last executing test programs: 2m33.649120162s ago: executing program 4 (id=11826): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m28.599787967s ago: executing program 1 (id=11837): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m20.414225603s ago: executing program 32 (id=11821): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m20.41181693s ago: executing program 3 (id=11846): socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 2m19.653835388s ago: executing program 33 (id=11822): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2m19.226644241s ago: executing program 3 (id=11848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m17.686797512s ago: executing program 34 (id=11826): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m17.665312615s ago: executing program 3 (id=11850): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2m13.244965144s ago: executing program 35 (id=11837): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m9.418090671s ago: executing program 5 (id=11856): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m7.646614929s ago: executing program 5 (id=11859): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x200448c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can_delroute={0x14, 0x19, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') read$dsp(r6, &(0x7f00000000c0)=""/229, 0xe5) preadv(r6, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000300)=0x124) 2m6.317968527s ago: executing program 5 (id=11861): r0 = epoll_create1(0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109"], 0x0) read$dsp(r1, &(0x7f0000000140)=""/40, 0x28) 2m3.095587404s ago: executing program 5 (id=11865): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2m2.301168527s ago: executing program 36 (id=11850): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 2m1.711734287s ago: executing program 6 (id=11867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) 2m0.363866252s ago: executing program 6 (id=11868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 1m59.086869943s ago: executing program 6 (id=11869): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m54.6842177s ago: executing program 37 (id=11855): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m51.227520564s ago: executing program 0 (id=11875): r0 = epoll_create1(0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)={0x10000000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109"], 0x0) read$dsp(r1, &(0x7f0000000140)=""/40, 0x28) 1m49.693849869s ago: executing program 38 (id=11851): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m48.069911696s ago: executing program 39 (id=11865): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 1m48.011733096s ago: executing program 0 (id=11878): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) 1m46.815687704s ago: executing program 0 (id=11879): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m43.795570339s ago: executing program 4 (id=11877): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af006b2"], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x0, 0xc6}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) 1m43.767395518s ago: executing program 40 (id=11869): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m42.793306952s ago: executing program 4 (id=11881): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m40.350033579s ago: executing program 1 (id=11880): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m38.170194599s ago: executing program 41 (id=11874): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m36.167799167s ago: executing program 3 (id=11882): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m31.668667279s ago: executing program 42 (id=11879): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m30.637181894s ago: executing program 43 (id=11876): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m27.57837607s ago: executing program 44 (id=11881): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m27.576363744s ago: executing program 8 (id=11884): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m25.143483929s ago: executing program 45 (id=11880): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m23.062984665s ago: executing program 5 (id=11885): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m21.001142815s ago: executing program 46 (id=11882): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m15.555750218s ago: executing program 6 (id=11886): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m14.376809491s ago: executing program 7 (id=11896): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x151000, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000003d80)) unshare(0x3e040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(0xffffffffffffffff, &(0x7f0000002500)=""/159, 0x9f) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000024c0)='projid_map\x00') connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @remote}, 0x5, 0x0, 0x0, 0x3}}, 0x65) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$nl_route(r1, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r6, 0x0, 0x0) 1m13.238400209s ago: executing program 7 (id=11897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m12.221828524s ago: executing program 47 (id=11884): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m11.848348813s ago: executing program 7 (id=11899): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x200000000114, 0x3, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_mark(0xffffffffffffffff, 0x2, 0x1008, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=@tcp6=r4, 0x1}, 0x20) syz_emit_ethernet(0xc2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) lsetxattr$security_ima(&(0x7f0000000180)='\x00', &(0x7f00000001c0), 0x0, 0x14, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 1m10.608043323s ago: executing program 7 (id=11901): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8}]}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/103], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 1m10.356000395s ago: executing program 7 (id=11902): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m7.833153522s ago: executing program 48 (id=11885): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m3.953084252s ago: executing program 0 (id=11898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 1m3.035682104s ago: executing program 9 (id=11910): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af006b2"], 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x0, 0xc6}) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r5 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r7, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 1m2.599659281s ago: executing program 9 (id=11911): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8}]}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/resume', 0x149a82, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x1, 0x3, 0x7, 0x7, 0x8}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/103], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 1m2.528480537s ago: executing program 0 (id=11912): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1m2.172286138s ago: executing program 9 (id=11913): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 59.896451287s ago: executing program 49 (id=11886): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 58.767862504s ago: executing program 2 (id=11915): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af006b2"], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r7 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x28}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r9, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 57.737829368s ago: executing program 2 (id=11916): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 55.467622774s ago: executing program 4 (id=11914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 54.437234509s ago: executing program 50 (id=11902): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 51.907080633s ago: executing program 1 (id=11917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000800000340000000e0001"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 50.986448884s ago: executing program 1 (id=11918): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) 47.109011463s ago: executing program 51 (id=11912): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 47.056053602s ago: executing program 52 (id=11913): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 42.580329828s ago: executing program 53 (id=11916): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 41.898970423s ago: executing program 8 (id=11920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 41.788354722s ago: executing program 3 (id=11919): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 40.335458241s ago: executing program 54 (id=11914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 40.324403532s ago: executing program 8 (id=11923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 39.831770075s ago: executing program 3 (id=11924): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 38.223539528s ago: executing program 8 (id=11925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) 36.891080056s ago: executing program 8 (id=11926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x78, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xe, '\x00', [@generic={0x31, 0x6e, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"}]}]}}}}}, 0x0) 35.744401689s ago: executing program 55 (id=11918): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) 35.350041262s ago: executing program 8 (id=11928): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 30.462970194s ago: executing program 5 (id=11921): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 29.70188s ago: executing program 6 (id=11922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 28.05637677s ago: executing program 7 (id=11927): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) 27.999863355s ago: executing program 6 (id=11929): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 24.578758028s ago: executing program 56 (id=11924): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 21.810086638s ago: executing program 0 (id=11930): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 19.574643679s ago: executing program 57 (id=11928): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 16.309662711s ago: executing program 9 (id=11931): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 16.228675401s ago: executing program 9 (id=11932): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 15.302056349s ago: executing program 58 (id=11921): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 15.248240784s ago: executing program 9 (id=11934): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 12.493319541s ago: executing program 59 (id=11929): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 12.414844295s ago: executing program 60 (id=11927): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) 7.517192923s ago: executing program 2 (id=11933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000800000340000000e0001"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 6.501172219s ago: executing program 61 (id=11930): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 6.388981635s ago: executing program 2 (id=11938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 4.667050006s ago: executing program 2 (id=11939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) 3.581360548s ago: executing program 1 (id=11936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote, r2}, 0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 3.186476793s ago: executing program 2 (id=11940): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 1.781177765s ago: executing program 1 (id=11941): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) 1.162126795s ago: executing program 4 (id=11935): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 111.291728ms ago: executing program 4 (id=11942): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 0s ago: executing program 62 (id=11934): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): lex [ 2337.602237][ T2450] bond4: (slave bridge4): failed to get link speed/duplex [ 2337.612188][ T2450] bond2: (slave bridge2): failed to get link speed/duplex [ 2337.619818][ T2450] bond1: (slave bridge1): failed to get link speed/duplex [ 2337.627547][ T2450] bond11: (slave bridge1): failed to get link speed/duplex [ 2337.882242][T15608] Bluetooth: hci12: command tx timeout [ 2338.138219][T27400] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2338.148208][T27400] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2338.157353][T27400] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2338.166559][T27400] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2338.179923][T27400] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2338.355338][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 2338.430971][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 2338.440721][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 2338.448268][ T8957] bridge_slave_0: entered allmulticast mode [ 2338.456853][ T8957] bridge_slave_0: entered promiscuous mode [ 2338.468041][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 2338.475439][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 2338.486683][ T8957] bridge_slave_1: entered allmulticast mode [ 2338.494289][ T8957] bridge_slave_1: entered promiscuous mode [ 2338.527517][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2338.539087][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2338.570084][ T8957] team0: Port device team_slave_0 added [ 2338.578740][ T8957] team0: Port device team_slave_1 added [ 2338.608506][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2338.615785][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2338.642202][ T8957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2338.655110][ T8957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2338.663376][ T8957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2338.694379][ T8957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2338.735200][ T8957] hsr_slave_0: entered promiscuous mode [ 2338.741912][ T8957] hsr_slave_1: entered promiscuous mode [ 2338.748509][ T8957] debugfs: 'hsr0' already exists in 'hsr' [ 2338.756811][ T8957] Cannot create hsr debugfs directory [ 2338.884072][ T8957] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.020187][ T8957] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.124595][ T8957] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.228497][ T8957] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.257597][T27400] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2339.268102][T27400] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2339.279280][T27400] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2339.288634][T27400] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2339.308493][T27400] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2339.544360][ T8957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2339.565940][ T8957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2339.580868][ T8957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2339.592317][ T8957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2339.739465][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 2339.845971][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 2339.855200][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2339.862741][ T8966] bridge_slave_0: entered allmulticast mode [ 2339.870078][ T8966] bridge_slave_0: entered promiscuous mode [ 2339.883230][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 2339.890771][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2339.898212][ T8966] bridge_slave_1: entered allmulticast mode [ 2339.906284][ T8966] bridge_slave_1: entered promiscuous mode [ 2339.946662][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2339.956933][T27400] Bluetooth: hci12: command tx timeout [ 2339.961634][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2340.001090][ T8966] team0: Port device team_slave_0 added [ 2340.012688][ T8966] team0: Port device team_slave_1 added [ 2340.055658][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2340.063216][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2340.089794][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2340.105356][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2340.116570][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2340.148325][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2340.178643][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2340.193582][T27400] Bluetooth: hci13: command tx timeout [ 2340.229657][ T8966] hsr_slave_0: entered promiscuous mode [ 2340.237291][ T8966] hsr_slave_1: entered promiscuous mode [ 2340.244001][ T8966] debugfs: 'hsr0' already exists in 'hsr' [ 2340.249733][ T8966] Cannot create hsr debugfs directory [ 2340.340745][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 [ 2340.385459][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 2340.392762][ T2440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2340.424868][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 2340.431993][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2340.518510][ T8966] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.576986][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2340.620918][ T8966] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.666745][ T8957] veth0_vlan: entered promiscuous mode [ 2340.683923][ T8957] veth1_vlan: entered promiscuous mode [ 2340.716911][ T8966] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.756910][ T8957] veth0_macvtap: entered promiscuous mode [ 2340.769783][ T8957] veth1_macvtap: entered promiscuous mode [ 2340.794892][ T8966] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.824565][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2340.847585][ T8957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2340.865835][ T2445] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.879811][ T2445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.891269][ T2445] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.900585][ T2445] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.080508][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.099175][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.136941][ T8966] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2341.155237][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.158996][ T8966] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2341.174254][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.177364][ T8966] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2341.195367][ T8966] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2341.381102][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2341.404093][T27400] Bluetooth: hci14: command tx timeout [ 2341.427304][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 2341.441069][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2341.448227][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2341.465719][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.472943][ T2445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2341.531406][ T8966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2341.579240][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2341.618103][ T8966] veth0_vlan: entered promiscuous mode [ 2341.629792][ T8966] veth1_vlan: entered promiscuous mode [ 2341.677634][ T8966] veth0_macvtap: entered promiscuous mode [ 2341.687043][ T8966] veth1_macvtap: entered promiscuous mode [ 2341.706358][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2341.724969][ T8966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2341.742949][ T756] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.754000][ T756] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.766787][ T2445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.780439][ T2445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.881179][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.890627][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2341.927859][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2341.937404][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2342.263714][ T8994] netlink: 'syz.8.11884': attribute type 4 has an invalid length. [ 2342.274481][T27400] Bluetooth: hci13: command tx timeout [ 2342.343548][ T8995] netlink: 'syz.8.11884': attribute type 4 has an invalid length. [ 2342.391582][T15608] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2342.402458][T15608] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2342.414232][T15608] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2342.422187][T15608] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2342.431279][T15608] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2342.495386][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2342.512537][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.823313][ T2436] net_ratelimit: 260 callbacks suppressed [ 2342.823330][ T2436] bond4: (slave bridge4): failed to get link speed/duplex [ 2342.873250][ T2436] bond10: (slave bridge3): failed to get link speed/duplex [ 2342.900507][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 2343.304624][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.322892][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.332691][ T8997] bridge_slave_0: entered allmulticast mode [ 2343.340299][ T8997] bridge_slave_0: entered promiscuous mode [ 2343.359114][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.376900][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.391070][ T8997] bridge_slave_1: entered allmulticast mode [ 2343.410788][ T8997] bridge_slave_1: entered promiscuous mode [ 2343.442592][ T2445] bond11: (slave bridge1): failed to get link speed/duplex [ 2343.454630][ T8997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2343.471349][ T8997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2343.491279][T27400] Bluetooth: hci14: command tx timeout [ 2343.526318][ T8997] team0: Port device team_slave_0 added [ 2343.535641][ T8997] team0: Port device team_slave_1 added [ 2343.573443][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2343.580614][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2343.609116][ T8997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2343.624637][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2343.631626][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2343.659670][ T8997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2343.719947][ T8997] hsr_slave_0: entered promiscuous mode [ 2343.727394][ T8997] hsr_slave_1: entered promiscuous mode [ 2343.735305][ T8997] debugfs: 'hsr0' already exists in 'hsr' [ 2343.741336][ T8997] Cannot create hsr debugfs directory [ 2343.804223][ T2436] bond6: (slave bridge1): failed to get link speed/duplex [ 2343.889626][ T8997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.924790][ T2438] bond6: (slave bridge1): failed to get link speed/duplex [ 2343.933970][ T2450] bond1: (slave bridge1): failed to get link speed/duplex [ 2343.984281][ T8997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.002574][ T2450] bond2: (slave bridge2): failed to get link speed/duplex [ 2344.022582][ T2445] bond3: (slave bridge3): failed to get link speed/duplex [ 2344.042452][ T2450] bond4: (slave bridge4): failed to get link speed/duplex [ 2344.073348][ T8997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.102578][ T2450] bond10: (slave bridge3): failed to get link speed/duplex [ 2344.134743][ T8997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.281603][ T8997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2344.292495][ T8997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2344.303121][ T8997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2344.313849][ T8997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2344.353555][T27400] Bluetooth: hci13: command tx timeout [ 2344.515052][T27400] Bluetooth: hci15: command tx timeout [ 2344.536776][ T8997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2344.645068][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.651756][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.710832][ T8997] 8021q: adding VLAN 0 to HW filter on device team0 [ 2344.754194][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2344.761327][ T2445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2344.799281][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2344.806614][ T2445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2345.116998][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2345.161661][T15608] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2345.172203][T15608] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2345.181443][T15608] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2345.189868][T15608] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2345.198055][T15608] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2345.281525][ T8997] veth0_vlan: entered promiscuous mode [ 2345.321205][ T8997] veth1_vlan: entered promiscuous mode [ 2345.389929][ T8997] veth0_macvtap: entered promiscuous mode [ 2345.539507][ T8997] veth1_macvtap: entered promiscuous mode [ 2345.562751][T15608] Bluetooth: hci14: command tx timeout [ 2345.663147][ T8997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2345.743126][ T8997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2345.793961][ T2436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.813978][ T2436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.905868][ T2436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2345.916773][ T2436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2346.128804][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2346.169179][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.220101][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2346.229025][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.439233][T15608] Bluetooth: hci13: command tx timeout [ 2346.518535][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 2346.593681][T15608] Bluetooth: hci15: command tx timeout [ 2347.034723][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2347.070728][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2347.178335][ T9033] netlink: 'syz.5.11885': attribute type 4 has an invalid length. [ 2347.207711][ T9016] bridge_slave_0: entered allmulticast mode [ 2347.234390][ T9034] netlink: 'syz.5.11885': attribute type 4 has an invalid length. [ 2347.285510][T15608] Bluetooth: hci16: command tx timeout [ 2347.305402][ T9016] bridge_slave_0: entered promiscuous mode [ 2347.324345][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.352386][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2347.367212][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2347.374997][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2347.409413][ T9016] bridge_slave_1: entered allmulticast mode [ 2347.427847][ T9016] bridge_slave_1: entered promiscuous mode [ 2347.632524][T15608] Bluetooth: hci14: command tx timeout [ 2347.681297][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2347.694977][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2347.867423][ T9016] team0: Port device team_slave_0 added [ 2347.877489][ T9016] team0: Port device team_slave_1 added [ 2347.949415][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2348.173463][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2348.213622][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2348.327107][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2348.340970][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2348.394447][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2348.673457][T15608] Bluetooth: hci15: command tx timeout [ 2348.687574][ T9016] hsr_slave_0: entered promiscuous mode [ 2348.695483][ T9016] hsr_slave_1: entered promiscuous mode [ 2348.713036][ T9016] debugfs: 'hsr0' already exists in 'hsr' [ 2348.743724][ T9016] Cannot create hsr debugfs directory [ 2349.303366][ T2443] net_ratelimit: 110 callbacks suppressed [ 2349.303383][ T2443] bond4: (slave bridge4): failed to get link speed/duplex [ 2349.327245][T15608] Bluetooth: hci16: command tx timeout [ 2349.405280][ T9016] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.485142][T27400] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2349.500695][T27400] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2349.510736][T27400] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2349.518743][ T2443] bond2: (slave bridge2): failed to get link speed/duplex [ 2349.518825][T27400] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2349.534869][T27400] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2349.544355][ T2443] bond4: (slave bridge4): failed to get link speed/duplex [ 2349.572619][ T2443] bond1: (slave bridge1): failed to get link speed/duplex [ 2349.715142][ T2438] bond11: (slave bridge1): failed to get link speed/duplex [ 2349.786644][ T9016] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.812476][ T2440] bond7: (slave bridge7): failed to get link speed/duplex [ 2349.823216][ T2438] bond3: (slave bridge3): failed to get link speed/duplex [ 2349.844491][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2349.891104][ T9016] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2350.062523][ T9016] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2350.112800][ T2445] bond2: (slave bridge2): failed to get link speed/duplex [ 2350.137563][ T2440] bond12: (slave bridge4): failed to get link speed/duplex [ 2350.477716][ T9016] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2350.494291][ T9016] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2350.508892][ T9047] chnl_net:caif_netlink_parms(): no params data found [ 2350.520717][ T9016] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2350.563542][ T9016] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2350.753079][T27400] Bluetooth: hci15: command tx timeout [ 2350.767382][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2350.778427][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2350.786358][ T9047] bridge_slave_0: entered allmulticast mode [ 2350.796241][ T9047] bridge_slave_0: entered promiscuous mode [ 2350.807253][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2350.815870][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2350.824163][ T9047] bridge_slave_1: entered allmulticast mode [ 2350.856234][ T9047] bridge_slave_1: entered promiscuous mode [ 2350.970958][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2351.001090][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2351.091262][ T9047] team0: Port device team_slave_0 added [ 2351.106320][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2351.124668][ T9047] team0: Port device team_slave_1 added [ 2351.195240][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2351.202813][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2351.229730][ T9047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2351.245684][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2351.253239][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2351.292440][ T9047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2351.392982][T27400] Bluetooth: hci16: command tx timeout [ 2351.653048][T27400] Bluetooth: hci17: command tx timeout [ 2351.784517][ T9047] hsr_slave_0: entered promiscuous mode [ 2351.791030][ T9047] hsr_slave_1: entered promiscuous mode [ 2351.816854][ T9047] debugfs: 'hsr0' already exists in 'hsr' [ 2351.831738][ T9047] Cannot create hsr debugfs directory [ 2351.978816][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2352.114243][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2352.121489][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2352.211733][ T2436] bridge0: port 2(bridge_slave_1) entered blocking state [ 2352.219047][ T2436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2352.362877][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2352.433634][ T9047] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.634885][ T9016] veth0_vlan: entered promiscuous mode [ 2352.675628][ T9047] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.729755][ T9016] veth1_vlan: entered promiscuous mode [ 2352.776173][ T9047] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.099210][ T9047] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.191430][ T9016] veth0_macvtap: entered promiscuous mode [ 2353.201594][ T9016] veth1_macvtap: entered promiscuous mode [ 2353.236598][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2353.260749][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2353.318050][ T2438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.333843][ T9071] netlink: 'syz.7.11894': attribute type 1 has an invalid length. [ 2353.345001][ T2443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.379768][ T2443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.389342][ T2443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2353.483352][T27400] Bluetooth: hci16: command tx timeout [ 2353.712473][T27400] Bluetooth: hci17: command tx timeout [ 2353.805235][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2353.826497][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2353.874426][ T9047] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2353.906600][ T9047] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2353.917359][ T9047] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2353.935928][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2353.950522][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2353.965980][ T9047] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2354.363022][ T2443] net_ratelimit: 118 callbacks suppressed [ 2354.363038][ T2443] bond1: (slave bridge1): failed to get link speed/duplex [ 2354.414222][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2354.424354][ T9083] netlink: 'syz.6.11886': attribute type 4 has an invalid length. [ 2354.436950][ T2436] bond3: (slave bridge3): failed to get link speed/duplex [ 2354.492947][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 2354.508741][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2354.516107][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2354.540546][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2354.547760][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2354.599871][ T9086] netlink: 'syz.6.11886': attribute type 4 has an invalid length. [ 2354.648183][ T2436] bond12: (slave bridge4): failed to get link speed/duplex [ 2354.686424][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2354.697900][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2354.735876][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2354.781168][ T2450] bond1: (slave bridge1): failed to get link speed/duplex [ 2355.011705][ T9047] veth0_vlan: entered promiscuous mode [ 2355.113242][ T2436] bond1: (slave bridge1): failed to get link speed/duplex [ 2355.144804][ T9047] veth1_vlan: entered promiscuous mode [ 2355.176108][ T2436] bond4: (slave bridge4): failed to get link speed/duplex [ 2355.234307][ T2436] bond3: (slave bridge3): failed to get link speed/duplex [ 2355.419162][ T9047] veth0_macvtap: entered promiscuous mode [ 2355.442401][ T2438] bond10: (slave bridge3): failed to get link speed/duplex [ 2355.451936][ T9047] veth1_macvtap: entered promiscuous mode [ 2355.467073][ T2436] bond6: (slave bridge1): failed to get link speed/duplex [ 2355.514129][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2355.541473][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2355.570729][ T2443] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.600543][ T2443] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.622361][ T2450] bond10: (slave bridge3): failed to get link speed/duplex [ 2355.639725][ T2443] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.654468][ T2443] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2355.792884][T27400] Bluetooth: hci17: command tx timeout [ 2355.814734][ T2436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.842226][ T2436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2355.885497][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2355.900222][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2357.872167][T27400] Bluetooth: hci17: command tx timeout [ 2357.930553][T15608] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2357.951458][T15608] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2357.969640][T15608] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2357.979426][T15608] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2357.987464][T15608] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2358.716274][ T9106] chnl_net:caif_netlink_parms(): no params data found [ 2359.113029][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.143277][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.150698][ T9106] bridge_slave_0: entered allmulticast mode [ 2359.163687][ T9106] bridge_slave_0: entered promiscuous mode [ 2359.179721][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.187351][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.194950][ T9106] bridge_slave_1: entered allmulticast mode [ 2359.203526][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11901'. [ 2359.213716][ T9119] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11901'. [ 2359.238924][ T9106] bridge_slave_1: entered promiscuous mode [ 2359.517594][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2359.536316][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2359.552453][ T9124] netlink: 'syz.7.11902': attribute type 4 has an invalid length. [ 2359.591933][ T756] net_ratelimit: 222 callbacks suppressed [ 2359.595963][ T9124] netlink: 'syz.7.11902': attribute type 4 has an invalid length. [ 2359.606329][ T756] bond3: (slave bridge3): failed to get link speed/duplex [ 2359.832695][ T2445] bond11: (slave bridge1): failed to get link speed/duplex [ 2359.888104][ T2445] bond10: (slave bridge3): failed to get link speed/duplex [ 2359.934638][ T9106] team0: Port device team_slave_0 added [ 2359.944801][ T9106] team0: Port device team_slave_1 added [ 2360.032842][T27400] Bluetooth: hci18: command tx timeout [ 2360.150972][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.162241][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2360.218694][ T9106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.234095][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2360.241196][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2360.291897][ T9106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2360.632827][ T9128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2360.698162][ T9106] hsr_slave_0: entered promiscuous mode [ 2360.793479][ T9106] hsr_slave_1: entered promiscuous mode [ 2360.815585][ T9106] debugfs: 'hsr0' already exists in 'hsr' [ 2360.821598][ T9106] Cannot create hsr debugfs directory [ 2361.224971][ T9106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.284622][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2361.329480][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2361.343564][ T756] bond3: (slave bridge3): failed to get link speed/duplex [ 2361.435637][ T9106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.462537][ T2436] bond1: (slave bridge1): failed to get link speed/duplex [ 2361.472731][ T2436] bond3: (slave bridge3): failed to get link speed/duplex [ 2361.510619][ T9106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.572438][ T2436] bond2: (slave bridge2): failed to get link speed/duplex [ 2361.579700][ T2443] bond4: (slave bridge4): failed to get link speed/duplex [ 2361.592196][ T2443] bond1: (slave bridge1): failed to get link speed/duplex [ 2361.602141][ T2443] bond3: (slave bridge3): failed to get link speed/duplex [ 2361.667556][ T9106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.065518][ T9106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2362.115393][T27400] Bluetooth: hci18: command tx timeout [ 2362.116846][ T9106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2362.173802][ T9106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2362.211507][ T9106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2362.389590][T15608] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 2362.405067][T15608] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 2362.415652][T15608] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 2362.431312][T15608] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 2362.453603][T15608] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 2362.719977][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2362.766927][ T9106] 8021q: adding VLAN 0 to HW filter on device team0 [ 2362.798518][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2362.805716][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2362.846214][ T2436] bridge0: port 2(bridge_slave_1) entered blocking state [ 2362.853573][ T2436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2363.308949][ T9106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2363.483394][ T9106] veth0_vlan: entered promiscuous mode [ 2363.621393][ T9106] veth1_vlan: entered promiscuous mode [ 2363.727734][ T9106] veth0_macvtap: entered promiscuous mode [ 2363.783967][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 2363.901272][ T9106] veth1_macvtap: entered promiscuous mode [ 2363.997632][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2364.108258][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2364.122260][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.191304][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.201514][T27400] Bluetooth: hci18: command tx timeout [ 2364.239584][ T9148] bridge_slave_0: entered allmulticast mode [ 2364.269641][ T9148] bridge_slave_0: entered promiscuous mode [ 2364.373690][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.380921][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2364.400000][ T9148] bridge_slave_1: entered allmulticast mode [ 2364.407860][ T9148] bridge_slave_1: entered promiscuous mode [ 2364.513160][T27400] Bluetooth: hci19: command tx timeout [ 2364.525978][ T2440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.535507][ T2440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.548632][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2364.560540][ T2440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.583671][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2364.602278][ T2445] net_ratelimit: 126 callbacks suppressed [ 2364.602297][ T2445] bond7: (slave bridge7): failed to get link speed/duplex [ 2364.617172][ T2440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.632938][ T756] bond9: (slave bridge2): failed to get link speed/duplex [ 2364.776722][ T9148] team0: Port device team_slave_0 added [ 2364.808406][ T9148] team0: Port device team_slave_1 added [ 2364.970573][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2364.993154][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2365.052509][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2365.067345][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2365.083089][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2365.115562][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2365.217095][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2365.253240][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.363548][ T9148] hsr_slave_0: entered promiscuous mode [ 2365.370956][ T9148] hsr_slave_1: entered promiscuous mode [ 2365.382876][ T9148] debugfs: 'hsr0' already exists in 'hsr' [ 2365.388726][ T9148] Cannot create hsr debugfs directory [ 2365.450070][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2365.458554][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.764904][ T2445] bond2: (slave bridge2): failed to get link speed/duplex [ 2365.876655][ T9148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.942536][ T2438] bond2: (slave bridge2): failed to get link speed/duplex [ 2365.962577][ T2438] bond12: (slave bridge4): failed to get link speed/duplex [ 2366.285650][T27400] Bluetooth: hci18: command tx timeout [ 2366.325722][ T9148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.482334][ T2440] bond3: (slave bridge3): failed to get link speed/duplex [ 2366.503233][ T2443] bond6: (slave bridge1): failed to get link speed/duplex [ 2366.514279][ T2443] bond10: (slave bridge3): failed to get link speed/duplex [ 2366.667306][T27400] Bluetooth: hci19: command tx timeout [ 2366.784907][ T9148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2366.832976][ T8732] bond9: (slave bridge2): failed to get link speed/duplex [ 2366.840371][ T8732] bond12: (slave bridge4): failed to get link speed/duplex [ 2366.904532][ T9148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2367.174163][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11911'. [ 2367.185680][ T9175] netlink: 72 bytes leftover after parsing attributes in process `syz.9.11911'. [ 2367.279162][ T9148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2367.373017][ T9181] netlink: 'syz.0.11912': attribute type 4 has an invalid length. [ 2367.419673][ T9180] netlink: 'syz.0.11912': attribute type 4 has an invalid length. [ 2367.459436][ T9148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2367.502842][ T9148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2367.736834][ T9148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2367.749416][ T9186] netlink: 'syz.9.11913': attribute type 4 has an invalid length. [ 2367.810180][ T9186] netlink: 'syz.9.11913': attribute type 4 has an invalid length. [ 2367.841905][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.860127][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.228486][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2368.258875][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 2368.274574][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2368.281796][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2368.306947][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 2368.314222][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2368.360983][ T9148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2368.373898][ T9148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2368.753984][T27400] Bluetooth: hci19: command tx timeout [ 2368.839750][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2368.947860][ T9148] veth0_vlan: entered promiscuous mode [ 2368.971926][ T9148] veth1_vlan: entered promiscuous mode [ 2369.057002][ T9148] veth0_macvtap: entered promiscuous mode [ 2369.074672][ T9148] veth1_macvtap: entered promiscuous mode [ 2369.123560][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2369.157212][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2369.179711][ T2443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.194572][ T2443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.220853][ T2443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.240517][ T2443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.450225][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.462544][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.550290][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2369.576818][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2369.654224][ T2450] net_ratelimit: 119 callbacks suppressed [ 2369.654238][ T2450] bond6: (slave bridge1): failed to get link speed/duplex [ 2369.703940][ T2450] bond4: (slave bridge4): failed to get link speed/duplex [ 2369.742499][ T2438] bond11: (slave bridge1): failed to get link speed/duplex [ 2369.762509][ T2438] bond3: (slave bridge3): failed to get link speed/duplex [ 2369.783274][ T8732] bond1: (slave bridge1): failed to get link speed/duplex [ 2369.802717][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2369.853010][ T2440] bond10: (slave bridge3): failed to get link speed/duplex [ 2369.860332][ T2440] bond12: (slave bridge4): failed to get link speed/duplex [ 2369.954070][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2369.963933][ T8732] bond6: (slave bridge1): failed to get link speed/duplex [ 2370.457838][T15608] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 2370.475876][T15608] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 2370.484856][T15608] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 2370.494493][T15608] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 2370.526587][T15608] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 2370.837864][T27400] Bluetooth: hci19: command tx timeout [ 2371.236545][ T9200] chnl_net:caif_netlink_parms(): no params data found [ 2371.530757][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2371.545773][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2371.564902][ T9200] bridge_slave_0: entered allmulticast mode [ 2371.573590][ T9200] bridge_slave_0: entered promiscuous mode [ 2371.729085][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2371.736668][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2371.746477][ T9200] bridge_slave_1: entered allmulticast mode [ 2371.757939][ T9200] bridge_slave_1: entered promiscuous mode [ 2371.934448][ T9200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2371.948905][ T9200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2372.005991][ T9200] team0: Port device team_slave_0 added [ 2372.016543][ T9200] team0: Port device team_slave_1 added [ 2372.109716][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2372.140884][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2372.166859][ C1] vkms_vblank_simulate: vblank timer overrun [ 2372.189141][ T9215] netlink: 'syz.2.11916': attribute type 4 has an invalid length. [ 2372.200220][ T9200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2372.233496][ T9215] netlink: 'syz.2.11916': attribute type 4 has an invalid length. [ 2372.243166][ T9200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2372.250112][ T9200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2372.300996][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.310597][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.322812][ T9200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2372.518409][ T9200] hsr_slave_0: entered promiscuous mode [ 2372.534125][ T9200] hsr_slave_1: entered promiscuous mode [ 2372.541764][ T9200] debugfs: 'hsr0' already exists in 'hsr' [ 2372.548522][ T9200] Cannot create hsr debugfs directory [ 2372.672525][T15608] Bluetooth: hci20: command tx timeout [ 2372.875747][ T9200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.009291][ T9200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.124583][ T9200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.224784][ T9200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2373.387007][ T9200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2373.409103][ T9200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2373.420768][ T9200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2373.431972][ T9200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2373.521615][ T9200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2373.542900][ T9200] 8021q: adding VLAN 0 to HW filter on device team0 [ 2373.556679][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2373.563971][ T2445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2373.584141][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 2373.591318][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2373.677709][ T9200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2373.735879][ T9200] veth0_vlan: entered promiscuous mode [ 2373.750058][ T9200] veth1_vlan: entered promiscuous mode [ 2373.780928][ T9200] veth0_macvtap: entered promiscuous mode [ 2373.790278][ T9200] veth1_macvtap: entered promiscuous mode [ 2373.828647][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2373.845110][ T9200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2373.860829][ T2450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.870406][ T2450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.895511][ T2450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.904964][ T2450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.006572][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.042544][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.073989][ T2443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.085961][ T2443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.337404][ T9227] netlink: 'syz.4.11914': attribute type 4 has an invalid length. [ 2374.369269][ T9227] netlink: 'syz.4.11914': attribute type 4 has an invalid length. [ 2374.396357][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.407108][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.662346][ T2443] net_ratelimit: 242 callbacks suppressed [ 2374.662366][ T2443] bond6: (slave bridge1): failed to get link speed/duplex [ 2374.692156][ T2438] bond3: (slave bridge3): failed to get link speed/duplex [ 2374.712753][ T2443] bond9: (slave bridge2): failed to get link speed/duplex [ 2374.722830][ T2443] bond1: (slave bridge1): failed to get link speed/duplex [ 2374.736092][ T2443] bond12: (slave bridge4): failed to get link speed/duplex [ 2374.752694][T15608] Bluetooth: hci20: command tx timeout [ 2374.753064][ T2438] bond4: (slave bridge4): failed to get link speed/duplex [ 2374.766647][ T2443] bond11: (slave bridge1): failed to get link speed/duplex [ 2374.774010][ T2443] bond7: (slave bridge7): failed to get link speed/duplex [ 2374.792626][ T2443] bond10: (slave bridge3): failed to get link speed/duplex [ 2374.892260][ T2438] bond2: (slave bridge2): failed to get link speed/duplex [ 2375.476194][T27400] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 2375.488388][T27400] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 2375.496972][T27400] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 2375.505832][T27400] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 2375.514084][T27400] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 2375.890307][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 2375.989748][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 2375.997803][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.006381][ T9230] bridge_slave_0: entered allmulticast mode [ 2376.013912][ T9230] bridge_slave_0: entered promiscuous mode [ 2376.022913][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 2376.030180][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.039988][ T9230] bridge_slave_1: entered allmulticast mode [ 2376.048553][ T9230] bridge_slave_1: entered promiscuous mode [ 2376.089546][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2376.102774][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2376.139445][ T9230] team0: Port device team_slave_0 added [ 2376.148794][ T9230] team0: Port device team_slave_1 added [ 2376.188911][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2376.196697][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2376.223085][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2376.236061][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2376.243423][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2376.279175][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2376.329587][ T9230] hsr_slave_0: entered promiscuous mode [ 2376.338803][ T9230] hsr_slave_1: entered promiscuous mode [ 2376.345608][ T9230] debugfs: 'hsr0' already exists in 'hsr' [ 2376.351370][ T9230] Cannot create hsr debugfs directory [ 2376.513923][ T9230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.619833][ T9230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.708907][ T9230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.806753][ T9230] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.832134][T15608] Bluetooth: hci20: command tx timeout [ 2376.969460][ T9230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2376.981470][ T9230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2377.009439][ T9230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2377.020947][ T9230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2377.125213][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2377.145062][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 2377.157560][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.164691][ T2445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2377.180347][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.187545][ T2440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2377.277612][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2377.344857][ T9230] veth0_vlan: entered promiscuous mode [ 2377.357172][ T9230] veth1_vlan: entered promiscuous mode [ 2377.384651][ T9230] veth0_macvtap: entered promiscuous mode [ 2377.404962][ T9230] veth1_macvtap: entered promiscuous mode [ 2377.426720][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2377.441666][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2377.459946][ T2443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.469356][ T2443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.481257][ T2443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.490454][ T2443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.555252][T15608] Bluetooth: hci21: command tx timeout [ 2377.591728][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2377.606086][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2377.645542][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2377.653684][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2377.779041][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11917'. [ 2378.763610][ T9250] netlink: 'syz.1.11918': attribute type 4 has an invalid length. [ 2378.786293][ T9250] netlink: 'syz.1.11918': attribute type 4 has an invalid length. [ 2378.816449][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2378.825800][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.924019][T15608] Bluetooth: hci20: command tx timeout [ 2379.632533][T15608] Bluetooth: hci21: command tx timeout [ 2379.702308][ T2440] net_ratelimit: 350 callbacks suppressed [ 2379.702334][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2379.722981][ T2440] bond11: (slave bridge1): failed to get link speed/duplex [ 2379.732363][ T2440] bond9: (slave bridge2): failed to get link speed/duplex [ 2379.757198][ T2440] bond10: (slave bridge3): failed to get link speed/duplex [ 2379.772539][ T2440] bond7: (slave bridge7): failed to get link speed/duplex [ 2379.794432][ T2440] bond12: (slave bridge4): failed to get link speed/duplex [ 2379.812355][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2379.822488][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2379.832134][ T2440] bond3: (slave bridge3): failed to get link speed/duplex [ 2379.842187][ T2440] bond9: (slave bridge2): failed to get link speed/duplex [ 2381.716074][T15608] Bluetooth: hci21: command tx timeout [ 2383.049640][ T8691] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 2383.063018][ T8691] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 2383.088174][ T8691] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 2383.099832][ T8691] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 2383.112451][ T8691] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 2383.261574][ T8691] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 2383.274228][ T8691] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 2383.286394][ T8691] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 2383.296395][ T8691] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 2383.304802][ T8691] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 2383.669180][ T9256] chnl_net:caif_netlink_parms(): no params data found [ 2383.760022][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 2383.792615][T15608] Bluetooth: hci21: command tx timeout [ 2383.869877][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2383.878368][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 2383.885838][ T9256] bridge_slave_0: entered allmulticast mode [ 2383.893836][ T9256] bridge_slave_0: entered promiscuous mode [ 2383.906263][ T9256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2383.913772][ T9256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2383.921167][ T9256] bridge_slave_1: entered allmulticast mode [ 2383.929048][ T9256] bridge_slave_1: entered promiscuous mode [ 2384.005050][ T9256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2384.018967][ T9256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2384.028739][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.036285][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.046574][ T9258] bridge_slave_0: entered allmulticast mode [ 2384.064644][ T9258] bridge_slave_0: entered promiscuous mode [ 2384.084538][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.091698][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.099494][ T9258] bridge_slave_1: entered allmulticast mode [ 2384.107517][ T9258] bridge_slave_1: entered promiscuous mode [ 2384.141895][ T9256] team0: Port device team_slave_0 added [ 2384.177208][ T9256] team0: Port device team_slave_1 added [ 2384.189953][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2384.214473][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2384.250104][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2384.267507][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.299846][ T9256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2384.319405][ T9256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2384.326550][ T9256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.354874][ T9256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2384.397790][ T9258] team0: Port device team_slave_0 added [ 2384.407537][ T9258] team0: Port device team_slave_1 added [ 2384.471603][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2384.479279][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.505896][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2384.535571][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2384.542760][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.578100][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2384.599494][ T9256] hsr_slave_0: entered promiscuous mode [ 2384.608089][ T9256] hsr_slave_1: entered promiscuous mode [ 2384.615712][ T9256] debugfs: 'hsr0' already exists in 'hsr' [ 2384.621477][ T9256] Cannot create hsr debugfs directory [ 2384.747909][ T9258] hsr_slave_0: entered promiscuous mode [ 2384.756829][ T9258] hsr_slave_1: entered promiscuous mode [ 2384.764485][ T9258] debugfs: 'hsr0' already exists in 'hsr' [ 2384.777406][ T9258] Cannot create hsr debugfs directory [ 2384.961853][ T9256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2384.996247][ T2445] net_ratelimit: 321 callbacks suppressed [ 2384.996262][ T2445] bond10: (slave bridge3): failed to get link speed/duplex [ 2385.069917][ T9256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.112329][ T2445] bond10: (slave bridge3): failed to get link speed/duplex [ 2385.122760][ T2445] bond11: (slave bridge1): failed to get link speed/duplex [ 2385.130199][ T2445] bond9: (slave bridge2): failed to get link speed/duplex [ 2385.160142][ T9256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.192545][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2385.199884][ T2440] bond1: (slave bridge1): failed to get link speed/duplex [ 2385.222234][ T2440] bond10: (slave bridge3): failed to get link speed/duplex [ 2385.246957][T15608] Bluetooth: hci22: command tx timeout [ 2385.257262][ T9256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.286744][ T2440] bond9: (slave bridge2): failed to get link speed/duplex [ 2385.302983][ T2450] bond4: (slave bridge4): failed to get link speed/duplex [ 2385.312846][ T2440] bond6: (slave bridge1): failed to get link speed/duplex [ 2385.402607][T15608] Bluetooth: hci23: command tx timeout [ 2385.415005][ T9258] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.500413][ T9258] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.599047][ T9258] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.684637][ T9258] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2385.838700][ T9258] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2385.854495][ T9258] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2385.869077][ T9258] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2385.883210][ T9258] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2385.981546][ T9256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2386.009333][ T9256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2386.021137][ T9256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2386.031607][ T9256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2386.161190][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2386.218870][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 2386.234230][ T2440] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.241469][ T2440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2386.265528][ T9256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2386.277207][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.284408][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2386.337391][ T9256] 8021q: adding VLAN 0 to HW filter on device team0 [ 2386.357685][ T2445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.364896][ T2445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2386.390634][ T2445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.397864][ T2445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2386.546265][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2386.580736][ T9256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2386.645564][ T9258] veth0_vlan: entered promiscuous mode [ 2386.679182][ T9258] veth1_vlan: entered promiscuous mode [ 2386.699499][ T9256] veth0_vlan: entered promiscuous mode [ 2386.738284][ T9256] veth1_vlan: entered promiscuous mode [ 2386.777473][ T9258] veth0_macvtap: entered promiscuous mode [ 2386.790592][ T9258] veth1_macvtap: entered promiscuous mode [ 2386.811466][ T9256] veth0_macvtap: entered promiscuous mode [ 2386.843113][ T9256] veth1_macvtap: entered promiscuous mode [ 2386.861063][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2386.891641][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2386.909349][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2386.933794][ T9256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2386.958451][ T2443] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.968455][ T2443] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2386.996981][ T2443] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.007860][ T2443] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.034992][ T2443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.047868][ T2443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.074482][ T2443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.085881][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2387.308474][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.322577][T15608] Bluetooth: hci22: command tx timeout [ 2387.354207][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.392874][ T2440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.400782][ T2440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.481148][T15608] Bluetooth: hci23: command tx timeout [ 2387.550406][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.571110][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.585314][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2387.605096][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2389.079789][ T8691] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 2389.115313][ T8691] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 2389.134645][ T8691] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 2389.162797][ T8691] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 2389.196142][ T8691] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 2389.394899][T15608] Bluetooth: hci22: command tx timeout [ 2389.559400][T15608] Bluetooth: hci23: command tx timeout [ 2390.079049][ T9310] netlink: 'syz.3.11924': attribute type 4 has an invalid length. [ 2390.140801][ T9311] netlink: 'syz.3.11924': attribute type 4 has an invalid length. [ 2390.151933][ T2445] net_ratelimit: 217 callbacks suppressed [ 2390.151953][ T2445] bond4: (slave bridge4): failed to get link speed/duplex [ 2390.262474][ T2438] bond12: (slave bridge4): failed to get link speed/duplex [ 2390.323666][ T756] bond10: (slave bridge3): failed to get link speed/duplex [ 2390.343470][ T68] bond2: (slave bridge2): failed to get link speed/duplex [ 2390.350714][ T68] bond7: (slave bridge7): failed to get link speed/duplex [ 2390.382729][ T68] bond4: (slave bridge4): failed to get link speed/duplex [ 2390.389977][ T68] bond9: (slave bridge2): failed to get link speed/duplex [ 2390.588292][ T756] bond10: (slave bridge3): failed to get link speed/duplex [ 2390.608087][ T756] bond3: (slave bridge3): failed to get link speed/duplex [ 2390.932286][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 2390.989592][T15608] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 2391.004292][T15608] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 2391.032600][T15608] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 2391.040684][T15608] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 2391.048630][T15608] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 2391.331538][T15608] Bluetooth: hci24: command tx timeout [ 2391.376899][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2391.405326][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 2391.413792][ T9295] bridge_slave_0: entered allmulticast mode [ 2391.431814][ T9295] bridge_slave_0: entered promiscuous mode [ 2391.441829][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 2391.449208][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2391.457394][ T9295] bridge_slave_1: entered allmulticast mode [ 2391.467106][ T9295] bridge_slave_1: entered promiscuous mode [ 2391.475464][T15608] Bluetooth: hci22: command tx timeout [ 2391.560968][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2391.599399][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2391.635620][T15608] Bluetooth: hci23: command tx timeout [ 2391.653563][ T756] bond6: (slave bridge1): failed to get link speed/duplex [ 2391.725115][ T9295] team0: Port device team_slave_0 added [ 2391.806795][ T9295] team0: Port device team_slave_1 added [ 2391.948272][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.975933][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2392.008381][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2392.076888][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2392.101622][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2392.159662][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2392.177457][ T9314] chnl_net:caif_netlink_parms(): no params data found [ 2392.502568][ T9295] hsr_slave_0: entered promiscuous mode [ 2392.509339][ T9295] hsr_slave_1: entered promiscuous mode [ 2392.582667][ T9295] debugfs: 'hsr0' already exists in 'hsr' [ 2392.588795][ T9295] Cannot create hsr debugfs directory [ 2392.711370][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2392.720743][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.729064][ T9314] bridge_slave_0: entered allmulticast mode [ 2392.739005][ T9314] bridge_slave_0: entered promiscuous mode [ 2392.803544][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2392.810744][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.819066][ T9314] bridge_slave_1: entered allmulticast mode [ 2392.826749][ T9314] bridge_slave_1: entered promiscuous mode [ 2392.950222][ T9314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2393.007632][ T9314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2393.152332][T15608] Bluetooth: hci25: command tx timeout [ 2393.343448][ T9314] team0: Port device team_slave_0 added [ 2393.404632][T15608] Bluetooth: hci24: command tx timeout [ 2393.490100][ T9295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2393.585896][ T9314] team0: Port device team_slave_1 added [ 2393.745934][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2393.770704][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2393.904829][ T9314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2394.229807][ T9295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.301089][ T9314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2394.322713][ T9314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2394.372333][ T9314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2394.595382][ T9314] hsr_slave_0: entered promiscuous mode [ 2394.623173][ T9340] netlink: 'syz.8.11928': attribute type 4 has an invalid length. [ 2394.635674][ T9314] hsr_slave_1: entered promiscuous mode [ 2394.643548][ T9314] debugfs: 'hsr0' already exists in 'hsr' [ 2394.649338][ T9314] Cannot create hsr debugfs directory [ 2394.715735][ T9295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.733774][ T9341] netlink: 'syz.8.11928': attribute type 4 has an invalid length. [ 2394.988126][ T9295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.262662][T15608] Bluetooth: hci25: command tx timeout [ 2395.275931][ T756] net_ratelimit: 10 callbacks suppressed [ 2395.275955][ T756] bond7: (slave bridge7): failed to get link speed/duplex [ 2395.304143][ T756] bond11: (slave bridge1): failed to get link speed/duplex [ 2395.334282][ T756] bond2: (slave bridge2): failed to get link speed/duplex [ 2395.341933][ T756] bond10: (slave bridge3): failed to get link speed/duplex [ 2395.375348][ T8691] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 2395.392827][ T8691] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 2395.423922][ T8691] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 2395.434259][ T8691] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 2395.447627][ T8691] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 2395.472876][ T8691] Bluetooth: hci24: command tx timeout [ 2395.612545][ T2445] bond6: (slave bridge1): failed to get link speed/duplex [ 2395.800309][ T2445] bond11: (slave bridge1): failed to get link speed/duplex [ 2395.956585][ T9295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2395.987094][ T9295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2396.067816][ T9314] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.107369][ T9295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2396.119928][ T9295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2396.131534][ T8732] bond11: (slave bridge1): failed to get link speed/duplex [ 2396.201011][ T9314] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.217190][ T9344] chnl_net:caif_netlink_parms(): no params data found [ 2396.314156][ T9314] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.392605][ T9314] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2396.479051][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.486795][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.495397][ T9344] bridge_slave_0: entered allmulticast mode [ 2396.502871][ T9344] bridge_slave_0: entered promiscuous mode [ 2396.511272][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.520560][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.528043][ T9344] bridge_slave_1: entered allmulticast mode [ 2396.537603][ T9344] bridge_slave_1: entered promiscuous mode [ 2396.620142][ T9344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2396.633532][ T2445] bond2: (slave bridge2): failed to get link speed/duplex [ 2396.656998][ T9344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2396.721450][ T9344] team0: Port device team_slave_0 added [ 2396.746050][ T9344] team0: Port device team_slave_1 added [ 2396.803196][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2396.810199][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2396.837196][ T9344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2396.868485][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2396.875686][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2396.902777][ T9344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2396.969768][ T9314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2396.981598][ T9314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2397.020900][ T9314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2397.033937][ T9314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2397.053039][ T9344] hsr_slave_0: entered promiscuous mode [ 2397.067895][ T9344] hsr_slave_1: entered promiscuous mode [ 2397.083363][ T9344] debugfs: 'hsr0' already exists in 'hsr' [ 2397.089142][ T9344] Cannot create hsr debugfs directory [ 2397.228873][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2397.312501][ T8691] Bluetooth: hci25: command tx timeout [ 2397.345544][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 2397.375984][ T2438] bond9: (slave bridge2): failed to get link speed/duplex [ 2397.434857][ T9344] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.457305][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.464612][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2397.482463][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.489718][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2397.500527][ T756] bond11: (slave bridge1): failed to get link speed/duplex [ 2397.550471][ T9344] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.562961][ T8691] Bluetooth: hci24: command tx timeout [ 2397.563469][T15608] Bluetooth: hci26: command tx timeout [ 2397.687427][ T9344] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.708989][ T9295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2397.767258][ T9314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2397.816663][ T9344] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.849273][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2397.868824][ T9314] 8021q: adding VLAN 0 to HW filter on device team0 [ 2397.901664][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.908885][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2397.928316][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.935529][ T2438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2398.136185][ T9344] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2398.151125][ T9344] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2398.166970][ T9344] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2398.179678][ T9344] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2398.207075][ T9295] veth0_vlan: entered promiscuous mode [ 2398.255203][ T9295] veth1_vlan: entered promiscuous mode [ 2398.323681][ T9314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2398.355378][ T9295] veth0_macvtap: entered promiscuous mode [ 2398.401339][ T9295] veth1_macvtap: entered promiscuous mode [ 2398.477799][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2398.511540][ T9314] veth0_vlan: entered promiscuous mode [ 2398.525217][ T9344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2398.539994][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2398.562570][ T9314] veth1_vlan: entered promiscuous mode [ 2398.584530][ T2450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.605019][ T2450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.624168][ T2450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.633256][ T2450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.657115][ T9344] 8021q: adding VLAN 0 to HW filter on device team0 [ 2398.691065][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2398.698336][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2398.741710][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 2398.749030][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2398.856046][ T9314] veth0_macvtap: entered promiscuous mode [ 2398.885913][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.914288][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2398.927038][ T9314] veth1_macvtap: entered promiscuous mode [ 2398.960508][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2398.979999][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.134299][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2399.149895][ T9314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2399.248298][ T8732] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.264199][ T8732] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.273726][ T8732] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.292515][ T756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.352517][ T9344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2399.395140][T15608] Bluetooth: hci25: command tx timeout [ 2399.524453][ T9374] netlink: 'syz.5.11921': attribute type 4 has an invalid length. [ 2399.587236][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2399.605837][ T9375] netlink: 'syz.5.11921': attribute type 4 has an invalid length. [ 2399.643665][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.651631][T15608] Bluetooth: hci26: command tx timeout [ 2399.690224][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2399.745911][ T9344] veth0_vlan: entered promiscuous mode [ 2399.752714][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2399.760713][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.781875][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2399.834663][ T9344] veth1_vlan: entered promiscuous mode [ 2400.340077][ T8732] net_ratelimit: 121 callbacks suppressed [ 2400.340103][ T8732] bond9: (slave bridge2): failed to get link speed/duplex [ 2400.366187][ T9344] veth0_macvtap: entered promiscuous mode [ 2400.380808][ T9344] veth1_macvtap: entered promiscuous mode [ 2400.410864][ T9344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2400.452363][ T9344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2400.462406][ T756] bond6: (slave bridge1): failed to get link speed/duplex [ 2400.485449][ T2445] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.498170][ T2445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.550192][ T756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.898656][ T2450] bond2: (slave bridge2): failed to get link speed/duplex [ 2400.966253][ T756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.013892][ T8732] bond12: (slave bridge4): failed to get link speed/duplex [ 2401.032650][ T8732] bond6: (slave bridge1): failed to get link speed/duplex [ 2401.220302][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2401.238264][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2401.381368][ T8732] bond2: (slave bridge2): failed to get link speed/duplex [ 2401.436851][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2401.444910][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2401.493601][ T68] bond9: (slave bridge2): failed to get link speed/duplex [ 2401.513684][ T68] bond3: (slave bridge3): failed to get link speed/duplex [ 2401.533257][ T2440] bond1: (slave bridge1): failed to get link speed/duplex [ 2401.568955][ T2443] bond7: (slave bridge7): failed to get link speed/duplex [ 2401.714096][T15608] Bluetooth: hci26: command tx timeout [ 2401.823595][ T9390] netlink: 'syz.7.11927': attribute type 4 has an invalid length. [ 2401.859541][ T9390] netlink: 'syz.7.11927': attribute type 4 has an invalid length. [ 2401.897097][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2401.906686][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2402.215431][ T9391] netlink: 'syz.6.11929': attribute type 4 has an invalid length. [ 2402.308153][ T9391] netlink: 'syz.6.11929': attribute type 4 has an invalid length. [ 2402.337793][ T9391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2402.350169][ T9391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2403.793223][T15608] Bluetooth: hci26: command tx timeout [ 2405.342378][ T2445] net_ratelimit: 307 callbacks suppressed [ 2405.342403][ T2445] bond12: (slave bridge4): failed to get link speed/duplex [ 2405.399800][ T2445] bond3: (slave bridge3): failed to get link speed/duplex [ 2405.423323][ T68] bond6: (slave bridge1): failed to get link speed/duplex [ 2405.430761][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2405.479090][ T8691] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 2405.491405][ T2450] bond2: (slave bridge2): failed to get link speed/duplex [ 2405.498771][ T8691] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 2405.500488][ T8691] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 2405.518103][ T8691] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 2405.526354][ T8691] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 2405.549149][ T2450] bond3: (slave bridge3): failed to get link speed/duplex [ 2405.602178][ T2450] bond1: (slave bridge1): failed to get link speed/duplex [ 2405.615686][ T2450] bond7: (slave bridge7): failed to get link speed/duplex [ 2405.757127][ T9395] chnl_net:caif_netlink_parms(): no params data found [ 2405.841363][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 2405.849475][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 2405.857295][ T9395] bridge_slave_0: entered allmulticast mode [ 2405.876744][ T9395] bridge_slave_0: entered promiscuous mode [ 2405.885701][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.893465][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 2405.900806][ T9395] bridge_slave_1: entered allmulticast mode [ 2405.908880][ T9395] bridge_slave_1: entered promiscuous mode [ 2405.941284][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2405.956369][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2406.001096][ T9395] team0: Port device team_slave_0 added [ 2406.009741][ T9395] team0: Port device team_slave_1 added [ 2406.039269][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.046804][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.059453][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2406.081458][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2406.108343][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2406.121245][ T2450] bond1: (slave bridge1): failed to get link speed/duplex [ 2406.130485][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2406.137772][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2406.165523][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2406.220886][ T9395] hsr_slave_0: entered promiscuous mode [ 2406.228277][ T9395] hsr_slave_1: entered promiscuous mode [ 2406.235186][ T9395] debugfs: 'hsr0' already exists in 'hsr' [ 2406.241110][ T9395] Cannot create hsr debugfs directory [ 2406.292347][ T2438] bond1: (slave bridge1): failed to get link speed/duplex [ 2406.415218][ T9395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.518121][ T9395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.620923][ T9395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.721925][ T9395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.869892][ T9395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2406.879774][ T9395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2406.901229][ T9395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2406.911531][ T9395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2406.985261][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2407.014935][ T9395] 8021q: adding VLAN 0 to HW filter on device team0 [ 2407.028533][ T2438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2407.035725][ T2438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2407.052041][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2407.059389][ T2438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2407.153285][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2407.214255][ T9395] veth0_vlan: entered promiscuous mode [ 2407.227349][ T9395] veth1_vlan: entered promiscuous mode [ 2407.260547][ T9395] veth0_macvtap: entered promiscuous mode [ 2407.273449][ T9395] veth1_macvtap: entered promiscuous mode [ 2407.308700][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2407.329895][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2407.350824][ T2438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.361459][ T2440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.371116][ T2440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.387321][ T2440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.552392][ T8691] Bluetooth: hci27: command tx timeout [ 2407.584838][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.597260][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2407.694948][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.721296][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2408.040043][ T9413] netlink: 'syz.0.11930': attribute type 4 has an invalid length. [ 2408.066371][ T9413] netlink: 'syz.0.11930': attribute type 4 has an invalid length. [ 2409.632602][ T8691] Bluetooth: hci27: command tx timeout [ 2410.353771][ T2440] net_ratelimit: 315 callbacks suppressed [ 2410.353795][ T2440] bond9: (slave bridge2): failed to get link speed/duplex [ 2410.402492][ T2440] bond7: (slave bridge7): failed to get link speed/duplex [ 2410.422221][ T2440] bond3: (slave bridge3): failed to get link speed/duplex [ 2410.442537][ T2440] bond1: (slave bridge1): failed to get link speed/duplex [ 2410.462213][ T2440] bond10: (slave bridge3): failed to get link speed/duplex [ 2410.492854][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2410.522850][T15608] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 2410.534717][T15608] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 2410.542804][ T756] bond12: (slave bridge4): failed to get link speed/duplex [ 2410.551676][T15608] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 2410.560926][T15608] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 2410.568304][ T756] bond9: (slave bridge2): failed to get link speed/duplex [ 2410.568405][ T756] bond7: (slave bridge7): failed to get link speed/duplex [ 2410.568448][ T756] bond11: (slave bridge1): failed to get link speed/duplex [ 2410.609669][T15608] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 2411.208175][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 2411.278034][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 2411.285690][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 2411.303235][ T9416] bridge_slave_0: entered allmulticast mode [ 2411.310738][ T9416] bridge_slave_0: entered promiscuous mode [ 2411.321877][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 2411.329272][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.337322][ T9416] bridge_slave_1: entered allmulticast mode [ 2411.345698][ T9416] bridge_slave_1: entered promiscuous mode [ 2411.378018][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2411.411896][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2411.445525][ T9416] team0: Port device team_slave_0 added [ 2411.454419][ T9416] team0: Port device team_slave_1 added [ 2411.489917][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2411.506749][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2411.535215][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2411.549584][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2411.556840][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2411.583141][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2411.647120][ T9416] hsr_slave_0: entered promiscuous mode [ 2411.655711][ T9416] hsr_slave_1: entered promiscuous mode [ 2411.662233][ T9416] debugfs: 'hsr0' already exists in 'hsr' [ 2411.668308][ T9416] Cannot create hsr debugfs directory [ 2411.712986][ T9420] Bluetooth: hci27: command tx timeout [ 2411.869889][ T9416] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.975431][ T9416] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.074881][ T9416] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.165143][ T9416] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.397763][ T9416] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2412.411473][ T9416] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2412.458840][ T9416] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2412.469237][ T9416] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2412.571374][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2412.590720][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 2412.608576][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.615820][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2412.643761][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.651114][ T2440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2412.672710][ T9420] Bluetooth: hci28: command tx timeout [ 2412.764944][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2412.806322][ T9416] veth0_vlan: entered promiscuous mode [ 2412.819214][ T9416] veth1_vlan: entered promiscuous mode [ 2412.874726][ T9416] veth0_macvtap: entered promiscuous mode [ 2412.885144][ T9416] veth1_macvtap: entered promiscuous mode [ 2412.906472][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2412.938163][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2412.955164][ T8732] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.964238][ T8732] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.975346][ T8732] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.986343][ T8732] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.125967][ T2440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.149019][ T2440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.207620][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2413.215729][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2413.232649][ T9420] Bluetooth: hci4: command 0x0406 tx timeout [ 2413.239345][ T7548] Bluetooth: hci3: command 0x0406 tx timeout [ 2413.317663][ T9431] fuse: Unknown parameter 'use00000000000000000000' [ 2413.326853][ T30] audit: type=1800 audit(1761064868.948:1003): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11931" name="file1" dev="tmpfs" ino=18 res=0 errno=0 [ 2413.792883][ T8691] Bluetooth: hci27: command tx timeout [ 2414.580865][ T9442] netlink: 'syz.9.11934': attribute type 4 has an invalid length. [ 2414.609717][ T9442] netlink: 'syz.9.11934': attribute type 4 has an invalid length. [ 2414.762390][ T8691] Bluetooth: hci28: command tx timeout [ 2415.404462][ T8732] net_ratelimit: 315 callbacks suppressed [ 2415.404487][ T8732] bond9: (slave bridge2): failed to get link speed/duplex [ 2415.462492][ T8732] bond12: (slave bridge4): failed to get link speed/duplex [ 2415.470174][ T8732] bond11: (slave bridge1): failed to get link speed/duplex [ 2415.560085][ T68] bond7: (slave bridge7): failed to get link speed/duplex [ 2415.571180][ T68] bond1: (slave bridge1): failed to get link speed/duplex [ 2415.586950][T27400] Bluetooth: hci29: unexpected cc 0x0c03 length: 249 > 1 [ 2415.609030][T27400] Bluetooth: hci29: unexpected cc 0x1003 length: 249 > 9 [ 2415.620416][T27400] Bluetooth: hci29: unexpected cc 0x1001 length: 249 > 9 [ 2415.627754][ T68] bond6: (slave bridge1): failed to get link speed/duplex [ 2415.671839][T27400] Bluetooth: hci29: unexpected cc 0x0c23 length: 249 > 4 [ 2415.679257][ T68] bond7: (slave bridge7): failed to get link speed/duplex [ 2415.683609][ T68] bond11: (slave bridge1): failed to get link speed/duplex [ 2415.688224][T27400] Bluetooth: hci29: unexpected cc 0x0c38 length: 249 > 2 [ 2415.732491][ T2450] bond2: (slave bridge2): failed to get link speed/duplex [ 2415.752723][ T2450] bond12: (slave bridge4): failed to get link speed/duplex [ 2415.990717][ T9444] chnl_net:caif_netlink_parms(): no params data found [ 2416.100091][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.121237][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.129428][ T9444] bridge_slave_0: entered allmulticast mode [ 2416.137049][ T9444] bridge_slave_0: entered promiscuous mode [ 2416.147198][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.154717][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 2416.162443][ T9444] bridge_slave_1: entered allmulticast mode [ 2416.170076][ T9444] bridge_slave_1: entered promiscuous mode [ 2416.215016][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2416.229512][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2416.263199][ T9444] team0: Port device team_slave_0 added [ 2416.271350][ T9444] team0: Port device team_slave_1 added [ 2416.329040][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2416.336997][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2416.365477][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2416.380310][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2416.387821][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2416.422488][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2416.467115][ T9444] hsr_slave_0: entered promiscuous mode [ 2416.474104][ T9444] hsr_slave_1: entered promiscuous mode [ 2416.480622][ T9444] debugfs: 'hsr0' already exists in 'hsr' [ 2416.487530][ T9444] Cannot create hsr debugfs directory [ 2416.665636][ T9444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.779178][ T9444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2416.833184][ T9420] Bluetooth: hci28: command tx timeout [ 2416.956880][ T9444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.121172][ T9444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2417.596235][ T9444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2417.764598][ T9444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2417.811353][ T9444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2417.812621][ T9420] Bluetooth: hci29: command tx timeout [ 2417.894566][ T9444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2417.940262][ T8691] Bluetooth: hci30: unexpected cc 0x0c03 length: 249 > 1 [ 2417.972388][ T8691] Bluetooth: hci30: unexpected cc 0x1003 length: 249 > 9 [ 2417.981795][ T8691] Bluetooth: hci30: unexpected cc 0x1001 length: 249 > 9 [ 2417.990718][ T8691] Bluetooth: hci30: unexpected cc 0x0c23 length: 249 > 4 [ 2418.000373][ T8691] Bluetooth: hci30: unexpected cc 0x0c38 length: 249 > 2 [ 2418.183862][ T9420] Bluetooth: hci31: unexpected cc 0x0c03 length: 249 > 1 [ 2418.203005][ T9420] Bluetooth: hci31: unexpected cc 0x1003 length: 249 > 9 [ 2418.212783][ T9420] Bluetooth: hci31: unexpected cc 0x1001 length: 249 > 9 [ 2418.221343][ T9420] Bluetooth: hci31: unexpected cc 0x0c23 length: 249 > 4 [ 2418.231293][ T9420] Bluetooth: hci31: unexpected cc 0x0c38 length: 249 > 2 [ 2418.361666][ T8691] Bluetooth: hci5: command 0x0406 tx timeout [ 2418.649036][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2418.740134][ T9456] chnl_net:caif_netlink_parms(): no params data found [ 2418.902581][ T9444] 8021q: adding VLAN 0 to HW filter on device team0 [ 2418.913291][T27400] Bluetooth: hci28: command tx timeout [ 2418.929566][ T9462] chnl_net:caif_netlink_parms(): no params data found [ 2419.007574][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.015032][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.023601][ T9456] bridge_slave_0: entered allmulticast mode [ 2419.031118][ T9456] bridge_slave_0: entered promiscuous mode [ 2419.047226][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.054535][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.061920][ T9456] bridge_slave_1: entered allmulticast mode [ 2419.092984][ T9456] bridge_slave_1: entered promiscuous mode [ 2419.109463][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.116708][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2419.237698][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.244895][ T8732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2419.259933][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.268430][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.285227][ T9462] bridge_slave_0: entered allmulticast mode [ 2419.294224][ T9462] bridge_slave_0: entered promiscuous mode [ 2419.306260][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.314406][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.321892][ T9462] bridge_slave_1: entered allmulticast mode [ 2419.331071][ T9462] bridge_slave_1: entered promiscuous mode [ 2419.343055][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2419.358350][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2419.446526][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2419.461871][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2419.513119][ T9456] team0: Port device team_slave_0 added [ 2419.524834][ T9456] team0: Port device team_slave_1 added [ 2419.618134][ T9462] team0: Port device team_slave_0 added [ 2419.630941][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2419.639181][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.670543][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2419.707532][ T9462] team0: Port device team_slave_1 added [ 2419.730775][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2419.738343][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.765080][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2419.857139][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2419.864478][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2419.873138][T27400] Bluetooth: hci29: command tx timeout [ 2419.907583][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2419.941596][ T9456] hsr_slave_0: entered promiscuous mode [ 2419.949909][ T9456] hsr_slave_1: entered promiscuous mode [ 2419.958736][ T9456] debugfs: 'hsr0' already exists in 'hsr' [ 2419.965949][ T9456] Cannot create hsr debugfs directory [ 2419.975037][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2419.982077][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.013246][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.128998][ T8691] Bluetooth: hci30: command tx timeout [ 2420.137626][ T9462] hsr_slave_0: entered promiscuous mode [ 2420.149825][ T9462] hsr_slave_1: entered promiscuous mode [ 2420.157005][ T9462] debugfs: 'hsr0' already exists in 'hsr' [ 2420.163021][ T9462] Cannot create hsr debugfs directory [ 2420.273067][ T8691] Bluetooth: hci31: command tx timeout [ 2420.497114][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2420.557639][ T9462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.595978][ T2440] net_ratelimit: 150 callbacks suppressed [ 2420.596005][ T2440] bond7: (slave bridge7): failed to get link speed/duplex [ 2420.660532][ T9462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.699109][ T9444] veth0_vlan: entered promiscuous mode [ 2420.724019][ T68] bond6: (slave bridge1): failed to get link speed/duplex [ 2420.790362][ T9462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.827225][ T9444] veth1_vlan: entered promiscuous mode [ 2420.868811][ T9462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.904408][ T9444] veth0_macvtap: entered promiscuous mode [ 2420.924585][ T68] bond2: (slave bridge2): failed to get link speed/duplex [ 2420.932988][ T9444] veth1_macvtap: entered promiscuous mode [ 2420.972951][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2421.036068][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2421.065902][ T8732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.078286][ T8732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.105353][ T8732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.114323][ T8732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.345258][ T9456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.367619][ T9462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2421.378474][ T9462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2421.389688][ T9462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2421.452342][ T2445] bond1: (slave bridge1): failed to get link speed/duplex [ 2421.459650][ T2445] bond12: (slave bridge4): failed to get link speed/duplex [ 2421.474667][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2421.480242][ T8732] bond2: (slave bridge2): failed to get link speed/duplex [ 2421.496293][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2421.515187][ T9462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2421.564993][ T2440] bond1: (slave bridge1): failed to get link speed/duplex [ 2421.651891][ T9456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.760621][ T9456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.800095][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2421.803301][ T2438] bond2: (slave bridge2): failed to get link speed/duplex [ 2421.816155][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2421.848491][ T756] bond1: (slave bridge1): failed to get link speed/duplex [ 2421.897350][ T9456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.932457][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2421.954059][T27400] Bluetooth: hci29: command tx timeout [ 2422.204897][T27400] Bluetooth: hci30: command tx timeout [ 2422.330590][ T9456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2422.358818][T27400] Bluetooth: hci31: command tx timeout [ 2422.386596][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11933'. [ 2422.402679][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2422.417979][ T9456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2422.484582][ T9456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2422.507640][ T9456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2422.610093][ T9462] 8021q: adding VLAN 0 to HW filter on device team0 [ 2422.638575][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2422.645860][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2422.715043][ T2440] bridge0: port 2(bridge_slave_1) entered blocking state [ 2422.722327][ T2440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2423.009170][ T9456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2423.059729][ T9456] 8021q: adding VLAN 0 to HW filter on device team0 [ 2423.105757][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2423.161784][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 2423.169031][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2423.321465][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 2423.328832][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2423.481757][T27400] Bluetooth: hci6: command 0x0406 tx timeout [ 2423.810052][ T9462] veth0_vlan: entered promiscuous mode [ 2423.902951][ T9462] veth1_vlan: entered promiscuous mode [ 2423.936463][ T9456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2424.032644][ T8691] Bluetooth: hci29: command tx timeout [ 2424.054144][ T9462] veth0_macvtap: entered promiscuous mode [ 2424.113759][ T9462] veth1_macvtap: entered promiscuous mode [ 2424.332677][ T8691] Bluetooth: hci30: command tx timeout [ 2424.433328][ T8691] Bluetooth: hci31: command tx timeout [ 2424.454086][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2424.744706][T27400] Bluetooth: hci32: unexpected cc 0x0c03 length: 249 > 1 [ 2424.761120][T27400] Bluetooth: hci32: unexpected cc 0x1003 length: 249 > 9 [ 2424.771144][T27400] Bluetooth: hci32: unexpected cc 0x1001 length: 249 > 9 [ 2424.779826][T27400] Bluetooth: hci32: unexpected cc 0x0c23 length: 249 > 4 [ 2424.788051][T27400] Bluetooth: hci32: unexpected cc 0x0c38 length: 249 > 2 [ 2424.818742][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2424.838935][ T9456] veth0_vlan: entered promiscuous mode [ 2424.963747][ T2445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2424.976178][ T2445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.033277][ T9456] veth1_vlan: entered promiscuous mode [ 2425.049958][ T2445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.059763][ T2445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.308136][ T9456] veth0_macvtap: entered promiscuous mode [ 2425.385371][ T9456] veth1_macvtap: entered promiscuous mode [ 2425.441562][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.464964][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.637752][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2425.722494][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2425.740665][ T2438] net_ratelimit: 128 callbacks suppressed [ 2425.740688][ T2438] bond4: (slave bridge4): failed to get link speed/duplex [ 2425.761294][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.773138][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2425.826470][ T2438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.868779][ T2438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.983850][ T2438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.995841][ T2438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2426.007798][ T2445] bond6: (slave bridge1): failed to get link speed/duplex [ 2426.031914][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 2426.132650][T24859] bond10: (slave bridge3): failed to get link speed/duplex [ 2426.368146][T27400] Bluetooth: hci30: command tx timeout [ 2426.598639][T27400] Bluetooth: hci31: command tx timeout [ 2426.913024][T27400] Bluetooth: hci32: command tx timeout [ 2427.020041][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 2427.034527][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2427.084068][ T9496] bridge_slave_0: entered allmulticast mode [ 2427.091770][ T9496] bridge_slave_0: entered promiscuous mode [ 2427.103769][ T9517] netlink: 'syz.2.11940': attribute type 4 has an invalid length. [ 2427.183450][ T9518] netlink: 'syz.2.11940': attribute type 4 has an invalid length. [ 2427.200494][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.208714][ T2438] bond10: (slave bridge3): failed to get link speed/duplex [ 2427.277316][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.397750][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 2427.440969][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 2427.464685][ T9496] bridge_slave_1: entered allmulticast mode [ 2427.523811][ T9496] bridge_slave_1: entered promiscuous mode [ 2427.647269][ T2438] bond3: (slave bridge3): failed to get link speed/duplex [ 2427.762605][ T2440] bond12: (slave bridge4): failed to get link speed/duplex [ 2427.960904][ T2445] bond2: (slave bridge2): failed to get link speed/duplex [ 2428.013016][ T8732] bond12: (slave bridge4): failed to get link speed/duplex [ 2428.064573][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2428.162311][ T68] bond7: (slave bridge7): failed to get link speed/duplex [ 2428.174084][ T8732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2428.182463][ T8732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2428.194677][ T68] bond9: (slave bridge2): failed to get link speed/duplex [ 2428.210844][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2428.227968][ T9526] netlink: 'syz.1.11941': attribute type 4 has an invalid length. [ 2428.316111][ T9527] netlink: 'syz.1.11941': attribute type 4 has an invalid length. [ 2428.992636][T27400] Bluetooth: hci32: command tx timeout [ 2429.083891][ T9496] team0: Port device team_slave_0 added [ 2429.102951][ T9496] team0: Port device team_slave_1 added [ 2429.575469][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2429.594651][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2429.679181][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2429.744940][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2429.773499][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2429.850067][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2430.095843][ T9539] netlink: 'syz.4.11942': attribute type 4 has an invalid length. [ 2430.138261][ T9496] hsr_slave_0: entered promiscuous mode [ 2430.149832][ T9496] hsr_slave_1: entered promiscuous mode [ 2430.174015][ T9496] debugfs: 'hsr0' already exists in 'hsr' [ 2430.190385][ T9496] Cannot create hsr debugfs directory [ 2430.231009][ T9540] netlink: 'syz.4.11942': attribute type 4 has an invalid length. [ 2430.571091][ T8691] Bluetooth: hci33: unexpected cc 0x0c03 length: 249 > 1 [ 2430.588326][ T8691] Bluetooth: hci33: unexpected cc 0x1003 length: 249 > 9 [ 2430.607517][ T8691] Bluetooth: hci33: unexpected cc 0x1001 length: 249 > 9 [ 2430.617530][ T8691] Bluetooth: hci33: unexpected cc 0x0c23 length: 249 > 4 [ 2430.625821][ T8691] Bluetooth: hci33: unexpected cc 0x0c38 length: 249 > 2 [ 2430.922570][ T756] net_ratelimit: 14 callbacks suppressed [ 2430.922595][ T756] bond9: (slave bridge2): failed to get link speed/duplex [ 2431.072456][ T8691] Bluetooth: hci32: command tx timeout [ 2431.287159][ T9496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.450818][ T9496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.512230][ T2445] bond2: (slave bridge2): failed to get link speed/duplex [ 2431.746529][ T9496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2431.887438][ T756] bond6: (slave bridge1): failed to get link speed/duplex [ 2431.919788][ T9496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2432.026476][ T2440] bond6: (slave bridge1): failed to get link speed/duplex [ 2432.343814][ T2445] bond4: (slave bridge4): failed to get link speed/duplex [ 2432.429451][ T9496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2432.446610][ T9543] chnl_net:caif_netlink_parms(): no params data found [ 2432.463017][ T2445] bond9: (slave bridge2): failed to get link speed/duplex [ 2432.470376][ T9496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2432.510245][ T2450] bond12: (slave bridge4): failed to get link speed/duplex [ 2432.520590][ T9496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2432.536399][ T9496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2432.672297][ T8691] Bluetooth: hci33: command tx timeout [ 2432.732451][ T2436] bond12: (slave bridge4): failed to get link speed/duplex [ 2432.888927][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2432.930370][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.939720][ T9543] bridge_slave_0: entered allmulticast mode [ 2432.953747][ T9543] bridge_slave_0: entered promiscuous mode [ 2432.986731][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.995150][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.015726][ T9543] bridge_slave_1: entered allmulticast mode [ 2433.025512][ T9543] bridge_slave_1: entered promiscuous mode [ 2433.097515][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2433.139215][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.153001][ T8691] Bluetooth: hci32: command tx timeout [ 2433.230315][ T9543] team0: Port device team_slave_0 added [ 2433.257596][ T9543] team0: Port device team_slave_1 added [ 2433.349289][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2433.360057][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2433.391524][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2433.452560][ T2436] bond6: (slave bridge1): failed to get link speed/duplex [ 2433.467643][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2433.476138][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2433.520162][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2433.542705][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2433.577541][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2433.646800][ T9543] hsr_slave_0: entered promiscuous mode [ 2433.654536][ T9543] hsr_slave_1: entered promiscuous mode [ 2433.661022][ T9543] debugfs: 'hsr0' already exists in 'hsr' [ 2433.666873][ T9543] Cannot create hsr debugfs directory [ 2433.708155][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 2433.735614][ T8691] Bluetooth: hci7: command 0x0406 tx timeout [ 2433.782981][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.790246][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2433.842948][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.850176][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2434.016012][ T9543] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.090391][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2434.148507][ T9543] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.207165][ T9496] veth0_vlan: entered promiscuous mode [ 2434.220396][ T9496] veth1_vlan: entered promiscuous mode [ 2434.281843][ T9496] veth0_macvtap: entered promiscuous mode [ 2434.349131][ T9543] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.376731][ T9496] veth1_macvtap: entered promiscuous mode [ 2434.410319][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2434.488273][ T9543] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.519457][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2434.560771][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.577207][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.603410][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.623557][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.761433][T27400] Bluetooth: hci33: command tx timeout [ 2434.851485][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2434.896739][ T31] Not tainted syzkaller #0 [ 2434.898326][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2434.911514][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2434.926134][ T31] task:kworker/0:1 state:D stack:21192 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2434.952437][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2434.962411][ T31] Workqueue: events pvr2_hdw_worker_poll [ 2434.968202][ T31] Call Trace: [ 2434.971603][ T31] [ 2434.974871][ T31] __schedule+0x1798/0x4cc0 [ 2434.979451][ T31] ? __pfx___schedule+0x10/0x10 [ 2434.985538][ T31] ? schedule+0x91/0x360 [ 2434.990947][ T31] schedule+0x165/0x360 [ 2434.996750][ T31] schedule_preempt_disabled+0x13/0x30 [ 2435.004181][ T31] __mutex_lock+0x7e6/0x1350 [ 2435.009271][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2435.027255][ T31] ? pvr2_hdw_worker_poll+0x37/0x15b0 [ 2435.077095][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2435.102284][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2435.107401][ T31] ? __lock_acquire+0xab9/0xd20 [ 2435.157152][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.172675][ T31] pvr2_hdw_worker_poll+0x37/0x15b0 [ 2435.177983][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.222206][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2435.227752][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.264294][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.272453][ T31] process_scheduled_works+0xae1/0x17b0 [ 2435.278108][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2435.290620][ T31] worker_thread+0x8a0/0xda0 [ 2435.299084][ T31] kthread+0x711/0x8a0 [ 2435.304582][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2435.309753][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.316521][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2435.321868][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2435.327806][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.333351][ T31] ret_from_fork+0x4bc/0x870 [ 2435.338027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2435.343783][ T31] ? __switch_to_asm+0x39/0x70 [ 2435.349292][ T31] ? __switch_to_asm+0x33/0x70 [ 2435.368855][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.373756][ T31] ret_from_fork_asm+0x1a/0x30 [ 2435.378560][ T31] [ 2435.381664][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 2435.389980][ T31] Not tainted syzkaller #0 [ 2435.395723][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2435.406238][ T31] task:kworker/1:0 state:D stack:21288 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 2435.418798][ T31] Workqueue: usb_hub_wq hub_event [ 2435.424109][ T31] Call Trace: [ 2435.427420][ T31] [ 2435.430385][ T31] __schedule+0x1798/0x4cc0 [ 2435.436333][ T31] ? __pfx___schedule+0x10/0x10 [ 2435.441260][ T31] ? schedule+0x91/0x360 [ 2435.446074][ T31] schedule+0x165/0x360 [ 2435.450282][ T31] schedule_timeout+0x9a/0x270 [ 2435.490368][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2435.497790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2435.503389][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2435.508659][ T31] ? wait_for_completion+0x267/0x5d0 [ 2435.517384][ T31] wait_for_completion+0x2bf/0x5d0 [ 2435.524004][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2435.529853][ T31] i2c_del_adapter+0x581/0x6e0 [ 2435.534791][ T31] ? pvr2_hdw_disconnect+0x6d/0x500 [ 2435.540144][ T31] ? rpm_resume+0xbf4/0x1610 [ 2435.545351][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2435.550711][ T31] pvr2_i2c_core_done+0x58/0xb0 [ 2435.565152][ T31] pvr2_hdw_disconnect+0x9f/0x500 [ 2435.570259][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2435.577201][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2435.584046][ T31] pvr2_context_disconnect+0x42/0x210 [ 2435.590019][ T31] pvr_disconnect+0x78/0xe0 [ 2435.596731][ T31] usb_unbind_interface+0x26e/0x910 [ 2435.602683][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2435.608557][ T31] device_release_driver_internal+0x4d9/0x800 [ 2435.615316][ T31] bus_remove_device+0x34d/0x410 [ 2435.620313][ T31] device_del+0x511/0x8e0 [ 2435.625716][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 2435.631240][ T31] ? __pfx_device_del+0x10/0x10 [ 2435.652512][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2435.657641][ T31] usb_disable_device+0x3e9/0x8a0 [ 2435.687698][ T31] usb_disconnect+0x330/0x950 [ 2435.692586][ T31] hub_event+0x1cf5/0x4a20 [ 2435.697036][ T31] ? cpuacct_charge+0x117/0x320 [ 2435.703870][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2435.709037][ T31] ? register_lock_class+0x51/0x320 [ 2435.723443][ T31] ? __pfx_hub_event+0x10/0x10 [ 2435.728285][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.734965][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2435.740307][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.746164][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2435.752106][ T31] process_scheduled_works+0xae1/0x17b0 [ 2435.757687][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2435.772636][ T31] worker_thread+0x8a0/0xda0 [ 2435.777344][ T31] kthread+0x711/0x8a0 [ 2435.781462][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2435.786654][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.791342][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2435.797389][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2435.803857][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.808721][ T31] ret_from_fork+0x4bc/0x870 [ 2435.813883][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2435.819133][ T31] ? __switch_to_asm+0x39/0x70 [ 2435.824396][ T31] ? __switch_to_asm+0x33/0x70 [ 2435.829199][ T31] ? __pfx_kthread+0x10/0x10 [ 2435.834259][ T31] ret_from_fork_asm+0x1a/0x30 [ 2435.839259][ T31] [ 2435.844048][ T31] INFO: task syz.0.11821:8530 blocked for more than 144 seconds. [ 2435.852066][ T31] Not tainted syzkaller #0 [ 2435.857062][ T31] Blocked by coredump. [ 2435.861863][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2435.890623][ T31] task:syz.0.11821 state:D stack:25544 pid:8530 tgid:8525 ppid:7550 task_flags:0x40054c flags:0x10080003 [ 2435.904591][ T31] Call Trace: [ 2435.907926][ T31] [ 2435.910920][ T31] __schedule+0x1798/0x4cc0 [ 2435.932641][ T8732] net_ratelimit: 135 callbacks suppressed [ 2435.932665][ T8732] bond3: (slave bridge3): failed to get link speed/duplex [ 2435.950806][ T31] ? __pfx___schedule+0x10/0x10 [ 2435.957069][ T2436] bond9: (slave bridge2): failed to get link speed/duplex [ 2435.964927][ T31] ? schedule+0x91/0x360 [ 2435.981616][ T31] schedule+0x165/0x360 [ 2435.982644][ T2445] bond11: (slave bridge1): failed to get link speed/duplex [ 2435.987912][ T31] schedule_preempt_disabled+0x13/0x30 [ 2435.998924][ T31] __mutex_lock+0x7e6/0x1350 [ 2436.004224][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2436.009046][ T31] ? usbdev_release+0x7e/0x760 [ 2436.015244][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2436.020320][ T31] ? __asan_memset+0x22/0x50 [ 2436.025306][ T31] ? __fsnotify_parent+0x242/0x540 [ 2436.030533][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 2436.033412][ T8732] bond1: (slave bridge1): failed to get link speed/duplex [ 2436.037241][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 2436.048815][ T31] usbdev_release+0x7e/0x760 [ 2436.053797][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 2436.059263][ T31] __fput+0x44c/0xa70 [ 2436.062406][ T2445] bond12: (slave bridge4): failed to get link speed/duplex [ 2436.065956][ T31] task_work_run+0x1d4/0x260 [ 2436.094235][ T2445] bond3: (slave bridge3): failed to get link speed/duplex [ 2436.094469][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2436.106692][ T31] do_exit+0x6b5/0x2300 [ 2436.110906][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2436.122338][T24859] bond9: (slave bridge2): failed to get link speed/duplex [ 2436.127920][ T31] ? __pfx_do_exit+0x10/0x10 [ 2436.129622][T24859] bond6: (slave bridge1): failed to get link speed/duplex [ 2436.134389][ T31] do_group_exit+0x21c/0x2d0 [ 2436.134423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2436.134459][ T31] get_signal+0x1285/0x1340 [ 2436.166687][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 2436.193774][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2436.200024][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 2436.202215][ T2436] bond12: (slave bridge4): failed to get link speed/duplex [ 2436.206011][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 2436.218702][ T31] exit_to_user_mode_loop+0x72/0x130 [ 2436.224430][ T2436] bond11: (slave bridge1): failed to get link speed/duplex [ 2436.224548][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 2436.236999][ T31] do_fast_syscall_32+0x34/0x80 [ 2436.241906][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2436.249127][ T31] RIP: 0023:0xf707d539 [ 2436.253322][ T31] RSP: 002b:00000000f500860c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2436.261806][ T31] RAX: fffffffffffffe00 RBX: 00000000f7445150 RCX: 0000000000000080 [ 2436.294328][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7445154 [ 2436.302884][ T31] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 2436.311092][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2436.320069][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2436.328438][ T31] [ 2436.331763][ T31] INFO: task syz.2.11822:8534 blocked for more than 144 seconds. [ 2436.344439][ T31] Not tainted syzkaller #0 [ 2436.349412][ T31] Blocked by coredump. [ 2436.355060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2436.364178][ T31] task:syz.2.11822 state:D stack:24664 pid:8534 tgid:8531 ppid:664 task_flags:0x40044c flags:0x10080003 [ 2436.391324][ T31] Call Trace: [ 2436.395049][ T31] [ 2436.398023][ T31] __schedule+0x1798/0x4cc0 [ 2436.404046][ T31] ? __pfx___schedule+0x10/0x10 [ 2436.408961][ T31] ? schedule+0x91/0x360 [ 2436.413676][ T31] schedule+0x165/0x360 [ 2436.418065][ T31] schedule_preempt_disabled+0x13/0x30 [ 2436.423767][ T31] __mutex_lock+0x7e6/0x1350 [ 2436.428411][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2436.433917][ T31] ? usbdev_release+0x7e/0x760 [ 2436.438919][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2436.444315][ T31] ? __asan_memset+0x22/0x50 [ 2436.448940][ T31] ? __fsnotify_parent+0x242/0x540 [ 2436.454126][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 2436.459697][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 2436.465137][ T31] usbdev_release+0x7e/0x760 [ 2436.469778][ T31] ? __pfx_usbdev_release+0x10/0x10 [ 2436.475042][ T31] __fput+0x44c/0xa70 [ 2436.488507][ T31] task_work_run+0x1d4/0x260 [ 2436.493345][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2436.498606][ T31] do_exit+0x6b5/0x2300 [ 2436.503284][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2436.508425][ T31] ? __pfx_do_exit+0x10/0x10 [ 2436.513604][ T31] do_group_exit+0x21c/0x2d0 [ 2436.518229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2436.524187][ T31] get_signal+0x1285/0x1340 [ 2436.528836][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 2436.534556][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2436.539949][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2436.546502][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 2436.551651][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 2436.557402][ T31] exit_to_user_mode_loop+0x72/0x130 [ 2436.562955][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 2436.568347][ T31] do_fast_syscall_32+0x34/0x80 [ 2436.573463][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2436.579901][ T31] RIP: 0023:0xf701d539 [ 2436.591661][ T31] RSP: 002b:00000000f53ec55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2436.600492][ T31] RAX: 0000000000010106 RBX: 0000000000000003 RCX: 00000000800000c0 [ 2436.608810][ T31] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 2436.617044][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2436.625101][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2436.633263][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2436.641348][ T31] [ 2436.644572][ T31] INFO: task syz.4.11826:8548 blocked for more than 145 seconds. [ 2436.653545][ T31] Not tainted syzkaller #0 [ 2436.658519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2436.667460][ T31] task:syz.4.11826 state:D stack:26824 pid:8548 tgid:8544 ppid:349 task_flags:0x400140 flags:0x10080002 [ 2436.680596][ T31] Call Trace: [ 2436.691273][ T31] [ 2436.698738][ T31] __schedule+0x1798/0x4cc0 [ 2436.703635][ T31] ? __pfx___schedule+0x10/0x10 [ 2436.708559][ T31] ? schedule+0x91/0x360 [ 2436.713131][ T31] schedule+0x165/0x360 [ 2436.717332][ T31] schedule_preempt_disabled+0x13/0x30 [ 2436.723841][ T31] __mutex_lock+0x7e6/0x1350 [ 2436.728479][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2436.733673][ T31] ? usbdev_open+0x16e/0x760 [ 2436.738462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2436.743543][ T31] ? bus_find_device+0x273/0x2b0 [ 2436.748504][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 2436.834654][ T8691] Bluetooth: hci33: command tx timeout [ 2436.848430][ T31] ? __lock_acquire+0xab9/0xd20 [ 2436.853629][ T31] usbdev_open+0x16e/0x760 [ 2436.858127][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 2436.863252][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2436.868544][ T31] chrdev_open+0x4cc/0x5e0 [ 2436.873125][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2436.878070][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2436.884665][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2436.897634][ T31] do_dentry_open+0x953/0x13f0 [ 2436.903793][ T31] vfs_open+0x3b/0x340 [ 2436.908005][ T31] ? path_openat+0x2ecd/0x3830 [ 2436.914349][ T31] path_openat+0x2ee5/0x3830 [ 2436.919036][ T31] ? __pfx_path_openat+0x10/0x10 [ 2436.925061][ T31] do_filp_open+0x1fa/0x410 [ 2436.929903][ T31] ? __lock_acquire+0xab9/0xd20 [ 2436.935302][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2436.940578][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2436.945638][ T31] ? alloc_fd+0x64c/0x6c0 [ 2436.950097][ T31] do_sys_openat2+0x121/0x1c0 [ 2436.955196][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 2436.960709][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2436.966018][ T31] ? rcu_is_watching+0x15/0xb0 [ 2436.970809][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 2436.976580][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2436.981793][ T31] do_fast_syscall_32+0x34/0x80 [ 2436.986772][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2437.003785][ T31] RIP: 0023:0xf706d539 [ 2437.008112][ T31] RSP: 002b:00000000f4ff8100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2437.017001][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f4ff8150 [ 2437.025505][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 00000000f7405ff4 [ 2437.034111][ T31] RBP: 0000000000000402 R08: 0000000000000000 R09: 0000000000000000 [ 2437.042348][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2437.050357][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2437.058489][ T31] [ 2437.084487][ T31] INFO: task syz.1.11837:8588 blocked for more than 145 seconds. [ 2437.101928][ T31] Not tainted syzkaller #0 [ 2437.118182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2437.127108][ T31] task:syz.1.11837 state:D stack:26824 pid:8588 tgid:8585 ppid:3426 task_flags:0x400140 flags:0x10080002 [ 2437.139306][ T31] Call Trace: [ 2437.142781][ T31] [ 2437.145821][ T31] __schedule+0x1798/0x4cc0 [ 2437.150348][ T31] ? __pfx___schedule+0x10/0x10 [ 2437.156089][ T31] ? schedule+0x91/0x360 [ 2437.160384][ T31] schedule+0x165/0x360 [ 2437.164675][ T31] schedule_preempt_disabled+0x13/0x30 [ 2437.170259][ T31] __mutex_lock+0x7e6/0x1350 [ 2437.175013][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2437.179916][ T31] ? usbdev_open+0x16e/0x760 [ 2437.184594][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2437.189717][ T31] ? bus_find_device+0x273/0x2b0 [ 2437.203914][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 2437.209281][ T31] ? __lock_acquire+0xab9/0xd20 [ 2437.214244][ T31] usbdev_open+0x16e/0x760 [ 2437.218657][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 2437.223778][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2437.228985][ T31] chrdev_open+0x4cc/0x5e0 [ 2437.233545][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2437.238539][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2437.244970][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2437.250004][ T31] do_dentry_open+0x953/0x13f0 [ 2437.255014][ T31] vfs_open+0x3b/0x340 [ 2437.259185][ T31] ? path_openat+0x2ecd/0x3830 [ 2437.264204][ T31] path_openat+0x2ee5/0x3830 [ 2437.268839][ T31] ? __pfx_path_openat+0x10/0x10 [ 2437.273869][ T31] do_filp_open+0x1fa/0x410 [ 2437.278396][ T31] ? __lock_acquire+0xab9/0xd20 [ 2437.283407][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2437.288514][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2437.293466][ T31] ? alloc_fd+0x64c/0x6c0 [ 2437.307135][ T31] do_sys_openat2+0x121/0x1c0 [ 2437.311892][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 2437.317961][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2437.323267][ T31] ? rcu_is_watching+0x15/0xb0 [ 2437.328231][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 2437.333943][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 2437.339206][ T31] do_fast_syscall_32+0x34/0x80 [ 2437.344128][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2437.350636][ T31] RIP: 0023:0xf7fe3539 [ 2437.354990][ T31] RSP: 002b:00000000f5494100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2437.363470][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5494150 [ 2437.371460][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 00000000f7475ff4 [ 2437.380035][ T31] RBP: 0000000000000402 R08: 0000000000000000 R09: 0000000000000000 [ 2437.388080][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2437.410499][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2437.420717][ T31] [ 2437.425161][ T31] [ 2437.425161][ T31] Showing all locks held in the system: [ 2437.447144][ T31] 1 lock held by pool_workqueue_/3: [ 2437.454090][ T31] 3 locks held by kworker/0:1/10: [ 2437.459355][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2437.470546][ T31] #1: ffffc900000f7ba0 ((work_completion)(&hdw->workpoll)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2437.486817][ T31] #2: ffff888066274188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_worker_poll+0x37/0x15b0 [ 2437.497970][ T31] 6 locks held by kworker/1:0/24: [ 2437.511073][ T31] #0: ffff8880202b5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2437.522793][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2437.535462][ T31] #2: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2437.544872][ T31] #3: ffff888031c1e198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 2437.554719][ T31] #4: ffff888076a89160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2437.565693][ T31] #5: ffff888066274188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 2437.576255][ T31] 1 lock held by khungtaskd/31: [ 2437.581182][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2437.591140][ T31] 2 locks held by getty/5590: [ 2437.597522][ T31] #0: ffff88814d81b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2437.618352][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2437.628636][ T31] 3 locks held by kworker/u9:1/27400: [ 2437.634840][ T31] #0: ffff8880798a2148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2437.645989][ T31] #1: ffffc9000bcc7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2437.658950][ T31] #2: ffff888084c8cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 2437.668968][ T31] 2 locks held by kworker/u8:8/2436: [ 2437.674408][ T31] 3 locks held by kworker/u8:13/2445: [ 2437.679873][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2437.692045][ T31] #1: ffffc90004577ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2437.703364][ T31] #2: ffffffff8f4df388 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2437.723961][ T31] 1 lock held by syz.0.11821/8530: [ 2437.729138][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 2437.739011][ T31] 1 lock held by syz.2.11822/8534: [ 2437.744248][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_release+0x7e/0x760 [ 2437.753625][ T31] 1 lock held by syz.4.11826/8548: [ 2437.758822][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.768188][ T31] 1 lock held by syz.1.11837/8588: [ 2437.773553][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.782703][ T31] 1 lock held by syz.3.11850/8648: [ 2437.787820][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.798275][ T31] 1 lock held by syz.7.11855/8717: [ 2437.803669][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.826392][ T31] 1 lock held by syz.8.11851/8764: [ 2437.831686][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.844798][ T31] 1 lock held by syz.5.11865/8778: [ 2437.849952][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.859060][ T31] 1 lock held by syz.6.11869/8803: [ 2437.864341][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.876354][ T31] 1 lock held by syz.9.11874/8844: [ 2437.881516][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.891146][ T31] 1 lock held by syz.0.11879/8884: [ 2437.897433][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.906623][ T31] 1 lock held by syz.2.11876/8893: [ 2437.919195][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.928559][ T31] 1 lock held by syz.4.11881/8916: [ 2437.934178][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.944235][ T31] 1 lock held by syz.1.11880/8932: [ 2437.949397][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.960035][ T31] 1 lock held by syz.3.11882/8952: [ 2437.968960][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.978320][ T31] 1 lock held by syz.8.11884/8993: [ 2437.983874][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2437.992918][ T31] 1 lock held by syz.5.11885/9031: [ 2437.998030][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.007083][ T31] 1 lock held by syz.6.11886/9082: [ 2438.012298][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.028523][ T31] 1 lock held by syz.7.11902/9123: [ 2438.040689][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.050143][ T31] 1 lock held by syz.0.11912/9179: [ 2438.057179][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.066270][ T31] 1 lock held by syz.9.11913/9185: [ 2438.071386][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.081349][ T31] 1 lock held by syz.2.11916/9214: [ 2438.086563][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.096337][ T31] 1 lock held by syz.4.11914/9226: [ 2438.101459][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.110595][ T31] 1 lock held by syz.1.11918/9249: [ 2438.116123][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.133999][ T31] 1 lock held by syz.3.11924/9308: [ 2438.139189][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.148264][ T31] 1 lock held by syz.8.11928/9338: [ 2438.153777][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.162883][ T31] 1 lock held by syz.5.11921/9372: [ 2438.168002][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.177124][ T31] 1 lock held by syz.7.11927/9387: [ 2438.185962][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.195431][ T31] 1 lock held by syz.6.11929/9389: [ 2438.200689][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.209996][ T31] 1 lock held by syz.0.11930/9412: [ 2438.215467][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.233296][ T31] 1 lock held by syz.9.11934/9441: [ 2438.238470][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.247594][ T31] 1 lock held by syz-executor/9496: [ 2438.252936][ T31] #0: ffffffff8f4df388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2438.262498][ T31] 1 lock held by syz.2.11940/9515: [ 2438.267637][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.277128][ T31] 1 lock held by syz.1.11941/9525: [ 2438.282325][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.291347][ T31] 1 lock held by syz.4.11942/9538: [ 2438.296783][ T31] #0: ffff8880277c5198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 2438.305998][ T31] 1 lock held by syz-executor/9543: [ 2438.311289][ T31] #0: ffffffff8f4df388 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 2438.340828][ T31] [ 2438.347318][ T31] ============================================= [ 2438.347318][ T31] [ 2438.357940][ T31] NMI backtrace for cpu 1 [ 2438.357965][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2438.357988][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2438.358000][ T31] Call Trace: [ 2438.358009][ T31] [ 2438.358019][ T31] dump_stack_lvl+0x189/0x250 [ 2438.358050][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2438.358073][ T31] ? __pfx__printk+0x10/0x10 [ 2438.358107][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2438.358136][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2438.358162][ T31] ? __pfx__printk+0x10/0x10 [ 2438.358189][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2438.358217][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2438.358243][ T31] watchdog+0xf60/0xfa0 [ 2438.358275][ T31] ? watchdog+0x1e2/0xfa0 [ 2438.358308][ T31] kthread+0x711/0x8a0 [ 2438.358333][ T31] ? __pfx_watchdog+0x10/0x10 [ 2438.358359][ T31] ? __pfx_kthread+0x10/0x10 [ 2438.358382][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2438.358409][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2438.358435][ T31] ? __pfx_kthread+0x10/0x10 [ 2438.358458][ T31] ret_from_fork+0x4bc/0x870 [ 2438.358488][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2438.358523][ T31] ? __switch_to_asm+0x39/0x70 [ 2438.358545][ T31] ? __switch_to_asm+0x33/0x70 [ 2438.358568][ T31] ? __pfx_kthread+0x10/0x10 [ 2438.358591][ T31] ret_from_fork_asm+0x1a/0x30 [ 2438.358632][ T31] [ 2438.358640][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2438.515944][ C0] NMI backtrace for cpu 0 [ 2438.515964][ C0] CPU: 0 UID: 0 PID: 756 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 2438.515984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2438.515995][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2438.516022][ C0] RIP: 0010:__build_skb_around+0x18e/0x3f0 [ 2438.516042][ C0] Code: b6 04 2c 84 c0 0f 85 ad 01 00 00 4c 89 7c 24 08 44 89 b3 cc 00 00 00 48 8d bb ba 00 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 ab 01 00 00 66 c7 83 ba 00 00 00 ff ff 48 8d bb b6 00 [ 2438.516057][ C0] RSP: 0018:ffffc900032478e0 EFLAGS: 00000a02 [ 2438.516078][ C0] RAX: 0000000000000000 RBX: ffff88805c50fa00 RCX: ffffffff8926eaf4 [ 2438.516091][ C0] RDX: ffff88805c50facc RSI: 0000000000000004 RDI: ffff88805c50faba [ 2438.516103][ C0] RBP: 1ffff1100b8a1f5a R08: ffff88805c50fae7 R09: 1ffff1100b8a1f5c [ 2438.516115][ C0] R10: dffffc0000000000 R11: ffffed100b8a1f5d R12: 1ffff1100b8a1f59 [ 2438.516126][ C0] R13: dffffc0000000000 R14: 0000000000000ec0 R15: ffff88805c50fad0 [ 2438.516139][ C0] FS: 0000000000000000(0000) GS:ffff888125d06000(0000) knlGS:0000000000000000 [ 2438.516152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2438.516164][ C0] CR2: 00005561fb38c6c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2438.516181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2438.516192][ C0] DR3: 000000005f6f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2438.516203][ C0] Call Trace: [ 2438.516210][ C0] [ 2438.516220][ C0] __alloc_skb+0x179/0x2d0 [ 2438.516239][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 2438.516265][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2438.516289][ C0] process_scheduled_works+0xae1/0x17b0 [ 2438.516321][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2438.516350][ C0] worker_thread+0x8a0/0xda0 [ 2438.516372][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2438.516397][ C0] ? __kthread_parkme+0x7b/0x200 [ 2438.516423][ C0] kthread+0x711/0x8a0 [ 2438.516440][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2438.516461][ C0] ? __pfx_kthread+0x10/0x10 [ 2438.516478][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2438.516497][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2438.516517][ C0] ? __pfx_kthread+0x10/0x10 [ 2438.516534][ C0] ret_from_fork+0x4bc/0x870 [ 2438.516556][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2438.516579][ C0] ? __switch_to_asm+0x39/0x70 [ 2438.516598][ C0] ? __switch_to_asm+0x33/0x70 [ 2438.516615][ C0] ? __pfx_kthread+0x10/0x10 [ 2438.516632][ C0] ret_from_fork_asm+0x1a/0x30 [ 2438.516658][ C0] [ 2438.854414][ T8691] Bluetooth: hci8: command 0x0406 tx timeout [ 2438.990549][ T2436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.089600][ T2436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.179521][ T2436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.279898][ T2436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.479547][ T2436] bridge_slave_1: left allmulticast mode [ 2439.486126][ T2436] bridge_slave_1: left promiscuous mode [ 2439.491942][ T2436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2439.501251][ T2436] bridge_slave_0: left allmulticast mode [ 2439.507538][ T2436] bridge_slave_0: left promiscuous mode [ 2439.513483][ T2436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.238235][ T2436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2440.254782][ T2436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2440.266006][ T2436] bond0 (unregistering): Released all slaves [ 2440.648465][ T2436] hsr_slave_0: left promiscuous mode [ 2440.655591][ T2436] hsr_slave_1: left promiscuous mode [ 2440.663518][ T2436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2440.671037][ T2436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2440.705536][ T2436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2440.713847][ T2436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2440.761620][ T2436] veth1_macvtap: left promiscuous mode [ 2440.768455][ T2436] veth0_macvtap: left promiscuous mode [ 2440.774953][ T2436] veth1_vlan: left promiscuous mode [ 2440.799778][ T2436] veth0_vlan: left promiscuous mode [ 2441.801661][ T2436] team0 (unregistering): Port device team_slave_1 removed [ 2441.902187][ T2436] team0 (unregistering): Port device team_slave_0 removed [ 2442.838978][ T2438] net_ratelimit: 157 callbacks suppressed [ 2442.839005][ T2438] bond6: (slave bridge1): failed to get link speed/duplex [ 2442.872583][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2442.902611][ T2440] bond4: (slave bridge4): failed to get link speed/duplex [ 2442.910005][ T2440] bond3: (slave bridge3): failed to get link speed/duplex [ 2442.967846][ T2440] bond11: (slave bridge1): failed to get link speed/duplex [ 2442.982388][ T2445] bond6: (slave bridge1): failed to get link speed/duplex [ 2442.989626][ T2445] bond9: (slave bridge2): failed to get link speed/duplex [ 2443.012508][ T2440] bond2: (slave bridge2): failed to get link speed/duplex [ 2443.025673][ T2445] bond7: (slave bridge7): failed to get link speed/duplex [ 2443.052350][ T68] bond12: (slave bridge4): failed to get link speed/duplex [ 2443.829273][ T2436] bridge_slave_1: left allmulticast mode [ 2443.835360][ T2436] bridge_slave_1: left promiscuous mode [ 2443.843993][ T2436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.865454][ T2436] bridge_slave_0: left allmulticast mode [ 2443.871175][ T2436] bridge_slave_0: left promiscuous mode [ 2443.878683][ T2436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.978451][ T9420] Bluetooth: hci9: command 0x0406 tx timeout [ 2444.104188][ T2436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2444.120664][ T2436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2444.139976][ T2436] bond0 (unregistering): Released all slaves [ 2444.328236][ T2436] hsr_slave_0: left promiscuous mode [ 2444.338967][ T2436] hsr_slave_1: left promiscuous mode [ 2444.347203][ T2436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2444.357916][ T2436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2444.634860][ T2436] team0 (unregistering): Port device team_slave_1 removed [ 2444.698276][ T2436] team0 (unregistering): Port device team_slave_0 removed