/0x10 [ 1453.492960][T14001] __x64_sys_open_tree+0x96/0x110 [ 1453.492990][T14001] do_syscall_64+0x166/0x520 [ 1453.493020][T14001] ? trace_irq_disable+0x3b/0x140 [ 1453.493052][T14001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.493076][T14001] ? clear_bhb_loop+0x70/0xc0 [ 1453.493104][T14001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.493127][T14001] RIP: 0033:0x7f913287e2d9 [ 1453.493149][T14001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.493169][T14001] RSP: 002b:00007f9130ad6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1453.493196][T14001] RAX: ffffffffffffffda RBX: 00007f9132b05fa0 RCX: 00007f913287e2d9 [ 1453.493214][T14001] RDX: 0000000000009902 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1453.493231][T14001] RBP: 00007f9132915888 R08: 0000000000000000 R09: 0000000000000000 [ 1453.493246][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.493262][T14001] R13: 00007f9132b06038 R14: 00007f9132b05fa0 R15: 00007ffe0d230488 [ 1453.493299][T14001] [ 1455.340198][T11259] Bluetooth: hci0: command tx timeout [ 1459.267016][T14035] ieee802154 phy0 wpan0: encryption failed: -22 [ 1462.807640][T14052] Bluetooth: MGMT ver 1.23 [ 1463.505827][T14055] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1463.581186][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.581402][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.581599][T13850] bridge_slave_0: entered allmulticast mode [ 1463.614762][T13850] bridge_slave_0: entered promiscuous mode [ 1463.660103][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.660268][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.660471][T13850] bridge_slave_1: entered allmulticast mode [ 1463.674838][T13850] bridge_slave_1: entered promiscuous mode [ 1464.205344][T14061] VFS: Can't find a romfs filesystem on dev romfs. [ 1464.205344][T14061] [ 1464.225380][T14061] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 1464.225380][T14061] [ 1464.859534][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1464.859614][T11259] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1465.586328][ T1142] bridge_slave_1: left allmulticast mode [ 1465.586371][ T1142] bridge_slave_1: left promiscuous mode [ 1465.586670][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.732816][ T1142] bridge_slave_0: left allmulticast mode [ 1465.732861][ T1142] bridge_slave_0: left promiscuous mode [ 1465.733163][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.759953][T14063] fuse: Unknown parameter 'grou00000000000000000000' [ 1468.249011][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.387990][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.471055][ T1142] bond0 (unregistering): Released all slaves [ 1468.526286][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.710642][T14073] binder: 14072:14073 ioctl c0306201 0 returned -14 [ 1468.748158][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.302746][T13850] team0: Port device team_slave_0 added [ 1469.421518][T13850] team0: Port device team_slave_1 added [ 1471.010922][ T1142] hsr_slave_0: left promiscuous mode [ 1471.060784][ T1142] hsr_slave_1: left promiscuous mode [ 1471.063742][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.145031][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.325065][T14095] fuse: Unknown parameter 'group_i00000000000000000000' [ 1471.434088][T14093] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1474.307224][T14111] VFS: Can't find a romfs filesystem on dev romfs. [ 1474.307224][T14111] [ 1474.342456][T14111] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 1474.342456][T14111] [ 1475.858525][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1476.642629][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1478.748694][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.748711][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.748733][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.778886][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.778953][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.779038][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.024075][T13965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.024175][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.024306][T13965] bridge_slave_0: entered allmulticast mode [ 1479.028649][T13965] bridge_slave_0: entered promiscuous mode [ 1479.040343][T14127] fuse: Unknown parameter 'group_i00000000000000000000' [ 1479.218714][T13965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.218847][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.219094][T13965] bridge_slave_1: entered allmulticast mode [ 1479.245472][T13965] bridge_slave_1: entered promiscuous mode [ 1479.302670][T13850] hsr_slave_0: entered promiscuous mode [ 1479.321964][T13850] hsr_slave_1: entered promiscuous mode [ 1479.323037][T13850] debugfs: 'hsr0' already exists in 'hsr' [ 1479.323065][T13850] Cannot create hsr debugfs directory [ 1481.250314][T13965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.332847][T13965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.803058][T13965] team0: Port device team_slave_0 added [ 1481.893124][T13965] team0: Port device team_slave_1 added [ 1484.763401][T13965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.763423][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.763455][T13965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.902411][ T1142] bridge_slave_1: left allmulticast mode [ 1484.902454][ T1142] bridge_slave_1: left promiscuous mode [ 1484.902736][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.073328][ T1142] bridge_slave_0: left allmulticast mode [ 1485.073373][ T1142] bridge_slave_0: left promiscuous mode [ 1485.073672][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.684389][T14164] binder: 14163:14164 ioctl c0306201 0 returned -14 [ 1485.962112][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.084117][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.172306][ T1142] bond0 (unregistering): Released all slaves [ 1486.237854][T13965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.237876][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.237912][T13965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.395629][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1486.884934][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1630'. [ 1488.992103][ T1142] hsr_slave_0: left promiscuous mode [ 1489.011864][ T1142] hsr_slave_1: left promiscuous mode [ 1489.012896][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.046499][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.078213][T14183] fuse: Unknown parameter 'group_i00000000000000000000' [ 1490.900434][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1490.954193][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1491.283339][T13965] hsr_slave_0: entered promiscuous mode [ 1491.296584][T13965] hsr_slave_1: entered promiscuous mode [ 1491.307749][T13965] debugfs: 'hsr0' already exists in 'hsr' [ 1491.307781][T13965] Cannot create hsr debugfs directory [ 1493.644502][ T8295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1493.691455][ T8295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1493.694586][ T8295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1493.709728][ T8295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1493.716988][ T8295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1495.345595][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.345674][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.829531][T11259] Bluetooth: hci2: command tx timeout [ 1496.780715][T14218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.023269][T14217] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1497.900941][ T8295] Bluetooth: hci2: command tx timeout [ 1498.226091][T14230] FAULT_INJECTION: forcing a failure. [ 1498.226091][T14230] name failslab, interval 1, probability 5, space 0, times 9963 [ 1498.226125][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.8.1636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1498.226149][T14230] Tainted: [L]=SOFTLOCKUP [ 1498.226156][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1498.226168][T14230] Call Trace: [ 1498.226175][T14230] [ 1498.226184][T14230] dump_stack_lvl+0xe8/0x150 [ 1498.226216][T14230] should_fail_ex+0x46b/0x600 [ 1498.226246][T14230] ? alloc_inode+0xb8/0x1b0 [ 1498.226275][T14230] should_failslab+0xa8/0x100 [ 1498.226296][T14230] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1498.226324][T14230] ? alloc_inode+0xb8/0x1b0 [ 1498.226348][T14230] alloc_inode+0xb8/0x1b0 [ 1498.226368][T14230] path_from_stashed+0x205/0x580 [ 1498.226403][T14230] open_namespace_file+0x97/0x140 [ 1498.226426][T14230] ? __pfx_open_namespace_file+0x10/0x10 [ 1498.226448][T14230] ? rt_spin_unlock+0x165/0x200 [ 1498.226470][T14230] ? __unlock_mount+0x344/0x380 [ 1498.226499][T14230] open_new_namespace+0x1fc/0xba0 [ 1498.226527][T14230] ? vfs_open_tree+0x32d/0x3d0 [ 1498.226558][T14230] ? __pfx_open_new_namespace+0x10/0x10 [ 1498.226590][T14230] ? do_getname+0x151/0x250 [ 1498.226611][T14230] vfs_open_tree+0x32d/0x3d0 [ 1498.226639][T14230] ? __pfx_vfs_open_tree+0x10/0x10 [ 1498.226673][T14230] __x64_sys_open_tree+0x96/0x110 [ 1498.226694][T14230] do_syscall_64+0x166/0x520 [ 1498.226718][T14230] ? trace_irq_disable+0x3b/0x140 [ 1498.226743][T14230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.226764][T14230] ? clear_bhb_loop+0x70/0xc0 [ 1498.226788][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.226806][T14230] RIP: 0033:0x7f913287e2d9 [ 1498.226822][T14230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.226837][T14230] RSP: 002b:00007f9130ad6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1498.226857][T14230] RAX: ffffffffffffffda RBX: 00007f9132b05fa0 RCX: 00007f913287e2d9 [ 1498.226870][T14230] RDX: 0000000000009902 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1498.226882][T14230] RBP: 00007f9132915888 R08: 0000000000000000 R09: 0000000000000000 [ 1498.226893][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.226904][T14230] R13: 00007f9132b06038 R14: 00007f9132b05fa0 R15: 00007ffe0d230488 [ 1498.226931][T14230] [ 1498.499662][ T1131] bridge_slave_1: left allmulticast mode [ 1498.499705][ T1131] bridge_slave_1: left promiscuous mode [ 1498.499981][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.811441][ T1131] bridge_slave_0: left allmulticast mode [ 1498.811485][ T1131] bridge_slave_0: left promiscuous mode [ 1498.811807][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.564177][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1499.564280][T14217] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1500.212074][T11259] Bluetooth: hci2: command tx timeout [ 1500.357581][T14217] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1500.357897][T14217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1500.370721][T14217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1500.371648][T14217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1500.706951][T14217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1500.720352][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.811561][T14217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1500.811722][T14217] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1500.844508][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.858890][T14243] fuse: Bad value for 'fd' [ 1500.872974][T14217] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1500.905841][ T1131] bond0 (unregistering): Released all slaves [ 1501.579859][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1502.266909][T13965] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1502.379773][T11259] Bluetooth: hci0: command 0x0c24 tx timeout [ 1502.379823][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 1502.518904][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1502.573855][T13965] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1502.745613][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.957473][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1504.446614][T14266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.459419][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1504.524198][ T1131] hsr_slave_0: left promiscuous mode [ 1504.559588][ T1131] hsr_slave_1: left promiscuous mode [ 1504.562258][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.601377][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.019498][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1505.592507][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1505.685292][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1507.044143][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1507.099387][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1507.336972][T11259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1507.408658][T11259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1507.424998][T11259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1507.481007][T11259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1507.484863][T11259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1507.712402][T13965] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1507.738245][T14293] fuse: Unknown parameter 'group_id00000000000000000000' [ 1507.798912][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1509.660890][ T8295] Bluetooth: hci4: command tx timeout [ 1511.697355][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.697596][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.697801][T14194] bridge_slave_0: entered allmulticast mode [ 1511.730221][T14194] bridge_slave_0: entered promiscuous mode [ 1511.761093][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.762401][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.762602][T14194] bridge_slave_1: entered allmulticast mode [ 1511.798181][T14194] bridge_slave_1: entered promiscuous mode [ 1511.811178][ T8295] Bluetooth: hci4: command tx timeout [ 1512.877784][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.936414][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.043630][T14194] team0: Port device team_slave_0 added [ 1513.058133][T14194] team0: Port device team_slave_1 added [ 1513.148300][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.148321][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.148351][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.227044][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.227067][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.227099][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.819064][ T8295] Bluetooth: hci4: command tx timeout [ 1515.065958][T14356] fuse: Bad value for 'fd' [ 1515.419407][T11259] Bluetooth: hci3: command 0x0406 tx timeout [ 1515.419490][T14342] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1515.505454][T14194] hsr_slave_0: entered promiscuous mode [ 1515.507138][T14194] hsr_slave_1: entered promiscuous mode [ 1515.508453][T14194] debugfs: 'hsr0' already exists in 'hsr' [ 1515.508481][T14194] Cannot create hsr debugfs directory [ 1515.990932][T14342] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1515.991193][T14342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1515.991459][T14342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1515.991673][T14342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1515.991777][T14342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1516.106132][T14342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1516.299852][ T1142] rpcbind: server 127.0.0.1 not responding, timed out [ 1517.542246][T11259] Bluetooth: hci6: command 0x0406 tx timeout [ 1518.069409][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1518.069432][ T5593] Bluetooth: hci1: command 0x0406 tx timeout [ 1518.069479][T11259] Bluetooth: hci4: command 0x0c1a tx timeout [ 1520.278856][T11259] Bluetooth: hci4: command 0x0c1a tx timeout [ 1522.197892][T14194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1522.263054][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1522.299502][T11259] Bluetooth: hci4: command 0x0c1a tx timeout [ 1522.568931][T14194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1522.771752][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1522.824818][T14194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1522.878261][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1522.930506][T14194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1522.985107][T14194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1523.806320][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.806552][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.806851][T14290] bridge_slave_0: entered allmulticast mode [ 1523.862171][T14290] bridge_slave_0: entered promiscuous mode [ 1523.888825][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.888962][T14290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.889149][T14290] bridge_slave_1: entered allmulticast mode [ 1523.922028][T14290] bridge_slave_1: entered promiscuous mode [ 1524.073455][T14429] fuse: Bad value for 'user_id' [ 1524.073481][T14429] fuse: Bad value for 'user_id' [ 1524.129569][ T1131] bridge_slave_1: left allmulticast mode [ 1524.129610][ T1131] bridge_slave_1: left promiscuous mode [ 1524.130236][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.301382][ T1131] bridge_slave_0: left allmulticast mode [ 1524.301420][ T1131] bridge_slave_0: left promiscuous mode [ 1524.301716][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.431423][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.936195][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.086809][ T1131] bond0 (unregistering): Released all slaves [ 1527.317846][T14290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.380352][T14290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.533372][T14443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1527.533637][T14443] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1527.533855][T14443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1527.534100][T14443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1527.684363][T14290] team0: Port device team_slave_0 added [ 1527.721449][T14290] team0: Port device team_slave_1 added [ 1527.748143][T14443] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1528.065666][ T1131] hsr_slave_0: left promiscuous mode [ 1528.114335][ T1131] hsr_slave_1: left promiscuous mode [ 1528.116992][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.677817][ T5593] Bluetooth: hci3: command 0x0406 tx timeout [ 1529.677817][T11259] Bluetooth: hci2: command 0x0c1a tx timeout [ 1529.677870][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 1529.677875][ T5593] Bluetooth: hci6: command 0x0406 tx timeout [ 1529.711850][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.842756][ T8295] Bluetooth: hci4: command 0x0c1a tx timeout [ 1529.961875][T14473] fuse: Bad value for 'user_id' [ 1529.961900][T14473] fuse: Bad value for 'user_id' [ 1534.692441][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1535.895728][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1537.061843][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1537.070348][T14290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.070401][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.070481][T14290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.144446][T14290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.144478][T14290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.144510][T14290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.681102][T14290] hsr_slave_0: entered promiscuous mode [ 1537.682671][T14290] hsr_slave_1: entered promiscuous mode [ 1537.683803][T14290] debugfs: 'hsr0' already exists in 'hsr' [ 1537.683832][T14290] Cannot create hsr debugfs directory [ 1538.525963][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.690806][T14194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.908717][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.908886][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.986809][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.986970][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.583936][T14505] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1539.584543][ T8295] Bluetooth: hci3: command 0x0406 tx timeout [ 1539.947427][T14535] fuse: Bad value for 'fd' [ 1539.974752][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1540.047495][T14505] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1540.047726][T14505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1540.047915][T14505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1540.048103][T14505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1541.749938][ T8295] Bluetooth: hci6: command 0x0406 tx timeout [ 1542.146733][ T8295] Bluetooth: hci4: command 0x0c1a tx timeout [ 1542.146786][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1542.146818][ T8295] Bluetooth: hci1: command 0x0406 tx timeout [ 1543.655361][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.533907][T14194] veth0_vlan: entered promiscuous mode [ 1544.572940][T14194] veth1_vlan: entered promiscuous mode [ 1544.647112][T14290] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1544.690093][T14290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.695823][T14290] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1544.764078][T14290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.769174][T14290] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1544.892928][T14290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1544.904323][T14290] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1545.251613][T14290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1545.575422][T14194] veth0_macvtap: entered promiscuous mode [ 1545.646003][T14194] veth1_macvtap: entered promiscuous mode [ 1546.396056][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.432442][T14613] fuse: Bad value for 'fd' [ 1546.519609][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.358744][T14290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.375680][T14290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.551818][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.551838][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.588260][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.593724][T11683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.788065][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.788208][T11887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.256328][T11887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.256354][T11887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.504121][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.504353][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.504608][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.582755][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.677847][T14649] fuse: Bad value for 'fd' [ 1551.646686][ T5593] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1557.577023][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1557.577108][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.795150][T14290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.549014][T14290] veth0_vlan: entered promiscuous mode [ 1559.796186][T14290] veth1_vlan: entered promiscuous mode [ 1560.036020][ T5593] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1563.079919][T14290] veth0_macvtap: entered promiscuous mode [ 1563.157481][T14290] veth1_macvtap: entered promiscuous mode [ 1563.284986][ T36] audit: type=1326 audit(2000000055.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.285049][ T36] audit: type=1326 audit(2000000055.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.401149][ T36] audit: type=1326 audit(2000000055.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.422684][ T36] audit: type=1326 audit(2000000055.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.422847][ T36] audit: type=1326 audit(2000000055.120:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.512436][T14290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.596908][ T36] audit: type=1326 audit(2000000055.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.596975][ T36] audit: type=1326 audit(2000000055.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.597026][ T36] audit: type=1326 audit(2000000055.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14754 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbc79eeb0e code=0x7ffc0000 [ 1563.683294][ T36] audit: type=1326 audit(2000000055.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.732875][ T36] audit: type=1326 audit(2000000055.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14748 comm="syz.4.1727" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbc7a2e2d9 code=0x7ffc0000 [ 1563.802215][T14758] fuse: Bad value for 'fd' [ 1563.803367][T14290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.879533][ T5905] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.879708][ T5905] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.879858][ T5905] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.880003][ T5905] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.570143][ T7551] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1567.662790][ T8295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1567.733535][ T7551] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1567.735386][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1567.735420][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1567.785613][ T8295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1567.806710][ T8295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1567.806922][ T7551] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.806949][ T7551] usb 7-1: Product: syz [ 1567.806968][ T7551] usb 7-1: Manufacturer: syz [ 1567.806986][ T7551] usb 7-1: SerialNumber: syz [ 1567.825538][ T8295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1567.827240][ T8295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1568.159335][ T7551] usb 7-1: usb_control_msg returned -71 [ 1568.159411][ T7551] usbtmc 7-1:1.0: can't read capabilities [ 1568.159463][ T7551] usbtmc 7-1:1.0: Failed to submit iin_urb [ 1568.159559][ T7551] usbtmc 7-1:1.0: probe with driver usbtmc failed with error -90 [ 1568.161885][ T7551] usbtouchscreen 7-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 1568.200596][ T7551] usb 7-1: USB disconnect, device number 24 [ 1568.469006][ T8295] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1570.139441][ T8295] Bluetooth: hci0: command tx timeout [ 1571.353878][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1571.353923][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1571.353939][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6d38 instead [ 1571.353956][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4bb4 instead [ 1571.353969][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1571.353984][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1571.353997][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1571.354015][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1571.354040][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1571.354064][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1571.354094][T14796] jffs2: Further such events for this erase block will not be printed [ 1571.354443][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1571.354458][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1571.354473][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6d38 instead [ 1571.354489][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4bb4 instead [ 1571.354502][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1571.354516][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1571.354530][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1571.354547][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1571.354571][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1571.354596][T14796] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1571.354609][T14796] jffs2: Further such events for this erase block will not be printed [ 1571.354923][T14796] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1571.354932][T14796] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1573.350356][ T8295] Bluetooth: hci0: command tx timeout [ 1575.421393][ T5593] Bluetooth: hci0: command tx timeout [ 1576.325658][ T161] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.726043][T14821] Bluetooth: MGMT ver 1.23 [ 1578.089405][ T5593] Bluetooth: hci0: command tx timeout [ 1578.471656][T14828] fuse: Bad value for 'fd' [ 1580.314200][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1580.314807][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1580.504613][ T161] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.757957][ T161] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.548477][ T161] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.826717][T14781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.826809][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.826955][T14781] bridge_slave_0: entered allmulticast mode [ 1583.837126][T14781] bridge_slave_0: entered promiscuous mode [ 1583.875714][T14781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.875881][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.876026][T14781] bridge_slave_1: entered allmulticast mode [ 1583.922040][T14781] bridge_slave_1: entered promiscuous mode [ 1583.950106][T14871] fuse: Bad value for 'fd' [ 1584.103701][T14781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.133842][T14781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.333314][T14781] team0: Port device team_slave_0 added [ 1584.353336][T14781] team0: Port device team_slave_1 added [ 1584.519404][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.519427][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.519458][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.531862][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.531915][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.531998][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.315471][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1586.337365][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1586.438681][T14781] hsr_slave_0: entered promiscuous mode [ 1587.452532][T14781] hsr_slave_1: entered promiscuous mode [ 1587.453615][T14781] debugfs: 'hsr0' already exists in 'hsr' [ 1587.453645][T14781] Cannot create hsr debugfs directory [ 1591.068221][T14900] fuse: Bad value for 'fd' [ 1591.748960][T14906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1592.894888][ T161] bridge_slave_1: left allmulticast mode [ 1592.894935][ T161] bridge_slave_1: left promiscuous mode [ 1592.895329][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.103368][ T161] bridge_slave_0: left allmulticast mode [ 1593.103412][ T161] bridge_slave_0: left promiscuous mode [ 1593.103914][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.059379][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1595.059490][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1595.311182][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.380222][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.401970][ T161] bond0 (unregistering): Released all slaves [ 1598.610453][T14942] fuse: Invalid rootmode [ 1598.722439][T14945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.920162][ T161] hsr_slave_0: left promiscuous mode [ 1599.991809][ T161] hsr_slave_1: left promiscuous mode [ 1599.993190][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.993220][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.422953][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1602.423034][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1602.470097][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.470131][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.859937][ T161] veth1_macvtap: left promiscuous mode [ 1602.860048][ T161] veth0_macvtap: left promiscuous mode [ 1602.860314][ T161] veth1_vlan: left promiscuous mode [ 1602.860499][ T161] veth0_vlan: left promiscuous mode [ 1602.869587][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1603.275188][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1603.275360][ T43] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1603.303624][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.303703][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1603.303848][ T43] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1603.303925][ T43] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1603.893876][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.893951][ T43] usb 7-1: Product: syz [ 1603.894044][ T43] usb 7-1: Manufacturer: syz [ 1603.894109][ T43] usb 7-1: SerialNumber: syz [ 1606.792904][ T43] usb 7-1: can't set config #1, error -71 [ 1606.844557][ T43] usb 7-1: USB disconnect, device number 25 [ 1607.759387][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1608.191009][T14985] random: crng reseeded on system resumption [ 1608.203580][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1608.203610][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1608.203688][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x6d38 instead [ 1608.203733][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4bb4 instead [ 1608.203754][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1608.203774][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1608.203816][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1608.203882][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1608.203927][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1608.203991][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1608.204044][T14995] jffs2: Further such events for this erase block will not be printed [ 1608.204627][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1608.204678][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1608.204715][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x6d38 instead [ 1608.206388][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4bb4 instead [ 1608.206416][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1608.206435][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1608.206454][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1608.206477][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1608.206510][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1608.206544][T14995] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1608.206590][T14995] jffs2: Further such events for this erase block will not be printed [ 1608.207280][T14995] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1608.207315][T14995] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1608.892689][T15001] ntfs3(loop0): try to read out of volume at offset 0x0 [ 1609.711343][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1609.729590][ T43] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1609.730798][ T43] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1609.730838][ T43] usb 7-1: can't read configurations, error -71 [ 1609.762527][ T8295] Bluetooth: hci0: command 0x0c24 tx timeout [ 1609.764323][ T5593] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1612.116695][T15014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.645663][ T161] team0 (unregistering): Port device team_slave_1 removed [ 1615.770146][ T161] team0 (unregistering): Port device team_slave_0 removed [ 1617.794906][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1618.222595][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1618.222685][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1619.879671][T15049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1622.875892][T15055] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1629.875627][T15102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.806749][ T8295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1631.864169][ T8295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1631.890430][ T8295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1631.928143][ T8295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1631.938946][ T8295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1632.354796][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1826'. [ 1632.578297][T12199] IPVS: starting estimator thread 0... [ 1632.751482][T15130] IPVS: using max 7 ests per chain, 16800 per kthread [ 1634.059896][ T8295] Bluetooth: hci4: command tx timeout [ 1636.552763][ T8295] Bluetooth: hci4: command tx timeout [ 1638.619698][ T8295] Bluetooth: hci4: command tx timeout [ 1640.585160][T15172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.701718][ T8295] Bluetooth: hci4: command tx timeout [ 1642.646737][T15179] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1642.810766][T15181] fuse: Bad value for 'fd' [ 1643.618544][T15164] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1643.620909][T15164] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1643.621104][T15164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1643.621261][T15164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1643.621418][T15164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1643.621485][T15164] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1643.621825][ T8295] Bluetooth: hci3: command 0x0406 tx timeout [ 1644.951725][T15164] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1645.659886][ T8295] Bluetooth: hci2: command 0x0c1a tx timeout [ 1645.659952][ T8295] Bluetooth: hci1: command 0x0406 tx timeout [ 1645.659986][ T8295] Bluetooth: hci6: command 0x0406 tx timeout [ 1647.182081][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 1649.602850][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 1649.902677][ T1142] bridge_slave_1: left allmulticast mode [ 1649.902718][ T1142] bridge_slave_1: left promiscuous mode [ 1649.903001][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.863593][ T1142] bridge_slave_0: left allmulticast mode [ 1650.863636][ T1142] bridge_slave_0: left promiscuous mode [ 1650.863922][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.095614][T15225] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1652.249354][ T5593] Bluetooth: hci4: command 0x0c1a tx timeout [ 1653.191417][T15242] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1845'. [ 1653.191474][T15242] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1845'. [ 1653.191519][T15242] netlink: 'syz.6.1845': attribute type 5 has an invalid length. [ 1653.191544][T15242] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1845'. [ 1654.275145][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'. [ 1654.513692][ T9001] IPVS: starting estimator thread 0... [ 1654.620290][T15250] IPVS: using max 7 ests per chain, 16800 per kthread [ 1654.865548][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.640166][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.703606][ T1142] bond0 (unregistering): Released all slaves [ 1658.749859][T15113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.751141][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.751349][T15113] bridge_slave_0: entered allmulticast mode [ 1658.759821][T15113] bridge_slave_0: entered promiscuous mode [ 1660.384770][ T1142] hsr_slave_0: left promiscuous mode [ 1660.410634][ T1142] hsr_slave_1: left promiscuous mode [ 1660.411988][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.440714][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.415255][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1856'. [ 1664.330036][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 1664.464447][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 1664.817814][ T1000] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1665.723558][ T1000] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1665.723625][ T1000] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1665.751078][ T1000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1665.751128][ T1000] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1665.751161][ T1000] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1665.758652][ T1000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.758685][ T1000] usb 7-1: Product: syz [ 1665.758703][ T1000] usb 7-1: Manufacturer: syz [ 1665.758720][ T1000] usb 7-1: SerialNumber: syz [ 1667.864710][ T1000] smsusb:smsusb_probe: board id=8, interface number 0 [ 1667.864819][ T1000] smsusb:smsusb_probe: Device initialized with return code -19 [ 1667.924810][T15113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.924905][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.925073][T15113] bridge_slave_1: entered allmulticast mode [ 1667.926988][T15113] bridge_slave_1: entered promiscuous mode [ 1668.176166][T15113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.189577][ T1000] usb 7-1: USB disconnect, device number 28 [ 1668.469860][T15113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.294403][T15113] team0: Port device team_slave_0 added [ 1671.844310][T15113] team0: Port device team_slave_1 added [ 1672.024771][T15113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.024793][T15113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.024824][T15113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.032616][T15113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.032654][T15113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.032736][T15113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.181439][T15113] hsr_slave_0: entered promiscuous mode [ 1674.182825][T15113] hsr_slave_1: entered promiscuous mode [ 1674.183792][T15113] debugfs: 'hsr0' already exists in 'hsr' [ 1674.183820][T15113] Cannot create hsr debugfs directory [ 1674.443089][T15335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.137994][T15113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1678.248954][T15113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.280144][T15113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1678.432714][T15113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1678.438510][T15113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1678.524986][T15113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1678.525842][T15113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1678.622548][T15113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1678.748005][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1678.820542][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1678.829355][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1678.913418][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1678.928843][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1679.663427][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.663481][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.855396][T15356] Bluetooth: MGMT ver 1.23 [ 1681.472216][ T5593] Bluetooth: hci0: command tx timeout [ 1681.662494][T15113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.738367][T15113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.773985][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.774279][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.828849][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.829104][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.899359][ T8295] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1683.779435][ T8295] Bluetooth: hci0: command 0x041b tx timeout [ 1685.819325][ T5593] Bluetooth: hci0: command 0x041b tx timeout [ 1686.200599][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1869'. [ 1687.911070][ T5593] Bluetooth: hci0: command 0x041b tx timeout [ 1689.992272][ T5593] Bluetooth: hci0: command 0x041b tx timeout [ 1691.894029][ T8295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1691.932243][ T8295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1691.938419][ T8295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1691.941840][ T1000] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1691.967029][ T8295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1691.968236][ T8295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1692.252922][ T1000] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1692.252986][ T1000] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1692.254123][ T1000] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1692.254159][ T1000] usb 7-1: can't read configurations, error -71 [ 1694.219371][ T5593] Bluetooth: hci3: command tx timeout [ 1694.817864][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1885'. [ 1695.079826][ T1424] IPVS: starting estimator thread 0... [ 1695.169911][T15439] IPVS: using max 7 ests per chain, 16800 per kthread [ 1696.299424][ T5593] Bluetooth: hci3: command tx timeout [ 1698.762644][ T5593] Bluetooth: hci3: command tx timeout [ 1700.780245][ T5593] Bluetooth: hci3: command tx timeout [ 1701.243868][T15343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.244065][T15343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.244233][T15343] bridge_slave_0: entered allmulticast mode [ 1701.276089][T15343] bridge_slave_0: entered promiscuous mode [ 1701.279049][T15343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.293483][T15343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.293715][T15343] bridge_slave_1: entered allmulticast mode [ 1701.296746][T15343] bridge_slave_1: entered promiscuous mode [ 1703.091662][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.171846][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.510903][ T9001] bridge_slave_1: left allmulticast mode [ 1703.510945][ T9001] bridge_slave_1: left promiscuous mode [ 1703.511261][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.672889][ T9001] bridge_slave_0: left allmulticast mode [ 1703.672931][ T9001] bridge_slave_0: left promiscuous mode [ 1703.673224][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.954281][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1895'. [ 1709.050045][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.130124][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1709.170294][ T9001] bond0 (unregistering): Released all slaves [ 1709.921083][T15499] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1711.163717][T15343] team0: Port device team_slave_0 added [ 1711.500777][T15343] team0: Port device team_slave_1 added [ 1711.730869][ T9001] : left promiscuous mode [ 1714.009337][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.009361][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.009393][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.018206][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.018227][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.018258][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.156950][T14194] block device autoloading is deprecated and will be removed. [ 1714.271465][ T9001] tipc: Left network mode [ 1714.452320][T15343] hsr_slave_0: entered promiscuous mode [ 1714.454881][T15343] hsr_slave_1: entered promiscuous mode [ 1714.458994][T15343] debugfs: 'hsr0' already exists in 'hsr' [ 1714.459022][T15343] Cannot create hsr debugfs directory [ 1715.557037][T15529] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1716.131996][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1721.293910][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1723.356102][T15411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.356331][T15411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.356551][T15411] bridge_slave_0: entered allmulticast mode [ 1723.370779][T15411] bridge_slave_0: entered promiscuous mode [ 1727.660776][T15411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.660867][T15411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.661043][T15411] bridge_slave_1: entered allmulticast mode [ 1727.664629][T15411] bridge_slave_1: entered promiscuous mode [ 1729.098629][T15411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.359490][ T9001] hsr_slave_0: left promiscuous mode [ 1729.400704][ T9001] hsr_slave_1: left promiscuous mode [ 1729.439164][T15604] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1731.379410][ T5593] Bluetooth: hci6: command 0x0406 tx timeout [ 1731.380319][T15602] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1731.944774][T15602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1731.945039][T15602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1731.981327][T15602] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1731.981468][T15602] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1732.103824][T15602] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1732.150204][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1732.171442][T15602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1732.171550][T15602] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1732.230287][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1732.255058][T15602] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1733.419370][ T5593] Bluetooth: hci1: command 0x0406 tx timeout [ 1733.584510][ T9001] team0 (unregistering): Port device dummy0 removed [ 1735.356160][ T5593] Bluetooth: hci2: command 0x0c1a tx timeout [ 1735.356208][ T5593] Bluetooth: hci3: command 0x0c1a tx timeout [ 1735.356761][ T8295] Bluetooth: hci0: command 0x041b tx timeout [ 1735.740203][ T7551] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1735.802941][T15411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.900285][ T7551] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1735.901822][ T7551] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1735.901851][ T7551] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.901883][ T7551] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1735.901938][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.901968][ T7551] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.904211][ T7551] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1735.904238][ T7551] usb 7-1: Product: syz [ 1735.904255][ T7551] usb 7-1: Manufacturer: syz [ 1736.001336][ T7551] cdc_wdm 7-1:1.0: skipping garbage [ 1736.001361][ T7551] cdc_wdm 7-1:1.0: skipping garbage [ 1736.116514][ T7551] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1736.116540][ T7551] cdc_wdm 7-1:1.0: Unknown control protocol [ 1736.168439][T15633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1923'. [ 1736.168580][T15633] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1736.420286][T15634] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 1737.419262][T15632] Bluetooth: hci0: command 0x041b tx timeout [ 1737.434446][T11259] Bluetooth: hci3: command 0x0c1a tx timeout [ 1737.607805][T15411] team0: Port device team_slave_0 added [ 1737.651138][ T43] usb 7-1: USB disconnect, device number 31 [ 1737.675763][T15411] team0: Port device team_slave_1 added [ 1737.925940][T15642] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.740758][T15632] Bluetooth: hci0: command 0x041b tx timeout [ 1739.740802][T15632] Bluetooth: hci3: command 0x0c1a tx timeout [ 1741.112737][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1741.112815][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1741.311824][T15632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1741.378699][T15632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1741.406925][T15632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1741.440378][T15632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1741.441575][T15632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1742.041470][T15411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.041492][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.041524][T15411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.069350][T15411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.069377][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.069404][T15411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.079735][T14393] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1742.430054][T14393] usb 7-1: Using ep0 maxpacket: 16 [ 1742.453540][T14393] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1742.462440][T14393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.462474][T14393] usb 7-1: Product: syz [ 1742.462491][T14393] usb 7-1: Manufacturer: syz [ 1742.462509][T14393] usb 7-1: SerialNumber: syz [ 1742.490200][T14393] usb 7-1: config 0 descriptor?? [ 1742.900685][T14393] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1743.184110][T14393] usb 7-1: USB disconnect, device number 32 [ 1743.707842][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1743.712397][T11259] Bluetooth: hci4: command tx timeout [ 1743.788094][T15411] hsr_slave_0: entered promiscuous mode [ 1743.867913][T15411] hsr_slave_1: entered promiscuous mode [ 1744.342665][ T9001] IPVS: stop unused estimator thread 0... [ 1745.739253][T11259] Bluetooth: hci4: command tx timeout [ 1745.761153][T15697] 9p: Bad value for 'rfdno' [ 1747.819324][T11259] Bluetooth: hci4: command tx timeout [ 1748.059318][T14393] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1748.212372][T14393] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1748.214034][T14393] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1748.214065][T14393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.214087][T14393] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1748.214140][T14393] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.214168][T14393] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.278503][T14393] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1748.278534][T14393] usb 9-1: Product: syz [ 1748.278551][T14393] usb 9-1: Manufacturer: syz [ 1748.330751][T14393] cdc_wdm 9-1:1.0: skipping garbage [ 1748.330778][T14393] cdc_wdm 9-1:1.0: skipping garbage [ 1748.351941][T14393] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1748.351969][T14393] cdc_wdm 9-1:1.0: Unknown control protocol [ 1748.525950][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1935'. [ 1748.526019][T15708] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1748.655153][T15715] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1749.899350][T11259] Bluetooth: hci4: command tx timeout [ 1751.148557][ T9580] usb 9-1: USB disconnect, device number 15 [ 1752.993841][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1753.261695][T15724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1754.853870][T15632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1754.935007][T15632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1754.937888][T15632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1754.942328][T15632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1754.976831][T15632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1756.295014][T15752] 9p: Bad value for 'rfdno' [ 1757.582031][T11259] Bluetooth: hci0: command tx timeout [ 1759.352228][T15773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.660513][T11259] Bluetooth: hci0: command tx timeout [ 1760.003441][T15648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.005486][T15648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.007268][T15648] bridge_slave_0: entered allmulticast mode [ 1760.034535][T15648] bridge_slave_0: entered promiscuous mode [ 1760.047610][T15648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.048908][T15648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.063882][T15648] bridge_slave_1: entered allmulticast mode [ 1760.076292][T15648] bridge_slave_1: entered promiscuous mode [ 1760.318870][T15648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.345904][T15648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.810837][T15648] team0: Port device team_slave_0 added [ 1760.888727][T15648] team0: Port device team_slave_1 added [ 1762.526241][T11259] Bluetooth: hci0: command tx timeout [ 1763.663514][T15648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.663529][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.663552][T15648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.068089][T15648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.068105][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.068128][T15648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.541010][T11259] Bluetooth: hci0: command tx timeout [ 1765.342131][T15822] 9p: Bad value for 'rfdno' [ 1765.571253][T15648] hsr_slave_0: entered promiscuous mode [ 1765.588878][T15648] hsr_slave_1: entered promiscuous mode [ 1765.593116][T15648] debugfs: 'hsr0' already exists in 'hsr' [ 1765.593199][T15648] Cannot create hsr debugfs directory [ 1767.360936][ T9001] bridge_slave_1: left allmulticast mode [ 1767.360973][ T9001] bridge_slave_1: left promiscuous mode [ 1767.361218][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.569633][ T9001] bridge_slave_0: left allmulticast mode [ 1767.569677][ T9001] bridge_slave_0: left promiscuous mode [ 1767.569988][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.523545][T15839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.662710][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1771.711422][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1771.779945][ T9001] bond0 (unregistering): Released all slaves [ 1774.170184][ T9001] hsr_slave_0: left promiscuous mode [ 1774.195361][ T9001] hsr_slave_1: left promiscuous mode [ 1774.206352][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.233481][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1778.468443][T15908] ieee802154 phy0 wpan0: encryption failed: -22 [ 1780.632954][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1780.762237][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1787.128346][T15962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1788.693218][ T1391] rpcbind: server 127.0.0.1 not responding, timed out [ 1789.426674][T15978] syz_tun: entered allmulticast mode [ 1789.438471][T15730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.529844][T15730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.536402][T15730] bridge_slave_0: entered allmulticast mode [ 1789.538885][T15730] bridge_slave_0: entered promiscuous mode [ 1789.735672][T15730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.736099][T15730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.736511][T15730] bridge_slave_1: entered allmulticast mode [ 1789.760137][T15730] bridge_slave_1: entered promiscuous mode [ 1791.179406][ T9001] bridge_slave_1: left allmulticast mode [ 1791.179451][ T9001] bridge_slave_1: left promiscuous mode [ 1791.179710][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.346899][ T9001] bridge_slave_0: left allmulticast mode [ 1791.346946][ T9001] bridge_slave_0: left promiscuous mode [ 1791.347215][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.107505][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.231231][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.315258][ T9001] bond0 (unregistering): Released all slaves [ 1793.510002][ T9001] hsr_slave_0: left promiscuous mode [ 1793.557748][ T9001] hsr_slave_1: left promiscuous mode [ 1793.559023][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.601675][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.766209][T16023] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1796.143792][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1796.222852][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1797.126399][T15730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.146671][T15632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1799.193290][T15632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1799.206822][T15632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1799.218804][T15632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1799.236160][T15632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1799.947133][T15730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.490793][T15730] team0: Port device team_slave_0 added [ 1800.496472][T15730] team0: Port device team_slave_1 added [ 1800.733526][T16074] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1800.839653][T15730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.839675][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.839707][T15730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.104169][T11259] Bluetooth: hci3: command tx timeout [ 1802.178850][T15730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.178872][T15730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.178905][T15730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.950848][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1803.950946][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1804.139568][T11259] Bluetooth: hci3: command tx timeout [ 1805.119354][T15430] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1805.282228][T15730] hsr_slave_0: entered promiscuous mode [ 1805.283174][T15730] hsr_slave_1: entered promiscuous mode [ 1805.301467][T15430] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1805.306861][T15430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1805.306953][T15430] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1805.333067][T15730] debugfs: 'hsr0' already exists in 'hsr' [ 1805.333099][T15730] Cannot create hsr debugfs directory [ 1805.336730][T15430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.336759][T15430] usb 9-1: Product: syz [ 1805.336771][T15430] usb 9-1: Manufacturer: syz [ 1805.336782][T15430] usb 9-1: SerialNumber: syz [ 1805.635414][T15430] usb 9-1: usb_control_msg returned -71 [ 1805.635454][T15430] usbtmc 9-1:1.0: can't read capabilities [ 1805.636564][T15430] usbtmc 9-1:1.0: Failed to submit iin_urb [ 1805.636629][T15430] usbtmc 9-1:1.0: probe with driver usbtmc failed with error -90 [ 1805.706825][T15430] usbtouchscreen 9-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 1805.812898][T15430] usb 9-1: USB disconnect, device number 16 [ 1806.219575][T11259] Bluetooth: hci3: command tx timeout [ 1806.961079][ T9001] bridge_slave_1: left allmulticast mode [ 1806.961112][ T9001] bridge_slave_1: left promiscuous mode [ 1806.961317][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.195149][ T9001] bridge_slave_0: left allmulticast mode [ 1807.195184][ T9001] bridge_slave_0: left promiscuous mode [ 1807.195405][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.299730][T11259] Bluetooth: hci3: command tx timeout [ 1808.693094][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.770258][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.863867][ T9001] bond0 (unregistering): Released all slaves [ 1812.827171][ T9001] hsr_slave_0: left promiscuous mode [ 1812.869895][ T9001] hsr_slave_1: left promiscuous mode [ 1812.871268][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1812.917264][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.601670][T16147] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1815.980045][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1816.148579][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1818.684343][T11259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1818.708591][T11259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1818.718903][T11259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1818.769118][T11259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1818.769914][T11259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1820.919443][T16193] ntfs3(loop0): try to read out of volume at offset 0x0 [ 1821.176546][T15632] Bluetooth: hci4: command tx timeout [ 1823.871256][T15632] Bluetooth: hci4: command tx timeout [ 1825.273797][T16061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.273913][T16061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.274067][T16061] bridge_slave_0: entered allmulticast mode [ 1825.276491][T16061] bridge_slave_0: entered promiscuous mode [ 1825.288075][T16061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.288629][T16061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.291411][T16061] bridge_slave_1: entered allmulticast mode [ 1825.393239][T16061] bridge_slave_1: entered promiscuous mode [ 1825.743666][T16233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1825.759402][T15632] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1825.900805][T15632] Bluetooth: hci4: command tx timeout [ 1827.106503][T16241] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1827.240965][T16061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1828.042567][T15632] Bluetooth: hci4: command tx timeout [ 1828.092271][T16061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1828.242373][T16061] team0: Port device team_slave_0 added [ 1828.257098][T16061] team0: Port device team_slave_1 added [ 1831.305187][T16061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.305218][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.305267][T16061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.379493][T16061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.379515][T16061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.379548][T16061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1832.178218][T16061] hsr_slave_0: entered promiscuous mode [ 1832.193506][T16061] hsr_slave_1: entered promiscuous mode [ 1833.211960][T16275] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1835.280231][T16294] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1835.282305][T15632] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1835.287577][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.287729][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.326930][T16178] bridge_slave_0: entered allmulticast mode [ 1835.337211][T16178] bridge_slave_0: entered promiscuous mode [ 1835.413479][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.413736][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.414299][T16178] bridge_slave_1: entered allmulticast mode [ 1835.462197][T16178] bridge_slave_1: entered promiscuous mode [ 1835.758637][T16303] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1835.780817][T16178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.997266][T16178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.965131][T16178] team0: Port device team_slave_0 added [ 1838.973767][T16178] team0: Port device team_slave_1 added [ 1841.016893][T16178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.016915][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.016945][T16178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.062616][T16178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.062685][T16178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.062768][T16178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.434444][ T9001] bridge_slave_1: left allmulticast mode [ 1841.434488][ T9001] bridge_slave_1: left promiscuous mode [ 1841.434796][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.637123][ T9001] bridge_slave_0: left allmulticast mode [ 1841.637164][ T9001] bridge_slave_0: left promiscuous mode [ 1841.637442][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.310319][ T9001] bridge_slave_1: left allmulticast mode [ 1844.310364][ T9001] bridge_slave_1: left promiscuous mode [ 1844.310624][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.512954][ T9001] bridge_slave_0: left allmulticast mode [ 1844.512985][ T9001] bridge_slave_0: left promiscuous mode [ 1844.513170][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.557353][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1846.677441][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1846.762357][ T9001] bond0 (unregistering): Released all slaves [ 1849.639537][ T9001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.599982][ T9001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1850.651747][ T9001] bond0 (unregistering): Released all slaves [ 1851.028680][T16178] hsr_slave_0: entered promiscuous mode [ 1851.037007][T16178] hsr_slave_1: entered promiscuous mode [ 1851.038097][T16178] debugfs: 'hsr0' already exists in 'hsr' [ 1851.038127][T16178] Cannot create hsr debugfs directory [ 1852.041370][ T9001] hsr_slave_0: left promiscuous mode [ 1852.063384][ T9001] hsr_slave_1: left promiscuous mode [ 1852.064688][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1852.164467][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.429449][ T9001] hsr_slave_0: left promiscuous mode [ 1852.504724][ T9001] hsr_slave_1: left promiscuous mode [ 1852.506064][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1852.532542][ T9001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.352890][T16386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1853.355359][T15632] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1859.807627][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1860.627587][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1860.648781][T11259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1860.679704][T11259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1860.684019][T11259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1860.720385][T11259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1860.728897][T11259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1862.332339][T14297] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1862.459386][T14297] usb 7-1: device descriptor read/64, error -71 [ 1863.208713][T16426] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1864.367969][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1864.368161][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1864.375700][T11259] Bluetooth: hci0: command tx timeout [ 1864.519390][T14297] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1864.520521][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1866.377069][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 1866.380482][T11259] Bluetooth: hci0: command tx timeout [ 1866.493129][ T9001] team0 (unregistering): Port device team_slave_0 removed [ 1866.682912][T16436] binder: 16435:16436 ioctl c0306201 0 returned -14 [ 1868.642599][T11259] Bluetooth: hci0: command tx timeout [ 1869.913943][T16455] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1870.853917][T11259] Bluetooth: hci0: command tx timeout [ 1873.464422][ T43] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1873.589644][ T43] usb 7-1: device descriptor read/64, error -71 [ 1873.853447][ T43] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1874.009241][ T43] usb 7-1: device descriptor read/64, error -71 [ 1874.119580][ T43] usb usb7-port1: attempt power cycle [ 1874.249667][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 1874.249697][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 29, name: ktimers/1 [ 1874.249719][ C1] preempt_count: 0, expected: 0 [ 1874.249733][ C1] RCU nest depth: 2, expected: 0 [ 1874.249765][ C1] locks held by ktimers/1/29: 4, last CPU#1: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1874.249786][ C1] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1874.249871][ C1] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1874.249944][ C1] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 1874.250024][ C1] #3: ffff8880390b2358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 1874.250106][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1874.250149][ C1] Tainted: [L]=SOFTLOCKUP [ 1874.250159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1874.250176][ C1] Call Trace: [ 1874.250187][ C1] [ 1874.250200][ C1] dump_stack_lvl+0xe8/0x150 [ 1874.250243][ C1] __might_resched+0x31b/0x470 [ 1874.250291][ C1] lock_sock_nested+0x56/0x130 [ 1874.250324][ C1] x25_kill_by_neigh+0x134/0x2a0 [ 1874.250355][ C1] ? x25_kill_by_neigh+0x2b/0x2a0 [ 1874.250391][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1874.250434][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1874.250475][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1874.250515][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1874.250553][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 1874.250604][ C1] lapbeth_napi_poll+0x45/0x90 [ 1874.250641][ C1] __napi_poll+0xae/0x550 [ 1874.250673][ C1] net_rx_action+0x621/0xd70 [ 1874.250719][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1874.250787][ C1] handle_softirqs+0x1da/0x6d0 [ 1874.250838][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1874.250877][ C1] run_ktimerd+0x6a/0x100 [ 1874.250918][ C1] smpboot_thread_fn+0x565/0xa70 [ 1874.250963][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 1874.251020][ C1] kthread+0x38b/0x470 [ 1874.251049][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1874.251084][ C1] ? __pfx_kthread+0x10/0x10 [ 1874.251115][ C1] ret_from_fork+0x514/0xb70 [ 1874.251153][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1874.251181][ C1] ? __switch_to+0xc89/0x1420 [ 1874.251225][ C1] ? __pfx_kthread+0x10/0x10 [ 1874.251255][ C1] ret_from_fork_asm+0x1a/0x30 [ 1874.251303][ C1] [ 1874.459342][ T43] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1874.490023][ T43] usb 7-1: device descriptor read/8, error -71 [ 1874.729229][ T43] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1874.751487][ T43] usb 7-1: device descriptor read/8, error -71 [ 1874.917899][ T43] usb usb7-port1: unable to enumerate USB device [ 1877.243922][T10640] syz_tun (unregistering): left allmulticast mode [ 1879.022246][ T9001] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.365004][ T9001] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.716701][ T9001] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.012023][ T9001] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.855271][ T9001] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.256873][ T9001] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.313573][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1881.658157][ T9001] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.078548][ T9001] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.132136][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1882.775813][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1883.045154][ T9001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.458051][ T9001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.805426][ T9001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.871473][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8