last executing test programs: 8m53.592219468s ago: executing program 3 (id=4): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m52.177656285s ago: executing program 3 (id=10): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b40809050602ff0309000009058206"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(r0, 0x5421, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m49.647329452s ago: executing program 3 (id=14): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 8m49.039253286s ago: executing program 4 (id=15): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) unshare(0x28000600) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback}}, [0x0, 0x3, 0x5, 0x9cdd, 0x40, 0x9, 0x6, 0x7c75, 0x3, 0x1, 0x4, 0x0, 0x3, 0x7, 0x7]}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8m48.376379755s ago: executing program 4 (id=19): r0 = io_uring_setup(0x71db, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x0, 0x3c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 8m46.983199995s ago: executing program 4 (id=22): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 8m46.123447725s ago: executing program 4 (id=26): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) 8m40.768915761s ago: executing program 4 (id=31): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(r4, 0x0, &(0x7f00000000c0)) sendto$inet6(r5, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 8m35.851382239s ago: executing program 4 (id=37): io_setup(0xfffffff9, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x5, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 8m33.812602879s ago: executing program 32 (id=14): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 8m20.421979525s ago: executing program 33 (id=37): io_setup(0xfffffff9, &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x5, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 7m36.627403233s ago: executing program 0 (id=113): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x5}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001bc0)=@other={'unlock', ' ', 'none'}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000200)) 7m27.199407134s ago: executing program 0 (id=123): r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4001, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x6, 0x20, 0x3, 0x100000001}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r9], 0x50}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x6008014) 7m23.09139485s ago: executing program 0 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x4000}) 7m22.30995761s ago: executing program 0 (id=133): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 7m20.843134355s ago: executing program 0 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendfile(r4, r7, 0x0, 0x7ffff004) 7m17.969357906s ago: executing program 0 (id=138): r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4001, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x6, 0x20, 0x3, 0x100000001}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r9], 0x50}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x6008014) 7m2.491681852s ago: executing program 34 (id=138): r0 = open(0x0, 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4001, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x6, 0x20, 0x3, 0x100000001}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r9], 0x50}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010700000000000000002e"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x6008014) 6m59.571120092s ago: executing program 1 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40008000) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) ftruncate(r7, 0x2000009) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendfile(r4, r7, 0x0, 0x7ffff004) 6m56.865311498s ago: executing program 1 (id=159): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_rfcomm(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0xe4880) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8121}, 0x20000000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m54.814252415s ago: executing program 1 (id=160): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 6m54.044928252s ago: executing program 1 (id=162): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000080)=0x4) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmmsg(r5, &(0x7f0000009540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1) 6m53.612258479s ago: executing program 1 (id=164): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x168, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x138, 0x2, [@TCA_TCINDEX_ACT={0x134, 0x7, [@m_xt={0x100, 0x17, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x5, 'filter\x00', 0x2, 0x4}}]}, {0x68, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x30, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m53.271298132s ago: executing program 1 (id=165): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4c840) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x3, &(0x7f0000000140)=0x5) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004200)=ANY=[@ANYBLOB="140000001000010000000000003f06525400000a74000000060a090400000000000000000200000048000480440001800a00010072616e67650000003400028008000140000000240800024000000000040004801c00038015"], 0x9c}}, 0x0) 6m35.686050985s ago: executing program 35 (id=165): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4c840) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x3, &(0x7f0000000140)=0x5) r9 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004200)=ANY=[@ANYBLOB="140000001000010000000000003f06525400000a74000000060a090400000000000000000200000048000480440001800a00010072616e67650000003400028008000140000000240800024000000000040004801c00038015"], 0x9c}}, 0x0) 3m6.863363673s ago: executing program 7 (id=585): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) 3m6.259069993s ago: executing program 7 (id=588): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 3m4.564389574s ago: executing program 7 (id=595): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x11, 0x0) 3m3.158559914s ago: executing program 7 (id=603): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000812, &(0x7f00000002c0)={[{@nospace_cache}, {@clear_cache}, {@subvolid={'subvolid', 0x3d, 0x9}}, {@acl}, {@compress}, {@nossd_spread}, {@space_cache_v1}, {@fatal_errors_bug}, {@discard}, {@noacl}, {@nodiscard}]}, 0x1, 0x50f3, &(0x7f0000000380)="$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") prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_usb_connect$cdc_ecm(0x3, 0x53, &(0x7f0000000000)=ANY=[], 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='btrfs\x00', 0x85, 0x0) 2m59.224693454s ago: executing program 7 (id=609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80100001600010009000000fedbdf2500000000000000000000000000000001e00000010000000000000000000000004e2400044e2100000200a0a032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="64010100000000000000000000000000000004d4320000b75500000000000000000000000000000100000000000000000180000000000000080000000000000004000000000000000010000000000000110f000000000000000000000000000000000100000000009d0e000000000000ff0300000000000003"], 0x1e8}, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000) 2m51.484535535s ago: executing program 7 (id=610): r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x1, 0xa084, 0x9, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r2) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) 2m35.949104781s ago: executing program 36 (id=610): r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x1, 0xa084, 0x9, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) dup(r2) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) 2m22.72896789s ago: executing program 5 (id=661): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=ANY=[@ANYBLOB="80000000ffffffffffffffffffffffff5050505050500000000000000000000064000100000602020202020201019605"], 0x59) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 2m20.874255971s ago: executing program 5 (id=665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x40000000000016c, 0x0) 2m14.681202752s ago: executing program 5 (id=673): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd867, 0x40, 0xa, 0x1fc}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0xff, "3eccd25569e20900"}) 2m14.194402524s ago: executing program 5 (id=675): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) 2m13.425081727s ago: executing program 5 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x37, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6e0}}, 0x30) 2m12.521671985s ago: executing program 5 (id=681): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61e1, 0x0) 2m9.558964451s ago: executing program 37 (id=681): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61e1, 0x0) 17.613448023s ago: executing program 8 (id=876): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="400402"], 0x7) 16.182824985s ago: executing program 8 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 13.219837985s ago: executing program 8 (id=879): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.199019533s ago: executing program 8 (id=884): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000002c00)=""/4131, 0x1023}, {&(0x7f0000000280)=""/115, 0x73}], 0x3}, 0x2000) 11.467066828s ago: executing program 2 (id=886): r0 = socket(0x2a, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0x8550, 0x80, 0x42, 0x1f9}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.387981472s ago: executing program 8 (id=887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 6.214220816s ago: executing program 2 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) 6.11761599s ago: executing program 6 (id=889): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) close(r0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x4, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 5.579027455s ago: executing program 8 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) 5.272913514s ago: executing program 2 (id=891): r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad", 0x50}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a00)="61b4e742e0041f5414d481fae84b8350f7d613e0671a60ddb73db6457f367ffbbcc19a354144cfbb2d2d13402be473c5e0ad5f3856a522ab5e28ce55e8e960b4671fde75ca096e422a9b488901bde7fbd373738855cbfeddb72beea11cc8eaed4148e7d1fc8d8886a6f78b5ac3f8beb1c723e1ada3b10dd43e1a7ef5bacf4ac8e32ac6d6142ce0a1ddd2bb999e351b6c17f07beac8b973d85aab24585b40a2caa3d6d4a6a1d486431ba3857f5c7a200c842f86debcc1fc7214803cf41f88505d6ffaf241a96961371d50192258", 0xcd}], 0x1}, 0x80) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.120696054s ago: executing program 6 (id=892): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x25f, &(0x7f0000001700)=ANY=[], 0x0) 4.404672271s ago: executing program 6 (id=893): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x4, 0x114, 0x1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 4.013377266s ago: executing program 2 (id=894): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e25, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0xe, 0x30, 0x2, 0x3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 3.47072756s ago: executing program 6 (id=895): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000002c00)=""/4131, 0x1023}, {&(0x7f0000000280)=""/115, 0x73}], 0x3}, 0x2000) 3.325321421s ago: executing program 2 (id=896): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$poke(0x4, r0, 0x0, 0x10000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.878176453s ago: executing program 6 (id=897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 460.360601ms ago: executing program 6 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=899): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') kernel console output (not intermixed with test programs): ][ T6452] ======================================================= [ 285.567487][ T6452] new mount options do not match the existing superblock, will be ignored [ 286.223019][ T5780] Bluetooth: hci5: command tx timeout [ 286.381172][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 287.731939][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 287.780438][ T5828] usb 2-1: device descriptor read/all, error -71 [ 287.811455][ T3079] radio-usb-si4713 3-1:9.6: Si4713 development board discovered: (10C4:8244) [ 287.938119][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.014332][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 288.053616][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.157725][ T3079] radio-usb-si4713 3-1:9.6: probe with driver radio-usb-si4713 failed with error -71 [ 288.246105][ T3079] usbhid 3-1:9.6: couldn't find an input interrupt endpoint [ 288.261980][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.302110][ T5787] Bluetooth: hci5: command tx timeout [ 288.384640][ T3079] usb 3-1: USB disconnect, device number 6 [ 288.764018][ T57] bridge_slave_1: left allmulticast mode [ 288.770380][ T57] bridge_slave_1: left promiscuous mode [ 288.851262][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.868852][ T57] bridge_slave_0: left allmulticast mode [ 288.875392][ T57] bridge_slave_0: left promiscuous mode [ 288.883565][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.382238][ T5787] Bluetooth: hci5: command tx timeout [ 292.138141][ T6462] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 292.157465][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.209681][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.250063][ T57] bond0 (unregistering): Released all slaves [ 292.373928][ T6465] nfs: Unknown parameter ' ' [ 292.462893][ T50] Bluetooth: hci5: command tx timeout [ 292.564041][ T6349] hsr_slave_0: entered promiscuous mode [ 292.610253][ T6349] hsr_slave_1: entered promiscuous mode [ 292.634719][ T6349] debugfs: 'hsr0' already exists in 'hsr' [ 292.653089][ T6349] Cannot create hsr debugfs directory [ 292.663271][ T6443] lo speed is unknown, defaulting to 1000 [ 293.107753][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 293.114688][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 293.713703][ T57] hsr_slave_0: left promiscuous mode [ 293.748967][ T57] hsr_slave_1: left promiscuous mode [ 293.764897][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.776428][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.542524][ T5780] Bluetooth: hci5: command 0x0405 tx timeout [ 295.953490][ T57] team0 (unregistering): Port device team_slave_1 removed [ 296.022453][ T57] team0 (unregistering): Port device team_slave_0 removed [ 299.796825][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.812829][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.822908][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.863295][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.913246][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.770482][ T6502] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 300.948631][ T6488] lo speed is unknown, defaulting to 1000 [ 301.062441][ T6443] chnl_net:caif_netlink_parms(): no params data found [ 301.565020][ T6510] nfs: Unknown parameter ' ' [ 302.064471][ T5780] Bluetooth: hci2: command tx timeout [ 302.457097][ T48] bridge_slave_1: left allmulticast mode [ 302.503765][ T48] bridge_slave_1: left promiscuous mode [ 302.510340][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.669578][ T48] bridge_slave_0: left allmulticast mode [ 302.731480][ T48] bridge_slave_0: left promiscuous mode [ 302.777316][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.145532][ T5780] Bluetooth: hci2: command 0x041b tx timeout [ 305.319238][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.360441][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.410296][ T48] bond0 (unregistering): Released all slaves [ 305.950503][ T48] hsr_slave_0: left promiscuous mode [ 306.014593][ T48] hsr_slave_1: left promiscuous mode [ 306.054409][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.195883][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.224349][ T5787] Bluetooth: hci2: command 0x041b tx timeout [ 306.460178][ T6535] overlayfs: upper fs does not support file handles, falling back to index=off. [ 307.040032][ T6540] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 307.083713][ T48] team0 (unregistering): Port device team_slave_1 removed [ 307.150584][ T48] team0 (unregistering): Port device team_slave_0 removed [ 307.781555][ T6349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.820716][ T6349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.007261][ T6349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.110770][ T6349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.174808][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 308.304792][ T5780] Bluetooth: hci2: command 0x041b tx timeout [ 309.674116][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.325695][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.368398][ T6443] bridge_slave_0: entered allmulticast mode [ 310.393664][ T5787] Bluetooth: hci2: command 0x041b tx timeout [ 310.423201][ T6443] bridge_slave_0: entered promiscuous mode [ 310.485632][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.529476][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.550331][ T6443] bridge_slave_1: entered allmulticast mode [ 310.598775][ T6443] bridge_slave_1: entered promiscuous mode [ 310.746379][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.138491][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.193225][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.391128][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.562222][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.765029][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.828502][ T6443] team0: Port device team_slave_0 added [ 311.857224][ T6443] team0: Port device team_slave_1 added [ 311.967164][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.975014][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.003168][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.036688][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.049328][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.077168][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.483758][ T5787] Bluetooth: hci2: command 0x041b tx timeout [ 314.008973][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 314.612577][ T6443] hsr_slave_0: entered promiscuous mode [ 314.632119][ T6443] hsr_slave_1: entered promiscuous mode [ 314.647885][ T6443] debugfs: 'hsr0' already exists in 'hsr' [ 314.654215][ T6443] Cannot create hsr debugfs directory [ 315.414154][ T6583] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.653528][ T57] bridge_slave_1: left allmulticast mode [ 315.659362][ T57] bridge_slave_1: left promiscuous mode [ 315.695637][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.785239][ T57] bridge_slave_0: left allmulticast mode [ 315.791108][ T57] bridge_slave_0: left promiscuous mode [ 315.817956][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.112902][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.196573][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.254095][ T57] bond0 (unregistering): Released all slaves [ 318.467220][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.482988][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.502640][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.517435][ T6488] bridge_slave_0: entered allmulticast mode [ 318.545999][ T6488] bridge_slave_0: entered promiscuous mode [ 318.575064][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.584094][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.597536][ T6488] bridge_slave_1: entered allmulticast mode [ 318.638944][ T6488] bridge_slave_1: entered promiscuous mode [ 319.020207][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.112395][ T57] hsr_slave_0: left promiscuous mode [ 319.126140][ T57] hsr_slave_1: left promiscuous mode [ 319.156642][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.169278][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.224353][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.242141][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.708565][ T57] veth1_macvtap: left promiscuous mode [ 319.714925][ T57] veth0_macvtap: left promiscuous mode [ 319.742885][ T57] veth1_vlan: left promiscuous mode [ 319.984594][ T57] veth0_vlan: left promiscuous mode [ 321.139506][ T57] team0 (unregistering): Port device team_slave_1 removed [ 321.223060][ T57] team0 (unregistering): Port device team_slave_0 removed [ 321.888854][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.042873][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.258179][ T6488] team0: Port device team_slave_0 added [ 322.301292][ T6488] team0: Port device team_slave_1 added [ 322.320762][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.328248][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.241156][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.248567][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.406930][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.423491][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.524801][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.613739][ T6621] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 325.748539][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.783434][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.871943][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.137045][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.146863][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.163260][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.178979][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.209724][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.538403][ T6488] hsr_slave_0: entered promiscuous mode [ 326.586185][ T6488] hsr_slave_1: entered promiscuous mode [ 326.642929][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 326.659776][ T6488] Cannot create hsr debugfs directory [ 326.896407][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.903141][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.413479][ T6443] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.473249][ T6622] lo speed is unknown, defaulting to 1000 [ 327.556227][ T6443] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.969681][ T6443] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.267470][ T6443] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.302004][ T5780] Bluetooth: hci0: command tx timeout [ 330.402128][ T5787] Bluetooth: hci0: command tx timeout [ 332.069225][ T6488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.302254][ T6488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.507765][ T6488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.514838][ T5787] Bluetooth: hci0: command 0x040f tx timeout [ 332.672051][ T6488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.756840][ T6645] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 332.825692][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.840932][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.856515][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.893169][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.914301][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.973757][ T6655] lo speed is unknown, defaulting to 1000 [ 334.452989][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 334.556234][ T5780] Bluetooth: hci0: command 0x040f tx timeout [ 334.663841][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.023544][ T5780] Bluetooth: hci6: command tx timeout [ 335.891049][ T6443] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.077884][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.085326][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.322862][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.330183][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.604398][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.620925][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.629316][ T5780] Bluetooth: hci0: command 0x040f tx timeout [ 336.662444][ T6622] bridge_slave_0: entered allmulticast mode [ 336.676723][ T6622] bridge_slave_0: entered promiscuous mode [ 336.798709][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.806854][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.815871][ T6622] bridge_slave_1: entered allmulticast mode [ 336.836360][ T6622] bridge_slave_1: entered promiscuous mode [ 337.102775][ T5780] Bluetooth: hci6: command tx timeout [ 337.372828][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.476950][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.658173][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 337.762764][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.887414][ T6622] team0: Port device team_slave_0 added [ 338.078637][ T6622] team0: Port device team_slave_1 added [ 338.501401][ T48] bridge_slave_1: left allmulticast mode [ 338.536801][ T48] bridge_slave_1: left promiscuous mode [ 338.553444][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.589043][ T48] bridge_slave_0: left allmulticast mode [ 338.606062][ T48] bridge_slave_0: left promiscuous mode [ 338.631435][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.192363][ T5780] Bluetooth: hci6: command tx timeout [ 339.313771][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.383286][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.416797][ T48] bond0 (unregistering): Released all slaves [ 339.448769][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.472847][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.526266][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.683995][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.736765][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.793805][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.913497][ T48] hsr_slave_0: left promiscuous mode [ 339.920828][ T48] hsr_slave_1: left promiscuous mode [ 339.935851][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.993499][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.938735][ T48] team0 (unregistering): Port device team_slave_1 removed [ 341.134019][ T48] team0 (unregistering): Port device team_slave_0 removed [ 341.272586][ T5780] Bluetooth: hci6: command tx timeout [ 341.362572][ T6696] input: syz1 as /devices/virtual/input/input5 [ 341.679369][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.069654][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.145581][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.182798][ T6655] bridge_slave_0: entered allmulticast mode [ 344.206713][ T6655] bridge_slave_0: entered promiscuous mode [ 344.256512][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.271072][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.284618][ T6655] bridge_slave_1: entered allmulticast mode [ 344.319209][ T6655] bridge_slave_1: entered promiscuous mode [ 344.377639][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.385269][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.894364][ T6622] hsr_slave_0: entered promiscuous mode [ 345.855567][ T6622] hsr_slave_1: entered promiscuous mode [ 346.141615][ T6622] debugfs: 'hsr0' already exists in 'hsr' [ 346.448960][ T6622] Cannot create hsr debugfs directory [ 346.726877][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.734384][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.785927][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.796886][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.807440][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.822203][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.838240][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.987249][ T6711] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 347.295619][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.587604][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.260678][ T6655] team0: Port device team_slave_0 added [ 348.459936][ T6655] team0: Port device team_slave_1 added [ 348.582337][ T6708] lo speed is unknown, defaulting to 1000 [ 348.942765][ T5780] Bluetooth: hci1: command tx timeout [ 349.137486][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.154439][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.195664][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.322635][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.329867][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.422544][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.042269][ T5780] Bluetooth: hci1: command tx timeout [ 351.714296][ T6655] hsr_slave_0: entered promiscuous mode [ 351.737154][ T6655] hsr_slave_1: entered promiscuous mode [ 351.749447][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 351.760867][ T6655] Cannot create hsr debugfs directory [ 352.067297][ T6332] bridge_slave_1: left allmulticast mode [ 352.073408][ T6332] bridge_slave_1: left promiscuous mode [ 352.083565][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.098428][ T6332] bridge_slave_0: left allmulticast mode [ 352.104630][ T6332] bridge_slave_0: left promiscuous mode [ 352.110789][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.565721][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.604163][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.638806][ T6332] bond0 (unregistering): Released all slaves [ 352.676798][ T6622] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 352.704399][ T6622] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 352.726372][ T6622] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.750818][ T6622] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 353.102648][ T5780] Bluetooth: hci1: command tx timeout [ 353.152111][ T6332] hsr_slave_0: left promiscuous mode [ 353.184451][ T6332] hsr_slave_1: left promiscuous mode [ 353.212603][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.243371][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.429792][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 354.512746][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 355.193166][ T5780] Bluetooth: hci1: command tx timeout [ 355.722985][ T6755] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.909013][ T6708] chnl_net:caif_netlink_parms(): no params data found [ 356.430607][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.798284][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.155041][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.292527][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.300077][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.586065][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.593665][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.775691][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.812441][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.822013][ T5787] Bluetooth: hci1: command 0x0405 tx timeout [ 357.837459][ T6708] bridge_slave_0: entered allmulticast mode [ 357.857460][ T6708] bridge_slave_0: entered promiscuous mode [ 358.032202][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.039699][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.072383][ T6708] bridge_slave_1: entered allmulticast mode [ 358.102193][ T6708] bridge_slave_1: entered promiscuous mode [ 358.439898][ T6622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.471979][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.704422][ T6655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.982736][ T6655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 360.135932][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.256345][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.357548][ T6655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 360.785858][ T6655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.134180][ T6708] team0: Port device team_slave_0 added [ 361.198814][ T6708] team0: Port device team_slave_1 added [ 361.605863][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.631323][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.721955][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.840211][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.855566][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.877810][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.887633][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.918802][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.015870][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.883560][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.910039][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.178659][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.974096][ T6801] lo speed is unknown, defaulting to 1000 [ 364.079323][ T6708] hsr_slave_0: entered promiscuous mode [ 364.104568][ T6708] hsr_slave_1: entered promiscuous mode [ 364.116542][ T6708] debugfs: 'hsr0' already exists in 'hsr' [ 364.129036][ T6708] Cannot create hsr debugfs directory [ 364.218180][ T6810] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 364.307116][ T5787] Bluetooth: hci4: command tx timeout [ 366.321409][ T6801] chnl_net:caif_netlink_parms(): no params data found [ 366.367053][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.382205][ T5787] Bluetooth: hci4: command tx timeout [ 367.624945][ T6332] bridge_slave_1: left allmulticast mode [ 367.631231][ T6332] bridge_slave_1: left promiscuous mode [ 367.761884][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.883002][ T6332] bridge_slave_0: left allmulticast mode [ 367.888871][ T6332] bridge_slave_0: left promiscuous mode [ 367.928693][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.552274][ T5787] Bluetooth: hci4: command tx timeout [ 369.006452][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.042349][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.217536][ T6332] bond0 (unregistering): Released all slaves [ 369.709602][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.031143][ T6622] veth0_vlan: entered promiscuous mode [ 370.088104][ T6332] hsr_slave_0: left promiscuous mode [ 370.112132][ T6332] hsr_slave_1: left promiscuous mode [ 370.145494][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.192196][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.626024][ T5787] Bluetooth: hci4: command tx timeout [ 371.366655][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 371.435727][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 372.080792][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.088340][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.250558][ T6622] veth1_vlan: entered promiscuous mode [ 372.337678][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.345210][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.677864][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.686604][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.714269][ T6801] bridge_slave_0: entered allmulticast mode [ 372.741652][ T6801] bridge_slave_0: entered promiscuous mode [ 372.772396][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.782227][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.789884][ T6801] bridge_slave_1: entered allmulticast mode [ 372.822685][ T6801] bridge_slave_1: entered promiscuous mode [ 373.158232][ T6801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.203954][ T6801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.339340][ T6655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.366779][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.545566][ T6332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.699172][ T6801] team0: Port device team_slave_0 added [ 373.750442][ T6801] team0: Port device team_slave_1 added [ 373.931087][ T6708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.160304][ T6622] veth0_macvtap: entered promiscuous mode [ 374.214826][ T6332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.257509][ T6708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.319328][ T6708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.374128][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.404377][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.483626][ T6801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.559766][ T6332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.590718][ T6708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 374.651545][ T6801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.660247][ T6801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.742108][ T6801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.764566][ T6622] veth1_macvtap: entered promiscuous mode [ 374.859246][ T6332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.180931][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.227645][ T6801] hsr_slave_0: entered promiscuous mode [ 375.239686][ T6801] hsr_slave_1: entered promiscuous mode [ 375.268573][ T6801] debugfs: 'hsr0' already exists in 'hsr' [ 375.282017][ T6801] Cannot create hsr debugfs directory [ 375.375227][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.721413][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.238380][ T5914] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.260517][ T5914] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.317503][ T6332] bridge_slave_1: left allmulticast mode [ 376.326009][ T6332] bridge_slave_1: left promiscuous mode [ 376.334125][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.372972][ T6332] bridge_slave_0: left allmulticast mode [ 376.378817][ T6332] bridge_slave_0: left promiscuous mode [ 376.392735][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.116160][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.162650][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.213276][ T6332] bond0 (unregistering): Released all slaves [ 377.290156][ T5914] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.322101][ T5914] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.249069][ T6332] hsr_slave_0: left promiscuous mode [ 379.261058][ T6332] hsr_slave_1: left promiscuous mode [ 379.275144][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.284362][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.301068][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.314349][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.341357][ T6332] veth1_macvtap: left promiscuous mode [ 379.367369][ T6332] veth0_macvtap: left promiscuous mode [ 379.374676][ T6332] veth1_vlan: left promiscuous mode [ 379.380070][ T6332] veth0_vlan: left promiscuous mode [ 379.963408][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 380.012548][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 380.477158][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.170703][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.307399][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.314962][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.378960][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.386519][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.635691][ T6655] veth0_vlan: entered promiscuous mode [ 381.902857][ T6801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.963882][ T6801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.074727][ T6801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.123370][ T6655] veth1_vlan: entered promiscuous mode [ 382.152138][ T6801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.238187][ T6708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.268935][ T6708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.766430][ T6655] veth0_macvtap: entered promiscuous mode [ 383.446375][ T6655] veth1_macvtap: entered promiscuous mode [ 383.784735][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.967209][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.286406][ T6203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.304114][ T6203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.436187][ T6332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.458887][ T6332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.553459][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.561473][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.948290][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.980022][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.983614][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.083410][ T6801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.384791][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.546498][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.554129][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.628604][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.636265][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.101345][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.129331][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.148103][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.170358][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.184020][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.397830][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.416328][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.061480][ T6996] lo speed is unknown, defaulting to 1000 [ 390.234010][ T5780] Bluetooth: hci2: command tx timeout [ 390.856783][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.975444][ T6708] veth0_vlan: entered promiscuous mode [ 391.127262][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.309648][ T6708] veth1_vlan: entered promiscuous mode [ 392.316843][ T5780] Bluetooth: hci2: command tx timeout [ 392.598844][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.618716][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.639511][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.653895][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.666830][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.778697][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.013710][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.240886][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.435196][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 394.242272][ T7041] lo speed is unknown, defaulting to 1000 [ 394.383033][ T5787] Bluetooth: hci2: command tx timeout [ 394.710731][ T5787] Bluetooth: hci0: command tx timeout [ 395.072575][ T12] bridge_slave_1: left allmulticast mode [ 395.078428][ T12] bridge_slave_1: left promiscuous mode [ 395.085806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.110366][ T12] bridge_slave_0: left allmulticast mode [ 395.116490][ T12] bridge_slave_0: left promiscuous mode [ 395.129298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.537017][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.552638][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.566995][ T12] bond0 (unregistering): Released all slaves [ 395.704905][ T6708] veth0_macvtap: entered promiscuous mode [ 395.767103][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.779055][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.787657][ T6996] bridge_slave_0: entered allmulticast mode [ 395.796135][ T6996] bridge_slave_0: entered promiscuous mode [ 395.814390][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.823097][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.830648][ T6996] bridge_slave_1: entered allmulticast mode [ 395.854930][ T6996] bridge_slave_1: entered promiscuous mode [ 395.998594][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.041220][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.053538][ T6708] veth1_macvtap: entered promiscuous mode [ 396.267149][ T6996] team0: Port device team_slave_0 added [ 396.285011][ T6996] team0: Port device team_slave_1 added [ 396.462122][ T5787] Bluetooth: hci2: command tx timeout [ 396.483724][ T12] hsr_slave_0: left promiscuous mode [ 396.496593][ T12] hsr_slave_1: left promiscuous mode [ 396.504907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.516194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.530237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.539115][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.568910][ T12] veth1_macvtap: left promiscuous mode [ 396.575300][ T12] veth0_macvtap: left promiscuous mode [ 396.581057][ T12] veth1_vlan: left promiscuous mode [ 396.586909][ T12] veth0_vlan: left promiscuous mode [ 396.782020][ T5787] Bluetooth: hci0: command tx timeout [ 397.090127][ T12] team0 (unregistering): Port device team_slave_1 removed [ 397.126694][ T12] team0 (unregistering): Port device team_slave_0 removed [ 397.412379][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.424034][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.458724][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.548088][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.560113][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.569262][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.597265][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.630050][ T7041] chnl_net:caif_netlink_parms(): no params data found [ 397.850736][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.933462][ T6996] hsr_slave_0: entered promiscuous mode [ 397.944780][ T6996] hsr_slave_1: entered promiscuous mode [ 398.343683][ T6131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.390918][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.432163][ T5787] Bluetooth: hci0: command tx timeout [ 402.454275][ T5787] Bluetooth: hci0: command tx timeout [ 402.548626][ T6801] veth0_vlan: entered promiscuous mode [ 403.209135][ T1089] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.499406][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.559094][ T6801] veth1_vlan: entered promiscuous mode [ 403.669941][ T1089] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.795788][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.822550][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.853592][ T7041] bridge_slave_0: entered allmulticast mode [ 403.863183][ T7041] bridge_slave_0: entered promiscuous mode [ 403.970219][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.115493][ T1089] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.571598][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.579414][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.627251][ T7041] bridge_slave_1: entered allmulticast mode [ 404.655077][ T7041] bridge_slave_1: entered promiscuous mode [ 404.831187][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.930444][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.939934][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.950999][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.968081][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.980015][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.543207][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.690278][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.948400][ T7098] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 406.050114][ T7086] lo speed is unknown, defaulting to 1000 [ 406.475184][ T7041] team0: Port device team_slave_0 added [ 406.516754][ T7099] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.531232][ T7099] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 406.628267][ T7102] bond1: (slave gretap1): making interface the new active one [ 406.639578][ T7102] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 406.734544][ T7041] team0: Port device team_slave_1 added [ 406.904094][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.911166][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.938925][ T7041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.018795][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.026245][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.053846][ T7041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.102021][ T5780] Bluetooth: hci5: command tx timeout [ 407.270913][ T6801] veth0_macvtap: entered promiscuous mode [ 407.309322][ T12] bridge_slave_1: left allmulticast mode [ 407.321392][ T12] bridge_slave_1: left promiscuous mode [ 407.329182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.344955][ T12] bridge_slave_0: left allmulticast mode [ 407.350945][ T12] bridge_slave_0: left promiscuous mode [ 407.364677][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.827039][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.846975][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.881174][ T12] bond0 (unregistering): Released all slaves [ 408.046938][ T7041] hsr_slave_0: entered promiscuous mode [ 408.057663][ T7041] hsr_slave_1: entered promiscuous mode [ 408.067116][ T7041] debugfs: 'hsr0' already exists in 'hsr' [ 408.073110][ T7041] Cannot create hsr debugfs directory [ 408.098018][ T12] hsr_slave_0: left promiscuous mode [ 408.105671][ T12] hsr_slave_1: left promiscuous mode [ 408.113458][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.120940][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.132540][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.140492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.170169][ T12] veth1_macvtap: left promiscuous mode [ 408.176215][ T12] veth0_macvtap: left promiscuous mode [ 408.182841][ T12] veth1_vlan: left promiscuous mode [ 408.188288][ T12] veth0_vlan: left promiscuous mode [ 408.882183][ T12] team0 (unregistering): Port device team_slave_1 removed [ 408.968902][ T12] team0 (unregistering): Port device team_slave_0 removed [ 409.182106][ T5780] Bluetooth: hci5: command tx timeout [ 409.428997][ T6801] veth1_macvtap: entered promiscuous mode [ 409.770642][ T7123] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 410.025929][ T7125] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.041364][ T7125] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 410.134861][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 410.194802][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.203791][ T6996] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 410.297226][ T6996] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 410.320212][ T6996] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 410.387462][ T6996] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 410.475802][ T6801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.556843][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.759034][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.918835][ T6131] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.947258][ T6131] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.999970][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.135851][ T6131] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.147916][ T6131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.247856][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.276025][ T5780] Bluetooth: hci5: command tx timeout [ 411.412683][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.425461][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.435035][ T7086] bridge_slave_0: entered allmulticast mode [ 411.459090][ T7086] bridge_slave_0: entered promiscuous mode [ 411.547884][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.564126][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.579771][ T7086] bridge_slave_1: entered allmulticast mode [ 411.614374][ T7086] bridge_slave_1: entered promiscuous mode [ 412.069868][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.248579][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.461062][ T7086] team0: Port device team_slave_0 added [ 412.529340][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 412.574360][ T7086] team0: Port device team_slave_1 added [ 412.672766][ T12] bridge_slave_1: left allmulticast mode [ 412.678621][ T12] bridge_slave_1: left promiscuous mode [ 412.723457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.770582][ T12] bridge_slave_0: left allmulticast mode [ 412.778470][ T12] bridge_slave_0: left promiscuous mode [ 412.794916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.319976][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.343257][ T5780] Bluetooth: hci5: command tx timeout [ 413.358663][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.374254][ T12] bond0 (unregistering): Released all slaves [ 413.596718][ T7152] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 413.609948][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.624306][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.656677][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.710048][ T12] hsr_slave_0: left promiscuous mode [ 413.721218][ T12] hsr_slave_1: left promiscuous mode [ 413.742945][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.750970][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.770377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.779972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.809421][ T12] veth1_macvtap: left promiscuous mode [ 413.816178][ T12] veth0_macvtap: left promiscuous mode [ 413.823777][ T12] veth1_vlan: left promiscuous mode [ 413.830033][ T12] veth0_vlan: left promiscuous mode [ 414.333377][ T12] team0 (unregistering): Port device team_slave_1 removed [ 414.378366][ T12] team0 (unregistering): Port device team_slave_0 removed [ 414.677740][ T7153] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 414.692669][ T7153] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 414.759802][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.768269][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.796335][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.179941][ T7086] hsr_slave_0: entered promiscuous mode [ 415.190446][ T7086] hsr_slave_1: entered promiscuous mode [ 415.199937][ T7086] debugfs: 'hsr0' already exists in 'hsr' [ 415.207293][ T7086] Cannot create hsr debugfs directory [ 415.311313][ T7041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 415.463358][ T7041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 415.572236][ T7041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 415.713472][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.724830][ T7041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.185980][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.359143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.367114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.548979][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.556567][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.650439][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 416.678112][ T7175] bond0: option arp_interval: invalid value (18446744071951403948) [ 416.690119][ T7175] bond0: option arp_interval: allowed values 0 - 2147483647 [ 417.606505][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.661126][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.763637][ T29] audit: type=1800 audit(1772751368.441:2): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.261" name="nullb0" dev="tmpfs" ino=776 res=0 errno=0 [ 417.932006][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.940023][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.529285][ T7086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 418.618915][ T7086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 418.684468][ T7086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 418.762382][ T7086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 418.966498][ T7041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.136007][ T7041] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.173900][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.330732][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.338330][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.469477][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.477191][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.207252][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.488830][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.621244][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.628809][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.773730][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.781201][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.116461][ T6996] veth0_vlan: entered promiscuous mode [ 422.355614][ T6996] veth1_vlan: entered promiscuous mode [ 422.439377][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.093626][ T6996] veth0_macvtap: entered promiscuous mode [ 423.212906][ T6996] veth1_macvtap: entered promiscuous mode [ 423.324554][ T7211] vivid-004: disconnect [ 423.369901][ T7210] vivid-004: reconnect [ 423.511015][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.610367][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.804693][ T6203] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.852082][ T6203] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.983509][ T1146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.020562][ T1146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.453099][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.176341][ T7041] veth0_vlan: entered promiscuous mode [ 425.318149][ T7041] veth1_vlan: entered promiscuous mode [ 425.848420][ T7041] veth0_macvtap: entered promiscuous mode [ 425.914730][ T7041] veth1_macvtap: entered promiscuous mode [ 426.129073][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.331579][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.000375][ T1089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.029036][ T1089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.118353][ T1089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.152234][ T1089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.734710][ T7086] veth0_vlan: entered promiscuous mode [ 429.786638][ T7271] syz.7.273 uses obsolete (PF_INET,SOCK_PACKET) [ 429.853213][ T7086] veth1_vlan: entered promiscuous mode [ 430.304254][ T7086] veth0_macvtap: entered promiscuous mode [ 430.422712][ T7086] veth1_macvtap: entered promiscuous mode [ 430.616802][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.747942][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.952489][ T5914] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.005789][ T5914] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.123381][ T6131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.186068][ T6131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.657454][ T6131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.722128][ T6131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.898170][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.951844][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.573152][ T7343] netlink: 'syz.8.282': attribute type 4 has an invalid length. [ 438.646882][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.656361][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.670343][ T7357] bridge0: entered allmulticast mode [ 438.706057][ T7357] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 440.117463][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.201040][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.486439][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.844861][ T7387] overlayfs: missing 'lowerdir' [ 442.549301][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.732851][ T7393] netlink: 'syz.2.297': attribute type 1 has an invalid length. [ 443.723187][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.733085][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.860059][ T7397] bridge0: entered allmulticast mode [ 444.019614][ T7397] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 444.317459][ T147] Bluetooth: hci1: Frame reassembly failed (-84) [ 444.417768][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.492524][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.771043][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.802229][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.382313][ T5787] Bluetooth: hci0: command 0x0c20 tx timeout [ 446.395231][ T5069] Bluetooth: hci1: command 0x1003 tx timeout [ 446.442333][ T7402] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 446.449070][ T5780] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 446.972745][ T7428] capability: warning: `syz.6.307' uses 32-bit capabilities (legacy support in use) [ 447.033523][ T7429] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 449.692064][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 449.776161][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.783288][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.862194][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 449.907485][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 449.962382][ T9] usb 7-1: config 0 has no interface number 0 [ 449.980167][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 450.043430][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 450.112027][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.120467][ T9] usb 7-1: Product: syz [ 450.152102][ T9] usb 7-1: Manufacturer: syz [ 450.167495][ T9] usb 7-1: SerialNumber: syz [ 450.229509][ T9] usb 7-1: config 0 descriptor?? [ 450.562930][ T7472] program syz.5.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.592095][ T794] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 450.802403][ T794] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.852121][ T794] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 450.892142][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.966617][ T794] usb 8-1: config 0 descriptor?? [ 450.983251][ T9] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 451.029677][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 451.062793][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 451.092414][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 451.148283][ T9] usb 7-1: USB disconnect, device number 2 [ 451.513207][ T794] ath6kl: Failed to read usb control message: -71 [ 451.519969][ T794] ath6kl: Unable to read the bmi data from the device: -71 [ 451.629179][ T794] ath6kl: Unable to recv target info: -71 [ 451.707228][ T794] ath6kl: Failed to init ath6kl core: -71 [ 451.783629][ T794] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 451.886781][ T794] usb 8-1: USB disconnect, device number 2 [ 457.609589][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.619106][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.736789][ T7578] bridge0: entered allmulticast mode [ 458.022334][ T7578] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 459.543606][ T794] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 459.772116][ T794] usb 6-1: Using ep0 maxpacket: 8 [ 459.821591][ T794] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 459.891939][ T794] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.952280][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.003968][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.013660][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.092936][ T7633] bridge0: entered allmulticast mode [ 461.222378][ T7633] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 462.428473][ T794] usb 6-1: USB disconnect, device number 2 [ 462.692077][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 462.933247][ T5825] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.985723][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.033620][ T5825] usb 7-1: Product: syz [ 463.051998][ T5825] usb 7-1: Manufacturer: syz [ 463.056805][ T5825] usb 7-1: SerialNumber: syz [ 463.554311][ T5825] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 463.641122][ T5825] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 464.144219][ T5825] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 464.198336][ T5825] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 464.278444][ T5825] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 464.396449][ T5825] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 464.522272][ T5825] usb 7-1: USB disconnect, device number 3 [ 471.384041][ T5825] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 471.602237][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 471.634994][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.686672][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.718874][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.794292][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 471.852074][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.982175][ T5825] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.026787][ T5825] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.065192][ T5825] usb 7-1: Manufacturer: syz [ 472.122203][ T5825] usb 7-1: config 0 descriptor?? [ 472.135180][ T7754] Illegal XDP return value 1393618977 on prog (id 10) dev N/A, expect packet loss! [ 472.691888][ T5825] rc_core: IR keymap rc-hauppauge not found [ 472.713227][ T5825] Registered IR keymap rc-empty [ 472.752516][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 472.802123][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 472.881961][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 472.926093][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 473.038297][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.152533][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.182358][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.224355][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.285193][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.362332][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.402453][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.442254][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.496749][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.552172][ T5825] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.621649][ T5825] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.692447][ T5825] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.738159][ T5825] usb 7-1: USB disconnect, device number 4 [ 474.902150][ T5825] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 476.053351][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 476.070466][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.100593][ T5825] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 476.111931][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.120142][ T5825] usb 7-1: Product: syz [ 477.075434][ T5825] usb 7-1: Manufacturer: syz [ 477.080284][ T5825] usb 7-1: SerialNumber: syz [ 477.106105][ T5825] usb 7-1: config 0 descriptor?? [ 477.342227][ T5825] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 477.450121][ T147] usb 7-1: Failed to submit usb control message: -71 [ 477.512265][ T147] usb 7-1: unable to send the bmi data to the device: -71 [ 477.562028][ T147] usb 7-1: unable to get target info from device [ 477.601379][ T147] usb 7-1: could not get target info (-71) [ 477.659065][ T147] usb 7-1: could not probe fw (-71) [ 477.670735][ T5825] usb 7-1: USB disconnect, device number 5 [ 478.792623][ T7810] process 'syz.5.422' launched './file0' with NULL argv: empty string added [ 481.235641][ T5825] kernel read not supported for file /80/attr/exec (pid: 5825 comm: kworker/1:3) [ 481.383625][ T794] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 481.652276][ T794] usb 8-1: unable to get BOS descriptor or descriptor too short [ 481.672840][ T794] usb 8-1: not running at top speed; connect to a high speed hub [ 481.732097][ T794] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 481.773331][ T794] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 481.791932][ T794] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 481.825573][ T794] usb 8-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 481.875378][ T794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.925683][ T794] usb 8-1: Product: syz [ 481.930067][ T794] usb 8-1: Manufacturer: syz [ 481.962363][ T794] usb 8-1: SerialNumber: syz [ 482.344592][ T794] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 482.371412][ T794] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 482.932639][ T794] usb 8-1: USB disconnect, device number 3 [ 483.197256][ T7658] udevd[7658]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.717672][ T5825] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 485.886264][ T5825] usb 9-1: Using ep0 maxpacket: 16 [ 485.934711][ T5825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.030189][ T5825] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 486.042248][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.050531][ T5825] usb 9-1: Product: syz [ 486.111988][ T5825] usb 9-1: Manufacturer: syz [ 486.116920][ T5825] usb 9-1: SerialNumber: syz [ 486.204699][ T5825] usb 9-1: config 0 descriptor?? [ 486.357069][ T5825] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 486.785987][ T147] usb 9-1: Failed to submit usb control message: -71 [ 486.825521][ T9] usb 9-1: USB disconnect, device number 2 [ 486.853074][ T147] usb 9-1: unable to send the bmi data to the device: -71 [ 486.860417][ T147] usb 9-1: unable to get target info from device [ 486.912019][ T147] usb 9-1: could not get target info (-71) [ 486.945825][ T147] usb 9-1: could not probe fw (-71) [ 487.665593][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 488.965763][ T7939] /dev/sg0: Can't lookup blockdev [ 490.555106][ T5825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 490.762045][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 490.811417][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.864955][ T5825] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 490.903803][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.958272][ T5825] usb 6-1: Product: syz [ 490.973909][ T5825] usb 6-1: Manufacturer: syz [ 491.003815][ T5825] usb 6-1: SerialNumber: syz [ 491.066193][ T5825] usb 6-1: config 0 descriptor?? [ 491.135543][ T5825] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 491.564812][ T1146] usb 6-1: Failed to submit usb control message: -71 [ 491.582010][ T794] usb 6-1: USB disconnect, device number 3 [ 491.621017][ T1146] usb 6-1: unable to send the bmi data to the device: -71 [ 491.680336][ T1146] usb 6-1: unable to get target info from device [ 491.724169][ T1146] usb 6-1: could not get target info (-71) [ 491.730230][ T1146] usb 6-1: could not probe fw (-71) [ 494.199864][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.484'. [ 497.518562][ T8021] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 498.242160][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 498.441966][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 498.483056][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.622227][ T5825] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 498.631515][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.652146][ T5825] usb 6-1: Product: syz [ 498.656502][ T5825] usb 6-1: Manufacturer: syz [ 498.661263][ T5825] usb 6-1: SerialNumber: syz [ 498.744355][ T5825] usb 6-1: config 0 descriptor?? [ 498.829295][ T5825] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 498.873008][ T5780] Bluetooth: hci0: command 0x0c20 tx timeout [ 499.286280][ T3079] usb 6-1: USB disconnect, device number 4 [ 499.292362][ T6203] usb 6-1: Failed to submit usb control message: -71 [ 499.292517][ T6203] usb 6-1: unable to send the bmi data to the device: -71 [ 499.292622][ T6203] usb 6-1: unable to get target info from device [ 499.292719][ T6203] usb 6-1: could not get target info (-71) [ 499.292829][ T6203] usb 6-1: could not probe fw (-71) [ 501.355403][ T8073] input: syz0 as /devices/virtual/input/input9 [ 502.091365][ T8076] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 502.502319][ T794] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 502.753360][ T794] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 502.777123][ T794] usb 8-1: config 0 has no interface number 0 [ 502.791934][ T794] usb 8-1: config 0 interface 125 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 502.821901][ T794] usb 8-1: config 0 interface 125 has no altsetting 0 [ 502.872375][ T794] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=13.cc [ 502.901947][ T794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.922386][ T3079] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 502.942077][ T794] usb 8-1: Product: syz [ 502.967544][ T794] usb 8-1: Manufacturer: syz [ 502.981888][ T794] usb 8-1: SerialNumber: syz [ 503.055701][ T794] usb 8-1: config 0 descriptor?? [ 503.135813][ T3079] usb 6-1: Using ep0 maxpacket: 16 [ 503.183498][ T3079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.260446][ T3079] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 503.310878][ T3079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.342259][ T5780] Bluetooth: hci0: command 0x0c20 tx timeout [ 503.380376][ T3079] usb 6-1: Product: syz [ 503.381196][ T794] ati_remote 8-1:0.125: ati_remote_probe: Unexpected endpoint_in [ 503.392488][ T3079] usb 6-1: Manufacturer: syz [ 503.398029][ T3079] usb 6-1: SerialNumber: syz [ 503.454680][ T3079] usb 6-1: config 0 descriptor?? [ 503.541545][ T3079] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 503.552014][ T794] usb 8-1: USB disconnect, device number 4 [ 503.754807][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 504.057206][ T6203] usb 6-1: Failed to submit usb control message: -71 [ 504.070317][ T30] usb 6-1: USB disconnect, device number 5 [ 504.101923][ T6203] usb 6-1: unable to send the bmi data to the device: -71 [ 504.167345][ T6203] usb 6-1: unable to get target info from device [ 504.195462][ T6203] usb 6-1: could not get target info (-71) [ 504.242063][ T6203] usb 6-1: could not probe fw (-71) [ 507.347653][ T6131] Bluetooth: hci1: Frame reassembly failed (-84) [ 508.439582][ T8154] fuse: Bad value for 'fd' [ 509.342885][ T5780] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 509.349864][ T8138] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 509.422102][ T5787] Bluetooth: hci0: command 0x0c20 tx timeout [ 509.852363][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 510.038406][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 510.055200][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.112568][ T30] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 510.171899][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.230486][ T30] usb 8-1: Product: syz [ 510.246281][ T30] usb 8-1: Manufacturer: syz [ 510.272459][ T30] usb 8-1: SerialNumber: syz [ 510.325660][ T30] usb 8-1: config 0 descriptor?? [ 510.453658][ T30] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 511.122851][ T1146] usb 8-1: Failed to submit usb control message: -71 [ 511.216004][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.224192][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.296741][ T1146] usb 8-1: unable to send the bmi data to the device: -71 [ 511.424692][ T30] usb 8-1: USB disconnect, device number 5 [ 511.432499][ T1146] usb 8-1: unable to get target info from device [ 511.439064][ T1146] usb 8-1: could not get target info (-71) [ 511.482217][ T1146] usb 8-1: could not probe fw (-71) [ 513.318458][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 518.623191][ T5787] Bluetooth: hci0: command 0x0c20 tx timeout [ 519.014482][ T6131] Bluetooth: hci1: Frame reassembly failed (-84) [ 520.703901][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 520.902396][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 520.943176][ T5787] Bluetooth: hci0: command 0x0c20 tx timeout [ 520.949406][ T5787] Bluetooth: hci1: command 0x1003 tx timeout [ 520.957090][ T5780] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 520.964789][ T8228] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 520.988792][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.015689][ T30] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 521.029922][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.045073][ T30] usb 6-1: Product: syz [ 521.049426][ T30] usb 6-1: Manufacturer: syz [ 521.054290][ T30] usb 6-1: SerialNumber: syz [ 521.063864][ T30] usb 6-1: config 0 descriptor?? [ 521.120384][ T30] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 521.635606][ T12] usb 6-1: Failed to submit usb control message: -71 [ 521.637556][ T5828] usb 6-1: USB disconnect, device number 6 [ 521.665904][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 521.672132][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 521.696462][ T12] usb 6-1: unable to get target info from device [ 521.732442][ T12] usb 6-1: could not get target info (-71) [ 521.738490][ T12] usb 6-1: could not probe fw (-71) [ 521.872036][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 522.538781][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.554340][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.573510][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.587759][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.596929][ T9] usb 9-1: Product: syz [ 523.545203][ T9] usb 9-1: Manufacturer: syz [ 523.550004][ T9] usb 9-1: SerialNumber: syz [ 523.876431][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 524.289921][ T30] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.492592][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 524.545536][ T9] usb 9-1: cannot find UAC_HEADER [ 524.588202][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 524.684389][ T30] usb 8-1: Product: syz [ 524.688779][ T30] usb 8-1: Manufacturer: syz [ 524.740596][ T30] usb 8-1: SerialNumber: syz [ 525.102586][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 525.173207][ T30] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 525.213310][ T9] usb 9-1: USB disconnect, device number 3 [ 525.512653][ T7658] udevd[7658]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.530624][ T6285] Bluetooth: hci1: Frame reassembly failed (-84) [ 526.679221][ T9] usb 8-1: USB disconnect, device number 6 [ 526.715355][ T9] usblp0: removed [ 527.055319][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 527.242004][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 527.293261][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.338553][ T30] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 527.372046][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.414422][ T30] usb 6-1: Product: syz [ 527.429174][ T30] usb 6-1: Manufacturer: syz [ 527.443212][ T30] usb 6-1: SerialNumber: syz [ 527.513365][ T30] usb 6-1: config 0 descriptor?? [ 527.789630][ T30] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 527.994658][ T3079] usb 6-1: USB disconnect, device number 7 [ 528.553043][ T5069] Bluetooth: hci0: command 0x0c20 tx timeout [ 528.563501][ T5069] Bluetooth: hci1: command 0x1003 tx timeout [ 528.571385][ T8302] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 528.592042][ T5780] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 529.021703][ C1] hrtimer: interrupt took 229006 ns [ 534.372319][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 534.422783][ T8368] netlink: 'syz.2.587': attribute type 29 has an invalid length. [ 534.467844][ T8368] netlink: 'syz.2.587': attribute type 29 has an invalid length. [ 534.507200][ T8368] netlink: 500 bytes leftover after parsing attributes in process `syz.2.587'. [ 534.563078][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 534.582446][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.602722][ T8368] unsupported nla_type 58 [ 534.653327][ T9] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 534.700804][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.752887][ T9] usb 9-1: Product: syz [ 534.757371][ T9] usb 9-1: Manufacturer: syz [ 534.809750][ T9] usb 9-1: SerialNumber: syz [ 534.867639][ T9] usb 9-1: config 0 descriptor?? [ 534.959441][ T9] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 535.243665][ T8374] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 535.337609][ T8374] bond1 (unregistering): Released all slaves [ 535.397081][ T6285] usb 9-1: Failed to submit usb control message: -71 [ 535.412118][ T9] usb 9-1: USB disconnect, device number 4 [ 535.441951][ T6285] usb 9-1: unable to send the bmi data to the device: -71 [ 535.449306][ T6285] usb 9-1: unable to get target info from device [ 535.510016][ T6285] usb 9-1: could not get target info (-71) [ 535.535822][ T6285] usb 9-1: could not probe fw (-71) [ 540.882532][ T5825] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 541.137925][ T5825] usb 9-1: Using ep0 maxpacket: 16 [ 541.168753][ T5825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.264891][ T5825] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 541.312008][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.356613][ T5825] usb 9-1: Product: syz [ 541.360999][ T5825] usb 9-1: Manufacturer: syz [ 541.401934][ T5825] usb 9-1: SerialNumber: syz [ 541.434848][ T5825] usb 9-1: config 0 descriptor?? [ 541.516817][ T5825] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 541.991571][ T147] usb 9-1: Failed to submit usb control message: -71 [ 542.862834][ T8448] netlink: 240 bytes leftover after parsing attributes in process `syz.7.609'. [ 547.052404][ T3079] usb 9-1: USB disconnect, device number 5 [ 549.172728][ T147] usb 9-1: unable to send the bmi data to the device: -71 [ 549.180090][ T147] usb 9-1: unable to get target info from device [ 549.430749][ T147] usb 9-1: could not get target info (-71) [ 549.446343][ T147] usb 9-1: could not probe fw (-71) [ 556.832075][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 557.022441][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 557.042871][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.080275][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 557.136943][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.152532][ T9] usb 6-1: Product: syz [ 557.191986][ T9] usb 6-1: Manufacturer: syz [ 557.212015][ T9] usb 6-1: SerialNumber: syz [ 557.230842][ T9] usb 6-1: config 0 descriptor?? [ 557.362340][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 557.789525][ T5831] usb 6-1: USB disconnect, device number 8 [ 557.795939][ T12] usb 6-1: Failed to submit usb control message: -71 [ 557.896543][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 557.967553][ T12] usb 6-1: unable to get target info from device [ 557.992179][ T12] usb 6-1: could not get target info (-71) [ 558.009478][ T12] usb 6-1: could not probe fw (-71) [ 563.723066][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.632'. [ 565.262450][ T5780] Bluetooth: hci5: command 0x0406 tx timeout [ 565.462390][ T5944] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 565.654426][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 565.707956][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.818602][ T5944] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 565.836103][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.875820][ T5944] usb 6-1: Product: syz [ 565.898607][ T5944] usb 6-1: Manufacturer: syz [ 565.910425][ T5944] usb 6-1: SerialNumber: syz [ 565.961640][ T5944] usb 6-1: config 0 descriptor?? [ 566.142589][ T5944] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 566.336520][ T6285] usb 6-1: Failed to submit usb control message: -71 [ 566.354232][ T6285] usb 6-1: unable to send the bmi data to the device: -71 [ 566.361593][ T6285] usb 6-1: unable to get target info from device [ 566.407858][ T5828] usb 6-1: USB disconnect, device number 9 [ 566.435951][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 566.447989][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 566.460532][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 566.476721][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 566.496151][ T6285] usb 6-1: could not get target info (-71) [ 566.502495][ T6285] usb 6-1: could not probe fw (-71) [ 566.524182][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 566.785065][ T8566] lo speed is unknown, defaulting to 1000 [ 568.623806][ T5069] Bluetooth: hci1: command tx timeout [ 570.520646][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 570.717747][ T5069] Bluetooth: hci1: command tx timeout [ 570.848287][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 571.389760][ T6285] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.970272][ T6285] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.400983][ T6285] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.503304][ T8617] Bluetooth: MGMT ver 1.23 [ 572.665308][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.677321][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.783855][ T5780] Bluetooth: hci1: command tx timeout [ 572.824616][ T6285] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.253320][ T8617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.274768][ T8617] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 573.324643][ T8617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.428489][ T8617] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 573.523149][ T8617] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 573.583547][ T8617] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 573.619726][ T8617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.677745][ T8617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 573.733700][ T8617] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 573.955686][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.012290][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.032680][ T8566] bridge_slave_0: entered allmulticast mode [ 574.061481][ T8566] bridge_slave_0: entered promiscuous mode [ 574.168753][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.224375][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.285513][ T8566] bridge_slave_1: entered allmulticast mode [ 574.373191][ T8566] bridge_slave_1: entered promiscuous mode [ 574.407511][ T6285] bridge_slave_1: left allmulticast mode [ 574.423051][ T6285] bridge_slave_1: left promiscuous mode [ 574.450664][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.546176][ T6285] bridge_slave_0: left allmulticast mode [ 574.552307][ T5069] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 574.559486][ T5069] Bluetooth: hci3: command 0x0406 tx timeout [ 574.567308][ T5780] Bluetooth: hci0: command 0x0c20 tx timeout [ 574.585197][ T6285] bridge_slave_0: left promiscuous mode [ 574.591523][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.342185][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 575.585966][ T5780] Bluetooth: hci5: command 0x0406 tx timeout [ 575.661979][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 576.752306][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 577.562073][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 577.661964][ T5780] Bluetooth: hci5: command 0x0406 tx timeout [ 577.743741][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 577.864043][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.963311][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.011324][ T6285] bond0 (unregistering): Released all slaves [ 578.300179][ T8651] bridge0: port 3(syz_tun) entered blocking state [ 578.332521][ T8651] bridge0: port 3(syz_tun) entered disabled state [ 578.356642][ T8651] syz_tun: entered allmulticast mode [ 578.395222][ T8651] syz_tun: entered promiscuous mode [ 578.410740][ T8656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.866365][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.069017][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.706332][ T8566] team0: Port device team_slave_0 added [ 579.800210][ T8566] team0: Port device team_slave_1 added [ 579.822382][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.142857][ T6285] hsr_slave_0: left promiscuous mode [ 580.210778][ T6285] hsr_slave_1: left promiscuous mode [ 580.281283][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.301653][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.344259][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.406228][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.575095][ T6285] veth1_macvtap: left promiscuous mode [ 580.602082][ T6285] veth0_macvtap: left promiscuous mode [ 580.607983][ T6285] veth1_vlan: left promiscuous mode [ 580.632037][ T6285] veth0_vlan: left promiscuous mode [ 583.949250][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 584.177301][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 585.639030][ T8698] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.902534][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.909666][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.014520][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.131617][ T8698] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.232119][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.262332][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.339648][ T8721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.365311][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.442407][ T8723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.715910][ T8698] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.832241][ T8729] loop5: detected capacity change from 0 to 64 [ 586.994621][ T8729] loop5: detected capacity change from 64 to 0 [ 587.003899][ T8698] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.040288][ T8731] BFS-fs: find_inode(): Unable to read inode loop5:00000002 [ 587.270920][ T8566] hsr_slave_0: entered promiscuous mode [ 587.364509][ T8566] hsr_slave_1: entered promiscuous mode [ 587.423906][ T8566] debugfs: 'hsr0' already exists in 'hsr' [ 587.429830][ T8566] Cannot create hsr debugfs directory [ 587.563910][ T7041] BFS-fs: find_inode(): Unable to read inode loop5:00000000 [ 587.571960][ T6070] BFS-fs: find_inode(): Unable to read inode loop5:00000001 [ 587.956015][ T6285] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.039063][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.8.679'. [ 588.060988][ T8742] netlink: 196 bytes leftover after parsing attributes in process `syz.8.679'. [ 588.079516][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.8.679'. [ 588.218497][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.390002][ T6332] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.860335][ T6332] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.027674][ T1146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.181244][ T6332] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.398577][ T6070] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.570354][ T6332] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.564244][ T8765] loop6: detected capacity change from 0 to 512 [ 591.617502][ T8765] EXT4-fs: Ignoring removed i_version option [ 591.726659][ T8765] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 591.868468][ T8765] EXT4-fs (loop6): 1 truncate cleaned up [ 591.945757][ T8765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.998582][ T6332] bridge_slave_1: left allmulticast mode [ 592.042491][ T6332] bridge_slave_1: left promiscuous mode [ 592.049372][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.144341][ T8765] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.686: invalid indirect mapped block 4294901760 (level 0) [ 592.173763][ T6332] bridge_slave_0: left allmulticast mode [ 592.182139][ T6332] bridge_slave_0: left promiscuous mode [ 592.191965][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.211193][ T8765] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.686: invalid indirect mapped block 4294967295 (level 1) [ 592.416461][ T5069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.428315][ T5069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.438825][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.461063][ T5069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.503285][ T5069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.574478][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.316330][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.404746][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.420176][ T6332] bond0 (unregistering): Released all slaves [ 594.542188][ T5069] Bluetooth: hci0: command tx timeout [ 596.049732][ T8775] lo speed is unknown, defaulting to 1000 [ 596.062054][ T8566] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 596.622125][ T5069] Bluetooth: hci0: command tx timeout [ 596.986912][ T8566] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 597.467942][ T8566] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 597.940277][ T6332] hsr_slave_0: left promiscuous mode [ 598.132223][ T6332] hsr_slave_1: left promiscuous mode [ 598.304097][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.341958][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.474376][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.563305][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.702086][ T5069] Bluetooth: hci0: command tx timeout [ 598.769063][ T6332] veth1_macvtap: left promiscuous mode [ 598.799644][ T6332] veth0_macvtap: left promiscuous mode [ 598.832905][ T6332] veth1_vlan: left promiscuous mode [ 598.898486][ T6332] veth0_vlan: left promiscuous mode [ 600.790371][ T5069] Bluetooth: hci0: command tx timeout [ 602.053185][ T8831] loop6: detected capacity change from 0 to 512 [ 602.233219][ T8831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.266346][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 602.289302][ T8831] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 602.368103][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 602.567378][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.728535][ T8566] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 608.548921][ T8854] loop6: detected capacity change from 0 to 512 [ 611.406297][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 612.043433][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.228535][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.286027][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.293785][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.511358][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.519037][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.926101][ T8900] loop6: detected capacity change from 0 to 2048 [ 618.316190][ T8900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.479822][ T8906] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 618.585897][ T8900] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.725: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 618.642100][ T8906] EXT4-fs (loop6): Remounting filesystem read-only [ 618.652295][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.659785][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.775218][ T8775] bridge_slave_0: entered allmulticast mode [ 618.947300][ T8775] bridge_slave_0: entered promiscuous mode [ 619.065634][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.160899][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.242577][ T8775] bridge_slave_1: entered allmulticast mode [ 619.307451][ T8775] bridge_slave_1: entered promiscuous mode [ 619.525856][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.066665][ T8912] xt_CT: No such helper "pptp" [ 620.787275][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.005052][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.808052][ T8775] team0: Port device team_slave_0 added [ 621.977850][ T8775] team0: Port device team_slave_1 added [ 622.447181][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.521004][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.501776][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.563860][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.596603][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.553158][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.568526][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.587375][ T8936] batadv_slave_1: entered promiscuous mode [ 626.626241][ T8939] batadv_slave_1: left promiscuous mode [ 627.286753][ T8775] hsr_slave_0: entered promiscuous mode [ 627.336438][ T8775] hsr_slave_1: entered promiscuous mode [ 627.359171][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 627.363775][ T8775] debugfs: 'hsr0' already exists in 'hsr' [ 627.374787][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 627.387796][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 627.388086][ T8775] Cannot create hsr debugfs directory [ 627.412913][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 627.427387][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 627.449270][ T8950] 8021q: VLANs not supported on vcan0 [ 628.181187][ T8952] lo speed is unknown, defaulting to 1000 [ 629.047003][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.8.743'. [ 629.502112][ T5069] Bluetooth: hci4: command tx timeout [ 631.109388][ T8980] geneve1: entered promiscuous mode [ 631.142898][ T8980] macsec1: entered promiscuous mode [ 631.180919][ T8980] macsec1: entered allmulticast mode [ 631.203430][ T8980] geneve1: entered allmulticast mode [ 631.582142][ T5069] Bluetooth: hci4: command tx timeout [ 633.662076][ T5069] Bluetooth: hci4: command tx timeout [ 634.708452][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.791964][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.605791][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.759'. [ 635.742005][ T5069] Bluetooth: hci4: command tx timeout [ 637.381262][ T8775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 637.472490][ T8775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 637.642523][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 637.768165][ T8775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.958858][ T8775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.330900][ T35] bridge_slave_1: left allmulticast mode [ 638.342121][ T35] bridge_slave_1: left promiscuous mode [ 638.348713][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.404913][ T35] bridge_slave_0: left allmulticast mode [ 638.418337][ T35] bridge_slave_0: left promiscuous mode [ 638.434694][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.809100][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.863845][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.917404][ T35] bond0 (unregistering): Released all slaves [ 640.495370][ T6890] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 640.600595][ T35] hsr_slave_0: left promiscuous mode [ 640.610150][ T35] hsr_slave_1: left promiscuous mode [ 640.625004][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.683896][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.8.769'. [ 640.755460][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.642175][ T6890] usb 7-1: Using ep0 maxpacket: 16 [ 641.659406][ T6890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.133773][ T6890] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 642.143380][ T6890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.162890][ T6890] usb 7-1: Product: syz [ 642.167416][ T6890] usb 7-1: Manufacturer: syz [ 642.174315][ T6890] usb 7-1: SerialNumber: syz [ 642.189926][ T6890] usb 7-1: config 0 descriptor?? [ 642.269658][ T6890] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 643.232487][ T35] team0 (unregistering): Port device team_slave_1 removed [ 643.315916][ T35] team0 (unregistering): Port device team_slave_0 removed [ 643.342657][ T12] usb 7-1: Failed to submit usb control message: -110 [ 643.364115][ T12] usb 7-1: unable to send the bmi data to the device: -110 [ 643.403885][ T12] usb 7-1: unable to get target info from device [ 643.426649][ T12] usb 7-1: could not get target info (-110) [ 643.444370][ T12] usb 7-1: could not probe fw (-110) [ 643.981417][ T5831] usb 7-1: USB disconnect, device number 6 [ 644.935343][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.947023][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.954935][ T8952] bridge_slave_0: entered allmulticast mode [ 644.964482][ T8952] bridge_slave_0: entered promiscuous mode [ 645.012797][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.039125][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.052756][ T8952] bridge_slave_1: entered allmulticast mode [ 645.063583][ T8952] bridge_slave_1: entered promiscuous mode [ 645.737527][ T9083] loop6: detected capacity change from 0 to 512 [ 645.796740][ T9083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 645.842374][ T9083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 645.902297][ T9083] EXT4-fs (loop6): 1 truncate cleaned up [ 645.934752][ T9083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.015571][ T9083] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.6.781: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 646.089285][ T9083] EXT4-fs (loop6): Remounting filesystem read-only [ 646.112030][ T9083] EXT4-fs warning (device loop6): ext4_rename_delete:3729: inode #2: comm syz.6.781: Deleting old file: nlink 5, error=-117 [ 646.359547][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.494370][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.952185][ T5780] Bluetooth: hci4: command 0x0405 tx timeout [ 647.356642][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.934046][ T8952] team0: Port device team_slave_0 added [ 648.147861][ T8952] team0: Port device team_slave_1 added [ 648.223346][ T6890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 648.411939][ T6890] usb 7-1: Using ep0 maxpacket: 16 [ 648.464945][ T6890] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.530715][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.538351][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.586195][ T6890] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 648.602726][ T6890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.606012][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.610916][ T6890] usb 7-1: Product: syz [ 648.611014][ T6890] usb 7-1: Manufacturer: syz [ 648.664485][ T6890] usb 7-1: SerialNumber: syz [ 648.689565][ T6890] usb 7-1: config 0 descriptor?? [ 648.699012][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.734141][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.763565][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.792388][ T6890] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 649.078592][ T5914] usb 7-1: Failed to submit usb control message: -71 [ 649.079420][ T30] usb 7-1: USB disconnect, device number 7 [ 649.086201][ T5914] usb 7-1: unable to send the bmi data to the device: -71 [ 649.086321][ T5914] usb 7-1: unable to get target info from device [ 649.086421][ T5914] usb 7-1: could not get target info (-71) [ 649.086536][ T5914] usb 7-1: could not probe fw (-71) [ 649.290576][ T8952] hsr_slave_0: entered promiscuous mode [ 649.306147][ T8952] hsr_slave_1: entered promiscuous mode [ 649.315781][ T8952] debugfs: 'hsr0' already exists in 'hsr' [ 649.325996][ T8952] Cannot create hsr debugfs directory [ 649.541070][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.941602][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.538768][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.546460][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.690506][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.698122][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.709330][ T8952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 653.842604][ T8952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 653.978798][ T8952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 654.130571][ T8952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 654.586242][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 654.602983][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 654.620457][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 654.637364][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 654.662395][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 655.050224][ T9139] lo speed is unknown, defaulting to 1000 [ 656.782496][ T5780] Bluetooth: hci1: command tx timeout [ 657.490986][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.931636][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 658.105053][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.143075][ T5780] Bluetooth: hci1: command tx timeout [ 661.196561][ T5780] Bluetooth: hci1: command tx timeout [ 661.273811][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.281402][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.669983][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.677818][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.263778][ T5780] Bluetooth: hci1: command tx timeout [ 663.562445][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.608684][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.617439][ T9139] bridge_slave_0: entered allmulticast mode [ 663.629517][ T9139] bridge_slave_0: entered promiscuous mode [ 663.675612][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.705556][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.732669][ T9139] bridge_slave_1: entered allmulticast mode [ 663.762928][ T9139] bridge_slave_1: entered promiscuous mode [ 663.791571][ T1146] bridge_slave_1: left allmulticast mode [ 663.799012][ T1146] bridge_slave_1: left promiscuous mode [ 663.833023][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.887544][ T1146] bridge_slave_0: left allmulticast mode [ 664.917373][ T1146] bridge_slave_0: left promiscuous mode [ 664.973686][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.024329][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.070561][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.127878][ T1146] bond0 (unregistering): Released all slaves [ 667.010814][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.138527][ T1146] hsr_slave_0: left promiscuous mode [ 667.174519][ T1146] hsr_slave_1: left promiscuous mode [ 667.193995][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.239863][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.949003][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 669.104536][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 672.907243][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.240295][ T9139] team0: Port device team_slave_0 added [ 676.353844][ T9139] team0: Port device team_slave_1 added [ 676.620968][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.774664][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.815122][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.900002][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.050602][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.076847][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.147444][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.949733][ T9139] hsr_slave_0: entered promiscuous mode [ 677.960134][ T9139] hsr_slave_1: entered promiscuous mode [ 678.085207][ T9139] debugfs: 'hsr0' already exists in 'hsr' [ 678.173357][ T9139] Cannot create hsr debugfs directory [ 680.878530][ T8952] veth0_vlan: entered promiscuous mode [ 681.962478][ T8952] veth1_vlan: entered promiscuous mode [ 682.789870][ T9139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 682.880660][ T9139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.003311][ T9139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.164405][ T9139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 683.692514][ T8952] veth0_macvtap: entered promiscuous mode [ 683.773983][ T8952] veth1_macvtap: entered promiscuous mode [ 684.065473][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.375046][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.246630][ T5944] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 685.601016][ T5944] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 685.645082][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.692100][ T6070] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.713265][ T5944] usb 7-1: Product: syz [ 685.733288][ T5944] usb 7-1: Manufacturer: syz [ 685.738100][ T5944] usb 7-1: SerialNumber: syz [ 685.859472][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.996273][ T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.149121][ T6070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.298069][ T5944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 686.431633][ T5944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 686.588309][ T5944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 686.692918][ T5944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 686.805254][ T5944] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 686.939732][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.992524][ T5944] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 687.058466][ T5944] usb 7-1: USB disconnect, device number 8 [ 687.267391][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.367840][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.375407][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.732343][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.739966][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.982182][ T5069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.993738][ T5069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 688.005003][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 688.021501][ T5069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 688.037041][ T5069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 688.230211][ T9342] loop8: detected capacity change from 0 to 512 [ 688.338908][ T9342] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 688.865307][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.040496][ T6996] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 689.069143][ T9340] lo speed is unknown, defaulting to 1000 [ 690.151973][ T5069] Bluetooth: hci0: command tx timeout [ 692.483071][ T5069] Bluetooth: hci0: command tx timeout [ 694.376081][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.548486][ T5069] Bluetooth: hci0: command tx timeout [ 694.580868][ T6203] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.859394][ T6203] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.927458][ T9340] chnl_net:caif_netlink_parms(): no params data found [ 695.304598][ T6203] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.606540][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.618451][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.787144][ T6203] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.632998][ T5069] Bluetooth: hci0: command tx timeout [ 696.658680][ T6203] bridge_slave_1: left allmulticast mode [ 696.682493][ T6203] bridge_slave_1: left promiscuous mode [ 696.689066][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.704100][ T6203] bridge_slave_0: left allmulticast mode [ 696.709946][ T6203] bridge_slave_0: left promiscuous mode [ 696.716874][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.373713][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.617263][ T6203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.707766][ T6203] bond0 (unregistering): Released all slaves [ 702.882992][ T9429] loop6: detected capacity change from 0 to 1024 [ 703.315045][ T9429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.605171][ T6203] hsr_slave_0: left promiscuous mode [ 703.724621][ T6203] hsr_slave_1: left promiscuous mode [ 703.833089][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.840661][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.017966][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.097118][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.372932][ T6203] veth1_macvtap: left promiscuous mode [ 704.378650][ T6203] veth0_macvtap: left promiscuous mode [ 704.404121][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.445518][ T6203] veth1_vlan: left promiscuous mode [ 704.451053][ T6203] veth0_vlan: left promiscuous mode [ 711.745093][ T9475] loop6: detected capacity change from 0 to 1024 [ 712.814615][ T9475] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 715.284480][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 715.474121][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 716.493428][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 716.531372][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 716.553653][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 716.632482][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 716.672631][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.767339][ T9340] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.848647][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.859370][ T9500] usb usb8: usbfs: process 9500 (syz.6.893) did not claim interface 0 before use [ 716.872303][ T9340] bridge_slave_0: entered allmulticast mode [ 716.926815][ T9340] bridge_slave_0: entered promiscuous mode [ 717.012765][ T9340] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.020272][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.097829][ T9340] bridge_slave_1: entered allmulticast mode [ 717.139893][ T9340] bridge_slave_1: entered promiscuous mode [ 717.619070][ T9340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.718177][ T9340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.285141][ T9495] lo speed is unknown, defaulting to 1000 [ 718.426974][ T9340] team0: Port device team_slave_0 added [ 718.629567][ T9513] loop6: detected capacity change from 0 to 1024 [ 718.920701][ T5780] Bluetooth: hci4: command tx timeout [ 719.438105][ T9340] team0: Port device team_slave_1 added [ 719.523639][ T9513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.992434][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.083279][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.287783][ T9340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.374504][ T7086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.592411][ T9340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.662560][ T9340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.727979][ T9340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.942396][ T5780] Bluetooth: hci4: command tx timeout [ 722.073618][ T5828] ===================================================== [ 722.082098][ T5828] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 722.090426][ T5828] vidtv_ts_null_write_into+0x43e/0x5c0 [ 722.096594][ T5828] vidtv_mux_tick+0x3480/0x3e30 [ 722.102448][ T5828] process_scheduled_works+0xb21/0x1e30 [ 722.108460][ T5828] worker_thread+0xede/0x1580 [ 722.113723][ T5828] kthread+0x53f/0x600 [ 722.118145][ T5828] ret_from_fork+0x20f/0x910 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 722.126372][ T5828] ret_from_fork_asm+0x1a/0x30 [ 722.140610][ T5828] [ 722.143816][ T5828] Uninit was stored to memory at: [ 722.152176][ T5828] vidtv_ts_null_write_into+0x437/0x5c0 [ 722.159699][ T5828] vidtv_mux_tick+0x3480/0x3e30 [ 722.165476][ T5828] process_scheduled_works+0xb21/0x1e30 [ 722.171246][ T5828] worker_thread+0xede/0x1580 [ 722.176633][ T5828] kthread+0x53f/0x600 [ 722.181092][ T5828] ret_from_fork+0x20f/0x910 [ 722.191349][ T5828] ret_from_fork_asm+0x1a/0x30 [ 722.196575][ T5828] [ 722.199020][ T5828] Local variable args.i132 created at: [ 722.205440][ T5828] vidtv_mux_tick+0x3119/0x3e30 [ 722.210534][ T5828] process_scheduled_works+0xb21/0x1e30 [ 722.216490][ T5828] [ 722.219094][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 722.228907][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.239955][ T5828] Workqueue: events vidtv_mux_tick [ 722.245591][ T5828] ===================================================== [ 722.253097][ T5828] Disabling lock debugging due to kernel taint [ 723.022950][ T5780] Bluetooth: hci4: command tx timeout [ 723.212445][ T5828] Kernel panic - not syncing: kmsan.panic set ... [ 723.219091][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:3 Tainted: G B syzkaller #0 PREEMPT(full) [ 723.230222][ T5828] Tainted: [B]=BAD_PAGE [ 723.234470][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.244658][ T5828] Workqueue: events vidtv_mux_tick [ 723.251195][ T5828] Call Trace: [ 723.254587][ T5828] [ 723.257602][ T5828] __dump_stack+0x26/0x30 [ 723.262140][ T5828] dump_stack_lvl+0x50/0x1c0 [ 723.266906][ T5828] ? dump_stack+0x12/0x25 [ 723.271402][ T5828] dump_stack+0x1e/0x25 [ 723.275728][ T5828] vpanic+0x7b4/0x1430 [ 723.280013][ T5828] panic+0x15d/0x160 [ 723.284136][ T5828] kmsan_report+0x31a/0x320 [ 723.288846][ T5828] ? __msan_warning+0x1b/0x30 [ 723.293696][ T5828] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 723.299611][ T5828] ? vidtv_mux_tick+0x3480/0x3e30 [ 723.304776][ T5828] ? process_scheduled_works+0xb21/0x1e30 [ 723.310650][ T5828] ? worker_thread+0xede/0x1580 [ 723.315665][ T5828] ? kthread+0x53f/0x600 [ 723.320085][ T5828] ? ret_from_fork+0x20f/0x910 [ 723.325017][ T5828] ? ret_from_fork_asm+0x1a/0x30 [ 723.330221][ T5828] ? ret_from_fork_asm+0x1a/0x30 [ 723.335355][ T5828] ? preempt_schedule_irq+0x79/0xa0 [ 723.340886][ T5828] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 723.347301][ T5828] ? kmsan_get_metadata+0xf1/0x160 [ 723.352812][ T5828] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 723.358924][ T5828] ? vidtv_ts_null_write_into+0x31/0x5c0 [ 723.364735][ T5828] ? filter_irq_stacks+0x49/0x190 [ 723.370046][ T5828] ? stack_depot_save_flags+0x35/0x790 [ 723.375791][ T5828] ? kmsan_get_metadata+0xf1/0x160 [ 723.381111][ T5828] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 723.387655][ T5828] ? kmsan_get_metadata+0xf1/0x160 [ 723.392983][ T5828] __msan_warning+0x1b/0x30 [ 723.397671][ T5828] vidtv_ts_null_write_into+0x43e/0x5c0 [ 723.403410][ T5828] vidtv_mux_tick+0x3480/0x3e30 [ 723.408537][ T5828] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 723.413867][ T5828] process_scheduled_works+0xb21/0x1e30 [ 723.419620][ T5828] worker_thread+0xede/0x1580 [ 723.424479][ T5828] kthread+0x53f/0x600 [ 723.428709][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 723.433988][ T5828] ? __pfx_kthread+0x10/0x10 [ 723.438758][ T5828] ret_from_fork+0x20f/0x910 [ 723.443516][ T5828] ? __switch_to+0x51c/0x750 [ 723.448394][ T5828] ? __pfx_kthread+0x10/0x10 [ 723.453156][ T5828] ret_from_fork_asm+0x1a/0x30 [ 723.458132][ T5828] [ 723.461517][ T5828] Kernel Offset: disabled [ 723.465886][ T5828] Rebooting in 86400 seconds..