last executing test programs: 7m31.540620569s ago: executing program 2 (id=31): r0 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xffffffffffffffff) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000900)={'#! ', './bus', [], 0xa, "1350efa20c0ca1e0d59c2b1e99de406b199930ea57846853889ace4d1314d222a9e8a268337f7fb1989b2863218fd4499093b803e5fea85cabd1c335380c8a681afb8eb7161ee3d2406348b1deda1224f688418f4120ec0f786204909c60f9185382a817f2655dc9ef964aebf7ab14b5e3a3b265ff9879585f372beb7c417b907902ab9cfd52f8cabd410c43cc7ea1bae0cd766669132ef524714a5c28a29cc1408f58b86f79d59e05bf8394a138d326e5c1e0be73e23492"}, 0xc1) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3316fe102b86", @mac=@broadcast, @private=0xa010100, @private=0xa010105, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @private=0xa010102, @broadcast, 0x4, 0x1}}}, {{@arp={@private=0xa010100, @broadcast, 0xff000000, 0x0, 0x1, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@random="2205b293d69e", {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xfffc, 0x3, 0x8, 0xd, 0x0, 'bond0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0xc2}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x5}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c00045b1c50184ddc5ac63bf25b9d806a5f31ace416be6e3a3d952386952a691f3b95984ecce8fbad49bf38de92bdd89e40bfcb7986e7ffffffff72fe4c27387b0a"]) 7m24.48008969s ago: executing program 2 (id=36): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m19.368476114s ago: executing program 2 (id=39): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000280)={0x1, 0x10, 0x4, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 7m13.163082478s ago: executing program 3 (id=49): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) close(r4) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) set_mempolicy(0x8000, &(0x7f00000000c0)=0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x82, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c00"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000000000001d76d61dba8433944856729500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41, 0x0, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000002640)=ANY=[@ANYBLOB="12011003265d5d20030473da090000000301090224000106005004090471070294c6"], &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0}) 7m12.725897529s ago: executing program 2 (id=50): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) syz_io_uring_setup(0x6af9, &(0x7f0000000080)={0x0, 0xe04f, 0xa40, 0x1, 0x272}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 7m8.840513062s ago: executing program 3 (id=51): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) socket(0xa, 0x3, 0xfc) openat$ttyprintk(0xffffff9c, 0x0, 0xa0400, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m6.033680386s ago: executing program 2 (id=54): pipe(&(0x7f00000045c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff000000, 0x20000000000, 0xffffffffffffffff, 0x0, 0xc481, 0x1000000ffe, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0xd, 0x80000005}, 0x0, 0x0) 7m4.687738569s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0x58000, 0x118000}) 7m3.483890576s ago: executing program 2 (id=58): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 7m2.03346606s ago: executing program 3 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) mkdir(&(0x7f0000000400)='./file0\x00', 0x51) 6m50.338317822s ago: executing program 3 (id=66): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) socket(0xa, 0x3, 0xfc) openat$ttyprintk(0xffffff9c, 0x0, 0xa0400, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m45.404666243s ago: executing program 32 (id=58): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xacba}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 6m45.310420158s ago: executing program 3 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x58000, 0x118000}) 6m29.703789139s ago: executing program 33 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7, 0x0, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89a3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x58000, 0x118000}) 6m26.590645824s ago: executing program 1 (id=86): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 6m25.490424355s ago: executing program 1 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000b40)={@local, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x8864, @dccp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x64, 0x57, 0x10, 0x21, 0x0, @multicast2, @multicast1}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x1, 0x2, "091000", 0x3f, "4ff2f3"}, "7dbfe016"}}}}}, 0x0) 6m24.561063471s ago: executing program 1 (id=90): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000200)) 6m24.16773348s ago: executing program 1 (id=91): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x12, 0xffffffffffffffff, 0x95b53000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="4700000001003f", 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) 6m15.472744247s ago: executing program 1 (id=95): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 6m10.892255949s ago: executing program 4 (id=96): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m10.689691624s ago: executing program 1 (id=97): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) syz_io_uring_setup(0x143a, &(0x7f0000000000)={0x0, 0x9d1c, 0x400, 0x3, 0x2b3}, 0x0, 0x0, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000100), 0x700000000000, 0x202) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6m7.240681374s ago: executing program 4 (id=99): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000200)) 6m6.529696674s ago: executing program 4 (id=101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000c00)='\x00', 0x0, 0x800080, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 5m58.429474003s ago: executing program 4 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) 5m56.078670764s ago: executing program 4 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x3ff, 0x109900) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) fchdir(0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast2, 0x9}, 0xffffffffffffffff, 0x5}}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 5m52.593630065s ago: executing program 34 (id=97): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) syz_io_uring_setup(0x143a, &(0x7f0000000000)={0x0, 0x9d1c, 0x400, 0x3, 0x2b3}, 0x0, 0x0, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000000100), 0x700000000000, 0x202) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5m51.995504815s ago: executing program 4 (id=108): socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m35.705078141s ago: executing program 35 (id=108): socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.941861838s ago: executing program 0 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x108, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x60, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\xfam+\x13;\b\x00\x00Q\xc7P\xf6\x95\x85\xea\xf4\xee\xe3i|\xa0\xf1r\xcf\x01\x00:\xe9Z\xc4\x0f\xafJ\f\xd9\xec\xd5t\x9brB\xd1o\fvJ*\x06/%6K\xa1*w\x80c\xd2\x16\xaa\xfa'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 15.84389346s ago: executing program 0 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 12.449508868s ago: executing program 0 (id=261): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 8.325387531s ago: executing program 0 (id=262): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d40102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x1, 0x10, 0x4, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.604498337s ago: executing program 0 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000122, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x40c0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x246, &(0x7f0000000680)={@remote, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x1, 0x6, "627bfe", 0x210, 0x21, 0xff, @mcast1, @mcast2, {[@dstopts={0x8, 0x35, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @generic={0x7, 0x7d, "d45888d64ab0f0701c2efbe6c338d7da01bf56d550a5aefaa80485d75e84653c8fbc38e7fbd7cfe576984b870738e6bef773b1125d1c8b8b3a2c774dbf453da2404ce02c39d4f717676d4d8d53eeb1909f4b679b2c6b0f70b153c6280085669bca8a592b79bd0908d47634ae7f134f41b9e0597e5fd1bd23e0390fda85"}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x48, {0x0, 0x10, 0x80, 0x100, [0x9, 0x8001, 0xfffffffffffffffc, 0x0, 0x8000, 0x3, 0x2, 0x7fff]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0xa, 0x8, [0xfffffffffffffffe]}}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xa}, @generic={0x8, 0xb1, "2ccfc7e9b9ad0e8b18033eec57a74a1de3bf0a84aea59b86c5478527f9aecc67f5912c902227a0afc9c5d9691cd58c037291f6d6f5164f6a7cdd3fdbb893ac07df0db1fd542946b8ea515bc2a71a56312bcbbe1166d6054ee0f331cf0d5ce19668ad7a6cada5ed6dbf348fe9f091cd2eeb7ba9b01d4f463eb0826afe77f3b39dcb78e91e8cb92ff9db9e20b18ebc27f8afafa393f64fec2057c3630448c4b1cddca998e08e1007bbd1a828b0b9c36a1f09"}]}, @routing={0x5c, 0x6, 0x0, 0x0, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}, @fragment={0x36, 0x0, 0x4, 0x1, 0x0, 0x0, 0x65}, @fragment={0xc, 0x0, 0x40, 0x1, 0x0, 0x4, 0x66}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x4, "6f86ac", 0xbb, "26fe73"}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 0s ago: executing program 0 (id=264): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x34, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298087f6, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.706311][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.857998][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.872294][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.902790][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.031870][ T6317] team0: Port device team_slave_0 added [ 379.134865][ T6317] team0: Port device team_slave_1 added [ 379.339468][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.348609][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.391207][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.526330][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.534567][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.564431][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.545153][ T6338] hsr_slave_0: entered promiscuous mode [ 380.564090][ T6338] hsr_slave_1: entered promiscuous mode [ 380.574166][ T6338] debugfs: 'hsr0' already exists in 'hsr' [ 380.580103][ T6338] Cannot create hsr debugfs directory [ 381.372931][ T6317] hsr_slave_0: entered promiscuous mode [ 381.384574][ T6317] hsr_slave_1: entered promiscuous mode [ 381.397025][ T6317] debugfs: 'hsr0' already exists in 'hsr' [ 381.404295][ T6317] Cannot create hsr debugfs directory [ 381.554400][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 381.991892][ T40] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 382.388963][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 382.436025][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.502565][ T40] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.545001][ T40] usb 1-1: config 0 has no interfaces? [ 382.606029][ T40] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 382.643177][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.694880][ T40] usb 1-1: SerialNumber: syz [ 383.373715][ T40] usb 1-1: config 0 descriptor?? [ 384.497990][ T6304] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.524562][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.625924][ T6304] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.654670][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.711994][ T6304] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.743392][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.804020][ T6304] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.832569][ T6304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.956839][ T5228] 8021q: adding VLAN 0 to HW filter on device eth6 [ 385.071576][ T6314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.204281][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.256966][ T6314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.296071][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.338400][ T6314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.387080][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.417319][ T40] usb 1-1: USB disconnect, device number 8 [ 385.479881][ T6314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.575803][ T6314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.833968][ T6338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 385.902650][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.961782][ T6338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 385.997130][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.007723][ T6338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.038441][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.064644][ T6338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.101435][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.733075][ T6537] No such timeout policy "syz0" [ 386.737042][ T6317] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 386.774243][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.848659][ T6317] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 386.887995][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.906133][ T6317] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.961083][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.999772][ T6317] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 387.042754][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.730503][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.036340][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.103900][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.246249][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.253905][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.355211][ T5228] 8021q: adding VLAN 0 to HW filter on device eth7 [ 388.480630][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.488231][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.521492][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.596920][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.604543][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.679766][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.715126][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.722799][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.980999][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.082628][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.093865][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.211008][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.218482][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.358135][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.365698][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.817345][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.383932][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.676242][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.683766][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.876535][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.884057][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.748250][ T4873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.774673][ T4873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.786844][ T4873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.817835][ T4873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.831223][ T4873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.824345][ T5228] 8021q: adding VLAN 0 to HW filter on device eth8 [ 393.868925][ T4873] Bluetooth: hci4: command tx timeout [ 395.653924][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.000682][ T4873] Bluetooth: hci4: command tx timeout [ 398.033822][ T4873] Bluetooth: hci4: command tx timeout [ 398.462119][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.737061][ T5843] bridge_slave_1: left allmulticast mode [ 398.767264][ T5843] bridge_slave_1: left promiscuous mode [ 398.792979][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.861696][ T5843] bridge_slave_0: left allmulticast mode [ 398.892819][ T5843] bridge_slave_0: left promiscuous mode [ 398.917813][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.781172][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 400.109198][ T4873] Bluetooth: hci4: command tx timeout [ 400.321917][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 400.757966][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 400.934833][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 401.140485][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.260677][ T10] usb 1-1: config 0 has no interfaces? [ 401.415363][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 401.564684][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.627113][ T10] usb 1-1: SerialNumber: syz [ 401.926127][ T10] usb 1-1: config 0 descriptor?? [ 402.056855][ T10] usb 1-1: can't set config #0, error -71 [ 402.190393][ T10] usb 1-1: USB disconnect, device number 9 [ 402.735111][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.798147][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.838586][ T5843] bond0 (unregistering): Released all slaves [ 403.081069][ T5228] 8021q: adding VLAN 0 to HW filter on device eth9 [ 403.155244][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.180224][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.189560][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.203032][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.215978][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.412419][ T5843] hsr_slave_0: left promiscuous mode [ 403.447757][ T5843] hsr_slave_1: left promiscuous mode [ 403.469782][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.503692][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.167296][ T5843] team0 (unregistering): Port device team_slave_1 removed [ 404.208303][ T5843] team0 (unregistering): Port device team_slave_0 removed [ 404.448195][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.472082][ T6656] syzkaller0: entered promiscuous mode [ 404.482177][ T6656] syzkaller0: entered allmulticast mode [ 405.389144][ T5582] Bluetooth: hci1: command tx timeout [ 407.164919][ T6699] binder: binder_mmap: 6696 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 407.499766][ T5582] Bluetooth: hci1: command tx timeout [ 409.562205][ T5582] Bluetooth: hci1: command tx timeout [ 410.723947][ T6338] veth0_vlan: entered promiscuous mode [ 410.782973][ T55] bridge_slave_1: left allmulticast mode [ 410.801562][ T55] bridge_slave_1: left promiscuous mode [ 410.826686][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.889804][ T55] bridge_slave_0: left allmulticast mode [ 410.960853][ T55] bridge_slave_0: left promiscuous mode [ 410.975295][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.639269][ T5582] Bluetooth: hci1: command tx timeout [ 411.719480][ T4873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.729659][ T4873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.750516][ T4873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.860449][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 412.036395][ T4873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 412.077317][ T4873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.754446][ T5682] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 413.053729][ T5682] usb 1-1: Using ep0 maxpacket: 32 [ 413.270045][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 413.515919][ T5682] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 413.692867][ T5682] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 413.820559][ T5682] usb 1-1: config 6 has no interface number 0 [ 413.858326][ T5682] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.026513][ T5682] usb 1-1: config 6 interface 113 has no altsetting 0 [ 414.270329][ T5682] usb 1-1: string descriptor 0 read error: -71 [ 414.276818][ T4873] Bluetooth: hci2: command tx timeout [ 414.305681][ T5682] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 414.345828][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 414.467167][ T5682] usb 1-1: can't set config #6, error -71 [ 414.509356][ T5682] usb 1-1: USB disconnect, device number 10 [ 414.938289][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.020087][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.076728][ T55] bond0 (unregistering): Released all slaves [ 415.473879][ T55] hsr_slave_0: left promiscuous mode [ 415.528030][ T55] hsr_slave_1: left promiscuous mode [ 415.565321][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.598997][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.648477][ T5582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.675102][ T5582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.684743][ T5582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.701522][ T5582] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.712841][ T5582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.351056][ T5582] Bluetooth: hci2: command tx timeout [ 416.557810][ T55] team0 (unregistering): Port device team_slave_1 removed [ 416.604886][ T55] team0 (unregistering): Port device team_slave_0 removed [ 417.026984][ T5228] 8021q: adding VLAN 0 to HW filter on device eth10 [ 417.368972][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.391341][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.413203][ T6569] bridge_slave_0: entered allmulticast mode [ 417.437629][ T6569] bridge_slave_0: entered promiscuous mode [ 417.527762][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.549232][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.567473][ T6569] bridge_slave_1: entered allmulticast mode [ 417.611165][ T6569] bridge_slave_1: entered promiscuous mode [ 417.789211][ T5582] Bluetooth: hci5: command tx timeout [ 418.036567][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.185097][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.414060][ T6569] team0: Port device team_slave_0 added [ 418.429074][ T5582] Bluetooth: hci2: command tx timeout [ 418.442300][ T6569] team0: Port device team_slave_1 added [ 418.565503][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.581347][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.609764][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.717323][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.725157][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.765522][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.870932][ T5582] Bluetooth: hci5: command tx timeout [ 419.992773][ T6569] hsr_slave_0: entered promiscuous mode [ 420.057608][ T6569] hsr_slave_1: entered promiscuous mode [ 420.091874][ T6569] debugfs: 'hsr0' already exists in 'hsr' [ 420.109191][ T6569] Cannot create hsr debugfs directory [ 420.509121][ T5582] Bluetooth: hci2: command tx timeout [ 421.566402][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.575898][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.601727][ T6659] bridge_slave_0: entered allmulticast mode [ 421.622505][ T6659] bridge_slave_0: entered promiscuous mode [ 421.820355][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.844151][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.859518][ T6659] bridge_slave_1: entered allmulticast mode [ 421.878532][ T6659] bridge_slave_1: entered promiscuous mode [ 421.949072][ T5582] Bluetooth: hci5: command tx timeout [ 422.609647][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.698105][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.894318][ T5228] 8021q: adding VLAN 0 to HW filter on device eth11 [ 424.039340][ T5582] Bluetooth: hci5: command tx timeout [ 424.318925][ T6659] team0: Port device team_slave_0 added [ 426.014061][ T6659] team0: Port device team_slave_1 added [ 426.716052][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.752843][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.877722][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.060088][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.096214][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.123309][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.290611][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 427.731788][ T5680] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 428.021496][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 428.133784][ T5680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.180173][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.220822][ T5680] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 428.241936][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.317661][ T5680] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 428.352272][ T6712] bridge_slave_0: entered allmulticast mode [ 428.389755][ T5680] usb 1-1: config 6 has no interface number 0 [ 428.451932][ T5680] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.490123][ T6712] bridge_slave_0: entered promiscuous mode [ 428.610420][ T5680] usb 1-1: config 6 interface 113 has no altsetting 0 [ 428.800457][ T5680] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 428.946990][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.068385][ T5680] usb 1-1: SerialNumber: syz [ 429.486196][ T5680] ftdi_sio 1-1:6.113: FTDI USB Serial Device converter detected [ 429.576353][ T5680] usb 1-1: Detected SIO [ 429.639497][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.657436][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.671533][ T6712] bridge_slave_1: entered allmulticast mode [ 429.714967][ T6712] bridge_slave_1: entered promiscuous mode [ 429.946735][ T6659] hsr_slave_0: entered promiscuous mode [ 429.957500][ T6659] hsr_slave_1: entered promiscuous mode [ 429.967550][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 429.999222][ T6659] Cannot create hsr debugfs directory [ 430.005464][ T5680] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 430.085665][ T5680] usb 1-1: USB disconnect, device number 11 [ 430.198306][ T5680] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 430.285826][ T5680] ftdi_sio 1-1:6.113: device disconnected [ 430.349708][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.702316][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.905176][ T29] audit: type=1326 audit(1778964159.359:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.0.149" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0768d9ce59 code=0x0 [ 431.547767][ T55] bridge_slave_1: left allmulticast mode [ 431.577362][ T55] bridge_slave_1: left promiscuous mode [ 431.586866][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.603051][ T55] bridge_slave_0: left allmulticast mode [ 431.609260][ T55] bridge_slave_0: left promiscuous mode [ 431.615781][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.644968][ T55] bridge_slave_1: left allmulticast mode [ 431.651374][ T55] bridge_slave_1: left promiscuous mode [ 431.657847][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.699985][ T55] bridge_slave_0: left allmulticast mode [ 431.706135][ T55] bridge_slave_0: left promiscuous mode [ 431.717980][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.465163][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.488618][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.526363][ T55] bond0 (unregistering): Released all slaves [ 432.829353][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.888451][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.903787][ T55] bond0 (unregistering): Released all slaves [ 432.942731][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.972415][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.981603][ T6727] bridge_slave_0: entered allmulticast mode [ 433.005217][ T6727] bridge_slave_0: entered promiscuous mode [ 433.056955][ T6712] team0: Port device team_slave_0 added [ 433.183012][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.195108][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.208604][ T6727] bridge_slave_1: entered allmulticast mode [ 433.222257][ T6727] bridge_slave_1: entered promiscuous mode [ 433.256100][ T6712] team0: Port device team_slave_1 added [ 433.434425][ T55] hsr_slave_0: left promiscuous mode [ 433.444054][ T55] hsr_slave_1: left promiscuous mode [ 433.453960][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.465166][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.523909][ T55] hsr_slave_0: left promiscuous mode [ 433.545268][ T55] hsr_slave_1: left promiscuous mode [ 433.585130][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.602950][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.638103][ T55] veth0_vlan: left promiscuous mode [ 434.632851][ T55] team0 (unregistering): Port device team_slave_1 removed [ 434.684591][ T55] team0 (unregistering): Port device team_slave_0 removed [ 435.298456][ T55] team0 (unregistering): Port device team_slave_1 removed [ 435.348086][ T55] team0 (unregistering): Port device team_slave_0 removed [ 435.740826][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.748220][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.776007][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.875887][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.902908][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.910688][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.938841][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.951834][ T6569] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 435.982675][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.994547][ T6569] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.035432][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.202232][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.309401][ T6569] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.395825][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.486469][ T6569] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.566466][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.723034][ T6727] team0: Port device team_slave_0 added [ 437.229617][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 437.604805][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 437.729198][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.754269][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.768053][ T9] usb 1-1: config 0 has no interfaces? [ 437.869127][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 437.894811][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.904255][ T9] usb 1-1: SerialNumber: syz [ 438.043754][ T9] usb 1-1: config 0 descriptor?? [ 438.439637][ T6727] team0: Port device team_slave_1 added [ 439.352614][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.373797][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.407782][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.525967][ T6712] hsr_slave_0: entered promiscuous mode [ 439.542799][ T6712] hsr_slave_1: entered promiscuous mode [ 439.552566][ T6712] debugfs: 'hsr0' already exists in 'hsr' [ 439.558649][ T6712] Cannot create hsr debugfs directory [ 439.578021][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.586046][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.613147][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.066545][ T6727] hsr_slave_0: entered promiscuous mode [ 440.087090][ T6727] hsr_slave_1: entered promiscuous mode [ 440.096413][ T6727] debugfs: 'hsr0' already exists in 'hsr' [ 440.111549][ T6727] Cannot create hsr debugfs directory [ 440.648146][ T5676] usb 1-1: USB disconnect, device number 12 [ 440.976620][ T5228] 8021q: adding VLAN 0 to HW filter on device eth12 [ 441.692315][ T29] audit: type=1326 audit(1778964170.139:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6847 comm="syz.0.156" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0768d9ce59 code=0x0 [ 441.991533][ T6659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.028452][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.101280][ T6659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.145204][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.263191][ T6659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.295296][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.411722][ T6659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.476986][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.115094][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.518682][ T6712] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.574929][ T6712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.633598][ T6712] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 443.677950][ T6712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.706096][ T6712] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 443.760439][ T6712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.864153][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.909088][ T6712] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 443.952099][ T6712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.184544][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.192113][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.556401][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.563965][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.616833][ T6727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.668326][ T6727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.726625][ T6727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.756758][ T6727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.803294][ T6727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.844954][ T6727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.883873][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.928421][ T6727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.017948][ T6727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.367068][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.622008][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.629652][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.707612][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.715305][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.780459][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.186820][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.354333][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.362028][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.498458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.506123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.335716][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.611361][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.738813][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.746398][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.912182][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.919785][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.034444][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.523532][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.534067][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.827563][ T5579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.840891][ T5579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.850767][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.869458][ T5579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.881300][ T5579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.222379][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.564325][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.749464][ T5582] Bluetooth: hci0: command 0x0406 tx timeout [ 454.911370][ T4873] Bluetooth: hci3: command tx timeout [ 456.766155][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.830408][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 456.990983][ T5582] Bluetooth: hci3: command tx timeout [ 457.706941][ T6712] veth0_vlan: entered promiscuous mode [ 457.818776][ T6659] veth0_vlan: entered promiscuous mode [ 458.520375][ T5675] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 459.040591][ T5675] usb 1-1: Using ep0 maxpacket: 16 [ 459.070964][ T5582] Bluetooth: hci3: command tx timeout [ 459.172620][ T5675] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 459.238510][ T5675] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 459.334035][ T6712] veth1_vlan: entered promiscuous mode [ 459.382953][ T5675] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 459.458378][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 459.629503][ T5675] usb 1-1: Product: syz [ 459.731474][ T5675] usb 1-1: Manufacturer: syz [ 459.783489][ T5675] usb 1-1: SerialNumber: syz [ 460.366321][ T5675] usb 1-1: USB disconnect, device number 13 [ 460.938257][ T6659] veth1_vlan: entered promiscuous mode [ 461.151151][ T5582] Bluetooth: hci3: command tx timeout [ 461.195652][ T13] bridge_slave_1: left allmulticast mode [ 461.225160][ T13] bridge_slave_1: left promiscuous mode [ 461.249977][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.279040][ T13] bridge_slave_0: left allmulticast mode [ 461.295435][ T13] bridge_slave_0: left promiscuous mode [ 461.306456][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.564514][ T7009] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 462.575531][ T4873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.595320][ T4873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.607488][ T4873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.622604][ T4873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.663865][ T4873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.483235][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.571858][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.617555][ T13] bond0 (unregistering): Released all slaves [ 464.124053][ T13] hsr_slave_0: left promiscuous mode [ 464.157546][ T13] hsr_slave_1: left promiscuous mode [ 464.191123][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.223676][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.749034][ T4873] Bluetooth: hci4: command tx timeout [ 465.493712][ T13] team0 (unregistering): Port device team_slave_1 removed [ 465.594674][ T13] team0 (unregistering): Port device team_slave_0 removed [ 466.724199][ T6712] veth0_macvtap: entered promiscuous mode [ 466.829167][ T4873] Bluetooth: hci4: command tx timeout [ 466.996582][ T6712] veth1_macvtap: entered promiscuous mode [ 467.876675][ T6727] veth0_vlan: entered promiscuous mode [ 468.003954][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.171579][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.297347][ T6727] veth1_vlan: entered promiscuous mode [ 468.371437][ T1168] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.431543][ T1168] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.553498][ T1168] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.820342][ T1168] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.909225][ T4873] Bluetooth: hci4: command tx timeout [ 470.793711][ T6727] veth0_macvtap: entered promiscuous mode [ 470.926263][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.995255][ T4873] Bluetooth: hci4: command tx timeout [ 471.027566][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.125097][ T6953] bridge_slave_0: entered allmulticast mode [ 471.228535][ T6953] bridge_slave_0: entered promiscuous mode [ 471.477737][ T6727] veth1_macvtap: entered promiscuous mode [ 471.586931][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.628417][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.667293][ T6953] bridge_slave_1: entered allmulticast mode [ 471.715996][ T6953] bridge_slave_1: entered promiscuous mode [ 472.657641][ T5579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.671776][ T5579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.675483][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.693905][ T5579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.713504][ T5579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.741776][ T5579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.036270][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.001133][ T13] bridge_slave_1: left allmulticast mode [ 474.036881][ T13] bridge_slave_1: left promiscuous mode [ 474.070270][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.114341][ T13] bridge_slave_0: left allmulticast mode [ 474.143690][ T13] bridge_slave_0: left promiscuous mode [ 474.159852][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.269124][ T5582] Bluetooth: hci0: command 0x0406 tx timeout [ 474.873668][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.883424][ T5579] Bluetooth: hci1: command tx timeout [ 474.955974][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.987891][ T13] bond0 (unregistering): Released all slaves [ 475.653571][ T4873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.669611][ T4873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.680597][ T4873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.705892][ T4873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.727513][ T4873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.797777][ T6953] team0: Port device team_slave_0 added [ 475.956155][ T13] hsr_slave_0: left promiscuous mode [ 475.994072][ T13] hsr_slave_1: left promiscuous mode [ 476.033716][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.056212][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.136258][ T13] veth1_vlan: left promiscuous mode [ 476.163352][ T13] veth0_vlan: left promiscuous mode [ 476.350848][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 476.908997][ T5582] Bluetooth: hci1: command tx timeout [ 477.181257][ T13] team0 (unregistering): Port device team_slave_1 removed [ 477.208104][ T13] team0 (unregistering): Port device team_slave_0 removed [ 477.443523][ T6953] team0: Port device team_slave_1 added [ 477.784850][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.811967][ T5582] Bluetooth: hci2: command tx timeout [ 477.834168][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.861416][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.014346][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.043099][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.059895][ T7015] bridge_slave_0: entered allmulticast mode [ 478.080719][ T7015] bridge_slave_0: entered promiscuous mode [ 478.122241][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.132926][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.161234][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.301894][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.357045][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.400485][ T7015] bridge_slave_1: entered allmulticast mode [ 478.572748][ T7015] bridge_slave_1: entered promiscuous mode [ 479.004294][ T5582] Bluetooth: hci1: command tx timeout [ 479.872071][ T5582] Bluetooth: hci2: command tx timeout [ 481.069880][ T5582] Bluetooth: hci1: command tx timeout [ 481.624809][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.933963][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.981114][ T5582] Bluetooth: hci2: command tx timeout [ 483.458233][ T6953] hsr_slave_0: entered promiscuous mode [ 483.603481][ T6953] hsr_slave_1: entered promiscuous mode [ 483.623106][ T6953] debugfs: 'hsr0' already exists in 'hsr' [ 483.641927][ T6953] Cannot create hsr debugfs directory [ 483.830652][ T7015] team0: Port device team_slave_0 added [ 483.877920][ T7015] team0: Port device team_slave_1 added [ 484.031375][ T5582] Bluetooth: hci2: command tx timeout [ 484.720618][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.728250][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.756858][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.974381][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.982094][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.036438][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.655858][ T7015] hsr_slave_0: entered promiscuous mode [ 485.666520][ T7015] hsr_slave_1: entered promiscuous mode [ 485.686026][ T7015] debugfs: 'hsr0' already exists in 'hsr' [ 485.692067][ T7015] Cannot create hsr debugfs directory [ 485.817051][ T5228] 8021q: adding VLAN 0 to HW filter on device eth13 [ 487.156530][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.653121][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.862954][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.401457][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.918167][ T13] bridge_slave_1: left allmulticast mode [ 489.964416][ T13] bridge_slave_1: left promiscuous mode [ 489.984848][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.015909][ T13] bridge_slave_0: left allmulticast mode [ 490.022486][ T13] bridge_slave_0: left promiscuous mode [ 490.034359][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.056584][ T13] bridge_slave_1: left allmulticast mode [ 490.062792][ T13] bridge_slave_1: left promiscuous mode [ 490.073457][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.093931][ T13] bridge_slave_0: left allmulticast mode [ 490.102097][ T13] bridge_slave_0: left promiscuous mode [ 490.120535][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.323029][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.373551][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.406971][ T13] bond0 (unregistering): Released all slaves [ 492.557995][ T5582] Bluetooth: hci0: command 0x0406 tx timeout [ 492.782034][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.821055][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.841209][ T13] bond0 (unregistering): Released all slaves [ 493.242088][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.272588][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.301541][ T7060] bridge_slave_0: entered allmulticast mode [ 493.337688][ T7060] bridge_slave_0: entered promiscuous mode [ 493.368102][ T6953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 493.417686][ T6953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.495172][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.527657][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.545970][ T7060] bridge_slave_1: entered allmulticast mode [ 493.592984][ T7060] bridge_slave_1: entered promiscuous mode [ 493.717942][ T6953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 493.742581][ T6953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.777197][ T13] hsr_slave_0: left promiscuous mode [ 493.794283][ T13] hsr_slave_1: left promiscuous mode [ 493.810312][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.825586][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.858016][ T13] hsr_slave_0: left promiscuous mode [ 493.868152][ T13] hsr_slave_1: left promiscuous mode [ 493.878928][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.886486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.903748][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.911587][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.947935][ T13] veth1_macvtap: left promiscuous mode [ 493.956564][ T13] veth0_macvtap: left promiscuous mode [ 493.962599][ T13] veth1_vlan: left promiscuous mode [ 493.968033][ T13] veth0_vlan: left promiscuous mode [ 493.975495][ T13] veth1_macvtap: left promiscuous mode [ 493.981472][ T13] veth0_macvtap: left promiscuous mode [ 493.987299][ T13] veth1_vlan: left promiscuous mode [ 493.996093][ T13] veth0_vlan: left promiscuous mode [ 494.589193][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 495.050303][ T13] team0 (unregistering): Port device team_slave_1 removed [ 495.167178][ T13] team0 (unregistering): Port device team_slave_0 removed [ 496.216285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 496.260955][ T13] team0 (unregistering): Port device team_slave_0 removed [ 496.702531][ T7060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.784985][ T6953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 496.808612][ T6953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.034057][ T7060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.223454][ T6953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 497.322538][ T6953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.658057][ T7060] team0: Port device team_slave_0 added [ 497.679986][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.697105][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.706269][ T7074] bridge_slave_0: entered allmulticast mode [ 497.717462][ T7074] bridge_slave_0: entered promiscuous mode [ 498.079513][ T7060] team0: Port device team_slave_1 added [ 498.124679][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.136113][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.153351][ T7074] bridge_slave_1: entered allmulticast mode [ 498.321283][ T7074] bridge_slave_1: entered promiscuous mode [ 501.012050][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.058435][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.091785][ T7060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.112880][ T7074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.146894][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.154759][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.184963][ T7060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.211216][ T7074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.352685][ T7074] team0: Port device team_slave_0 added [ 501.391781][ T7074] team0: Port device team_slave_1 added [ 501.509249][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.516350][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.544247][ T7074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.613547][ T7074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.621697][ T7074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.652090][ T7074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.682593][ T7060] hsr_slave_0: entered promiscuous mode [ 501.691878][ T7060] hsr_slave_1: entered promiscuous mode [ 501.701789][ T7060] debugfs: 'hsr0' already exists in 'hsr' [ 501.707655][ T7060] Cannot create hsr debugfs directory [ 501.764352][ T7015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.786177][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.947680][ T7015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 501.959140][ T5582] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 501.969515][ T5582] CPU: 0 UID: 0 PID: 5582 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 501.969654][ T5582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.969775][ T5582] Workqueue: hci0 hci_rx_work [ 501.970114][ T5582] Call Trace: [ 501.970161][ T5582] [ 501.970209][ T5582] __dump_stack+0x26/0x30 [ 501.970397][ T5582] dump_stack_lvl+0x14c/0x1c0 [ 501.970549][ T5582] dump_stack+0x1e/0x25 [ 501.970690][ T5582] sysfs_create_dir_ns+0x46c/0x540 [ 501.970861][ T5582] kobject_add_internal+0x1084/0x19b0 [ 501.971085][ T5582] kobject_add+0x2c1/0x410 [ 501.971292][ T5582] ? kmsan_get_metadata+0xf1/0x160 [ 501.971476][ T5582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 501.971665][ T5582] device_add+0xa70/0x1c90 [ 501.971888][ T5582] hci_conn_add_sysfs+0x159/0x2e0 [ 501.972090][ T5582] le_conn_complete_evt+0x1de1/0x2330 [ 501.972283][ T5582] hci_le_conn_complete_evt+0x157/0x260 [ 501.972516][ T5582] hci_le_meta_evt+0x6eb/0x960 [ 501.972701][ T5582] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 501.972911][ T5582] hci_event_packet+0xb8c/0x1820 [ 501.973073][ T5582] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 501.973284][ T5582] hci_rx_work+0x8c3/0xfc0 [ 501.973449][ T5582] ? kmsan_get_metadata+0xf1/0x160 [ 501.973625][ T5582] ? __pfx_hci_rx_work+0x10/0x10 [ 501.973794][ T5582] process_scheduled_works+0xb65/0x1e40 [ 501.974025][ T5582] worker_thread+0xee4/0x1590 [ 501.974217][ T5582] kthread+0x53a/0x5f0 [ 501.974387][ T5582] ? __pfx_worker_thread+0x10/0x10 [ 501.974551][ T5582] ? __pfx_kthread+0x10/0x10 [ 501.974720][ T5582] ret_from_fork+0x20f/0x8d0 [ 501.974871][ T5582] ? __switch_to+0x573/0x7a0 [ 501.975041][ T5582] ? __pfx_kthread+0x10/0x10 [ 501.975208][ T5582] ret_from_fork_asm+0x1a/0x30 [ 501.975396][ T5582] [ 501.975567][ T5582] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.173232][ T5582] Bluetooth: hci0: failed to register connection device [ 502.216356][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.228217][ T7015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.263157][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.921401][ T7015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.957585][ T7015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.226066][ T7074] hsr_slave_0: entered promiscuous mode [ 503.261761][ T7074] hsr_slave_1: entered promiscuous mode [ 503.280595][ T7074] debugfs: 'hsr0' already exists in 'hsr' [ 503.286581][ T7074] Cannot create hsr debugfs directory [ 504.189419][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 504.693254][ T5228] 8021q: adding VLAN 0 to HW filter on device eth14 [ 505.142407][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.587400][ T6953] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.747971][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.755556][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.920193][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.927733][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.047784][ T7060] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 506.095805][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.209076][ T7060] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 506.253282][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.339424][ T5582] Bluetooth: hci0: command 0x0406 tx timeout [ 506.422673][ T6953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.434395][ T6953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.123989][ T7060] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 507.215222][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.253486][ T7060] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 507.326271][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.883276][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.336746][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.528662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.536318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.752000][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.759673][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.842003][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.862679][ T7074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 508.903059][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.925838][ T7074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 508.979912][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.045388][ T7074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 509.116368][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.178194][ T7074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 509.278163][ T7074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.445254][ T4873] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 509.459404][ T4873] CPU: 1 UID: 0 PID: 4873 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 509.459542][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 509.459656][ T4873] Workqueue: hci0 hci_rx_work [ 509.459827][ T4873] Call Trace: [ 509.459873][ T4873] [ 509.459920][ T4873] __dump_stack+0x26/0x30 [ 509.460066][ T4873] dump_stack_lvl+0x14c/0x1c0 [ 509.460213][ T4873] dump_stack+0x1e/0x25 [ 509.460345][ T4873] sysfs_create_dir_ns+0x46c/0x540 [ 509.460503][ T4873] kobject_add_internal+0x1084/0x19b0 [ 509.460667][ T4873] kobject_add+0x2c1/0x410 [ 509.460873][ T4873] ? kmsan_get_metadata+0xf1/0x160 [ 509.461035][ T4873] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 509.461215][ T4873] device_add+0xa70/0x1c90 [ 509.461370][ T4873] hci_conn_add_sysfs+0x159/0x2e0 [ 509.461550][ T4873] le_conn_complete_evt+0x1de1/0x2330 [ 509.461720][ T4873] hci_le_conn_complete_evt+0x157/0x260 [ 509.461932][ T4873] hci_le_meta_evt+0x6eb/0x960 [ 509.462110][ T4873] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 509.462320][ T4873] hci_event_packet+0xb8c/0x1820 [ 509.462486][ T4873] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 509.462699][ T4873] hci_rx_work+0x8c3/0xfc0 [ 509.462866][ T4873] ? kmsan_get_metadata+0xf1/0x160 [ 509.463034][ T4873] ? __pfx_hci_rx_work+0x10/0x10 [ 509.463184][ T4873] process_scheduled_works+0xb65/0x1e40 [ 509.463387][ T4873] worker_thread+0xee4/0x1590 [ 509.463583][ T4873] kthread+0x53a/0x5f0 [ 509.463748][ T4873] ? __pfx_worker_thread+0x10/0x10 [ 509.463913][ T4873] ? __pfx_kthread+0x10/0x10 [ 509.464075][ T4873] ret_from_fork+0x20f/0x8d0 [ 509.464211][ T4873] ? __switch_to+0x573/0x7a0 [ 509.464383][ T4873] ? __pfx_kthread+0x10/0x10 [ 509.464558][ T4873] ret_from_fork_asm+0x1a/0x30 [ 509.464749][ T4873] [ 509.465084][ T4873] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 509.657081][ T4873] Bluetooth: hci0: failed to register connection device [ 510.519294][ T7060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.851546][ T7060] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.983478][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.991039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.111721][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.119281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.710586][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 511.957942][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.967476][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.323203][ T5579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 512.337746][ T5579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 512.348536][ T5579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 512.366685][ T5579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 512.379731][ T5579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 512.514309][ T7074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.853934][ T7074] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.025473][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.033035][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.791019][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 513.962182][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.969853][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.489037][ T4873] Bluetooth: hci5: command tx timeout [ 516.509215][ T4873] Bluetooth: hci5: command tx timeout [ 517.321018][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.590509][ T4873] Bluetooth: hci5: command tx timeout [ 519.028111][ T5912] bridge_slave_1: left allmulticast mode [ 519.070267][ T5912] bridge_slave_1: left promiscuous mode [ 519.098955][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.143031][ T5912] bridge_slave_0: left allmulticast mode [ 519.167003][ T5912] bridge_slave_0: left promiscuous mode [ 519.176283][ T7350] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 519.194274][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.295155][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 519.309358][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 519.617109][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.639762][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.660223][ T5912] bond0 (unregistering): Released all slaves [ 519.940863][ T7351] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 519.956004][ T7351] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 520.180981][ T7354] bond1: (slave gretap1): making interface the new active one [ 520.196842][ T7354] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 520.255479][ T7355] macvlan2: entered promiscuous mode [ 520.263524][ T7355] macvlan2: entered allmulticast mode [ 520.282200][ T7355] bond1: entered promiscuous mode [ 520.287523][ T7355] gretap1: entered promiscuous mode [ 520.296905][ T7355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 520.344135][ T7355] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 520.367878][ T7355] bond1: left promiscuous mode [ 520.373246][ T7355] gretap1: left promiscuous mode [ 520.546667][ T5912] hsr_slave_0: left promiscuous mode [ 520.561770][ T5912] hsr_slave_1: left promiscuous mode [ 520.569946][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.586221][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.670033][ T4873] Bluetooth: hci5: command tx timeout [ 521.318159][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 521.375236][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 522.134187][ T7074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.421777][ T7060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.850767][ T5579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.862492][ T5579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.877921][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.912211][ T5579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.936951][ T5579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.991108][ T5579] Bluetooth: hci3: command tx timeout [ 525.134329][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.161444][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.189430][ T7293] bridge_slave_0: entered allmulticast mode [ 525.212872][ T7293] bridge_slave_0: entered promiscuous mode [ 525.263798][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.274893][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.284225][ T7293] bridge_slave_1: entered allmulticast mode [ 525.317035][ T7293] bridge_slave_1: entered promiscuous mode [ 525.658156][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.737728][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.457951][ T7293] team0: Port device team_slave_0 added [ 526.619625][ T7293] team0: Port device team_slave_1 added [ 526.821840][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.070416][ T5579] Bluetooth: hci3: command tx timeout [ 527.513761][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.521006][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.548235][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.812551][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.824528][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.852591][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.318287][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 528.789439][ T5682] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 528.982690][ T5682] usb 1-1: Using ep0 maxpacket: 32 [ 529.097793][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.139890][ T7060] veth0_vlan: entered promiscuous mode [ 529.175321][ T5579] Bluetooth: hci3: command tx timeout [ 529.186453][ T5682] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 529.215001][ T5682] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 529.373401][ T5682] usb 1-1: config 6 has no interface number 0 [ 529.440110][ T5682] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.625557][ T5682] usb 1-1: config 6 interface 113 has no altsetting 0 [ 529.864120][ T5682] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 529.988192][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.115556][ T5682] usb 1-1: SerialNumber: syz [ 530.733894][ T5682] usb 1-1: can't set config #6, error -71 [ 530.798000][ T7293] hsr_slave_0: entered promiscuous mode [ 530.816824][ T5682] usb 1-1: USB disconnect, device number 14 [ 530.913748][ T7293] hsr_slave_1: entered promiscuous mode [ 530.964438][ T7293] debugfs: 'hsr0' already exists in 'hsr' [ 531.036175][ T7293] Cannot create hsr debugfs directory [ 531.230905][ T5579] Bluetooth: hci3: command tx timeout [ 531.321350][ T7074] veth0_vlan: entered promiscuous mode [ 533.155910][ T5912] bridge_slave_1: left allmulticast mode [ 533.190276][ T5912] bridge_slave_1: left promiscuous mode [ 533.230184][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.278895][ T5912] bridge_slave_0: left allmulticast mode [ 533.299148][ T5912] bridge_slave_0: left promiscuous mode [ 533.321523][ T4873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.330830][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.340452][ T4873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.350713][ T4873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.368507][ T4873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.381199][ T4873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.085153][ T7465] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 534.207082][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 534.261849][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 534.316146][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.381100][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.417629][ T5912] bond0 (unregistering): Released all slaves [ 534.922456][ T7467] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 534.938421][ T7467] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 535.010685][ T7472] macvlan2: entered promiscuous mode [ 535.016292][ T7472] macvlan2: entered allmulticast mode [ 535.024464][ T7472] bond2: entered promiscuous mode [ 535.043511][ T7472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.055777][ T7472] bond2: left promiscuous mode [ 535.098187][ T7074] veth1_vlan: entered promiscuous mode [ 535.166280][ T5228] 8021q: adding VLAN 0 to HW filter on device eth15 [ 535.308352][ T5912] hsr_slave_0: left promiscuous mode [ 535.337101][ T5912] hsr_slave_1: left promiscuous mode [ 535.362198][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.380448][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.471181][ T4873] Bluetooth: hci4: command tx timeout [ 535.768476][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 535.801648][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 536.745728][ T5579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 536.758504][ T5579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 536.783416][ T5579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 536.804064][ T5579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 536.826581][ T5579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.550154][ T4873] Bluetooth: hci4: command tx timeout [ 537.912475][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.967447][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.011942][ T7386] bridge_slave_0: entered allmulticast mode [ 538.092593][ T7386] bridge_slave_0: entered promiscuous mode [ 538.253709][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.306571][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.349809][ T7386] bridge_slave_1: entered allmulticast mode [ 538.370067][ T7386] bridge_slave_1: entered promiscuous mode [ 538.786466][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.902621][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.919247][ T5579] Bluetooth: hci1: command tx timeout [ 539.422213][ T7386] team0: Port device team_slave_0 added [ 539.480407][ T7386] team0: Port device team_slave_1 added [ 539.630117][ T5579] Bluetooth: hci4: command tx timeout [ 539.665382][ T5579] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 539.676332][ T5579] CPU: 1 UID: 0 PID: 5579 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 539.676463][ T5579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.676561][ T5579] Workqueue: hci0 hci_rx_work [ 539.676738][ T5579] Call Trace: [ 539.676793][ T5579] [ 539.676834][ T5579] __dump_stack+0x26/0x30 [ 539.676973][ T5579] dump_stack_lvl+0x14c/0x1c0 [ 539.677122][ T5579] dump_stack+0x1e/0x25 [ 539.677254][ T5579] sysfs_create_dir_ns+0x46c/0x540 [ 539.677402][ T5579] kobject_add_internal+0x1084/0x19b0 [ 539.677565][ T5579] kobject_add+0x2c1/0x410 [ 539.677771][ T5579] ? kmsan_get_metadata+0xf1/0x160 [ 539.677932][ T5579] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 539.678112][ T5579] device_add+0xa70/0x1c90 [ 539.678259][ T5579] hci_conn_add_sysfs+0x159/0x2e0 [ 539.678426][ T5579] le_conn_complete_evt+0x1de1/0x2330 [ 539.678589][ T5579] hci_le_conn_complete_evt+0x157/0x260 [ 539.678804][ T5579] hci_le_meta_evt+0x6eb/0x960 [ 539.678977][ T5579] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 539.679187][ T5579] hci_event_packet+0xb8c/0x1820 [ 539.679343][ T5579] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 539.679549][ T5579] hci_rx_work+0x8c3/0xfc0 [ 539.679717][ T5579] ? kmsan_get_metadata+0xf1/0x160 [ 539.679889][ T5579] ? __pfx_hci_rx_work+0x10/0x10 [ 539.680050][ T5579] process_scheduled_works+0xb65/0x1e40 [ 539.680264][ T5579] worker_thread+0xee4/0x1590 [ 539.680445][ T5579] kthread+0x53a/0x5f0 [ 539.680607][ T5579] ? __pfx_worker_thread+0x10/0x10 [ 539.680766][ T5579] ? __pfx_kthread+0x10/0x10 [ 539.680932][ T5579] ret_from_fork+0x20f/0x8d0 [ 539.681068][ T5579] ? __switch_to+0x573/0x7a0 [ 539.681239][ T5579] ? __pfx_kthread+0x10/0x10 [ 539.681402][ T5579] ret_from_fork_asm+0x1a/0x30 [ 539.681583][ T5579] [ 539.872683][ T5579] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 539.887270][ T5579] Bluetooth: hci0: failed to register connection device [ 540.148592][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.155818][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.199701][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.355161][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.392499][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.432968][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.813776][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 540.989190][ T4873] Bluetooth: hci1: command tx timeout [ 541.709225][ T4873] Bluetooth: hci4: command tx timeout [ 541.747074][ T5685] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 541.961491][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 542.213994][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 542.451546][ T5685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 542.619549][ T5685] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 542.751817][ T5685] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 542.873745][ T5685] usb 1-1: config 6 has no interface number 0 [ 542.891036][ T5685] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 542.938398][ T5685] usb 1-1: config 6 interface 113 has no altsetting 0 [ 543.070408][ T4873] Bluetooth: hci1: command tx timeout [ 543.113141][ T5685] usb 1-1: string descriptor 0 read error: -71 [ 543.161340][ T5685] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 543.197257][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.276308][ T5685] usb 1-1: can't set config #6, error -71 [ 543.318371][ T5685] usb 1-1: USB disconnect, device number 15 [ 543.829500][ T7386] hsr_slave_0: entered promiscuous mode [ 543.847044][ T7386] hsr_slave_1: entered promiscuous mode [ 543.861570][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 543.885309][ T7386] Cannot create hsr debugfs directory [ 544.030108][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 545.150563][ T4873] Bluetooth: hci1: command tx timeout [ 545.199640][ T7293] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 545.226238][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.414241][ T7293] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 545.471810][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.524418][ T7293] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 545.565063][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.576811][ T5912] bridge_slave_1: left allmulticast mode [ 545.584895][ T5912] bridge_slave_1: left promiscuous mode [ 545.591892][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.613206][ T5912] bridge_slave_0: left allmulticast mode [ 545.623891][ T5912] bridge_slave_0: left promiscuous mode [ 545.636609][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.065066][ T7547] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 546.213893][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 546.229659][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 546.283167][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.316238][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.334440][ T5912] bond0 (unregistering): Released all slaves [ 546.479079][ T7293] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 546.518510][ T7293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.752966][ T7549] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 546.776710][ T7549] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 546.927214][ T7554] macvlan2: entered promiscuous mode [ 546.934563][ T7554] macvlan2: entered allmulticast mode [ 546.947256][ T7554] bond3: entered promiscuous mode [ 546.963984][ T7554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 546.979014][ T7554] bond3: left promiscuous mode [ 547.173190][ T5912] hsr_slave_0: left promiscuous mode [ 547.182744][ T5912] hsr_slave_1: left promiscuous mode [ 547.193570][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.203899][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.247060][ T5912] veth0_vlan: left promiscuous mode [ 547.731267][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 547.803472][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 550.324435][ T4873] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 550.334573][ T4873] CPU: 0 UID: 0 PID: 4873 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 550.334710][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.334811][ T4873] Workqueue: hci0 hci_rx_work [ 550.334983][ T4873] Call Trace: [ 550.335031][ T4873] [ 550.335077][ T4873] __dump_stack+0x26/0x30 [ 550.335224][ T4873] dump_stack_lvl+0x14c/0x1c0 [ 550.335369][ T4873] dump_stack+0x1e/0x25 [ 550.335502][ T4873] sysfs_create_dir_ns+0x46c/0x540 [ 550.335662][ T4873] kobject_add_internal+0x1084/0x19b0 [ 550.335850][ T4873] kobject_add+0x2c1/0x410 [ 550.336062][ T4873] ? kmsan_get_metadata+0xf1/0x160 [ 550.336255][ T4873] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 550.336461][ T4873] device_add+0xa70/0x1c90 [ 550.336652][ T4873] hci_conn_add_sysfs+0x159/0x2e0 [ 550.336820][ T4873] le_conn_complete_evt+0x1de1/0x2330 [ 550.336992][ T4873] hci_le_conn_complete_evt+0x157/0x260 [ 550.337207][ T4873] hci_le_meta_evt+0x6eb/0x960 [ 550.337422][ T4873] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 550.337704][ T4873] hci_event_packet+0xb8c/0x1820 [ 550.337866][ T4873] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 550.338084][ T4873] hci_rx_work+0x8c3/0xfc0 [ 550.338255][ T4873] ? kmsan_get_metadata+0xf1/0x160 [ 550.338433][ T4873] ? __pfx_hci_rx_work+0x10/0x10 [ 550.338609][ T4873] process_scheduled_works+0xb65/0x1e40 [ 550.338825][ T4873] worker_thread+0xee4/0x1590 [ 550.339014][ T4873] kthread+0x53a/0x5f0 [ 550.339185][ T4873] ? __pfx_worker_thread+0x10/0x10 [ 550.339346][ T4873] ? __pfx_kthread+0x10/0x10 [ 550.339512][ T4873] ret_from_fork+0x20f/0x8d0 [ 550.339658][ T4873] ? __switch_to+0x573/0x7a0 [ 550.339826][ T4873] ? __pfx_kthread+0x10/0x10 [ 550.339996][ T4873] ret_from_fork_asm+0x1a/0x30 [ 550.340180][ T4873] [ 550.534813][ T4873] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 550.549133][ T4873] Bluetooth: hci0: failed to register connection device [ 550.706362][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.715759][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.745096][ T7457] bridge_slave_0: entered allmulticast mode [ 550.939817][ T7457] bridge_slave_0: entered promiscuous mode [ 551.092775][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.162888][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.283699][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.296846][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.530107][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 552.015105][ T5679] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 552.377103][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.388409][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.408381][ T7457] bridge_slave_1: entered allmulticast mode [ 552.439565][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 552.654302][ T5679] usb 1-1: unable to get BOS descriptor or descriptor too short [ 552.669296][ T5579] Bluetooth: hci0: command 0x0406 tx timeout [ 552.834471][ T5679] usb 1-1: config 6 has an invalid interface number: 113 but max is 0 [ 552.951867][ T5679] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 553.081240][ T5679] usb 1-1: config 6 has no interface number 0 [ 553.137703][ T5679] usb 1-1: config 6 interface 113 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 553.298482][ T5679] usb 1-1: config 6 interface 113 has no altsetting 0 [ 553.372400][ T7457] bridge_slave_1: entered promiscuous mode [ 553.376415][ T5679] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 553.400076][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.407504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.425303][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.481186][ T5679] usb 1-1: SerialNumber: syz [ 553.517892][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.525618][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.691636][ T5679] ftdi_sio 1-1:6.113: FTDI USB Serial Device converter detected [ 553.750291][ T5679] usb 1-1: Detected SIO [ 553.789292][ T5679] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 554.186749][ T5685] usb 1-1: USB disconnect, device number 16 [ 554.234890][ T5685] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 554.266470][ T5685] ftdi_sio 1-1:6.113: device disconnected [ 554.779734][ T4873] Bluetooth: hci0: command 0x0406 tx timeout [ 554.882667][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.908227][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.958313][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.979679][ T7487] bridge_slave_0: entered allmulticast mode [ 555.002598][ T7487] bridge_slave_0: entered promiscuous mode [ 555.061359][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.244883][ T7386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 555.285717][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.315471][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.323897][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.338043][ T7487] bridge_slave_1: entered allmulticast mode [ 555.356397][ T7487] bridge_slave_1: entered promiscuous mode [ 555.800396][ T7386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 555.890646][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.116086][ T7457] team0: Port device team_slave_0 added [ 556.124889][ T7386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 556.156236][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.234521][ T7457] team0: Port device team_slave_1 added [ 556.288228][ T7386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 556.307630][ T7386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.335321][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.473245][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.484319][ T5912] bridge_slave_1: left allmulticast mode [ 556.490549][ T5912] bridge_slave_1: left promiscuous mode [ 556.497520][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.516194][ T5912] bridge_slave_0: left allmulticast mode [ 556.522904][ T5912] bridge_slave_0: left promiscuous mode [ 556.529673][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.145081][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.167545][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.187217][ T5912] bond0 (unregistering): Released all slaves [ 557.257458][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.315645][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.351868][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.424405][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.431928][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.462201][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.680737][ T5912] hsr_slave_0: left promiscuous mode [ 557.705427][ T5912] hsr_slave_1: left promiscuous mode [ 557.723326][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.757190][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.803446][ T5912] veth1_vlan: left promiscuous mode [ 557.813677][ T5912] veth0_vlan: left promiscuous mode [ 558.692033][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 558.728949][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 559.137055][ T7487] team0: Port device team_slave_0 added [ 559.267773][ T7487] team0: Port device team_slave_1 added [ 559.495257][ T7457] hsr_slave_0: entered promiscuous mode [ 559.506756][ T7457] hsr_slave_1: entered promiscuous mode [ 559.515637][ T7457] debugfs: 'hsr0' already exists in 'hsr' [ 559.521502][ T7457] Cannot create hsr debugfs directory [ 559.640294][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.649299][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.684490][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.864822][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.897909][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.945491][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.217567][ T7487] hsr_slave_0: entered promiscuous mode [ 560.228301][ T7487] hsr_slave_1: entered promiscuous mode [ 560.237893][ T7487] debugfs: 'hsr0' already exists in 'hsr' [ 560.243834][ T7487] Cannot create hsr debugfs directory [ 560.475283][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.237617][ T7457] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 562.364392][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.418063][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.498552][ T7457] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.580873][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.632953][ T7457] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 562.683518][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.782200][ T7457] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 562.841775][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.387202][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.447791][ T7293] veth0_vlan: entered promiscuous mode [ 563.557851][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.565457][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.770039][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.777664][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.843606][ T7293] veth1_vlan: entered promiscuous mode [ 563.998060][ T7487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.071252][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.171904][ T7487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 564.234791][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.332883][ T7487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.407423][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.439670][ T7487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 564.537194][ T7487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.027428][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 565.232778][ T7293] veth0_macvtap: entered promiscuous mode [ 565.395049][ T7293] veth1_macvtap: entered promiscuous mode [ 565.878002][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.172732][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.445393][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.481057][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.643183][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.724882][ T79] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.051287][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.465680][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.549480][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.639026][ T40] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 567.728560][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.736133][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.848526][ T40] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 567.859829][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.869679][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.901618][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.909227][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.925722][ T40] usb 1-1: config 0 descriptor?? [ 568.148104][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.155723][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.480063][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.487638][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.956381][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.100611][ T40] usb 1-1: Cannot set autoneg [ 569.129711][ T40] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 570.970344][ T6854] usb 1-1: USB disconnect, device number 17 [ 575.072637][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.105160][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.387524][ T7386] veth0_vlan: entered promiscuous mode [ 578.548544][ T7386] veth1_vlan: entered promiscuous mode [ 579.081300][ T7386] veth0_macvtap: entered promiscuous mode [ 579.183097][ T7386] veth1_macvtap: entered promiscuous mode [ 579.491949][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.642068][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.735124][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.759628][ T5579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.774254][ T5579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.786686][ T5579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.807719][ T5579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.821307][ T5579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 579.936005][ T778] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.018571][ T1086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.124466][ T778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.159566][ T778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.390171][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.055151][ T5579] Bluetooth: hci2: command tx timeout [ 582.397510][ T5913] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.618753][ T5913] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.870246][ T5913] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.061398][ T7457] veth0_vlan: entered promiscuous mode [ 583.151100][ T5913] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.344711][ T7457] veth1_vlan: entered promiscuous mode [ 584.307895][ T5579] Bluetooth: hci2: command tx timeout [ 584.428667][ T5913] bridge_slave_1: left allmulticast mode [ 584.444553][ T5913] bridge_slave_1: left promiscuous mode [ 584.479284][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.525195][ T5913] bridge_slave_0: left allmulticast mode [ 584.542228][ T5913] bridge_slave_0: left promiscuous mode [ 584.561326][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.272823][ T4873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 585.285223][ T4873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 585.305245][ T4873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 585.322401][ T4873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 585.343545][ T4873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 585.689521][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.735570][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.767305][ T5913] bond0 (unregistering): Released all slaves [ 586.070656][ T7487] veth0_vlan: entered promiscuous mode [ 586.266981][ T5913] hsr_slave_0: left promiscuous mode [ 586.301097][ T5913] hsr_slave_1: left promiscuous mode [ 586.328597][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.348919][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.387996][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.401952][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.427071][ T5913] veth1_macvtap: left promiscuous mode [ 586.433319][ T5913] veth0_macvtap: left promiscuous mode [ 586.439141][ T5913] veth1_vlan: left promiscuous mode [ 586.449153][ T5913] veth0_vlan: left promiscuous mode [ 586.559617][ T4873] Bluetooth: hci2: command tx timeout [ 587.322201][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 587.358272][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 587.599336][ T4873] Bluetooth: hci5: command tx timeout [ 587.946755][ T7487] veth1_vlan: entered promiscuous mode [ 588.155574][ T7457] veth0_macvtap: entered promiscuous mode [ 588.288925][ T7457] veth1_macvtap: entered promiscuous mode [ 588.582400][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.675899][ T5913] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.819909][ T4873] Bluetooth: hci2: command tx timeout [ 588.872149][ T5913] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.094065][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.163186][ T5913] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.595482][ T7487] veth0_macvtap: entered promiscuous mode [ 589.796906][ T5913] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.885461][ T4873] Bluetooth: hci5: command tx timeout [ 590.180141][ T1091] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.190149][ T1091] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.205730][ T1091] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.224103][ T7487] veth1_macvtap: entered promiscuous mode [ 590.408591][ T79] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.688659][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.430101][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.147296][ T4873] Bluetooth: hci5: command tx timeout [ 594.303185][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.327648][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.335407][ T7753] bridge_slave_0: entered allmulticast mode [ 594.358311][ T4873] Bluetooth: hci5: command tx timeout [ 594.360943][ T7753] bridge_slave_0: entered promiscuous mode [ 594.421665][ T1086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.553713][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.585093][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.620859][ T7753] bridge_slave_1: entered allmulticast mode [ 594.648277][ T7753] bridge_slave_1: entered promiscuous mode [ 594.678127][ T1086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.120835][ T1086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.166106][ T1086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.281071][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.373409][ T5913] bridge_slave_1: left allmulticast mode [ 595.392253][ T5913] bridge_slave_1: left promiscuous mode [ 595.410822][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.457855][ T5913] bridge_slave_0: left allmulticast mode [ 595.474077][ T5913] bridge_slave_0: left promiscuous mode [ 595.482593][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.704735][ T5579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.716821][ T5579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.727192][ T5579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.742732][ T5579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.763060][ T5579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.516728][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.562339][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.625340][ T5913] bond0 (unregistering): Released all slaves [ 596.661511][ T5228] 8021q: adding VLAN 0 to HW filter on device eth13 [ 596.736309][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.255558][ T5913] hsr_slave_0: left promiscuous mode [ 597.269697][ T5913] hsr_slave_1: left promiscuous mode [ 597.294412][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.313669][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.338984][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.346524][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.409973][ T5913] veth1_macvtap: left promiscuous mode [ 597.425971][ T5913] veth0_macvtap: left promiscuous mode [ 597.443148][ T5913] veth1_vlan: left promiscuous mode [ 597.448812][ T5913] veth0_vlan: left promiscuous mode [ 597.997786][ T5579] Bluetooth: hci3: command tx timeout [ 598.336848][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 598.387960][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 598.807448][ T7753] team0: Port device team_slave_0 added [ 598.868906][ T7753] team0: Port device team_slave_1 added [ 599.520915][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.550909][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.662060][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.719111][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.755662][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.869627][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.255766][ T5913] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.265288][ T5579] Bluetooth: hci3: command tx timeout [ 600.672728][ T5913] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.757816][ T4873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.774474][ T4873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.787583][ T4873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.804105][ T4873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.818004][ T4873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.843077][ T7753] hsr_slave_0: entered promiscuous mode [ 600.924993][ T7753] hsr_slave_1: entered promiscuous mode [ 600.966928][ T7753] debugfs: 'hsr0' already exists in 'hsr' [ 600.985196][ T7753] Cannot create hsr debugfs directory [ 602.949190][ T4873] Bluetooth: hci3: command tx timeout [ 603.003148][ T5913] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.038351][ T4873] Bluetooth: hci4: command tx timeout [ 605.190400][ T4873] Bluetooth: hci3: command tx timeout [ 607.109080][ T4873] Bluetooth: hci4: command tx timeout [ 608.117605][ T5913] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.349718][ T4873] Bluetooth: hci4: command tx timeout [ 609.658127][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.666165][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.673872][ T7811] bridge_slave_0: entered allmulticast mode [ 609.688987][ T7811] bridge_slave_0: entered promiscuous mode [ 610.128895][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.155425][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.182573][ T7811] bridge_slave_1: entered allmulticast mode [ 610.199332][ T7811] bridge_slave_1: entered promiscuous mode [ 611.614787][ T4873] Bluetooth: hci4: command tx timeout [ 613.722548][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.741881][ T5913] bridge_slave_1: left allmulticast mode [ 613.751684][ T5913] bridge_slave_1: left promiscuous mode [ 613.759685][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.782674][ T5913] bridge_slave_0: left allmulticast mode [ 613.788562][ T5913] bridge_slave_0: left promiscuous mode [ 613.797852][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.476693][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.523387][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.552969][ T5913] bond0 (unregistering): Released all slaves [ 614.685531][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.081058][ T5913] hsr_slave_0: left promiscuous mode [ 615.110516][ T5913] hsr_slave_1: left promiscuous mode [ 615.129323][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.540537][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.566676][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.592125][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.697143][ T5913] veth1_macvtap: left promiscuous mode [ 615.717690][ T5913] veth0_macvtap: left promiscuous mode [ 615.747603][ T5913] veth1_vlan: left promiscuous mode [ 615.755679][ T5913] veth0_vlan: left promiscuous mode [ 617.219725][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 617.272798][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 618.238055][ T7811] team0: Port device team_slave_0 added [ 618.436356][ T7811] team0: Port device team_slave_1 added [ 618.756010][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.775284][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.892144][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.958836][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.996213][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.067792][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.482220][ T5913] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.819023][ T5913] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.963415][ T7811] hsr_slave_0: entered promiscuous mode [ 619.981492][ T7811] hsr_slave_1: entered promiscuous mode [ 619.996914][ T7811] debugfs: 'hsr0' already exists in 'hsr' [ 620.006415][ T7811] Cannot create hsr debugfs directory [ 620.198363][ T5913] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.652355][ T5913] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.038923][ T7753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 621.125808][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.144349][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.168796][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.198371][ T7872] bridge_slave_0: entered allmulticast mode [ 621.229167][ T7872] bridge_slave_0: entered promiscuous mode [ 621.341286][ T7753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 621.402510][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.422050][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.439367][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.451060][ T7872] bridge_slave_1: entered allmulticast mode [ 621.461300][ T7872] bridge_slave_1: entered promiscuous mode [ 621.683597][ T7753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 621.769812][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 621.946259][ T7753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 621.998701][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.129704][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.580853][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.066441][ T7872] team0: Port device team_slave_0 added [ 623.260254][ T7872] team0: Port device team_slave_1 added [ 623.428929][ T5913] bridge_slave_1: left allmulticast mode [ 623.447836][ T5913] bridge_slave_1: left promiscuous mode [ 623.464773][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.504551][ T5913] bridge_slave_0: left allmulticast mode [ 623.525096][ T5913] bridge_slave_0: left promiscuous mode [ 623.559101][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.278107][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.310802][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.332590][ T5913] bond0 (unregistering): Released all slaves [ 624.541117][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.558122][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.613769][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.801235][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.823382][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.855363][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.913929][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.933134][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.948848][ T7902] bridge_slave_0: entered allmulticast mode [ 624.972344][ T7902] bridge_slave_0: entered promiscuous mode [ 625.010834][ T5913] hsr_slave_0: left promiscuous mode [ 625.030044][ T5913] hsr_slave_1: left promiscuous mode [ 625.052511][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.075584][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.087340][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.109935][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.140353][ T5913] veth1_macvtap: left promiscuous mode [ 625.148256][ T5913] veth0_macvtap: left promiscuous mode [ 625.157016][ T5913] veth1_vlan: left promiscuous mode [ 625.164904][ T5913] veth0_vlan: left promiscuous mode [ 626.325463][ T5913] team0 (unregistering): Port device team_slave_1 removed [ 626.386546][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 626.793629][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.819289][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.841188][ T7902] bridge_slave_1: entered allmulticast mode [ 626.881720][ T7902] bridge_slave_1: entered promiscuous mode [ 627.323604][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.382108][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.430877][ T7872] hsr_slave_0: entered promiscuous mode [ 627.445717][ T7872] hsr_slave_1: entered promiscuous mode [ 627.460702][ T7872] debugfs: 'hsr0' already exists in 'hsr' [ 627.471612][ T7872] Cannot create hsr debugfs directory [ 627.794365][ T7902] team0: Port device team_slave_0 added [ 627.945639][ T7902] team0: Port device team_slave_1 added [ 628.894765][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.908813][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.948756][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.370391][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.382360][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.410740][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.838687][ T7811] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 637.894161][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.111286][ T7811] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 638.156276][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.173869][ T7811] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 638.202585][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.277650][ T7902] hsr_slave_0: entered promiscuous mode [ 638.296702][ T7902] hsr_slave_1: entered promiscuous mode [ 638.318278][ T7902] debugfs: 'hsr0' already exists in 'hsr' [ 638.324193][ T7902] Cannot create hsr debugfs directory [ 638.430316][ T7811] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 638.503911][ T7811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.448967][ T8061] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 640.767353][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.872376][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 642.104848][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.685075][ T5228] 8021q: adding VLAN 0 to HW filter on device eth14 [ 642.699492][ T7872] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 642.747894][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.814394][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.946150][ T7872] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 643.058783][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.109433][ T7872] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 643.146718][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.195355][ T7872] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 643.258631][ T7872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.402152][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.409599][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.496548][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.504049][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.830548][ T7811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.884969][ T7902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 644.928094][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.955913][ T7902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 645.001533][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.057207][ T7902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 645.146167][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.190359][ T5579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.199669][ T5579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.209163][ T5579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.225296][ T5579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.241363][ T5579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.296874][ T7902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 645.411297][ T7902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.521615][ T7811] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.720898][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.728515][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.948191][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.955768][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.481429][ T5579] Bluetooth: hci1: command tx timeout [ 647.515775][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.731213][ T5579] Bluetooth: hci1: command tx timeout [ 653.948804][ T5579] Bluetooth: hci1: command tx timeout [ 656.126792][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.143524][ T5579] Bluetooth: hci1: command tx timeout [ 656.364174][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.371557][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.607852][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.615433][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.720918][ T1091] bridge_slave_1: left allmulticast mode [ 657.739341][ T1091] bridge_slave_1: left promiscuous mode [ 657.761080][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.793571][ T4873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.805174][ T4873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.814662][ T4873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.834057][ T4873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.844139][ T4873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.888139][ T1091] bridge_slave_0: left allmulticast mode [ 657.907480][ T1091] bridge_slave_0: left promiscuous mode [ 657.929867][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.118490][ T4873] Bluetooth: hci2: command tx timeout [ 662.297705][ T4873] Bluetooth: hci2: command tx timeout [ 664.097282][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.176963][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.246568][ T1091] bond0 (unregistering): Released all slaves [ 664.559997][ T4873] Bluetooth: hci2: command tx timeout [ 664.992275][ T1091] hsr_slave_0: left promiscuous mode [ 665.045622][ T1091] hsr_slave_1: left promiscuous mode [ 665.080307][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.123464][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.396617][ T5579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.406803][ T5579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.415869][ T5579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.437103][ T5579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.454932][ T5579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.212401][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 666.363118][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 666.802047][ T5579] Bluetooth: hci2: command tx timeout [ 667.136303][ T4873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.149393][ T4873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.161243][ T4873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 667.190050][ T4873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 667.222480][ T4873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 667.668561][ T4873] Bluetooth: hci5: command tx timeout [ 669.489968][ T4873] Bluetooth: hci3: command tx timeout [ 669.924343][ T4873] Bluetooth: hci5: command tx timeout [ 670.474722][ T6855] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 670.733463][ T6855] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 670.761751][ T6855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.782873][ T6855] usb 1-1: Product: syz [ 670.795802][ T6855] usb 1-1: Manufacturer: syz [ 670.801958][ T6855] usb 1-1: SerialNumber: syz [ 670.816349][ T6855] usb 1-1: config 0 descriptor?? [ 671.090420][ T6855] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 671.380890][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.389231][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.404718][ T8084] bridge_slave_0: entered allmulticast mode [ 671.431295][ T8084] bridge_slave_0: entered promiscuous mode [ 671.676943][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.690698][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.709339][ T8084] bridge_slave_1: entered allmulticast mode [ 671.734551][ T8084] bridge_slave_1: entered promiscuous mode [ 671.746015][ T4873] Bluetooth: hci3: command tx timeout [ 672.175245][ T4873] Bluetooth: hci5: command tx timeout [ 672.278551][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.542408][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.760321][ T6855] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 672.815901][ T6855] usb 1-1: USB disconnect, device number 18 [ 673.045446][ T8084] team0: Port device team_slave_0 added [ 673.157509][ T8084] team0: Port device team_slave_1 added [ 673.670458][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.691281][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.767827][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.861551][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.888154][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.974800][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.006708][ T4873] Bluetooth: hci3: command tx timeout [ 674.275994][ T5679] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 674.428269][ T4873] Bluetooth: hci5: command tx timeout [ 674.460398][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 674.474070][ T5679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.503314][ T5679] usb 1-1: config 0 has no interfaces? [ 674.519318][ T5679] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 674.537798][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.555924][ T5679] usb 1-1: Product: syz [ 674.568243][ T5679] usb 1-1: Manufacturer: syz [ 674.574841][ T5679] usb 1-1: SerialNumber: syz [ 674.596170][ T5679] usb 1-1: config 0 descriptor?? [ 674.755878][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.775941][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.796947][ T8111] bridge_slave_0: entered allmulticast mode [ 674.809026][ T8111] bridge_slave_0: entered promiscuous mode [ 674.978049][ T8084] hsr_slave_0: entered promiscuous mode [ 674.988325][ T8084] hsr_slave_1: entered promiscuous mode [ 674.997123][ T8084] debugfs: 'hsr0' already exists in 'hsr' [ 675.006782][ T8084] Cannot create hsr debugfs directory [ 675.013926][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.031025][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.040033][ T8111] bridge_slave_1: entered allmulticast mode [ 675.050778][ T8111] bridge_slave_1: entered promiscuous mode [ 675.065349][ T1091] bridge_slave_1: left allmulticast mode [ 675.073578][ T1091] bridge_slave_1: left promiscuous mode [ 675.081534][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.104139][ T1091] bridge_slave_0: left allmulticast mode [ 675.120794][ T1091] bridge_slave_0: left promiscuous mode [ 675.137775][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.165550][ T1091] bridge_slave_1: left allmulticast mode [ 675.171664][ T1091] bridge_slave_1: left promiscuous mode [ 675.183536][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.199008][ T1091] bridge_slave_0: left allmulticast mode [ 675.205105][ T1091] bridge_slave_0: left promiscuous mode [ 675.216479][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.864516][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.886330][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.917050][ T1091] bond0 (unregistering): Released all slaves [ 676.213006][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.230639][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.245429][ T1091] bond0 (unregistering): Released all slaves [ 676.266057][ T4873] Bluetooth: hci3: command tx timeout [ 676.820711][ T1091] hsr_slave_0: left promiscuous mode [ 676.829996][ T1091] hsr_slave_1: left promiscuous mode [ 676.853397][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.871422][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.915373][ T1091] hsr_slave_0: left promiscuous mode [ 676.924750][ T1091] hsr_slave_1: left promiscuous mode [ 676.935348][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.945661][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.360815][ T7611] usb 1-1: USB disconnect, device number 19 [ 685.897529][ C0] ===================================================== [ 685.904775][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 685.913537][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 685.919947][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 685.927052][ C0] __sysvec_call_function_single+0x48/0x350 [ 685.933111][ C0] sysvec_call_function_single+0x7c/0x90 [ 685.938969][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 685.945087][ C0] pv_native_safe_halt+0x13/0x20 [ 685.950219][ C0] default_idle+0xd/0x20 [ 685.954616][ C0] arch_cpu_idle+0xd/0x20 [ 685.959095][ C0] default_idle_call+0x3f/0x70 [ 685.964004][ C0] do_idle+0x6ad/0xa10 [ 685.968220][ C0] cpu_startup_entry+0x5f/0x80 [ 685.973118][ C0] rest_init+0x1df/0x260 [ 685.977509][ C0] start_kernel+0x6d7/0x8b0 [ 685.982203][ C0] x86_64_start_reservations+0x28/0x30 [ 685.987842][ C0] x86_64_start_kernel+0x139/0x140 [ 685.993092][ C0] common_startup_64+0x13e/0x147 [ 685.998179][ C0] [ 686.000552][ C0] Local variable rf created at: [ 686.005450][ C0] __schedule+0x3a/0x8750 [ 686.009891][ C0] preempt_schedule_irq+0x50/0xa0 [ 686.015071][ C0] [ 686.017459][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 686.026516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.036655][ C0] ===================================================== [ 686.043651][ C0] Disabling lock debugging due to kernel taint [ 686.049870][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 686.056386][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 PREEMPT(full) [ 686.067036][ C0] Tainted: [B]=BAD_PAGE [ 686.071251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.081399][ C0] Call Trace: [ 686.084740][ C0] [ 686.087650][ C0] __dump_stack+0x26/0x30 [ 686.092120][ C0] dump_stack_lvl+0x50/0x1c0 [ 686.096841][ C0] ? dump_stack+0x12/0x25 [ 686.101300][ C0] dump_stack+0x1e/0x25 [ 686.105590][ C0] vpanic+0x7b4/0x1430 [ 686.109828][ C0] panic+0x15d/0x160 [ 686.113910][ C0] kmsan_report+0x31a/0x320 [ 686.118571][ C0] ? __msan_warning+0x1b/0x30 [ 686.123388][ C0] ? __flush_smp_call_function_queue+0x343/0x1810 [ 686.129965][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 686.137247][ C0] ? __sysvec_call_function_single+0x48/0x350 [ 686.143486][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 686.149436][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 686.155723][ C0] ? pv_native_safe_halt+0x13/0x20 [ 686.160981][ C0] ? default_idle+0xd/0x20 [ 686.165546][ C0] ? arch_cpu_idle+0xd/0x20 [ 686.170196][ C0] ? default_idle_call+0x3f/0x70 [ 686.175295][ C0] ? do_idle+0x6ad/0xa10 [ 686.179672][ C0] ? cpu_startup_entry+0x5f/0x80 [ 686.184746][ C0] ? rest_init+0x1df/0x260 [ 686.189314][ C0] ? start_kernel+0x6d7/0x8b0 [ 686.194108][ C0] ? x86_64_start_reservations+0x28/0x30 [ 686.199896][ C0] ? x86_64_start_kernel+0x139/0x140 [ 686.205325][ C0] ? common_startup_64+0x13e/0x147 [ 686.210601][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.215874][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.221852][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.227217][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 686.233724][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.239007][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.244285][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.249564][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 686.256052][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.261322][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 686.267303][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.272591][ C0] __msan_warning+0x1b/0x30 [ 686.277242][ C0] __flush_smp_call_function_queue+0x343/0x1810 [ 686.283663][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 686.288965][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 686.296077][ C0] __sysvec_call_function_single+0x48/0x350 [ 686.302128][ C0] sysvec_call_function_single+0x7c/0x90 [ 686.307913][ C0] [ 686.310905][ C0] [ 686.313908][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 686.320049][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 686.325928][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 15 0d 00 55 48 89 e5 fb f4 <5d> e9 87 f1 03 00 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 686.345665][ C0] RSP: 0018:ffffffff92603d78 EFLAGS: 00000256 [ 686.351869][ C0] RAX: ffff8881aa610000 RBX: ffffffff92628980 RCX: 0000000000b394da [ 686.359962][ C0] RDX: ffff88823ea92e48 RSI: 0000000000000001 RDI: 000000000005fc6c [ 686.368045][ C0] RBP: ffffffff92603d78 R08: ffffea000000000f R09: 0000000000000007 [ 686.376123][ C0] R10: ffff88823f195df7 R11: 0000000000000000 R12: 0000000000000000 [ 686.384194][ C0] R13: 0000000000000000 R14: ffffffff92629540 R15: 0000000000000000 [ 686.392305][ C0] default_idle+0xd/0x20 [ 686.396718][ C0] arch_cpu_idle+0xd/0x20 [ 686.401210][ C0] default_idle_call+0x3f/0x70 [ 686.406134][ C0] do_idle+0x6ad/0xa10 [ 686.410357][ C0] cpu_startup_entry+0x5f/0x80 [ 686.415272][ C0] rest_init+0x1df/0x260 [ 686.419686][ C0] start_kernel+0x6d7/0x8b0 [ 686.424334][ C0] x86_64_start_reservations+0x28/0x30 [ 686.429955][ C0] x86_64_start_kernel+0x139/0x140 [ 686.435219][ C0] common_startup_64+0x13e/0x147 [ 686.440347][ C0] [ 686.443716][ C0] Kernel Offset: disabled [ 686.448085][ C0] Rebooting in 86400 seconds..