last executing test programs: 19m46.678550153s ago: executing program 0 (id=77): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x34, '\x00', @buffer={"010d1de90c16308a633fda925d1085c6b9f70f72ad6cc5f4853700", 0x20}, 0x400}, {0x1c, '\x00', @data=0x6, 0x5}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x7ff, 0x12) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 19m43.314910306s ago: executing program 0 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19m41.3443392s ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r3, 0x0, 0xd831961adcf9ebbd) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, 0x0) 19m30.552063726s ago: executing program 0 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000080003007379"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 19m30.121960996s ago: executing program 0 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 19m28.104514526s ago: executing program 0 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0x1}], 0x1}}], 0x1, 0x4000800) 19m12.201416858s ago: executing program 32 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0x1}], 0x1}}], 0x1, 0x4000800) 18m1.475299397s ago: executing program 1 (id=208): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224000100001000090443000231"], 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x0, 0xffffffff}) syz_usb_control_io(r2, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x7, 0x4450290}) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e26, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x2, 0x14, 0x1c, "fee8a2ab78fc9746d1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383a3b300836e0878f0e1ac6e7049b073c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33340d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000440)='btrfs\x00', 0x0) 17m56.17208657s ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a3100000000080004400800000009000100"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 17m55.639857363s ago: executing program 1 (id=214): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/10, 0x5b) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff18}, 0x94) 17m53.828179003s ago: executing program 1 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001", @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 17m53.157274409s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) sched_setaffinity(r2, 0x0, 0x0) open(0x0, 0x240000, 0x10a) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 17m48.860052234s ago: executing program 1 (id=219): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000017c0)=""/4086, 0xff6) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 17m33.220593424s ago: executing program 33 (id=219): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000017c0)=""/4086, 0xff6) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 16m12.502528513s ago: executing program 4 (id=315): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d08000b000000000000070a000a", 0x1f}], 0x1}, 0x40040854) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 16m5.19990913s ago: executing program 4 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x240000, 0x10a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x2000080, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 16m3.258290023s ago: executing program 4 (id=325): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x40080, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 16m1.878221714s ago: executing program 4 (id=327): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 16m0.30947192s ago: executing program 4 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbfc, {0xa, 0x3f, 0x9, 0xfd, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8d97}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x20000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 15m55.595089467s ago: executing program 4 (id=332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xf8cf, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 15m40.431765506s ago: executing program 34 (id=332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xf8cf, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.501990125s ago: executing program 3 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002fbd7000f6d378251200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000000001c0081000500010006000000050001"], 0x48}}, 0x8000080) 13.48574765s ago: executing program 2 (id=1189): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='secret\x00', &(0x7f0000000080)='AQAA+e\x1bA0E\x8dV7N\xdbC\xeb\x9eAAA=ACAAA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x006z\xd7\x13M\x8e\x96\xe3\x05\x04\x00\xa3.a\x1e\xbac]uo\xb8\xa8\x00h=\xb2\xb5\xba\b\xe6\x8a\xf9\xdc\xf7\x97\xc7\x1b\xd4\xfb\xc5\x85bk\xec#\xbd\xda\x11\xb7\x89%a+;\xb6\xc9\x1d\xf1\xc4\xa0d|/\x16\x8c\x1fP$\x8awI\x18S\x89\x99\x9b$\xa0\x9e\x0f\xbe\xffsG!\xe4\'wT\x15)/\xd9B\xc7l\xb0B#Q\xe7\x89\x1e(*\a\x80\x8f\xd95', 0x0) syz_usb_connect$uac1(0x4, 0x8f, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0xed, 0xa0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x5cf, 0x6, 0xc, 0xfa, {0x7, 0x25, 0x1, 0xc, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x4, 0x7, 'n', "bf"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x821c, 0x6, 0x8, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xa, 0x1d, 0x9, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x7, 0xa, {0x7, 0x25, 0x1, 0xc, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x4, 0x2, 0x2, 0x8, 0x7f}, 0x27, &(0x7f0000000540)={0x5, 0xf, 0x27, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x16, 0x4, 0x3, 0x5, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0xe, 0x4}]}, 0x4, [{0xaf, &(0x7f0000000580)=@string={0xaf, 0x3, "e87d4fd11cefaa17b7fa602a0fd343fe31a85ab4fffc9c7ee3d837194c80f7a67965a53fca11828c414931a91925546afc9c68535f03a8e1071b58d93e390886f50915d1a8d0e1054154a9a435faa5a5f827bfaa5f50a980ce29fe558ee801708d6b9fa1f23c03e5cf912b81646a54217db1dc3de07a88aa4e6a51a4435433b020b3c6104a4a2f086b1558ccef79f744edfb8755a82262b5e369dd17a0e0196341bf4591780338d62bab98e4cf"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c05}}, {0xa7, &(0x7f0000000680)=@string={0xa7, 0x3, "0b376a018874bbaeea78d537b7bd729def4492d4abebb66137d17fe6228609514bbe427a3b886cd18f551eb66214aa04403c66ac265c5daff383b9fc3ed1f0c1afe13d577add25129cc063a435d8c844a872e43bc994afcc16d2b2ce56cac0ad78d7f516831e6910a4ed5cb261cb1983852f5b092b861bf64b308bf543d11a12b0505f398d79242412dc95083bbff79ea7e198a02b203f9d5fa65d98f57a2cd262fce80596"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x804}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) 13.082163166s ago: executing program 3 (id=1190): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1}, 0x0) 12.81002273s ago: executing program 3 (id=1191): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 10.535400167s ago: executing program 3 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81}, 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x0) shutdown(r0, 0x0) 9.496005617s ago: executing program 2 (id=1193): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81}, 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 8.268270924s ago: executing program 2 (id=1194): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x188, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x15c, 0x2, [@TCA_BPF_ACT={0x158, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x58, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}]}]}, {0x9, 0x6, "5d3aee85a6"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.782123559s ago: executing program 3 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81}, 0x10}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) 3.776272307s ago: executing program 2 (id=1196): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.769334542s ago: executing program 3 (id=1197): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 249.411293ms ago: executing program 2 (id=1198): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x1c}], 0x1}, 0x0) 0s ago: executing program 2 (id=1199): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) close(0x3) kernel console output (not intermixed with test programs): lave_0) entered blocking state [ 934.381929][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.382145][ T9935] bridge_slave_0: entered allmulticast mode [ 934.385249][ T9935] bridge_slave_0: entered promiscuous mode [ 934.451166][ T9837] hsr_slave_0: entered promiscuous mode [ 934.455544][ T9837] hsr_slave_1: entered promiscuous mode [ 934.477163][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.477326][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.477676][ T9935] bridge_slave_1: entered allmulticast mode [ 934.506908][ T9935] bridge_slave_1: entered promiscuous mode [ 934.592021][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.592180][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.592318][ T9984] bridge_slave_0: entered allmulticast mode [ 934.597481][ T9984] bridge_slave_0: entered promiscuous mode [ 934.685556][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.696137][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.696308][ T9984] bridge_slave_1: entered allmulticast mode [ 934.729777][ T9984] bridge_slave_1: entered promiscuous mode [ 934.753243][ T9935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.841215][ T9935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.053463][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.094636][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.109133][ T9935] team0: Port device team_slave_0 added [ 935.163375][ T9935] team0: Port device team_slave_1 added [ 935.281319][ T9984] team0: Port device team_slave_0 added [ 935.560361][ T9984] team0: Port device team_slave_1 added [ 935.562245][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.562263][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.562293][ T9935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.902443][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.902465][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.902496][ T9935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.479881][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.479906][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.479959][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.554970][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.554994][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.555029][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.441270][ T9935] hsr_slave_0: entered promiscuous mode [ 937.447506][ T9935] hsr_slave_1: entered promiscuous mode [ 937.457778][ T9935] debugfs: 'hsr0' already exists in 'hsr' [ 937.457805][ T9935] Cannot create hsr debugfs directory [ 938.012527][ T9984] hsr_slave_0: entered promiscuous mode [ 938.014946][ T9984] hsr_slave_1: entered promiscuous mode [ 938.019567][ T9984] debugfs: 'hsr0' already exists in 'hsr' [ 938.019797][ T9984] Cannot create hsr debugfs directory [ 939.815923][ T5857] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 939.968867][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 939.969852][ T5857] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 939.974613][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.974648][ T5857] usb 4-1: Product: syz [ 939.974665][ T5857] usb 4-1: Manufacturer: syz [ 939.974682][ T5857] usb 4-1: SerialNumber: syz [ 940.030610][ T5857] usb 4-1: config 0 descriptor?? [ 940.053080][ T5857] usb 4-1: selecting invalid altsetting 1 [ 940.053104][ T5857] technisat-usb2: could not set alternate setting to 0 [ 940.267060][ T5857] technisat-usb2: firmware version: 0.0 [ 940.267111][ T5857] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 940.452465][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 940.705394][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.716823][ T5857] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 940.716871][ T5857] usb 4-1: media controller created [ 940.716918][ T5857] technisat-usb2: i2c-error: out failed 53 = -22 [ 940.716957][ T5857] dvb-usb: MAC address reading failed. [ 940.840195][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.896033][T10111] technisat-usb2: i2c-error: out failed 04 = -22 [ 940.913193][T10111] technisat-usb2: i2c-error: out failed 00 = -22 [ 941.093160][ T5857] DVB: Unable to find symbol stv090x_attach() [ 941.093654][ T5857] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 941.245816][ T5857] rc_core: IR keymap rc-technisat-usb2 not found [ 941.245841][ T5857] Registered IR keymap rc-empty [ 941.251556][ T5857] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 941.287717][ T5857] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input33 [ 941.294318][ T5857] dvb-usb: schedule remote query interval to 100 msecs. [ 941.316644][ T5857] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 941.343657][ T5857] usb 4-1: USB disconnect, device number 22 [ 941.508867][ T5857] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 941.710071][ T36] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 941.866812][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 941.874484][ T36] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 941.911143][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.911172][ T36] usb 3-1: Product: syz [ 941.911188][ T36] usb 3-1: Manufacturer: syz [ 941.911204][ T36] usb 3-1: SerialNumber: syz [ 941.934156][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 941.962134][ T36] usb 3-1: config 0 descriptor?? [ 941.990425][ T36] usb 3-1: selecting invalid altsetting 1 [ 941.990451][ T36] technisat-usb2: could not set alternate setting to 0 [ 942.129437][ T1184] bridge_slave_1: left allmulticast mode [ 942.129560][ T1184] bridge_slave_1: left promiscuous mode [ 942.129913][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.177538][ T36] technisat-usb2: firmware version: 0.0 [ 942.177571][ T36] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 942.241917][ T1184] bridge_slave_0: left allmulticast mode [ 942.241973][ T1184] bridge_slave_0: left promiscuous mode [ 942.242260][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.446167][ T1184] bridge_slave_1: left allmulticast mode [ 942.446209][ T1184] bridge_slave_1: left promiscuous mode [ 942.446478][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.557938][ T1184] bridge_slave_0: left allmulticast mode [ 942.557983][ T1184] bridge_slave_0: left promiscuous mode [ 942.558293][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.595441][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 942.597260][ T36] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 942.597322][ T36] usb 3-1: media controller created [ 942.597382][ T36] technisat-usb2: i2c-error: out failed 53 = -22 [ 942.597438][ T36] dvb-usb: MAC address reading failed. [ 942.640314][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.690833][ T36] DVB: Unable to find symbol stv090x_attach() [ 942.787874][ T36] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 942.865914][ T36] rc_core: IR keymap rc-technisat-usb2 not found [ 942.865940][ T36] Registered IR keymap rc-empty [ 942.869457][ T36] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 942.872061][ T36] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input34 [ 942.896337][ T1184] bridge_slave_1: left allmulticast mode [ 942.896415][ T1184] bridge_slave_1: left promiscuous mode [ 942.897071][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.942160][ T36] dvb-usb: schedule remote query interval to 100 msecs. [ 942.943079][ T36] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 942.957087][ T36] usb 3-1: USB disconnect, device number 19 [ 943.080651][ T1184] bridge_slave_0: left allmulticast mode [ 943.080766][ T1184] bridge_slave_0: left promiscuous mode [ 943.081063][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.141019][ T36] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 943.258280][ T8437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 943.298252][ T8437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 943.301428][ T8437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 943.302701][ T8437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 943.377424][ T8437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 943.649647][T10162] overlayfs: missing 'workdir' [ 946.628849][ T5591] Bluetooth: hci1: command tx timeout [ 946.716713][ T1663] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 946.886011][ T1663] usb 4-1: Using ep0 maxpacket: 16 [ 946.887054][ T1663] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 946.892161][ T1663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.892192][ T1663] usb 4-1: Product: syz [ 946.892212][ T1663] usb 4-1: Manufacturer: syz [ 946.892231][ T1663] usb 4-1: SerialNumber: syz [ 946.935111][ T1663] usb 4-1: config 0 descriptor?? [ 946.943578][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.958922][ T1663] usb 4-1: selecting invalid altsetting 1 [ 946.958948][ T1663] technisat-usb2: could not set alternate setting to 0 [ 947.049865][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.111530][ T1184] bond0 (unregistering): Released all slaves [ 947.152472][ T1663] technisat-usb2: firmware version: 0.0 [ 947.152534][ T1663] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 947.456700][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.556745][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.565331][ T1663] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 947.579638][ T1663] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 947.579806][ T1663] usb 4-1: media controller created [ 947.579965][ T1663] technisat-usb2: i2c-error: out failed 53 = -22 [ 947.580104][ T1663] dvb-usb: MAC address reading failed. [ 947.620803][ T1663] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 947.651005][ T1184] bond0 (unregistering): Released all slaves [ 947.722331][ T1663] DVB: Unable to find symbol stv090x_attach() [ 947.777087][ T1663] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 947.895831][ T1663] rc_core: IR keymap rc-technisat-usb2 not found [ 947.895869][ T1663] Registered IR keymap rc-empty [ 947.897180][ T1663] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 947.902421][ T1663] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input35 [ 947.942222][ T1663] dvb-usb: schedule remote query interval to 100 msecs. [ 947.943049][ T1663] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 947.950999][ T1663] usb 4-1: USB disconnect, device number 23 [ 948.097097][ T1663] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 948.636614][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.713407][ T5591] Bluetooth: hci1: command tx timeout [ 948.927046][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.137379][ T1184] bond0 (unregistering): Released all slaves [ 950.814436][ T5591] Bluetooth: hci1: command tx timeout [ 951.996058][ T1184] hsr_slave_0: left promiscuous mode [ 952.040124][ T1184] hsr_slave_1: left promiscuous mode [ 952.041589][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.092235][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.484903][ T1184] hsr_slave_0: left promiscuous mode [ 952.515887][ T1184] hsr_slave_1: left promiscuous mode [ 952.517178][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.583177][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.832279][ T1184] hsr_slave_0: left promiscuous mode [ 952.856696][ T5591] Bluetooth: hci1: command tx timeout [ 952.876555][ T1184] hsr_slave_1: left promiscuous mode [ 952.877966][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.949052][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.629831][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 953.736539][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 955.807093][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 955.886599][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 956.599295][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 957.055080][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 957.564013][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 958.345811][ T5317] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 958.496799][ T5317] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 958.498432][ T5317] usb 4-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 958.498546][ T5317] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 12032, setting to 64 [ 958.498577][ T5317] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 958.538810][ T5317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.538844][ T5317] usb 4-1: Product: syz [ 958.538862][ T5317] usb 4-1: Manufacturer: syz [ 958.538879][ T5317] usb 4-1: SerialNumber: syz [ 959.047818][ T5317] snd-usb-caiaq 4-1:1.0: invalid EPs [ 959.047911][ T5317] usb 4-1: unable to init card! (ret=-22) [ 959.049271][ T5317] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 959.326723][ T5317] usb 4-1: USB disconnect, device number 24 [ 959.881270][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 964.358814][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.600579][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.600805][T10157] bridge_slave_0: entered allmulticast mode [ 964.615144][T10157] bridge_slave_0: entered promiscuous mode [ 964.634704][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.634835][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.644987][T10157] bridge_slave_1: entered allmulticast mode [ 964.651069][T10157] bridge_slave_1: entered promiscuous mode [ 964.875266][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.910468][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.049247][T10157] team0: Port device team_slave_0 added [ 965.054176][T10157] team0: Port device team_slave_1 added [ 966.055858][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.055880][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.055912][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.061712][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.061730][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.061792][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.041845][T10157] hsr_slave_0: entered promiscuous mode [ 968.047026][T10157] hsr_slave_1: entered promiscuous mode [ 968.055202][T10157] debugfs: 'hsr0' already exists in 'hsr' [ 968.055279][T10157] Cannot create hsr debugfs directory [ 968.215934][ T5857] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 968.397642][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 968.410815][ T5857] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 968.420442][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.420472][ T5857] usb 3-1: Product: syz [ 968.420490][ T5857] usb 3-1: Manufacturer: syz [ 968.420508][ T5857] usb 3-1: SerialNumber: syz [ 968.476115][ T5857] usb 3-1: config 0 descriptor?? [ 968.510066][ T5857] usb 3-1: selecting invalid altsetting 1 [ 968.510092][ T5857] technisat-usb2: could not set alternate setting to 0 [ 968.701244][ T5857] technisat-usb2: firmware version: 0.0 [ 968.701295][ T5857] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 969.124684][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 969.137960][ T5857] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 969.138038][ T5857] usb 3-1: media controller created [ 969.138095][ T5857] technisat-usb2: i2c-error: out failed 53 = -22 [ 969.138154][ T5857] dvb-usb: MAC address reading failed. [ 969.243620][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.407545][ T5857] DVB: Unable to find symbol stv090x_attach() [ 969.409349][ T5857] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 969.585765][ T5857] rc_core: IR keymap rc-technisat-usb2 not found [ 969.585792][ T5857] Registered IR keymap rc-empty [ 969.614548][ T5857] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 969.646969][ T5857] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input36 [ 969.683692][ T5857] dvb-usb: schedule remote query interval to 100 msecs. [ 969.694795][ T5857] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 969.799953][ T5857] usb 3-1: USB disconnect, device number 20 [ 969.800107][ T5576] dvb-usb: error -19 while querying for an remote control event. [ 970.497221][ T5857] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 970.681022][ T8437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 970.754063][ T8437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 970.761659][ T8437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 970.772100][ T8437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 970.782191][ T8437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 973.017533][ T8437] Bluetooth: hci6: command tx timeout [ 975.583543][T10429] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 975.583587][T10429] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 975.592253][ T8437] Bluetooth: hci6: command tx timeout [ 977.720108][ T8437] Bluetooth: hci6: command tx timeout [ 979.735965][ T8437] Bluetooth: hci6: command tx timeout [ 981.392355][ T9984] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 981.674882][ T9984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.670437][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 984.771515][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 984.799469][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 984.834993][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 984.894339][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.899651][ T1171] bridge_slave_1: left allmulticast mode [ 986.899693][ T1171] bridge_slave_1: left promiscuous mode [ 986.900007][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.277065][ T1171] bridge_slave_0: left allmulticast mode [ 987.277096][ T1171] bridge_slave_0: left promiscuous mode [ 987.277296][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.578533][ T8437] Bluetooth: hci2: command tx timeout [ 989.596687][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.698493][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.757579][ T1171] bond0 (unregistering): Released all slaves [ 989.798372][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.798462][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.798701][T10385] bridge_slave_0: entered allmulticast mode [ 989.800927][T10385] bridge_slave_0: entered promiscuous mode [ 989.838928][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.839147][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.839365][T10385] bridge_slave_1: entered allmulticast mode [ 989.842479][T10385] bridge_slave_1: entered promiscuous mode [ 990.588041][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.657956][ T8437] Bluetooth: hci2: command tx timeout [ 990.692396][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.468432][ T1171] hsr_slave_0: left promiscuous mode [ 991.506014][ T1171] hsr_slave_1: left promiscuous mode [ 991.507950][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.596032][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.705808][ T8437] Bluetooth: hci2: command tx timeout [ 993.640121][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.640202][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.794817][ T8437] Bluetooth: hci2: command tx timeout [ 998.818453][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 999.550091][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 999.854906][T10581] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 999.855255][T10581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1003.254418][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1003.380283][T10385] team0: Port device team_slave_0 added [ 1003.392353][T10385] team0: Port device team_slave_1 added [ 1003.507936][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.507952][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.507973][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.593380][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.593396][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.593418][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.096668][T10385] hsr_slave_0: entered promiscuous mode [ 1004.102068][T10385] hsr_slave_1: entered promiscuous mode [ 1008.346784][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.387896][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.389455][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.394537][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.395559][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1009.067390][ T5576] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1009.215843][ T5576] usb 4-1: Using ep0 maxpacket: 8 [ 1009.216897][ T5576] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1009.218429][ T5576] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1009.218459][ T5576] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1009.218533][ T5576] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1009.218564][ T5576] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1009.218591][ T5576] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1009.218647][ T5576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.357985][ T5576] usbtmc 4-1:16.0: bulk endpoints not found [ 1010.625954][ T8437] Bluetooth: hci3: command tx timeout [ 1011.720858][ T5317] usb 4-1: USB disconnect, device number 25 [ 1012.695998][ T8437] Bluetooth: hci3: command tx timeout [ 1012.912054][ T5317] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1013.435865][ T5317] usb 4-1: Using ep0 maxpacket: 8 [ 1013.437082][ T5317] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1013.444747][ T5317] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1013.444778][ T5317] usb 4-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1013.444824][ T5317] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.444856][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.537767][ T5317] usbtmc 4-1:16.0: bulk endpoints not found [ 1013.665845][ T5576] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 1013.816701][ T5576] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1013.817505][ T5576] usb 3-1: config 0 has no interfaces? [ 1013.817542][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.831591][ T5576] usb 3-1: config 0 descriptor?? [ 1014.062389][ T5317] usb 3-1: USB disconnect, device number 21 [ 1014.171925][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.172109][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.172231][T10488] bridge_slave_0: entered allmulticast mode [ 1014.174330][T10488] bridge_slave_0: entered promiscuous mode [ 1014.213613][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.213821][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.213962][T10488] bridge_slave_1: entered allmulticast mode [ 1014.218309][T10488] bridge_slave_1: entered promiscuous mode [ 1014.655000][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.679926][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.801998][ T8437] Bluetooth: hci3: command tx timeout [ 1015.788380][ T5317] usb 4-1: USB disconnect, device number 26 [ 1017.485793][ T8437] Bluetooth: hci3: command tx timeout [ 1017.751662][T10488] team0: Port device team_slave_0 added [ 1017.764846][T10488] team0: Port device team_slave_1 added [ 1017.909191][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.909211][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.909234][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.998767][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.998791][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.998823][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.581916][T10488] hsr_slave_0: entered promiscuous mode [ 1019.583290][T10488] hsr_slave_1: entered promiscuous mode [ 1019.584362][T10488] debugfs: 'hsr0' already exists in 'hsr' [ 1019.584387][T10488] Cannot create hsr debugfs directory [ 1019.836019][ T1171] bridge_slave_1: left allmulticast mode [ 1019.836058][ T1171] bridge_slave_1: left promiscuous mode [ 1019.836287][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.845881][ T36] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1019.978814][ T1171] bridge_slave_0: left allmulticast mode [ 1019.978858][ T1171] bridge_slave_0: left promiscuous mode [ 1019.979361][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.045838][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 1020.047099][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1020.051553][ T36] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1020.051582][ T36] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1020.051635][ T36] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1020.051665][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1020.051692][ T36] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1020.051737][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.157572][ T36] usbtmc 4-1:16.0: bulk endpoints not found [ 1020.296597][ T1171] bridge_slave_1: left allmulticast mode [ 1020.296640][ T1171] bridge_slave_1: left promiscuous mode [ 1020.296913][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.670236][ T1171] bridge_slave_0: left allmulticast mode [ 1021.670277][ T1171] bridge_slave_0: left promiscuous mode [ 1021.670532][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.036934][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.116528][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.177827][ T1171] bond0 (unregistering): Released all slaves [ 1022.418238][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.517472][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.577671][ T1171] bond0 (unregistering): Released all slaves [ 1022.774354][ T8059] usb 4-1: USB disconnect, device number 27 [ 1024.959615][T10723] overlayfs: overlapping lowerdir path [ 1030.393468][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.393699][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.393915][T10618] bridge_slave_0: entered allmulticast mode [ 1030.417612][T10618] bridge_slave_0: entered promiscuous mode [ 1030.441557][T10385] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1030.470796][T10385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.078371][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.078529][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.078745][T10618] bridge_slave_1: entered allmulticast mode [ 1031.081891][T10618] bridge_slave_1: entered promiscuous mode [ 1031.868141][ T1171] hsr_slave_0: left promiscuous mode [ 1031.907557][ T1171] hsr_slave_1: left promiscuous mode [ 1031.908885][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.973507][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.989794][ T8437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1032.032710][ T8437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1032.036173][ T8437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1032.040649][ T8437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1032.043405][ T8437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.861017][ T1171] hsr_slave_0: left promiscuous mode [ 1033.902054][ T1171] hsr_slave_1: left promiscuous mode [ 1033.951874][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.989643][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.159343][ T8437] Bluetooth: hci1: command tx timeout [ 1035.936509][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 1035.986475][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 1036.303828][ T8437] Bluetooth: hci1: command tx timeout [ 1036.667084][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 1036.723914][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 1038.383669][ T8437] Bluetooth: hci1: command tx timeout [ 1039.813957][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1039.839290][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.900108][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.085777][ T5576] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1040.331502][ T5576] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1040.359915][ T5576] usb 3-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.359949][ T5576] usb 3-1: config 25 has 1 interface, different from the descriptor's value: 2 [ 1040.360008][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.466542][ T8437] Bluetooth: hci1: command tx timeout [ 1041.703724][ T5576] usb 3-1: USB disconnect, device number 22 [ 1043.215126][T10618] team0: Port device team_slave_0 added [ 1043.593157][T10618] team0: Port device team_slave_1 added [ 1044.001870][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.001888][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.001916][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.065923][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.065944][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.065974][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.571024][T10618] hsr_slave_0: entered promiscuous mode [ 1046.573685][T10618] hsr_slave_1: entered promiscuous mode [ 1046.574831][T10618] debugfs: 'hsr0' already exists in 'hsr' [ 1046.574860][T10618] Cannot create hsr debugfs directory [ 1046.848131][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1046.875176][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1046.920456][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1046.929110][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1046.936562][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1047.838868][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.832'. [ 1048.406728][T10851] ip6gretap0: entered promiscuous mode [ 1048.406763][T10851] ip6gretap0: entered allmulticast mode [ 1049.055885][ T5591] Bluetooth: hci5: command tx timeout [ 1051.095901][ T5591] Bluetooth: hci5: command tx timeout [ 1053.192482][ T5591] Bluetooth: hci5: command tx timeout [ 1054.602525][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.255969][ T5591] Bluetooth: hci5: command tx timeout [ 1055.772909][ C0] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.056238][ T36] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1057.513400][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1057.553292][ T36] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1057.708584][ T36] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.986773][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.986807][ T36] usb 4-1: Product: syz [ 1057.986824][ T36] usb 4-1: Manufacturer: syz [ 1057.986841][ T36] usb 4-1: SerialNumber: syz [ 1058.060235][ T36] usb 4-1: config 0 descriptor?? [ 1060.296946][ T5576] usb 4-1: USB disconnect, device number 28 [ 1060.624426][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.624566][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.624777][T10751] bridge_slave_0: entered allmulticast mode [ 1060.644566][T10751] bridge_slave_0: entered promiscuous mode [ 1060.670817][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.670954][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.671160][T10751] bridge_slave_1: entered allmulticast mode [ 1060.731526][T10751] bridge_slave_1: entered promiscuous mode [ 1060.744426][T10618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1060.872705][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.909571][T10618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1062.022616][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.090943][T10618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1062.166370][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.193465][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.214672][T10618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1062.247189][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.285300][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.099420][T10618] kthread_run failed with err -4 [ 1066.114130][T10751] team0: Port device team_slave_0 added [ 1066.249261][T10751] team0: Port device team_slave_1 added [ 1066.370703][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.370727][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.370761][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.455059][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.455082][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.455118][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.657254][T10751] hsr_slave_0: entered promiscuous mode [ 1066.660338][T10751] hsr_slave_1: entered promiscuous mode [ 1066.664034][T10751] debugfs: 'hsr0' already exists in 'hsr' [ 1066.664067][T10751] Cannot create hsr debugfs directory [ 1067.478718][T10830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.478952][T10830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.479154][T10830] bridge_slave_0: entered allmulticast mode [ 1067.483412][T10830] bridge_slave_0: entered promiscuous mode [ 1067.531104][T10830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.531267][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.531466][T10830] bridge_slave_1: entered allmulticast mode [ 1067.551376][T10830] bridge_slave_1: entered promiscuous mode [ 1067.900545][ T8437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1067.920198][ T8437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1067.982978][ T8437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1068.586653][ T8437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1068.589769][ T8437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1068.883119][ T1171] bridge_slave_1: left allmulticast mode [ 1068.883163][ T1171] bridge_slave_1: left promiscuous mode [ 1068.883502][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.058973][ T1171] bridge_slave_0: left allmulticast mode [ 1069.059011][ T1171] bridge_slave_0: left promiscuous mode [ 1069.059274][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.356050][ T1171] bridge_slave_1: left allmulticast mode [ 1069.356090][ T1171] bridge_slave_1: left promiscuous mode [ 1069.356360][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.529540][ T1171] bridge_slave_0: left allmulticast mode [ 1069.529589][ T1171] bridge_slave_0: left promiscuous mode [ 1069.529944][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.138621][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.188460][T11023] FAULT_INJECTION: forcing a failure. [ 1070.188460][T11023] name failslab, interval 1, probability 0, space 0, times 1 [ 1070.188511][T11023] CPU: 1 UID: 0 PID: 11023 Comm: syz.3.855 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1070.188534][T11023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.188557][T11023] Call Trace: [ 1070.188641][T11023] [ 1070.188704][T11023] dump_stack_lvl+0xe8/0x150 [ 1070.188833][T11023] should_fail_ex+0x46b/0x600 [ 1070.188894][T11023] ? sock_alloc_inode+0x2c/0x1a0 [ 1070.189018][T11023] should_failslab+0xa8/0x100 [ 1070.189087][T11023] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1070.189132][T11023] ? sock_alloc_inode+0x2c/0x1a0 [ 1070.189168][T11023] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1070.189198][T11023] sock_alloc_inode+0x2c/0x1a0 [ 1070.189229][T11023] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1070.189258][T11023] alloc_inode+0x6a/0x1b0 [ 1070.189303][T11023] __sock_create+0x12d/0x9d0 [ 1070.189367][T11023] __sys_socket+0xd6/0x1b0 [ 1070.189404][T11023] __x64_sys_socket+0x7a/0x90 [ 1070.189443][T11023] do_syscall_64+0x166/0x520 [ 1070.189539][T11023] ? trace_irq_disable+0x3b/0x140 [ 1070.189589][T11023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.189634][T11023] ? clear_bhb_loop+0x70/0xc0 [ 1070.189664][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.189692][T11023] RIP: 0033:0x7f938457e159 [ 1070.189746][T11023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.189768][T11023] RSP: 002b:00007f9382794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1070.189800][T11023] RAX: ffffffffffffffda RBX: 00007f9384806180 RCX: 00007f938457e159 [ 1070.189818][T11023] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1070.189833][T11023] RBP: 00007f938461503b R08: 0000000000000000 R09: 0000000000000000 [ 1070.189850][T11023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.189865][T11023] R13: 00007f9384806218 R14: 00007f9384806180 R15: 00007ffd9fd1ae38 [ 1070.189902][T11023] [ 1070.190219][T11023] socket: no more sockets [ 1070.427614][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.510988][ T1171] bond0 (unregistering): Released all slaves [ 1070.776019][ T5591] Bluetooth: hci2: command tx timeout [ 1070.878282][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.968117][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.028593][ T1171] bond0 (unregistering): Released all slaves [ 1071.192316][T10830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.210395][T10830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.449706][T10830] team0: Port device team_slave_0 added [ 1071.473583][T10830] team0: Port device team_slave_1 added [ 1071.967006][T10830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.967028][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.967074][T10830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.970197][T10830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.970215][T10830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.970242][T10830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.855820][ T5591] Bluetooth: hci2: command tx timeout [ 1073.884452][ T1171] hsr_slave_0: left promiscuous mode [ 1073.908882][ T1171] hsr_slave_1: left promiscuous mode [ 1073.920940][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.002611][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.496076][ T1171] hsr_slave_0: left promiscuous mode [ 1074.556398][ T1171] hsr_slave_1: left promiscuous mode [ 1074.584760][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.425133][ T5591] Bluetooth: hci2: command tx timeout [ 1075.457598][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.497785][ T5591] Bluetooth: hci2: command tx timeout [ 1078.757123][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 1078.839964][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 1081.086687][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 1081.177754][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 1082.291149][T10830] hsr_slave_0: entered promiscuous mode [ 1082.318101][T10830] hsr_slave_1: entered promiscuous mode [ 1083.305910][ T5317] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1083.525762][ T5317] usb 3-1: Using ep0 maxpacket: 16 [ 1083.526619][ T5317] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1083.602641][ T5317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.602674][ T5317] usb 3-1: Product: syz [ 1083.602691][ T5317] usb 3-1: Manufacturer: syz [ 1083.602708][ T5317] usb 3-1: SerialNumber: syz [ 1083.684937][ T5317] usb 3-1: config 0 descriptor?? [ 1083.740384][ T5317] usb 3-1: selecting invalid altsetting 1 [ 1083.740404][ T5317] technisat-usb2: could not set alternate setting to 0 [ 1083.965928][ T5317] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1083.978230][ T5317] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1083.978301][ T5317] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1084.856243][T11001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.856402][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.856624][T11001] bridge_slave_0: entered allmulticast mode [ 1084.865134][T11001] bridge_slave_0: entered promiscuous mode [ 1084.916640][T10830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1084.964211][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.964786][T11001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.965011][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.965300][T11001] bridge_slave_1: entered allmulticast mode [ 1085.003596][T11001] bridge_slave_1: entered promiscuous mode [ 1085.025283][T10830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1085.128581][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.178066][T10830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1085.214697][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.745666][T10830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1085.778396][T10830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.795501][T11001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.848634][T11001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.300285][T11001] team0: Port device team_slave_0 added [ 1086.524828][T11001] team0: Port device team_slave_1 added [ 1086.657764][T11001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.657781][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.657803][T11001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.718114][T11001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.718136][T11001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.718170][T11001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.719942][T10751] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1086.811733][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.239194][T10751] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1087.269170][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1087.273457][T10751] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1087.327438][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.332281][T10751] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1087.372662][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.850027][T11001] hsr_slave_0: entered promiscuous mode [ 1087.852355][T11001] hsr_slave_1: entered promiscuous mode [ 1087.853932][T11001] debugfs: 'hsr0' already exists in 'hsr' [ 1087.853961][T11001] Cannot create hsr debugfs directory [ 1088.341427][T11200] Bluetooth: MGMT ver 1.23 [ 1088.341460][T11200] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1089.765963][ T13] bridge_slave_1: left allmulticast mode [ 1089.765993][ T13] bridge_slave_1: left promiscuous mode [ 1089.766198][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.974377][ T13] bridge_slave_0: left allmulticast mode [ 1089.974409][ T13] bridge_slave_0: left promiscuous mode [ 1089.977155][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.291751][ T13] bridge_slave_1: left allmulticast mode [ 1090.291783][ T13] bridge_slave_1: left promiscuous mode [ 1090.291962][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.431067][ T13] bridge_slave_0: left allmulticast mode [ 1090.431122][ T13] bridge_slave_0: left promiscuous mode [ 1090.431318][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.471182][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.567427][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.637457][ T13] bond0 (unregistering): Released all slaves [ 1093.315582][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.429357][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.493455][ T13] bond0 (unregistering): Released all slaves [ 1093.597342][T11224] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1093.705898][T10830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.131132][ T8437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1096.303611][ T8437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1096.313055][ T8437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.322583][ T8437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.325163][ T8437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.605988][ T13] hsr_slave_0: left promiscuous mode [ 1097.632435][ T13] hsr_slave_1: left promiscuous mode [ 1097.633770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.659410][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.988809][ T13] hsr_slave_0: left promiscuous mode [ 1098.039619][ T13] hsr_slave_1: left promiscuous mode [ 1098.044041][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.081660][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.385792][ T5591] Bluetooth: hci3: command tx timeout [ 1100.430979][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1100.455798][ T5591] Bluetooth: hci3: command tx timeout [ 1100.729092][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1102.219233][T11264] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1102.536337][ T5591] Bluetooth: hci3: command tx timeout [ 1103.100493][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1103.177205][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1104.313559][T10830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.376280][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.377115][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.432896][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.433060][ T9502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.153928][ T5591] Bluetooth: hci3: command tx timeout [ 1107.536550][T11307] netlink: 124 bytes leftover after parsing attributes in process `syz.3.907'. [ 1110.479001][T11318] Bluetooth: hci0: invalid len left 7, exp >= 44 [ 1110.513538][ T8437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1110.637524][ T8437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1110.682972][ T8437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1110.702112][ T8437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1110.788471][ T8437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1114.381085][ T5591] Bluetooth: hci1: command tx timeout [ 1115.142693][T11001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1115.235099][T11001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.272657][T11001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1115.324800][T11001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.370798][T11001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1115.529363][T11001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.583616][T11001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1115.630411][T11001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.979433][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.979512][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.319695][T11372] netlink: 124 bytes leftover after parsing attributes in process `syz.2.916'. [ 1116.466008][ T5591] Bluetooth: hci1: command tx timeout [ 1117.035423][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.038722][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.038923][T11227] bridge_slave_0: entered allmulticast mode [ 1117.042692][T11227] bridge_slave_0: entered promiscuous mode [ 1117.148214][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.148322][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.148519][T11227] bridge_slave_1: entered allmulticast mode [ 1117.152239][T11227] bridge_slave_1: entered promiscuous mode [ 1119.194705][ T5591] Bluetooth: hci1: command tx timeout [ 1120.662044][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.766514][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.258400][ T5591] Bluetooth: hci1: command tx timeout [ 1123.579897][T11227] team0: Port device team_slave_0 added [ 1123.820768][T11227] team0: Port device team_slave_1 added [ 1124.236099][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.236119][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.236160][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.242876][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.242894][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.242925][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.578121][T11227] hsr_slave_0: entered promiscuous mode [ 1124.579204][T11227] hsr_slave_1: entered promiscuous mode [ 1124.580606][T11227] debugfs: 'hsr0' already exists in 'hsr' [ 1124.580628][T11227] Cannot create hsr debugfs directory [ 1128.051492][T11317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.051630][T11317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.051836][T11317] bridge_slave_0: entered allmulticast mode [ 1128.054740][T11317] bridge_slave_0: entered promiscuous mode [ 1128.094926][T11317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.095256][T11317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.095451][T11317] bridge_slave_1: entered allmulticast mode [ 1128.123659][T11317] bridge_slave_1: entered promiscuous mode [ 1128.718934][T11317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.747425][T11317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.802855][T11317] team0: Port device team_slave_0 added [ 1128.811849][T11317] team0: Port device team_slave_1 added [ 1129.714757][T11317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.714779][T11317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.714813][T11317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.747848][T11317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.747906][T11317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.754086][T11317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.893707][ T8437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1129.931047][ T8437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1129.934493][ T8437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1129.970916][ T8437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1129.971843][ T8437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1130.689133][T11317] hsr_slave_0: entered promiscuous mode [ 1130.708228][T11317] hsr_slave_1: entered promiscuous mode [ 1130.710657][T11317] debugfs: 'hsr0' already exists in 'hsr' [ 1130.710749][T11317] Cannot create hsr debugfs directory [ 1132.350846][ T5591] Bluetooth: hci2: command tx timeout [ 1133.958138][ T13] bridge_slave_1: left allmulticast mode [ 1133.958167][ T13] bridge_slave_1: left promiscuous mode [ 1133.958367][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.258016][ T13] bridge_slave_0: left allmulticast mode [ 1134.258046][ T13] bridge_slave_0: left promiscuous mode [ 1134.258268][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.377748][ T5591] Bluetooth: hci2: command tx timeout [ 1135.183373][ T13] bridge_slave_1: left allmulticast mode [ 1135.183404][ T13] bridge_slave_1: left promiscuous mode [ 1135.183586][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.270056][ T13] bridge_slave_0: left allmulticast mode [ 1135.270502][ T13] bridge_slave_0: left promiscuous mode [ 1135.270775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.116457][ T8059] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1136.266444][ T8059] usb 4-1: Using ep0 maxpacket: 16 [ 1136.267220][ T8059] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1136.271286][ T8059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.271315][ T8059] usb 4-1: Product: syz [ 1136.271331][ T8059] usb 4-1: Manufacturer: syz [ 1136.271348][ T8059] usb 4-1: SerialNumber: syz [ 1136.320425][ T8059] usb 4-1: config 0 descriptor?? [ 1136.357832][ T8059] usb 4-1: selecting invalid altsetting 1 [ 1136.357857][ T8059] technisat-usb2: could not set alternate setting to 0 [ 1136.461953][ T5591] Bluetooth: hci2: command tx timeout [ 1136.557936][ T8059] technisat-usb2: firmware version: 0.0 [ 1136.557987][ T8059] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1136.842018][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.991533][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.008171][ T8059] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1137.008750][ T8059] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1137.008791][ T8059] usb 4-1: media controller created [ 1137.008831][ T8059] technisat-usb2: i2c-error: out failed 53 = -22 [ 1137.008862][ T8059] dvb-usb: MAC address reading failed. [ 1137.083257][ T13] bond0 (unregistering): Released all slaves [ 1137.101128][ T8059] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.167100][T11528] technisat-usb2: i2c-error: out failed 04 = -22 [ 1137.169697][T11528] technisat-usb2: i2c-error: out failed 00 = -22 [ 1137.441534][ T8059] DVB: Unable to find symbol stv090x_attach() [ 1137.441978][ T8059] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1137.656415][ T8059] rc_core: IR keymap rc-technisat-usb2 not found [ 1137.656433][ T8059] Registered IR keymap rc-empty [ 1137.657725][ T8059] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1137.689391][ T8059] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input37 [ 1137.712116][ T8059] dvb-usb: schedule remote query interval to 100 msecs. [ 1137.713068][ T8059] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1137.731750][ T8059] usb 4-1: USB disconnect, device number 29 [ 1137.951204][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.016159][ T8059] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1138.167515][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.252997][ T13] bond0 (unregistering): Released all slaves [ 1138.397098][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1138.564609][ T5591] Bluetooth: hci2: command tx timeout [ 1140.432215][ T13] hsr_slave_0: left promiscuous mode [ 1140.469458][ T13] hsr_slave_1: left promiscuous mode [ 1140.470415][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.524879][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.742189][ T13] hsr_slave_0: left promiscuous mode [ 1140.800401][ T13] hsr_slave_1: left promiscuous mode [ 1140.812784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.847481][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.003384][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1142.003408][ T37] audit: type=1800 audit(1789340029.965:82): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.944" name="file1" dev="tmpfs" ino=2194 res=0 errno=0 [ 1142.465173][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1142.536459][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1144.369270][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1144.438977][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1145.395691][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1146.741002][ T5317] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1146.770041][ T5317] usb 3-1: USB disconnect, device number 23 [ 1147.515753][ T5317] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1147.550933][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.552815][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.552971][T11479] bridge_slave_0: entered allmulticast mode [ 1147.565904][T11479] bridge_slave_0: entered promiscuous mode [ 1147.646976][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.647065][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.647270][T11479] bridge_slave_1: entered allmulticast mode [ 1147.652727][T11479] bridge_slave_1: entered promiscuous mode [ 1147.705715][ T5317] usb 4-1: Using ep0 maxpacket: 16 [ 1147.711974][ T5317] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1147.730676][ T5317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.730699][ T5317] usb 4-1: Product: syz [ 1147.730710][ T5317] usb 4-1: Manufacturer: syz [ 1147.730722][ T5317] usb 4-1: SerialNumber: syz [ 1147.759131][ T5317] usb 4-1: config 0 descriptor?? [ 1147.968255][ T5317] usb 4-1: selecting invalid altsetting 1 [ 1147.968281][ T5317] technisat-usb2: could not set alternate setting to 0 [ 1148.140604][ T5317] technisat-usb2: firmware version: 0.0 [ 1148.140639][ T5317] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1148.502852][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.533145][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.671026][ T5317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1148.678612][ T5317] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1148.678750][ T5317] usb 4-1: media controller created [ 1148.678857][ T5317] technisat-usb2: i2c-error: out failed 53 = -22 [ 1148.680845][ T5317] dvb-usb: MAC address reading failed. [ 1148.744836][T11607] technisat-usb2: i2c-error: out failed 04 = -22 [ 1148.754950][T11607] technisat-usb2: i2c-error: out failed 00 = -22 [ 1148.775309][ T5317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1148.971950][T11479] team0: Port device team_slave_0 added [ 1149.031294][T11479] team0: Port device team_slave_1 added [ 1149.416931][ T5317] DVB: Unable to find symbol stv090x_attach() [ 1149.420360][ T5317] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1149.686328][ T5317] rc_core: IR keymap rc-technisat-usb2 not found [ 1149.686348][ T5317] Registered IR keymap rc-empty [ 1149.692727][ T5317] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1149.739071][ T5317] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input38 [ 1149.790637][ T5317] dvb-usb: schedule remote query interval to 100 msecs. [ 1149.792845][ T5317] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1149.824896][ T5317] usb 4-1: USB disconnect, device number 30 [ 1151.451168][ T5317] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1151.722683][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.722711][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.722787][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.797581][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.797605][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.797638][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.368299][T11479] hsr_slave_0: entered promiscuous mode [ 1154.375219][T11479] hsr_slave_1: entered promiscuous mode [ 1157.816765][ T8437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.874543][ T8437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.884130][ T8437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.892607][ T8437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.904624][ T8437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1160.083562][ T5591] Bluetooth: hci3: command tx timeout [ 1161.805014][T11317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1161.908508][T11317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.912081][T11317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1161.958267][T11317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.140240][ T5591] Bluetooth: hci3: command tx timeout [ 1162.592304][T11317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1162.641331][T11317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.643292][T11317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1162.687577][ T6212] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1162.710479][T11317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.955777][ T6212] usb 4-1: Using ep0 maxpacket: 16 [ 1162.956835][ T6212] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1162.986016][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.986048][ T6212] usb 4-1: Product: syz [ 1162.986079][ T6212] usb 4-1: Manufacturer: syz [ 1162.986097][ T6212] usb 4-1: SerialNumber: syz [ 1163.461256][ T6212] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1163.492025][ T6212] usb 4-1: USB disconnect, device number 31 [ 1163.731148][T11317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.037931][ T1184] bridge_slave_1: left allmulticast mode [ 1164.037972][ T1184] bridge_slave_1: left promiscuous mode [ 1164.038249][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.388834][ T5591] Bluetooth: hci3: command tx timeout [ 1164.408402][ T1184] bridge_slave_0: left allmulticast mode [ 1164.408439][ T1184] bridge_slave_0: left promiscuous mode [ 1164.408715][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.455726][ T5591] Bluetooth: hci3: command tx timeout [ 1167.016650][ T6212] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1167.395951][ T6212] usb 3-1: Using ep0 maxpacket: 16 [ 1167.425712][ T6212] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1167.687461][ T6212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.687495][ T6212] usb 3-1: Product: syz [ 1167.687512][ T6212] usb 3-1: Manufacturer: syz [ 1167.687528][ T6212] usb 3-1: SerialNumber: syz [ 1168.106849][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.186384][ T6212] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1168.189428][ T6212] usb 3-1: USB disconnect, device number 24 [ 1168.190051][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.279822][ T1184] bond0 (unregistering): Released all slaves [ 1168.885888][ T1184] hsr_slave_0: left promiscuous mode [ 1168.925865][ T1184] hsr_slave_1: left promiscuous mode [ 1168.926863][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.956850][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.434432][ T8437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1169.475091][ T8437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1169.489960][ T8437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1169.517988][ T8437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1169.521141][ T8437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.246376][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1171.296559][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1171.668367][ T8437] Bluetooth: hci1: command tx timeout [ 1172.142444][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.142664][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.142851][T11659] bridge_slave_0: entered allmulticast mode [ 1172.160624][T11659] bridge_slave_0: entered promiscuous mode [ 1172.183440][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.183929][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.184125][T11659] bridge_slave_1: entered allmulticast mode [ 1172.212037][T11659] bridge_slave_1: entered promiscuous mode [ 1172.400975][ T36] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1172.492323][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.521803][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.591087][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 1172.611893][ T36] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1172.643874][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.643909][ T36] usb 3-1: Product: syz [ 1172.643927][ T36] usb 3-1: Manufacturer: syz [ 1172.643944][ T36] usb 3-1: SerialNumber: syz [ 1173.163458][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.163806][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.165148][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.165530][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.166718][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.167092][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.167479][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.167983][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.225162][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1173.225384][ T36] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 1173.264046][ T8059] usb 3-1: USB disconnect, device number 25 [ 1173.423279][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1173.476652][T11659] team0: Port device team_slave_0 added [ 1173.502292][T11659] team0: Port device team_slave_1 added [ 1173.736127][ T8437] Bluetooth: hci1: command tx timeout [ 1174.444979][T11809] netlink: 124 bytes leftover after parsing attributes in process `syz.2.998'. [ 1175.815873][ T8437] Bluetooth: hci1: command tx timeout [ 1177.417849][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.417936][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.895736][ T8437] Bluetooth: hci1: command tx timeout [ 1180.208172][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.208238][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.208274][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.345850][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.345866][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.345888][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.037361][T11845] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1006'. [ 1181.610153][T11659] hsr_slave_0: entered promiscuous mode [ 1181.611622][T11659] hsr_slave_1: entered promiscuous mode [ 1181.612630][T11659] debugfs: 'hsr0' already exists in 'hsr' [ 1181.612657][T11659] Cannot create hsr debugfs directory [ 1182.742465][T11859] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1186.995990][T11479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1187.088512][T11889] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1015'. [ 1187.881300][T11479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.017002][T11479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1188.064970][T11479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.150013][T11893] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1188.569623][T11479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1189.502562][T11479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.731286][T11479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1189.770700][T11479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.229147][T11752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.229311][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.229441][T11752] bridge_slave_0: entered allmulticast mode [ 1190.231399][T11752] bridge_slave_0: entered promiscuous mode [ 1190.233681][T11752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.233834][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.233951][T11752] bridge_slave_1: entered allmulticast mode [ 1190.256360][T11752] bridge_slave_1: entered promiscuous mode [ 1190.711417][T11752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.760219][T11752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.934716][T11752] team0: Port device team_slave_0 added [ 1190.988533][T11752] team0: Port device team_slave_1 added [ 1191.057012][T11752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.057031][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.057054][T11752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.059388][T11752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.059403][T11752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.059427][T11752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.552328][T11752] hsr_slave_0: entered promiscuous mode [ 1191.556653][T11752] hsr_slave_1: entered promiscuous mode [ 1191.558926][T11752] debugfs: 'hsr0' already exists in 'hsr' [ 1191.558950][T11752] Cannot create hsr debugfs directory [ 1193.552854][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.641882][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.661590][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1193.668903][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1193.669453][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1193.856095][ T1184] bridge_slave_1: left allmulticast mode [ 1193.856134][ T1184] bridge_slave_1: left promiscuous mode [ 1193.856430][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.043424][ T1184] bridge_slave_0: left allmulticast mode [ 1194.043466][ T1184] bridge_slave_0: left promiscuous mode [ 1194.043751][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.619745][ T1184] bridge_slave_1: left allmulticast mode [ 1195.619793][ T1184] bridge_slave_1: left promiscuous mode [ 1195.620115][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.869503][ T1184] bridge_slave_0: left allmulticast mode [ 1195.869549][ T1184] bridge_slave_0: left promiscuous mode [ 1195.869922][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.895770][ T8437] Bluetooth: hci2: command tx timeout [ 1198.195934][ T8437] Bluetooth: hci2: command tx timeout [ 1200.156590][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.215786][ T5591] Bluetooth: hci2: command tx timeout [ 1200.290915][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.755624][ T5591] Bluetooth: hci2: command tx timeout [ 1203.723112][ T1184] bond0 (unregistering): Released all slaves [ 1206.246555][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.411477][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.444928][T11957] ./file0: Can't open blockdev [ 1206.491422][ T1184] bond0 (unregistering): Released all slaves [ 1206.805762][ T5576] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1207.022437][ T5576] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1207.027938][ T5576] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1207.028025][ T5576] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.028080][ T5576] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1207.028142][ T5576] usb 3-1: config 0 has no interface number 0 [ 1207.028194][ T5576] usb 3-1: config 0 has no interface number 1 [ 1207.028355][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.145072][ T5576] usb 3-1: config 0 descriptor?? [ 1207.224141][ T5576] usb 3-1: unknown number of interfaces: 2 [ 1207.400104][T11197] usb 3-1: USB disconnect, device number 26 [ 1209.255732][ T1184] hsr_slave_0: left promiscuous mode [ 1209.402501][T11993] overlayfs: failed to resolve './bus': -2 [ 1209.526073][ T1184] hsr_slave_1: left promiscuous mode [ 1209.533963][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.005840][ T5576] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1210.155701][ T5576] usb 4-1: Using ep0 maxpacket: 16 [ 1210.156794][ T5576] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1210.161981][ T5576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.162012][ T5576] usb 4-1: Product: syz [ 1210.162032][ T5576] usb 4-1: Manufacturer: syz [ 1210.162052][ T5576] usb 4-1: SerialNumber: syz [ 1210.332796][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.478980][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1210.515422][ T5576] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1210.543986][ T5576] usb 4-1: USB disconnect, device number 32 [ 1210.585740][ T1184] hsr_slave_0: left promiscuous mode [ 1210.625789][ T1184] hsr_slave_1: left promiscuous mode [ 1210.627324][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.670721][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.145132][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 1211.528294][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1211.590848][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1212.519460][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1212.596210][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1214.180358][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1214.335791][T11659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1214.469403][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.517712][T11659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1214.592413][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.635698][T11659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1216.660523][T11659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.222181][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1220.161771][ T8437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.215748][ T5591] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1222.235437][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.238031][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.245430][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.252153][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.279750][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1224.470360][ T5591] Bluetooth: hci3: command tx timeout [ 1224.771333][T11918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.773462][T11918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.773682][T11918] bridge_slave_0: entered allmulticast mode [ 1224.803909][T11918] bridge_slave_0: entered promiscuous mode [ 1224.837600][T11918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.837861][T11918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.838090][T11918] bridge_slave_1: entered allmulticast mode [ 1225.117951][T11918] bridge_slave_1: entered promiscuous mode [ 1226.599334][ T5591] Bluetooth: hci3: command tx timeout [ 1228.296963][T11918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.399203][T11918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.545798][ T1663] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1228.617218][ T5591] Bluetooth: hci3: command tx timeout [ 1228.780845][ T1663] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1228.782557][ T1663] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1228.782605][ T1663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.918779][T11918] team0: Port device team_slave_0 added [ 1229.117072][ T36] usb 3-1: USB disconnect, device number 27 [ 1229.762949][T11918] team0: Port device team_slave_1 added [ 1230.392660][T11918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.392680][T11918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.392710][T11918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.419769][T11918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.419826][T11918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.419914][T11918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.695711][ T5591] Bluetooth: hci3: command tx timeout [ 1231.203206][T11918] hsr_slave_0: entered promiscuous mode [ 1231.219758][T11918] hsr_slave_1: entered promiscuous mode [ 1231.222252][T11918] debugfs: 'hsr0' already exists in 'hsr' [ 1231.222280][T11918] Cannot create hsr debugfs directory [ 1231.556059][ T8437] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1231.637114][ T8437] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1231.704650][ T8437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1231.721662][ T8437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1231.722428][ T8437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1233.985894][ T5591] Bluetooth: hci5: command tx timeout [ 1234.117300][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.117448][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.117821][T12043] bridge_slave_0: entered allmulticast mode [ 1234.121392][T12043] bridge_slave_0: entered promiscuous mode [ 1234.163652][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.163837][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.171126][T12043] bridge_slave_1: entered allmulticast mode [ 1234.191093][T12043] bridge_slave_1: entered promiscuous mode [ 1235.771273][T12043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.063085][ T5591] Bluetooth: hci5: command tx timeout [ 1238.119522][T12043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.530023][T12043] team0: Port device team_slave_0 added [ 1238.601810][T12043] team0: Port device team_slave_1 added [ 1238.865923][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.866315][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.144963][ T8437] Bluetooth: hci5: command tx timeout [ 1241.249322][T12043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.249343][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.249374][T12043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.697650][T12043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.697690][T12043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.697721][T12043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.218092][ T8437] Bluetooth: hci5: command tx timeout [ 1242.534727][T12043] hsr_slave_0: entered promiscuous mode [ 1242.557120][T12043] hsr_slave_1: entered promiscuous mode [ 1242.558093][T12043] debugfs: 'hsr0' already exists in 'hsr' [ 1242.558122][T12043] Cannot create hsr debugfs directory [ 1245.621927][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1246.315943][ T1184] bridge_slave_1: left allmulticast mode [ 1246.315988][ T1184] bridge_slave_1: left promiscuous mode [ 1246.316281][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.416958][ T1184] bridge_slave_0: left allmulticast mode [ 1246.416989][ T1184] bridge_slave_0: left promiscuous mode [ 1246.417270][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.625905][ T1184] bridge_slave_1: left allmulticast mode [ 1246.625967][ T1184] bridge_slave_1: left promiscuous mode [ 1246.626247][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.717350][ T1184] bridge_slave_0: left allmulticast mode [ 1246.717383][ T1184] bridge_slave_0: left promiscuous mode [ 1246.717589][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.666361][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.766484][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.848485][ T1184] bond0 (unregistering): Released all slaves [ 1248.268174][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.386602][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.469411][ T1184] bond0 (unregistering): Released all slaves [ 1252.165732][ T1184] hsr_slave_0: left promiscuous mode [ 1252.206635][ T1184] hsr_slave_1: left promiscuous mode [ 1252.207986][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.246654][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.385923][ T1184] hsr_slave_0: left promiscuous mode [ 1252.427487][ T1184] hsr_slave_1: left promiscuous mode [ 1252.428651][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.466545][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.887061][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1252.946773][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1253.416481][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1253.466721][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1253.688640][T12175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.688775][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.688960][T12175] bridge_slave_0: entered allmulticast mode [ 1253.695005][T12175] bridge_slave_0: entered promiscuous mode [ 1253.710045][T12175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.710405][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.710878][T12175] bridge_slave_1: entered allmulticast mode [ 1253.743904][T12175] bridge_slave_1: entered promiscuous mode [ 1253.881878][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.994406][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.493622][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1254.542204][ T6212] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1254.564183][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1254.566375][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1254.629719][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1254.631432][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1254.736857][ T6212] usb 3-1: Using ep0 maxpacket: 16 [ 1254.745259][ T6212] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1254.841316][ T6212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.841349][ T6212] usb 3-1: Product: syz [ 1254.841366][ T6212] usb 3-1: Manufacturer: syz [ 1254.841382][ T6212] usb 3-1: SerialNumber: syz [ 1255.191728][T12175] team0: Port device team_slave_0 added [ 1255.241567][T12175] team0: Port device team_slave_1 added [ 1255.457067][ T6212] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1255.465335][ T6212] usb 3-1: USB disconnect, device number 28 [ 1257.569003][ T8437] Bluetooth: hci1: command tx timeout [ 1259.226872][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.226895][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.226925][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.244762][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.244812][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.244889][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.576394][ T8437] Bluetooth: hci1: command tx timeout [ 1259.649622][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1260.216761][T12175] hsr_slave_0: entered promiscuous mode [ 1260.218230][T12175] hsr_slave_1: entered promiscuous mode [ 1263.265343][ T8437] Bluetooth: hci1: command tx timeout [ 1263.809156][T12358] nvme_fabrics: missing parameter 'transport=%s' [ 1263.809182][T12358] nvme_fabrics: missing parameter 'nqn=%s' [ 1263.918711][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 1263.955407][T12365] ./file0: Can't open blockdev [ 1264.275738][T11197] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1264.470671][T11197] usb 4-1: Using ep0 maxpacket: 16 [ 1264.471747][T11197] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1264.518940][T11197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.518972][T11197] usb 4-1: Product: syz [ 1264.518989][T11197] usb 4-1: Manufacturer: syz [ 1264.519006][T11197] usb 4-1: SerialNumber: syz [ 1265.052327][T11197] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1265.092766][T11197] usb 4-1: USB disconnect, device number 33 [ 1265.335904][ T8437] Bluetooth: hci1: command tx timeout [ 1267.217752][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1108'. [ 1267.217798][T12407] ip6gretap0: entered promiscuous mode [ 1267.217820][T12407] ip6gretap0: entered allmulticast mode [ 1270.176726][T12438] binder: BINDER_SET_CONTEXT_MGR already set [ 1270.176743][T12438] binder: 12435:12438 ioctl 4018620d 200000004a80 returned -16 [ 1272.780699][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'. [ 1273.133129][T12461] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.133148][T12461] binder: 12453:12461 ioctl 4018620d 200000004a80 returned -16 [ 1274.065349][T12043] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1274.142905][T12043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1274.174315][T12043] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1274.178761][ T6169] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1274.366024][ T6169] usb 4-1: Using ep0 maxpacket: 16 [ 1274.367096][ T6169] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1274.370765][ T6169] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1274.370795][ T6169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.370818][ T6169] usb 4-1: config 0 has no interface number 0 [ 1274.434729][ T6169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.434761][ T6169] usb 4-1: Product: syz [ 1274.434778][ T6169] usb 4-1: Manufacturer: syz [ 1274.434794][ T6169] usb 4-1: SerialNumber: syz [ 1274.478050][T12043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.501145][ T6169] usb 4-1: config 0 descriptor?? [ 1274.540695][ T6169] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1274.540739][ T6169] uvcvideo 4-1:0.105: No valid video chain found. [ 1274.671682][T12043] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1274.789942][T12043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1274.994856][T12043] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1275.789607][T12043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.022336][ T1663] usb 4-1: USB disconnect, device number 34 [ 1276.130243][ T37] audit: type=1800 audit(1789340164.125:83): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1124" name="file1" dev="tmpfs" ino=2902 res=0 errno=0 [ 1276.326396][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 1276.390447][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 1277.490244][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.490749][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.491601][T12312] bridge_slave_0: entered allmulticast mode [ 1277.602054][T12312] bridge_slave_0: entered promiscuous mode [ 1278.775439][T12043] kthread_run failed with err -4 [ 1278.802232][T12484] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1278.826034][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.826184][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.826407][T12312] bridge_slave_1: entered allmulticast mode [ 1278.880743][T12312] bridge_slave_1: entered promiscuous mode [ 1279.472074][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.171133][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.487396][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1283.511994][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1283.573183][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1283.599381][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.600271][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.794726][ T8437] Bluetooth: hci2: command tx timeout [ 1286.220576][T12312] team0: Port device team_slave_0 added [ 1286.241614][T12312] team0: Port device team_slave_1 added [ 1286.348136][T12539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1134'. [ 1286.686448][T12547] FAULT_INJECTION: forcing a failure. [ 1286.686448][T12547] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.686476][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.3.1135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1286.686496][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.686507][T12547] Call Trace: [ 1286.686514][T12547] [ 1286.686522][T12547] dump_stack_lvl+0xe8/0x150 [ 1286.686555][T12547] should_fail_ex+0x46b/0x600 [ 1286.686584][T12547] should_failslab+0xa8/0x100 [ 1286.686623][T12547] __kmalloc_cache_noprof+0xa1/0x680 [ 1286.686647][T12547] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.686768][T12547] ? snd_hrtimer_open+0x4f/0xd0 [ 1286.686821][T12547] ? snd_hrtimer_open+0x4f/0xd0 [ 1286.686848][T12547] snd_hrtimer_open+0x4f/0xd0 [ 1286.686872][T12547] snd_timer_open+0xee0/0x1350 [ 1286.686900][T12547] snd_seq_timer_open+0x2de/0x620 [ 1286.686969][T12547] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1286.687003][T12547] ? rt_spin_unlock+0x159/0x200 [ 1286.687026][T12547] ? rt_spin_unlock+0x165/0x200 [ 1286.687047][T12547] snd_seq_queue_alloc+0x3c6/0x730 [ 1286.687077][T12547] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1286.687102][T12547] snd_seq_oss_open+0x657/0xf40 [ 1286.687130][T12547] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1286.687156][T12547] ? __lock_acquire+0x747/0x2de0 [ 1286.687209][T12547] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.687291][T12547] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1286.687326][T12547] ? __pfx_free_devinfo+0x10/0x10 [ 1286.687347][T12547] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1286.687372][T12547] ? mutex_lock_nested+0x152/0x1d0 [ 1286.687390][T12547] ? odev_open+0x5c/0xa0 [ 1286.687410][T12547] odev_open+0x67/0xa0 [ 1286.687428][T12547] chrdev_open+0x4dc/0x600 [ 1286.687455][T12547] ? __pfx_chrdev_open+0x10/0x10 [ 1286.687480][T12547] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1286.687520][T12547] ? __pfx_chrdev_open+0x10/0x10 [ 1286.687544][T12547] do_dentry_open+0x849/0x1420 [ 1286.687578][T12547] vfs_open+0x3b/0x350 [ 1286.687608][T12547] ? path_openat+0x142d/0x1d60 [ 1286.687632][T12547] path_openat+0x1448/0x1d60 [ 1286.687669][T12547] do_file_open+0x23e/0x4a0 [ 1286.687695][T12547] ? __pfx_do_file_open+0x10/0x10 [ 1286.687735][T12547] ? alloc_fd+0x654/0x6d0 [ 1286.687759][T12547] do_sys_openat2+0x115/0x200 [ 1286.687785][T12547] ? __se_sys_futex+0x3a8/0x450 [ 1286.687806][T12547] ? __pfx_do_sys_openat2+0x10/0x10 [ 1286.687837][T12547] ? rcu_is_watching+0x16/0xb0 [ 1286.687866][T12547] __x64_sys_openat+0x138/0x170 [ 1286.687897][T12547] do_syscall_64+0x166/0x520 [ 1286.687920][T12547] ? trace_irq_disable+0x3b/0x140 [ 1286.687942][T12547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.687960][T12547] ? clear_bhb_loop+0x70/0xc0 [ 1286.687981][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.687997][T12547] RIP: 0033:0x7f938457e159 [ 1286.688014][T12547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.688029][T12547] RSP: 002b:00007f93827d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1286.688048][T12547] RAX: ffffffffffffffda RBX: 00007f9384805fa0 RCX: 00007f938457e159 [ 1286.688061][T12547] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1286.688077][T12547] RBP: 00007f938461503b R08: 0000000000000000 R09: 0000000000000000 [ 1286.688088][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.688100][T12547] R13: 00007f9384806038 R14: 00007f9384805fa0 R15: 00007ffd9fd1ae38 [ 1286.688126][T12547] [ 1287.269172][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.269193][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.269225][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.331264][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.331285][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.331315][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.702583][T12312] hsr_slave_0: entered promiscuous mode [ 1287.709449][T12312] hsr_slave_1: entered promiscuous mode [ 1287.725319][T12312] debugfs: 'hsr0' already exists in 'hsr' [ 1287.725351][T12312] Cannot create hsr debugfs directory [ 1287.815716][ T5591] Bluetooth: hci2: command tx timeout [ 1288.275900][ T1184] bridge_slave_1: left allmulticast mode [ 1288.275943][ T1184] bridge_slave_1: left promiscuous mode [ 1288.276223][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.518594][ T1184] bridge_slave_0: left allmulticast mode [ 1288.518623][ T1184] bridge_slave_0: left promiscuous mode [ 1288.518861][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.850179][T12569] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1133'. [ 1289.825942][ T1184] bridge_slave_1: left allmulticast mode [ 1289.825973][ T1184] bridge_slave_1: left promiscuous mode [ 1289.826171][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.895768][ T5591] Bluetooth: hci2: command tx timeout [ 1289.927187][ T1184] bridge_slave_0: left allmulticast mode [ 1289.927219][ T1184] bridge_slave_0: left promiscuous mode [ 1289.927422][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.297573][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.376631][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.441178][ T1184] bond0 (unregistering): Released all slaves [ 1290.746537][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.826424][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.907670][ T1184] bond0 (unregistering): Released all slaves [ 1291.756219][ T1184] hsr_slave_0: left promiscuous mode [ 1291.795763][ T1184] hsr_slave_1: left promiscuous mode [ 1291.797844][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.826550][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.975847][ T5591] Bluetooth: hci2: command tx timeout [ 1291.991819][ T1184] hsr_slave_0: left promiscuous mode [ 1292.025921][ T1184] hsr_slave_1: left promiscuous mode [ 1292.027037][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.048264][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.456633][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1292.517380][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1293.039313][ T8437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1293.102979][ T8437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1293.107210][ T8437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1293.132232][ T8437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1293.151439][ T8437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1293.207314][ T6212] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1293.298644][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1293.355652][ T6212] usb 4-1: Using ep0 maxpacket: 16 [ 1293.356520][ T6212] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1293.358106][ T6212] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1293.358134][ T6212] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.358153][ T6212] usb 4-1: config 0 has no interface number 0 [ 1293.361454][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.361485][ T6212] usb 4-1: Product: syz [ 1293.361502][ T6212] usb 4-1: Manufacturer: syz [ 1293.361520][ T6212] usb 4-1: SerialNumber: syz [ 1293.377967][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1293.444813][ T6212] usb 4-1: config 0 descriptor?? [ 1293.468600][ T6212] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 1294.006384][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1142'. [ 1296.353130][ T5591] Bluetooth: hci3: command tx timeout [ 1296.575857][ T8059] usb 4-1: USB disconnect, device number 35 [ 1296.969641][T12603] nvme_fabrics: missing parameter 'nqn=%s' [ 1297.640332][T12614] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1146'. [ 1298.375841][ T5591] Bluetooth: hci3: command tx timeout [ 1300.573146][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.573220][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.629458][ T5591] Bluetooth: hci3: command tx timeout [ 1300.754802][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1302.735754][ T5591] Bluetooth: hci3: command tx timeout [ 1307.253841][T12676] FAULT_INJECTION: forcing a failure. [ 1307.253841][T12676] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1307.253884][T12676] CPU: 1 UID: 0 PID: 12676 Comm: syz.3.1157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1307.253912][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1307.253928][T12676] Call Trace: [ 1307.253937][T12676] [ 1307.253947][T12676] dump_stack_lvl+0xe8/0x150 [ 1307.253989][T12676] should_fail_ex+0x46b/0x600 [ 1307.254026][T12676] get_futex_key+0x1b4/0x1580 [ 1307.254059][T12676] ? __lock_acquire+0x747/0x2de0 [ 1307.254094][T12676] ? kasan_save_track+0x3e/0x80 [ 1307.254127][T12676] ? __kasan_slab_free+0x5c/0x80 [ 1307.254158][T12676] ? kmem_cache_free+0x187/0x6d0 [ 1307.254197][T12676] ? __pfx_get_futex_key+0x10/0x10 [ 1307.254253][T12676] futex_wake+0x119/0x600 [ 1307.254289][T12676] ? __pfx_futex_wake+0x10/0x10 [ 1307.254334][T12676] do_futex+0x458/0x4e0 [ 1307.254362][T12676] ? __pfx_do_futex+0x10/0x10 [ 1307.254382][T12676] ? kmem_cache_free+0x187/0x6d0 [ 1307.254415][T12676] ? do_sys_openat2+0x14e/0x200 [ 1307.254458][T12676] __se_sys_futex+0x3a8/0x450 [ 1307.254488][T12676] ? __pfx___se_sys_futex+0x10/0x10 [ 1307.254511][T12676] ? rcu_is_watching+0x16/0xb0 [ 1307.254553][T12676] ? __x64_sys_futex+0x21/0xf0 [ 1307.254579][T12676] do_syscall_64+0x166/0x520 [ 1307.254614][T12676] ? trace_irq_disable+0x3b/0x140 [ 1307.254639][T12676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.254658][T12676] ? clear_bhb_loop+0x70/0xc0 [ 1307.254681][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.254702][T12676] RIP: 0033:0x7f938457e159 [ 1307.254721][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.254739][T12676] RSP: 002b:00007f93827d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1307.254762][T12676] RAX: ffffffffffffffda RBX: 00007f9384805fa8 RCX: 00007f938457e159 [ 1307.254778][T12676] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9384805fac [ 1307.254793][T12676] RBP: 00007f9384805fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1307.254810][T12676] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1307.254824][T12676] R13: 00007f9384806038 R14: 00007ffd9fd1ad50 R15: 00007ffd9fd1ae38 [ 1307.254856][T12676] [ 1307.700559][T12525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.700673][T12525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.700887][T12525] bridge_slave_0: entered allmulticast mode [ 1307.703265][T12525] bridge_slave_0: entered promiscuous mode [ 1309.735950][T12525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.736085][T12525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.736282][T12525] bridge_slave_1: entered allmulticast mode [ 1309.742942][T12525] bridge_slave_1: entered promiscuous mode [ 1311.562639][T12525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.589098][T12525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.650814][ T37] audit: type=1800 audit(1789340199.645:84): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1162" name="file1" dev="tmpfs" ino=2987 res=0 errno=0 [ 1311.834869][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 1311.834896][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 1312.119551][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 1312.121696][T12525] team0: Port device team_slave_0 added [ 1312.203418][T12525] team0: Port device team_slave_1 added [ 1315.956058][T12525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.956086][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.956116][T12525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.029873][T12525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.029895][T12525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.029925][T12525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.469461][T12579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.469607][T12579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.469781][T12579] bridge_slave_0: entered allmulticast mode [ 1316.475419][T12579] bridge_slave_0: entered promiscuous mode [ 1316.542391][T12525] hsr_slave_0: entered promiscuous mode [ 1316.543762][T12525] hsr_slave_1: entered promiscuous mode [ 1316.561711][T12525] debugfs: 'hsr0' already exists in 'hsr' [ 1316.561741][T12525] Cannot create hsr debugfs directory [ 1316.562829][T12579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.563047][T12579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.563253][T12579] bridge_slave_1: entered allmulticast mode [ 1316.599376][T12579] bridge_slave_1: entered promiscuous mode [ 1316.719186][T12579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.904227][ T8437] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1316.948967][ T8437] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1316.979300][ T8437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1316.981423][ T8437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1317.001126][ T8437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1317.289686][T12579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.328654][ T5591] Bluetooth: hci5: command tx timeout [ 1320.962442][ T37] audit: type=1800 audit(1789340208.945:85): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1170" name="file1" dev="tmpfs" ino=3020 res=0 errno=0 [ 1322.088340][ T5591] Bluetooth: hci5: command tx timeout [ 1322.159967][T12579] team0: Port device team_slave_0 added [ 1324.714371][ T5591] Bluetooth: hci5: command tx timeout [ 1324.821941][T12579] team0: Port device team_slave_1 added [ 1325.185702][T11197] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1325.212325][T12579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.212342][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.212365][T12579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.356747][T11197] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1325.358279][T11197] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1325.358324][T11197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.364812][T11197] usb 4-1: config 0 descriptor?? [ 1325.499761][T12579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.499782][T12579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.499814][T12579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.776920][ T8437] Bluetooth: hci5: command tx timeout [ 1329.246954][ T8059] usb 4-1: USB disconnect, device number 36 [ 1331.444214][T12579] hsr_slave_0: entered promiscuous mode [ 1331.456974][T12579] hsr_slave_1: entered promiscuous mode [ 1331.458560][T12579] debugfs: 'hsr0' already exists in 'hsr' [ 1331.459587][T12579] Cannot create hsr debugfs directory [ 1332.259140][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 1332.259169][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 1335.397876][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1338.128735][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.128869][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.129094][T12750] bridge_slave_0: entered allmulticast mode [ 1338.162270][T12750] bridge_slave_0: entered promiscuous mode [ 1338.177995][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.178182][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.178426][T12750] bridge_slave_1: entered allmulticast mode [ 1338.183200][T12750] bridge_slave_1: entered promiscuous mode [ 1338.547765][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.607002][T12750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.713720][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1340.767677][ T1184] bridge_slave_1: left allmulticast mode [ 1340.767721][ T1184] bridge_slave_1: left promiscuous mode [ 1340.767986][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.937199][ T1184] bridge_slave_0: left allmulticast mode [ 1340.937228][ T1184] bridge_slave_0: left promiscuous mode [ 1340.937462][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.115914][ T1184] bridge_slave_1: left allmulticast mode [ 1343.115957][ T1184] bridge_slave_1: left promiscuous mode [ 1343.116220][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.231012][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1343.273850][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1343.287891][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1343.294110][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1343.313640][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1343.350474][ T1184] bridge_slave_0: left allmulticast mode [ 1343.350509][ T1184] bridge_slave_0: left promiscuous mode [ 1343.350813][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.039682][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.090793][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 1344.090825][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 1344.156598][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.431755][ T1184] bond0 (unregistering): Released all slaves [ 1345.455723][ T5591] Bluetooth: hci1: command tx timeout [ 1345.646294][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.726722][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.767455][ T1184] bond0 (unregistering): Released all slaves [ 1345.901923][T12750] team0: Port device team_slave_0 added [ 1346.149261][T12750] team0: Port device team_slave_1 added [ 1348.843618][ T5591] Bluetooth: hci1: command tx timeout [ 1349.431560][ T1184] hsr_slave_0: left promiscuous mode [ 1349.477591][ T1184] hsr_slave_1: left promiscuous mode [ 1349.478557][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.527791][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.716154][ T1184] hsr_slave_0: left promiscuous mode [ 1349.755720][ T1184] hsr_slave_1: left promiscuous mode [ 1349.757089][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.800147][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.080415][ T8437] Bluetooth: hci1: command tx timeout [ 1353.311171][ T5591] Bluetooth: hci1: command tx timeout [ 1354.057900][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1354.136510][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1354.766421][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1354.818863][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1355.100382][T12750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.100405][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.100435][T12750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.157248][T12750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.157269][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.157299][T12750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.469382][T12750] hsr_slave_0: entered promiscuous mode [ 1355.470378][T12750] hsr_slave_1: entered promiscuous mode [ 1358.004671][ T5591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1358.084643][ T5591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1358.094976][ T5591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1358.104979][ T5591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1358.114610][ T5591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1359.735734][ T8059] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1359.886724][ T8059] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1359.892923][ T8059] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.892987][ T8059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.316306][ T8437] Bluetooth: hci6: command tx timeout [ 1360.335014][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1360.362809][ T8059] as10x_usb: device has been detected [ 1360.364550][ T8059] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1360.421958][ T8059] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1360.559989][T12956] INFO: trying to register non-static key. [ 1360.565879][T12956] The code is fine but needs lockdep annotation, or maybe [ 1360.573102][T12956] you didn't initialize this object before use? [ 1360.579417][T12956] turning off the locking correctness validator. [ 1360.585780][T12956] CPU: 0 UID: 0 PID: 12956 Comm: syz.2.1199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1360.595710][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.605803][T12956] Call Trace: [ 1360.609111][T12956] [ 1360.612062][T12956] dump_stack_lvl+0xe8/0x150 [ 1360.616691][T12956] assign_lock_key+0x133/0x150 [ 1360.621514][T12956] register_lock_class+0xcc/0x2e0 [ 1360.626584][T12956] __lock_acquire+0x10c/0x2de0 [ 1360.631370][T12956] ? add_lock_to_list+0xc7/0x100 [ 1360.636353][T12956] ? lockdep_unlock+0x5c/0xd0 [ 1360.641051][T12956] ? __lock_acquire+0x1511/0x2de0 [ 1360.646102][T12956] lock_acquire+0x115/0x350 [ 1360.650632][T12956] ? as102_stream_ctrl+0x27/0xc0 [ 1360.655690][T12956] ? as102_stream_ctrl+0x27/0xc0 [ 1360.660649][T12956] ? as102_stream_ctrl+0x27/0xc0 [ 1360.665644][T12956] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1360.671742][T12956] ? as102_stream_ctrl+0x27/0xc0 [ 1360.676705][T12956] as102_stream_ctrl+0x27/0xc0 [ 1360.681496][T12956] __dvb_frontend_open+0x2ef/0xc40 [ 1360.686715][T12956] ? mutex_lock_nested+0x152/0x1d0 [ 1360.691853][T12956] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1360.697333][T12956] dvb_device_open+0x258/0x350 [ 1360.702171][T12956] chrdev_open+0x4dc/0x600 [ 1360.706615][T12956] ? __pfx_chrdev_open+0x10/0x10 [ 1360.711587][T12956] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1360.717945][T12956] ? __pfx_chrdev_open+0x10/0x10 [ 1360.722910][T12956] do_dentry_open+0x849/0x1420 [ 1360.727709][T12956] vfs_open+0x3b/0x350 [ 1360.731806][T12956] ? path_openat+0x142d/0x1d60 [ 1360.736622][T12956] path_openat+0x1448/0x1d60 [ 1360.741242][T12956] do_file_open+0x23e/0x4a0 [ 1360.745776][T12956] ? __pfx_do_file_open+0x10/0x10 [ 1360.750833][T12956] ? alloc_fd+0x654/0x6d0 [ 1360.755187][T12956] do_sys_openat2+0x115/0x200 [ 1360.759900][T12956] ? __pfx_do_sys_openat2+0x10/0x10 [ 1360.765157][T12956] __x64_sys_openat+0x138/0x170 [ 1360.770055][T12956] do_syscall_64+0x166/0x520 [ 1360.774671][T12956] ? trace_irq_disable+0x3b/0x140 [ 1360.779716][T12956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.785805][T12956] ? clear_bhb_loop+0x70/0xc0 [ 1360.790503][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.796437][T12956] RIP: 0033:0x7f04ed81e98e [ 1360.800878][T12956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1360.820531][T12956] RSP: 002b:00007f04eba94b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1360.828976][T12956] RAX: ffffffffffffffda RBX: 00007f04eba956c0 RCX: 00007f04ed81e98e [ 1360.837053][T12956] RDX: 0000000000000802 RSI: 00007f04eba94c00 RDI: ffffffffffffff9c [ 1360.845044][T12956] RBP: 00007f04eba94c00 R08: 0000000000000000 R09: 0000000000000000 [ 1360.853035][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1360.861021][T12956] R13: 00007f04edae6128 R14: 00007f04edae6090 R15: 00007fff86867288 [ 1360.869014][T12956] [ 1360.942163][ T8059] as10x_usb: error during firmware upload part1 [ 1360.942544][ T8059] Registered device Abilis Systems DVB-Titan [ 1361.031849][ T8059] usb 3-1: USB disconnect, device number 29 [ 1361.056562][T12872] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1361.071742][ T8059] Unregistered device Abilis Systems DVB-Titan [ 1361.085391][ T8059] as10x_usb: device has been disconnected [ 1361.737002][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.737057][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.115955][ T5587] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz-executor: bg 2: bad block bitmap checksum [ 1362.116377][ T5587] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz-executor: Error -74 loading buddy information for 2 [ 1362.417909][T12945] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz.2.1199: Error -117 loading buddy information for 2 [ 1363.795838][ T1184] bridge_slave_1: left allmulticast mode [ 1363.795869][ T1184] bridge_slave_1: left promiscuous mode [ 1363.796048][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.996254][ T1184] bridge_slave_0: left allmulticast mode [ 1363.996283][ T1184] bridge_slave_0: left promiscuous mode [ 1363.996465][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.347675][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.426081][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1364.486658][ T1184] bond0 (unregistering): Released all slaves [ 1364.909027][T12579] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz-executor: Error -117 loading buddy information for 2 [ 1364.995659][ T1184] hsr_slave_0: left promiscuous mode [ 1365.037810][ T1184] hsr_slave_1: left promiscuous mode [ 1365.039108][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.066323][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.396080][ T1184] team0 (unregistering): Port device team_slave_1 removed [ 1365.436130][ T1184] team0 (unregistering): Port device team_slave_0 removed [ 1366.597859][ T1184] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.886273][T12750] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz-executor: Error -117 loading buddy information for 2 [ 1366.901733][T12750] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz-executor: Error -117 loading buddy information for 2 [ 1366.919378][T12750] EXT4-fs error (device sda1): ext4_discard_preallocations:5690: comm syz-executor: Error -117 loading buddy information for 2 [ 1367.052466][T12750] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz-executor: bg 1: bad block bitmap checksum [ 1367.052727][T12750] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6680: Filesystem failed CRC [ 1367.099054][ T1184] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.296877][ T1184] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.516835][ T1184] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.908326][ T1184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.168752][ T1184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.196838][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1368.460206][ T1184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.508738][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1368.747277][ T1184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.815254][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1369.215914][ T1184] bridge_slave_1: left allmulticast mode [ 1369.215940][ T1184] bridge_slave_1: left promiscuous mode [ 1369.216089][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.316322][ T1184] bridge_slave_0: left allmulticast mode [ 1369.316347][ T1184] bridge_slave_0: left promiscuous mode [ 1369.316493][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.576681][ T1184] bridge_slave_1: left allmulticast mode [ 1369.576716][ T1184] bridge_slave_1: left promiscuous mode [ 1369.576895][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.656296][ T1184] bridge_slave_0: left allmulticast mode [ 1369.656321][ T1184] bridge_slave_0: left promiscuous mode [ 1369.656449][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.856209][ T1184] bridge_slave_1: left allmulticast mode [ 1369.856233][ T1184] bridge_slave_1: left promiscuous mode [ 1369.856366][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.976401][ T1184] bridge_slave_0: left allmulticast mode [ 1369.976426][ T1184] bridge_slave_0: left promiscuous mode [ 1369.976565][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.175756][ T1184] bridge_slave_1: left allmulticast mode [ 1370.175780][ T1184] bridge_slave_1: left promiscuous mode [ 1370.175921][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.286273][ T1184] bridge_slave_0: left allmulticast mode [ 1370.286297][ T1184] bridge_slave_0: left promiscuous mode [ 1370.286435][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state