last executing test programs: 2m11.152164981s ago: executing program 3 (id=28): r0 = fsopen(&(0x7f00000005c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0xd5}, 0x0, &(0x7f00000001c0)=0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0xa, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 2m6.055905764s ago: executing program 3 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x420, 0x3f4, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x33, [0x80, 0x9, 0xa, 0x5, 0x3, 0x7f, 0x2, 0x2, 0x8, 0x36d, 0xe6e, 0xc1, 0xb, 0x4, 0x10, 0x7, 0x6d4, 0x9, 0x9, 0xd15, 0x7, 0x40, 0xffffff8c, 0x9, 0x8, 0x9, 0x11f, 0x3, 0x8, 0x88c8, 0x1, 0x3ff, 0x8, 0x5, 0xd, 0x6, 0xaa, 0x9, 0x4, 0x3, 0x9, 0xfffffffb, 0x3, 0x3, 0x400, 0x7, 0x8, 0x7, 0x234c000, 0x527, 0x0, 0x25a369d2, 0x10, 0x2, 0xb2e, 0x1ff, 0x7, 0x7, 0x80000000, 0xbb, 0xffffffff, 0x2f31, 0x0, 0x17a], [0x7, 0x1ff, 0x7fffffff, 0x7, 0x3, 0x1, 0xa2a7, 0x101, 0x3, 0x27, 0x7f, 0x9, 0x101, 0x200, 0x1, 0x850c, 0x5, 0x0, 0x80, 0x10001, 0xa07, 0x7, 0x9f9, 0x9e, 0x8, 0x8, 0x0, 0xffffbef3, 0x8001, 0x1, 0x5, 0x4, 0x6, 0x8, 0x9, 0xe91, 0x18ce, 0x18001, 0x7, 0x4e, 0x9, 0x8, 0x45, 0x8, 0x8001, 0x9, 0x9, 0x6c00, 0x0, 0x28, 0xd992, 0x80, 0xf, 0xe, 0x7fff, 0x8, 0xfffffff7, 0x8, 0x1eab, 0x7fff, 0x1, 0x5, 0x100, 0xffffce60], [0xfffff664, 0xb4c, 0x8, 0x4, 0x3, 0x1000, 0x10000, 0x6, 0x5, 0x80, 0x6, 0x7fffffff, 0x1000010, 0x80000, 0x3, 0x3, 0x3, 0xc13f, 0x9, 0x9, 0xe1f, 0x100, 0x5, 0x3ea, 0x183, 0x1, 0x3, 0x5488, 0x9, 0xe, 0x8, 0x0, 0x400000, 0xf0e, 0xb, 0x39, 0x5, 0xf7, 0xc133, 0x7a, 0xb, 0x66, 0x8, 0x4, 0x59, 0x9, 0x1, 0xe, 0x9, 0x6, 0x8, 0x7fffffff, 0x2, 0x8, 0x4, 0x3, 0x6, 0x7, 0xc468, 0x7, 0xfffffffb, 0x4ffb, 0x8, 0xfe91472f], [0xfffffff9, 0xfffffffe, 0x1, 0x0, 0xc000, 0x3b9, 0xfffffffd, 0x6000, 0x400, 0x7f, 0xbc45, 0x115, 0x7, 0x8, 0xf5, 0x5, 0x2e, 0x7, 0x0, 0x7fff, 0x8, 0x2, 0x9, 0x80, 0x400, 0x7, 0x4, 0x10, 0x4c, 0x10000, 0xfff, 0xa51f, 0x937a, 0x5, 0x5, 0x1, 0x6, 0x6, 0x8c, 0x4, 0xffffff67, 0x5, 0x2, 0xf, 0x0, 0x2, 0x200, 0x6a9d, 0x6, 0x352, 0xbaa, 0x7, 0x8, 0xf5, 0x1ff, 0x1, 0x80, 0x5, 0x2, 0x8, 0x6, 0x4, 0x6, 0xfffffff8]}}, 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) getsockname$packet(r1, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x40010, r1, 0x65e7a000) close(r0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) 2m0.668556229s ago: executing program 3 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x2, 0x0, 0x400, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 1m57.26530052s ago: executing program 3 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 1m44.942016296s ago: executing program 3 (id=71): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) ioctl$TIOCCONS(r2, 0x541d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x40040011, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x3ffffd, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4881) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, &(0x7f0000000040)) unshare(0x2000400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m29.581502601s ago: executing program 32 (id=71): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000540), 0x6700, 0x0) ioctl$TIOCCONS(r2, 0x541d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x40040011, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x3ffffd, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4881) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, &(0x7f0000000040)) unshare(0x2000400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16.712207669s ago: executing program 0 (id=267): msgget$private(0x0, 0x18) 15.997453354s ago: executing program 0 (id=268): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 15.20402966s ago: executing program 1 (id=274): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}, {0x0}], 0x4}, 0x4008001) 13.733426737s ago: executing program 4 (id=275): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$TUNATTACHFILTER(r0, 0x894c, 0x0) 13.244528854s ago: executing program 0 (id=278): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.191625445s ago: executing program 4 (id=279): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) socket(0x20000000000000a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001280)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 12.963987242s ago: executing program 1 (id=280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000180)=""/156) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r5, 0x0, 0x3}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 10.942448364s ago: executing program 4 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 8.815926832s ago: executing program 4 (id=283): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) 8.320417588s ago: executing program 4 (id=286): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e13d0801512f38004", @ANYRES64], 0x26c0}}, 0x4010) socket$inet6(0xa, 0x2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x2001) execve(0x0, 0x0, 0x0) 7.824365425s ago: executing program 5 (id=288): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.782280433s ago: executing program 0 (id=289): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000001680)="513b5a9c0c0000004d4241fc0560", 0xe}], 0x1}, 0x0) 6.396102478s ago: executing program 2 (id=290): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00D', 0x2}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) 6.387763089s ago: executing program 5 (id=291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 6.100050261s ago: executing program 2 (id=292): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffff9, 0xfffffffd}, 0x80, 0x0}, 0x20040010) 5.213958516s ago: executing program 5 (id=293): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.93173159s ago: executing program 5 (id=294): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 3.804235759s ago: executing program 0 (id=295): getpgid(0x0) socket(0x6, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) 3.690831869s ago: executing program 2 (id=296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x5}, 0x8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x8080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.060979886s ago: executing program 1 (id=300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000600)={0x17}) 1.672049453s ago: executing program 5 (id=301): r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0xff0f) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @empty}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 200.425059ms ago: executing program 1 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x1b8}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$TUNATTACHFILTER(r0, 0x894c, 0x0) 177.416501ms ago: executing program 5 (id=303): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) getdents64(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 0s ago: executing program 4 (id=304): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) kernel console output (not intermixed with test programs): [ 87.195229][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 90.766487][ T5824] cgroup: Unknown subsys name 'net' [ 91.103173][ T5824] cgroup: Unknown subsys name 'cpuset' [ 91.148675][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.114926][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.330809][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.335264][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.344040][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.350280][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.351154][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.366090][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.367434][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.369109][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.370750][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.371722][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.393166][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.408852][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.410921][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.434422][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.435834][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.581104][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.583060][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.584116][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.587112][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.591465][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.617422][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.619671][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.620564][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.621730][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.622565][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.498284][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 98.580141][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 98.585486][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 99.051952][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 99.089950][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 99.430060][ T59] Bluetooth: hci2: command tx timeout [ 99.430066][ T5841] Bluetooth: hci0: command tx timeout [ 99.508854][ T59] Bluetooth: hci1: command tx timeout [ 99.550012][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.551255][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.551872][ T5836] bridge_slave_0: entered allmulticast mode [ 99.555378][ T5836] bridge_slave_0: entered promiscuous mode [ 99.669207][ T59] Bluetooth: hci3: command tx timeout [ 99.748138][ T59] Bluetooth: hci4: command tx timeout [ 99.831173][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.831337][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.831560][ T5836] bridge_slave_1: entered allmulticast mode [ 99.834840][ T5836] bridge_slave_1: entered promiscuous mode [ 99.844956][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.845112][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.845290][ T5837] bridge_slave_0: entered allmulticast mode [ 99.855844][ T5837] bridge_slave_0: entered promiscuous mode [ 99.919853][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.920020][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.920250][ T5840] bridge_slave_0: entered allmulticast mode [ 99.923587][ T5840] bridge_slave_0: entered promiscuous mode [ 100.011107][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.011267][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.011485][ T5837] bridge_slave_1: entered allmulticast mode [ 100.014829][ T5837] bridge_slave_1: entered promiscuous mode [ 100.048205][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.048399][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.048627][ T5840] bridge_slave_1: entered allmulticast mode [ 100.051906][ T5840] bridge_slave_1: entered promiscuous mode [ 100.386468][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.693874][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.697011][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.785527][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.785686][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.785875][ T5847] bridge_slave_0: entered allmulticast mode [ 100.789011][ T5847] bridge_slave_0: entered promiscuous mode [ 100.885131][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.973714][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.974054][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.974161][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.974276][ T5848] bridge_slave_0: entered allmulticast mode [ 100.975920][ T5848] bridge_slave_0: entered promiscuous mode [ 100.979432][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.979589][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.980086][ T5847] bridge_slave_1: entered allmulticast mode [ 100.982821][ T5847] bridge_slave_1: entered promiscuous mode [ 101.002179][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.190815][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.191271][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.191482][ T5848] bridge_slave_1: entered allmulticast mode [ 101.194800][ T5848] bridge_slave_1: entered promiscuous mode [ 101.352654][ T5836] team0: Port device team_slave_0 added [ 101.508243][ T59] Bluetooth: hci0: command tx timeout [ 101.518585][ T59] Bluetooth: hci2: command tx timeout [ 101.588046][ T59] Bluetooth: hci1: command tx timeout [ 101.633531][ T5836] team0: Port device team_slave_1 added [ 101.636963][ T5837] team0: Port device team_slave_0 added [ 101.735292][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.739902][ T5840] team0: Port device team_slave_0 added [ 101.749338][ T59] Bluetooth: hci3: command tx timeout [ 101.810798][ T5837] team0: Port device team_slave_1 added [ 101.814235][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.817161][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.828029][ T59] Bluetooth: hci4: command tx timeout [ 101.833079][ T5840] team0: Port device team_slave_1 added [ 101.973767][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.380956][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.380973][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.381000][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.692332][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.692350][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.692377][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.694690][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.694703][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.694729][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.834737][ T5847] team0: Port device team_slave_0 added [ 102.837598][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.837614][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.837641][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.870344][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.870362][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.870385][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.874002][ T5848] team0: Port device team_slave_0 added [ 102.882368][ T5847] team0: Port device team_slave_1 added [ 102.883715][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.883726][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.883748][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.922251][ T5848] team0: Port device team_slave_1 added [ 103.588079][ T59] Bluetooth: hci2: command tx timeout [ 103.588114][ T59] Bluetooth: hci0: command tx timeout [ 103.668194][ T5841] Bluetooth: hci1: command tx timeout [ 103.680612][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.680628][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.680650][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.682031][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.682042][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.682063][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.787467][ T5836] hsr_slave_0: entered promiscuous mode [ 103.789687][ T5836] hsr_slave_1: entered promiscuous mode [ 103.828052][ T5841] Bluetooth: hci3: command tx timeout [ 103.872469][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.872487][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.872523][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.874154][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.874168][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.874193][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.908454][ T5841] Bluetooth: hci4: command tx timeout [ 104.040124][ T5837] hsr_slave_0: entered promiscuous mode [ 104.041748][ T5837] hsr_slave_1: entered promiscuous mode [ 104.043018][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 104.043124][ T5837] Cannot create hsr debugfs directory [ 104.077808][ T5840] hsr_slave_0: entered promiscuous mode [ 104.079802][ T5840] hsr_slave_1: entered promiscuous mode [ 104.080743][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 104.080766][ T5840] Cannot create hsr debugfs directory [ 104.860361][ T5848] hsr_slave_0: entered promiscuous mode [ 104.862039][ T5848] hsr_slave_1: entered promiscuous mode [ 104.863075][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 104.863101][ T5848] Cannot create hsr debugfs directory [ 104.956657][ T5847] hsr_slave_0: entered promiscuous mode [ 104.957579][ T5847] hsr_slave_1: entered promiscuous mode [ 104.958933][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 104.958958][ T5847] Cannot create hsr debugfs directory [ 105.678089][ T59] Bluetooth: hci2: command tx timeout [ 105.678141][ T5841] Bluetooth: hci0: command tx timeout [ 105.748332][ T5841] Bluetooth: hci1: command tx timeout [ 105.908297][ T5841] Bluetooth: hci3: command tx timeout [ 105.988120][ T5841] Bluetooth: hci4: command tx timeout [ 106.466905][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.508934][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.546673][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.610533][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.753098][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.775219][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.821323][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.883402][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.059856][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.114360][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.155526][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.216509][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.400680][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.476825][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.515864][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.582625][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.816318][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.817388][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.872999][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.923997][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.975701][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.097258][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.107441][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.176769][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.177391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.231585][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.231807][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.276827][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.344074][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.344318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.382781][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.411035][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.411278][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.547461][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.610402][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.618974][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.619126][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.711850][ T3196] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.712019][ T3196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.845078][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.909789][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.954448][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.954780][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.013656][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.013911][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.119086][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.212778][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.212975][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.274217][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.274393][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.309357][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.655076][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.800655][ T5836] veth0_vlan: entered promiscuous mode [ 109.892153][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.900031][ T5836] veth1_vlan: entered promiscuous mode [ 110.113644][ T5837] veth0_vlan: entered promiscuous mode [ 110.223868][ T5837] veth1_vlan: entered promiscuous mode [ 110.239498][ T5836] veth0_macvtap: entered promiscuous mode [ 110.293628][ T5836] veth1_macvtap: entered promiscuous mode [ 110.361376][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.475661][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.561442][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.641256][ T5837] veth0_macvtap: entered promiscuous mode [ 110.646822][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.660127][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.672881][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.685571][ T5837] veth1_macvtap: entered promiscuous mode [ 110.690856][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.701231][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.862822][ T5847] veth0_vlan: entered promiscuous mode [ 110.953939][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.015647][ T5847] veth1_vlan: entered promiscuous mode [ 111.052369][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.127666][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.127688][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.162928][ T1439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.185335][ T1439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.205618][ T1439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.239656][ T1439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.240791][ T5848] veth0_vlan: entered promiscuous mode [ 111.359446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.359482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.376267][ T5840] veth0_vlan: entered promiscuous mode [ 111.383168][ T5848] veth1_vlan: entered promiscuous mode [ 111.592073][ T5840] veth1_vlan: entered promiscuous mode [ 111.608798][ T5847] veth0_macvtap: entered promiscuous mode [ 111.709508][ T5847] veth1_macvtap: entered promiscuous mode [ 111.842221][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.842245][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.970342][ T5848] veth0_macvtap: entered promiscuous mode [ 111.976097][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.196765][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.467955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.468355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.695206][ T5848] veth1_macvtap: entered promiscuous mode [ 112.713914][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.713937][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.764776][ T3196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.778097][ T3196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.820618][ T3196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.881645][ T5840] veth0_macvtap: entered promiscuous mode [ 112.888269][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.032150][ T5840] veth1_macvtap: entered promiscuous mode [ 113.070725][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.232649][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.333389][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.357373][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.389307][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.434273][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.447160][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.528810][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.546421][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.549864][ T3196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.549882][ T3196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.553926][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.780967][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 113.839727][ T44] usb 1-1: config 0 has an invalid interface number: 173 but max is 0 [ 113.839746][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.839756][ T44] usb 1-1: config 0 has no interface number 0 [ 113.840017][ T44] usb 1-1: too many endpoints for config 0 interface 173 altsetting 0: 128, using maximum allowed: 30 [ 113.840079][ T44] usb 1-1: config 0 interface 173 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 113.843591][ T3503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.851106][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0114, bcdDevice=33.c7 [ 113.851135][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.851161][ T44] usb 1-1: Product: syz [ 113.851173][ T44] usb 1-1: Manufacturer: syz [ 113.851185][ T44] usb 1-1: SerialNumber: syz [ 113.889528][ T44] usb 1-1: config 0 descriptor?? [ 114.018126][ T3503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.026442][ T3503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.191539][ T44] hub 1-1:0.173: bad descriptor, ignoring hub [ 114.191567][ T44] hub 1-1:0.173: probe with driver hub failed with error -5 [ 114.192840][ T44] keyspan 1-1:0.173: Keyspan - (without firmware) converter detected [ 114.202796][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.202814][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.259775][ T3503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.284308][ T44] usb 1-1: USB disconnect, device number 2 [ 114.286923][ T44] keyspan 1-1:0.173: device disconnected [ 114.596718][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.596740][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.893978][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.893999][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.222808][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.222830][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.581113][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.581138][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.678501][ T5994] Zero length message leads to an empty skb [ 117.298741][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.450447][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 117.453577][ T44] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 117.459576][ T44] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 117.459605][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.459622][ T44] usb 4-1: Product: syz [ 117.459634][ T44] usb 4-1: Manufacturer: syz [ 117.459647][ T44] usb 4-1: SerialNumber: syz [ 117.527716][ T44] usb 4-1: config 0 descriptor?? [ 117.737515][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.737587][ T44] usb 4-1: setting power ON [ 117.757658][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 117.850729][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.955337][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.955435][ T44] usb 4-1: media controller created [ 118.131041][ T5997] dvb-usb: bulk message failed: -22 (3/0) [ 118.131500][ T5997] cxusb: i2c wr: len=80 is too big! [ 118.131500][ T5997] [ 118.915784][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.944154][ T44] usb 4-1: selecting invalid altsetting 6 [ 118.944179][ T44] usb 4-1: digital interface selection failed (-22) [ 118.944196][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 118.947298][ T44] usb 4-1: setting power OFF [ 118.947422][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 118.947441][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 118.947455][ T44] (NULL device *): no alternate interface [ 118.995591][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 119.100653][ T44] usb 4-1: USB disconnect, device number 2 [ 119.555216][ T6016] tipc: Enabling of bearer rejected, failed to enable media [ 119.571066][ T6016] syzkaller0: entered promiscuous mode [ 119.571100][ T6016] syzkaller0: entered allmulticast mode [ 120.372272][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 122.026784][ T6034] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.24'. [ 122.164498][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.149013][ T6001] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.370292][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.370328][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.370368][ T6001] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 123.370392][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.785723][ T6001] usb 3-1: config 0 descriptor?? [ 124.792227][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31'. [ 124.822079][ T6001] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 125.139101][ T6001] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 125.261431][ T6001] cp2112 0003:10C4:EA90.0001: error requesting version [ 125.301267][ T6001] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -5 [ 125.610687][ T6071] tipc: Enabling of bearer rejected, failed to enable media [ 125.648909][ T6071] syzkaller0: entered promiscuous mode [ 125.648945][ T6071] syzkaller0: entered allmulticast mode [ 125.714706][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.715286][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.305276][ T44] usb 3-1: USB disconnect, device number 2 [ 128.705372][ T6086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.727729][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.303704][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.409508][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.578619][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.838381][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.838488][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.412153][ T6149] netlink: 96 bytes leftover after parsing attributes in process `syz.0.48'. [ 135.653848][ T6154] ip6erspan0: entered promiscuous mode [ 135.708834][ T5165] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.938045][ T5165] usb 1-1: Using ep0 maxpacket: 8 [ 135.941256][ T5165] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.941319][ T5165] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.941342][ T5165] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.945754][ T5165] usb 1-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 135.945772][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.945783][ T5165] usb 1-1: Product: syz [ 135.945790][ T5165] usb 1-1: Manufacturer: syz [ 135.945798][ T5165] usb 1-1: SerialNumber: syz [ 136.045150][ T5165] usb 1-1: config 0 descriptor?? [ 136.107685][ T5165] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 136.107802][ T5165] imon 1-1:0.0: unable to initialize intf0, err -19 [ 136.107820][ T5165] imon:imon_probe: failed to initialize context! [ 136.107832][ T5165] imon 1-1:0.0: unable to register, err -19 [ 136.290318][ T5165] usb 1-1: USB disconnect, device number 3 [ 136.948411][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.361158][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.378200][ T6180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.634207][ T5952] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 142.425252][ T5952] usb 3-1: device descriptor read/all, error -71 [ 143.093220][ T6218] fuse: Unknown parameter '0x0000000000000004' [ 143.542945][ T6221] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.707999][ T5165] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.870072][ T5165] usb 2-1: Using ep0 maxpacket: 16 [ 143.874568][ T5165] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.874605][ T5165] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.874632][ T5165] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.874668][ T5165] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 143.874691][ T5165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.004015][ T5165] usb 2-1: config 0 descriptor?? [ 144.219197][ T5165] usb 2-1: string descriptor 0 read error: -71 [ 144.249379][ T5165] usbhid 2-1:0.0: can't add hid device: -71 [ 144.249525][ T5165] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.274727][ T5165] usb 2-1: USB disconnect, device number 2 [ 146.783153][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 148.865582][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.008129][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.147683][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.668206][ T6267] tipc: Started in network mode [ 150.668227][ T6267] tipc: Node identity ac14140f, cluster identity 4711 [ 150.669252][ T6267] tipc: New replicast peer: 255.255.255.255 [ 150.670070][ T6267] tipc: Enabled bearer , priority 10 [ 151.689850][ T5952] tipc: Node number set to 2886997007 [ 151.943747][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.140227][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.371737][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.439530][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.498028][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 152.500217][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.500238][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.500253][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.500265][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.500290][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.500303][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.792245][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 152.792279][ T9] usbtmc 2-1:16.0: can't read capabilities [ 153.088759][ T9] usb 2-1: USB disconnect, device number 3 [ 157.552163][ T6318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.344489][ T6315] tty tty2: ldisc open failed (-12), clearing slot 1 [ 163.726879][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.82'. [ 165.661262][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 165.665156][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 167.776113][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.810235][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.842169][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.852391][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.853986][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.784408][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 169.909258][ T5841] Bluetooth: hci5: command tx timeout [ 169.990099][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.990129][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 169.990153][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 169.990169][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.050527][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 170.050552][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.050563][ T9] usb 3-1: Product: syz [ 170.050571][ T9] usb 3-1: Manufacturer: syz [ 170.050579][ T9] usb 3-1: SerialNumber: syz [ 170.123323][ T9] usb 3-1: config 0 descriptor?? [ 170.134285][ T6373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.738130][ T9] rc_core: IR keymap rc-imon-rsc not found [ 170.738154][ T9] Registered IR keymap rc-empty [ 170.763367][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 170.801046][ T9] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 170.941562][ T9] usb 3-1: USB disconnect, device number 5 [ 172.000028][ T5841] Bluetooth: hci5: command tx timeout [ 173.399037][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.563289][ T6363] chnl_net:caif_netlink_parms(): no params data found [ 174.400887][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.450231][ T5841] Bluetooth: hci5: command tx timeout [ 174.690135][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.857808][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.021342][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.747737][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.141297][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.174590][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.880642][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.897910][ T5841] Bluetooth: hci5: command tx timeout [ 176.997712][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.099699][ T3613] Bluetooth: hci1: Frame reassembly failed (-84) [ 177.196412][ T6438] netlink: 200 bytes leftover after parsing attributes in process `syz.4.110'. [ 178.331548][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.331758][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.332016][ T6363] bridge_slave_0: entered allmulticast mode [ 178.358806][ T6363] bridge_slave_0: entered promiscuous mode [ 178.383148][ T6446] syzkaller0: entered promiscuous mode [ 178.383169][ T6446] syzkaller0: entered allmulticast mode [ 178.402777][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.403105][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.403366][ T6363] bridge_slave_1: entered allmulticast mode [ 178.412441][ T6363] bridge_slave_1: entered promiscuous mode [ 179.108045][ T59] Bluetooth: hci1: command 0x1003 tx timeout [ 179.160560][ T5841] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 181.347210][ T6363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.797532][ T6363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.069750][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.119568][ T6468] mmap: syz.1.118 (6468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.218085][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 182.224483][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 182.224506][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 182.224526][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.224540][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.224564][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.224577][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.339049][ T6363] team0: Port device team_slave_0 added [ 182.376431][ T6363] team0: Port device team_slave_1 added [ 182.589001][ T31] usb 1-1: GET_CAPABILITIES returned 0 [ 182.589059][ T31] usbtmc 1-1:16.0: can't read capabilities [ 182.649184][ T6479] netlink: 200 bytes leftover after parsing attributes in process `syz.2.122'. [ 183.749705][ T44] usb 1-1: USB disconnect, device number 4 [ 183.934752][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.109412][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.114002][ T6363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.114015][ T6363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.114029][ T6363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.182300][ T6363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.182313][ T6363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.182328][ T6363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.625012][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.917098][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.118723][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 185.125415][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.301445][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.470098][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.738708][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.882242][ T6498] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 185.882271][ T6498] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 185.882283][ T6498] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 186.030346][ T37] audit: type=1800 audit(1756948806.144:2): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.124" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 186.196838][ T6363] hsr_slave_0: entered promiscuous mode [ 186.258902][ T6363] hsr_slave_1: entered promiscuous mode [ 186.260051][ T6363] debugfs: 'hsr0' already exists in 'hsr' [ 186.260078][ T6363] Cannot create hsr debugfs directory [ 186.538367][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.695579][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.156030][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.826930][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.471282][ T6517] netlink: 200 bytes leftover after parsing attributes in process `syz.1.133'. [ 189.893042][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.059578][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 190.067505][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.067530][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.067545][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.067558][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.067584][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.067597][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.402473][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 190.402529][ T9] usbtmc 3-1:16.0: can't read capabilities [ 190.435887][ T6363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 190.511259][ T6363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 190.711668][ T9] usb 3-1: USB disconnect, device number 6 [ 190.784364][ T6363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 190.972777][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.879612][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.964302][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.033416][ T6363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 192.204010][ T69] Bluetooth: hci1: Frame reassembly failed (-84) [ 192.732835][ T6363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.868628][ T6363] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.048743][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.048925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.110777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.111024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.151208][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.228253][ T5841] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 194.228285][ T59] Bluetooth: hci1: command 0x1003 tx timeout [ 194.438090][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 194.439870][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 194.439890][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 194.439904][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.439917][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.439942][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.439954][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.567613][ T6363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.866038][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.866245][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.045775][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 195.798227][ T6582] syz.2.150 (6582) used greatest stack depth: 16440 bytes left [ 196.143288][ T5952] usb 5-1: GET_CAPABILITIES returned 0 [ 196.143987][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 196.372881][ T5952] usb 5-1: USB disconnect, device number 2 [ 197.040513][ T6363] veth0_vlan: entered promiscuous mode [ 197.157980][ T6363] veth1_vlan: entered promiscuous mode [ 197.460217][ T6363] veth0_macvtap: entered promiscuous mode [ 197.492604][ T6363] veth1_macvtap: entered promiscuous mode [ 198.848269][ T6609] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.137815][ T6363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.226263][ T6363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.331858][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.389780][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.402228][ T1334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.432926][ T1334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.698175][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.869514][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 200.874905][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.874939][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.874963][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.874986][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.875029][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.875050][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.181024][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 201.181058][ T44] usbtmc 5-1:16.0: can't read capabilities [ 201.368439][ T5165] usb 5-1: USB disconnect, device number 3 [ 201.568128][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.568152][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.903205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.903281][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.668273][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 205.695282][ T6666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 205.696499][ T6666] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.709702][ T6666] vhci_hcd vhci_hcd.0: Device attached [ 206.278837][ T10] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 207.354933][ T6667] vhci_hcd: connection reset by peer [ 209.175739][ T1496] vhci_hcd: stop threads [ 209.176901][ T1496] vhci_hcd: release socket [ 209.184558][ T1496] vhci_hcd: disconnect device [ 209.772038][ T5165] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.928058][ T5165] usb 6-1: Using ep0 maxpacket: 32 [ 209.932569][ T5165] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.932600][ T5165] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 209.932636][ T5165] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.978666][ T5165] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 209.978698][ T5165] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.978718][ T5165] usb 6-1: Product: syz [ 209.978732][ T5165] usb 6-1: Manufacturer: syz [ 209.978746][ T5165] usb 6-1: SerialNumber: syz [ 210.030549][ T5165] usb 6-1: config 0 descriptor?? [ 210.508092][ T5165] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 210.709527][ T5165] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 210.709913][ T5165] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 210.960105][ T5165] usb 6-1: USB disconnect, device number 2 [ 211.428055][ T10] vhci_hcd: vhci_device speed not set [ 218.003833][ T6761] syz.4.212 uses obsolete (PF_INET,SOCK_PACKET) [ 218.462992][ T6775] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 218.463023][ T6775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.463138][ T6775] vhci_hcd vhci_hcd.0: Device attached [ 218.708085][ T5952] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 220.570783][ T6776] vhci_hcd: connection reset by peer [ 220.842408][ T3572] vhci_hcd: stop threads [ 220.842471][ T3572] vhci_hcd: release socket [ 220.846434][ T3572] vhci_hcd: disconnect device [ 222.560848][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 222.727881][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 222.729319][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 222.729344][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 222.968041][ T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.129831][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 223.133507][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.133541][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.133566][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.133590][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.133634][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.133657][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.459416][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 223.459450][ T44] usbtmc 5-1:16.0: can't read capabilities [ 223.763201][ T5910] usb 5-1: USB disconnect, device number 4 [ 223.828089][ T5952] vhci_hcd: vhci_device speed not set [ 229.208057][ T5910] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.678572][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 230.257642][ T5910] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 230.257680][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.257706][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.257729][ T5910] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.257776][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.257799][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.731052][ T5910] usb 5-1: usb_control_msg returned -71 [ 231.731106][ T5910] usbtmc 5-1:16.0: can't read capabilities [ 231.814624][ T5910] usb 5-1: USB disconnect, device number 5 [ 232.727603][ T6886] 9pnet_fd: Insufficient options for proto=fd [ 236.519762][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 236.734542][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 236.737238][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 236.737272][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.737297][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.737321][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.737365][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.737388][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.132631][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 237.132685][ T10] usbtmc 2-1:16.0: can't read capabilities [ 237.329413][ T10] usb 2-1: USB disconnect, device number 4 [ 237.962447][ T6925] 9pnet_fd: Insufficient options for proto=fd [ 238.276314][ T6103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.376991][ T5165] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 242.640541][ T6103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.677585][ T5165] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.677614][ T5165] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.248144][ T5165] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.248176][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.248195][ T5165] usb 1-1: Product: syz [ 243.248209][ T5165] usb 1-1: Manufacturer: syz [ 243.248223][ T5165] usb 1-1: SerialNumber: syz [ 243.288027][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 243.618068][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 244.694259][ T9] usb 6-1: device descriptor read/all, error -71 [ 244.712374][ T5165] usb 1-1: config 0 descriptor?? [ 244.972480][ T6001] usb 1-1: USB disconnect, device number 5 [ 245.029434][ T6971] 9pnet_fd: Insufficient options for proto=fd [ 245.501684][ T6103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.093483][ T6103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.138041][ T6001] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 250.312221][ T6001] usb 6-1: Using ep0 maxpacket: 8 [ 250.315994][ T6001] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 250.316028][ T6001] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 250.316054][ T6001] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.316079][ T6001] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.316123][ T6001] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.316145][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.703370][ T6103] bridge_slave_1: left allmulticast mode [ 250.703443][ T6103] bridge_slave_1: left promiscuous mode [ 250.740514][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.923838][ T6001] usb 6-1: usb_control_msg returned -71 [ 250.923885][ T6001] usbtmc 6-1:16.0: can't read capabilities [ 251.146995][ T6001] usb 6-1: USB disconnect, device number 5 [ 251.190970][ T6103] bridge_slave_0: left allmulticast mode [ 251.190998][ T6103] bridge_slave_0: left promiscuous mode [ 251.191203][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.680488][ T7027] netlink: 'syz.1.302': attribute type 21 has an invalid length. [ 253.680513][ T7027] netlink: 144 bytes leftover after parsing attributes in process `syz.1.302'. [ 253.769864][ T7032] [ 253.769874][ T7032] ====================================================== [ 253.769880][ T7032] WARNING: possible circular locking dependency detected [ 253.769886][ T7032] syzkaller #0 Not tainted [ 253.769893][ T7032] ------------------------------------------------------ [ 253.769897][ T7032] syz.1.302/7032 is trying to acquire lock: [ 253.769906][ T7032] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 253.769943][ T7032] [ 253.769943][ T7032] but task is already holding lock: [ 253.769947][ T7032] ffffffff8efa7168 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 253.769975][ T7032] [ 253.769975][ T7032] which lock already depends on the new lock. [ 253.769975][ T7032] [ 253.769979][ T7032] [ 253.769979][ T7032] the existing dependency chain (in reverse order) is: [ 253.769983][ T7032] [ 253.769983][ T7032] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 253.769999][ T7032] lock_acquire+0x120/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.770013][ T7032] rt_write_lock+0x6a/0x110 [ 253.770024][ T7032] smc_hash_sk+0x8f/0x2a0 [ 253.770035][ T7032] smc_sk_init+0x5a1/0x7f0 [ 253.770054][ T7032] __smc_create+0x10d/0x280 [ 253.770067][ T7032] __sock_create+0x4b3/0x9f0 [ 253.770080][ T7032] __sys_socket+0xd7/0x1b0 [ 253.770091][ T7032] __x64_sys_socket+0x7a/0x90 [ 253.770102][ T7032] do_syscall_64+0xfa/0x3b0 [ 253.770116][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.770127][ T7032] [ 253.770127][ T7032] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 253.770142][ T7032] validate_chain+0xb9b/0x2140 [ 253.770157][ T7032] __lock_acquire+0xab9/0xd20 [ 253.770169][ T7032] reacquire_held_locks+0x127/0x1d0 [ 253.770184][ T7032] lock_release+0x1b4/0x3e0 [ 253.770196][ T7032] __local_bh_enable_ip+0x10c/0x270 [ 253.770208][ T7032] sock_i_ino+0xa9/0xc0 [ 253.770223][ T7032] smc_diag_dump_proto+0xa4c/0x1fb0 [ 253.770234][ T7032] smc_diag_dump+0x27/0xa0 [ 253.770245][ T7032] netlink_dump+0x6e4/0xe90 [ 253.770256][ T7032] __netlink_dump_start+0x5cb/0x7e0 [ 253.770267][ T7032] smc_diag_handler_dump+0x178/0x210 [ 253.770279][ T7032] sock_diag_rcv_msg+0x4c9/0x600 [ 253.770292][ T7032] netlink_rcv_skb+0x205/0x470 [ 253.770304][ T7032] netlink_unicast+0x843/0xa10 [ 253.770313][ T7032] netlink_sendmsg+0x805/0xb30 [ 253.770325][ T7032] __sock_sendmsg+0x21c/0x270 [ 253.770335][ T7032] ____sys_sendmsg+0x508/0x820 [ 253.770349][ T7032] ___sys_sendmsg+0x21f/0x2a0 [ 253.770362][ T7032] __x64_sys_sendmsg+0x1a1/0x260 [ 253.770376][ T7032] do_syscall_64+0xfa/0x3b0 [ 253.770390][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.770399][ T7032] [ 253.770399][ T7032] other info that might help us debug this: [ 253.770399][ T7032] [ 253.770403][ T7032] Possible unsafe locking scenario: [ 253.770403][ T7032] [ 253.770406][ T7032] CPU0 CPU1 [ 253.770410][ T7032] ---- ---- [ 253.770413][ T7032] rlock(smc_v4_hashinfo.lock); [ 253.770420][ T7032] lock((softirq_ctrl.lock)); [ 253.770428][ T7032] lock(smc_v4_hashinfo.lock); [ 253.770436][ T7032] lock((softirq_ctrl.lock)); [ 253.770443][ T7032] [ 253.770443][ T7032] *** DEADLOCK *** [ 253.770443][ T7032] [ 253.770446][ T7032] 3 locks held by syz.1.302/7032: [ 253.770453][ T7032] #0: ffff888038344908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 253.770479][ T7032] #1: ffffffff8efa7168 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 253.770506][ T7032] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 253.770532][ T7032] [ 253.770532][ T7032] stack backtrace: [ 253.770539][ T7032] CPU: 0 UID: 0 PID: 7032 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.770552][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.770559][ T7032] Call Trace: [ 253.770563][ T7032] [ 253.770568][ T7032] dump_stack_lvl+0x189/0x250 [ 253.770585][ T7032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.770600][ T7032] ? __pfx__printk+0x10/0x10 [ 253.770612][ T7032] ? print_lock_name+0xde/0x100 [ 253.770623][ T7032] print_circular_bug+0x2ee/0x310 [ 253.770634][ T7032] check_noncircular+0x134/0x160 [ 253.770652][ T7032] validate_chain+0xb9b/0x2140 [ 253.770669][ T7032] ? validate_chain+0x897/0x2140 [ 253.770689][ T7032] __lock_acquire+0xab9/0xd20 [ 253.770704][ T7032] reacquire_held_locks+0x127/0x1d0 [ 253.770720][ T7032] ? __local_bh_disable_ip+0x264/0x400 [ 253.770734][ T7032] lock_release+0x1b4/0x3e0 [ 253.770749][ T7032] ? __local_bh_enable_ip+0x100/0x270 [ 253.770763][ T7032] __local_bh_enable_ip+0x10c/0x270 [ 253.770777][ T7032] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 253.770792][ T7032] ? rt_read_unlock+0x65/0xa0 [ 253.770803][ T7032] ? sock_i_ino+0x24/0xc0 [ 253.770819][ T7032] sock_i_ino+0xa9/0xc0 [ 253.770834][ T7032] smc_diag_dump_proto+0xa4c/0x1fb0 [ 253.770852][ T7032] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 253.770865][ T7032] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 253.770884][ T7032] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 253.770902][ T7032] ? __phys_addr+0xd3/0x180 [ 253.770917][ T7032] ? __kasan_kmalloc_large+0x85/0xa0 [ 253.770932][ T7032] ? rcu_is_watching+0x15/0xb0 [ 253.770948][ T7032] ? rcu_is_watching+0x15/0xb0 [ 253.770964][ T7032] ? trace_kmalloc+0x1f/0xd0 [ 253.770977][ T7032] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 253.770994][ T7032] ? __build_skb_around+0x257/0x3e0 [ 253.771009][ T7032] smc_diag_dump+0x27/0xa0 [ 253.771021][ T7032] netlink_dump+0x6e4/0xe90 [ 253.771036][ T7032] ? __pfx_netlink_dump+0x10/0x10 [ 253.771054][ T7032] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 253.771068][ T7032] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.771088][ T7032] __netlink_dump_start+0x5cb/0x7e0 [ 253.771102][ T7032] smc_diag_handler_dump+0x178/0x210 [ 253.771115][ T7032] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 253.771127][ T7032] ? __pfx_smc_diag_dump+0x10/0x10 [ 253.771140][ T7032] ? sock_diag_lock_handler+0x19/0x290 [ 253.771151][ T7032] ? sock_diag_lock_handler+0x19/0x290 [ 253.771164][ T7032] sock_diag_rcv_msg+0x4c9/0x600 [ 253.771177][ T7032] netlink_rcv_skb+0x205/0x470 [ 253.771189][ T7032] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 253.771202][ T7032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.771219][ T7032] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.771233][ T7032] netlink_unicast+0x843/0xa10 [ 253.771246][ T7032] ? __pfx_netlink_unicast+0x10/0x10 [ 253.771258][ T7032] ? netlink_sendmsg+0x642/0xb30 [ 253.771271][ T7032] ? skb_put+0x11b/0x210 [ 253.771286][ T7032] netlink_sendmsg+0x805/0xb30 [ 253.771301][ T7032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.771317][ T7032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.771328][ T7032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.771341][ T7032] __sock_sendmsg+0x21c/0x270 [ 253.771353][ T7032] ____sys_sendmsg+0x508/0x820 [ 253.771369][ T7032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.771386][ T7032] ? import_iovec+0x74/0xa0 [ 253.771399][ T7032] ___sys_sendmsg+0x21f/0x2a0 [ 253.771414][ T7032] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.771437][ T7032] ? __fget_files+0x2a/0x420 [ 253.771452][ T7032] ? __fget_files+0x3a6/0x420 [ 253.771468][ T7032] __x64_sys_sendmsg+0x1a1/0x260 [ 253.771484][ T7032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.771501][ T7032] ? do_user_addr_fault+0xc8a/0x1390 [ 253.771515][ T7032] ? do_syscall_64+0xbe/0x3b0 [ 253.771530][ T7032] do_syscall_64+0xfa/0x3b0 [ 253.771544][ T7032] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.771558][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.771568][ T7032] ? clear_bhb_loop+0x60/0xb0 [ 253.771579][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.771590][ T7032] RIP: 0033:0x7f038383ebe9 [ 253.771600][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.771610][ T7032] RSP: 002b:00007f0381a7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.771622][ T7032] RAX: ffffffffffffffda RBX: 00007f0383a76090 RCX: 00007f038383ebe9 [ 253.771630][ T7032] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 253.771637][ T7032] RBP: 00007f03838c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 253.771644][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.771651][ T7032] R13: 00007f0383a76128 R14: 00007f0383a76090 R15: 00007ffddd8fec98 [ 253.771662][ T7032] [ 256.156004][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.156060][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.768428][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.828578][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.850257][ T6103] bond0 (unregistering): Released all slaves [ 257.033957][ T7019] wg2: entered promiscuous mode [ 257.033987][ T7019] wg2: entered allmulticast mode [ 257.761010][ T6103] tipc: Disabling bearer [ 257.761209][ T6103] tipc: Left network mode [ 259.031435][ T6103] hsr_slave_0: left promiscuous mode [ 259.070842][ T6103] hsr_slave_1: left promiscuous mode [ 259.071336][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.071351][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.108759][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.108785][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.168446][ T6103] veth1_macvtap: left promiscuous mode [ 259.168491][ T6103] veth0_macvtap: left promiscuous mode [ 259.168583][ T6103] veth1_vlan: left promiscuous mode [ 259.168637][ T6103] veth0_vlan: left promiscuous mode [ 260.848709][ T6103] team0 (unregistering): Port device team_slave_1 removed [ 261.018669][ T6103] team0 (unregistering): Port device team_slave_0 removed