last executing test programs: 7m25.116097407s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000240)={0x7}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000840)=""/235) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x198, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x136, 0xf, [@random={0x0, 0x88, "107c87485b1f2706d3da0a899d2640037b247cbe453832cf16fb4f75a3533ae00fa872471d5318635910edfc4679bf0e1c48358d146e9f2a0e27a15ce20053de033fa3e2e3b7cdb8b9ac13669c7a33fa9bb5cafb0dc9d089704da20884a31c4d5ffe4aab18d0f4f759dea22c852bac3df647cb1f6132a796ba39f59b369013c8ae85f04e6813ed0d"}, @peer_mgmt={0x75, 0x8, {0x0, 0x40, @val=0x4, @val=0x1, @void}}, @random={0x1, 0x42, "137290a56a2d730c571720f8c9edfea55f7402df11c7e8bb1959c2316d210f22360a415057178c7743735a778896ca7381df1d46332b3fb52bb3c1a1ddfddfe33a47"}, @fast_bss_trans={0x37, 0x58, {0xc0, 0x3, "d7b0f40d7f1b3b7bbffabb7eaac5b93a", "82a39ea0cb3668e3f68e5cf5f69bd762d881c8fbfe340581d796699693623e7d", "49ed31689ec88c41dbf176afd2eafb51273b68f31e64392afdf9a44af809d475", [{0x1}, {0x3}, {0x4}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x198}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r8, 0x0, 0x200000) 7m9.361633142s ago: executing program 32 (id=10): socket$alg(0x26, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000002c0)={0x53d, 0x40, 0x6, 0x3, 0x48c, 0x800, 0xd, 0x424, 0x2, 0x2, 0xf423f, 0xfffffffffffffff9, 0x8, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0xd91, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4c000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) getpeername$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7m8.79618191s ago: executing program 33 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100)=0x98) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000240)={0x7}) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000840)=""/235) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x198, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x136, 0xf, [@random={0x0, 0x88, "107c87485b1f2706d3da0a899d2640037b247cbe453832cf16fb4f75a3533ae00fa872471d5318635910edfc4679bf0e1c48358d146e9f2a0e27a15ce20053de033fa3e2e3b7cdb8b9ac13669c7a33fa9bb5cafb0dc9d089704da20884a31c4d5ffe4aab18d0f4f759dea22c852bac3df647cb1f6132a796ba39f59b369013c8ae85f04e6813ed0d"}, @peer_mgmt={0x75, 0x8, {0x0, 0x40, @val=0x4, @val=0x1, @void}}, @random={0x1, 0x42, "137290a56a2d730c571720f8c9edfea55f7402df11c7e8bb1959c2316d210f22360a415057178c7743735a778896ca7381df1d46332b3fb52bb3c1a1ddfddfe33a47"}, @fast_bss_trans={0x37, 0x58, {0xc0, 0x3, "d7b0f40d7f1b3b7bbffabb7eaac5b93a", "82a39ea0cb3668e3f68e5cf5f69bd762d881c8fbfe340581d796699693623e7d", "49ed31689ec88c41dbf176afd2eafb51273b68f31e64392afdf9a44af809d475", [{0x1}, {0x3}, {0x4}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x198}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r8, 0x0, 0x200000) 6m40.288411887s ago: executing program 0 (id=42): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) close(r0) 6m39.309560178s ago: executing program 0 (id=44): syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x40440) 6m38.675909229s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x0, 0x0) 6m27.091051613s ago: executing program 0 (id=56): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000005c0)={[0x8]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1e, 0x4, 0x1}) setgroups(0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000500)={0xa, @sdr={0x35303553, 0x1000}}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 6m22.038385704s ago: executing program 0 (id=63): syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x40440) 6m21.401373834s ago: executing program 0 (id=64): socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="9e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1b) io_uring_setup(0x15c4, &(0x7f00000000c0)={0x0, 0x25a9, 0x100, 0x4, 0x180}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m5.006243779s ago: executing program 34 (id=64): socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="9e8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1b) io_uring_setup(0x15c4, &(0x7f00000000c0)={0x0, 0x25a9, 0x100, 0x4, 0x180}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m4.060909413s ago: executing program 1 (id=73): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) 6m0.479386585s ago: executing program 1 (id=75): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x60000100, 0x0) 5m59.551159301s ago: executing program 1 (id=77): 5m58.660852796s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000e0a010100000000000000000a0000060900020073"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m57.883697082s ago: executing program 1 (id=80): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, 0x0}]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m57.122209638s ago: executing program 1 (id=82): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) syz_open_dev$usbmon(0x0, 0x8, 0x0) listen(0xffffffffffffffff, 0xfffffff8) 5m41.066011563s ago: executing program 35 (id=82): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) syz_open_dev$usbmon(0x0, 0x8, 0x0) listen(0xffffffffffffffff, 0xfffffff8) 4m42.883467639s ago: executing program 4 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m42.499686827s ago: executing program 4 (id=145): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000180012800b00010065"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 4m38.826677869s ago: executing program 4 (id=149): 4m38.355767337s ago: executing program 4 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m37.432115938s ago: executing program 4 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m36.981135809s ago: executing program 4 (id=154): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) semget(0x0, 0x2, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0xfffffffe, 0xfffffffd}, 0x14}}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) unshare(0x2040400) r5 = eventfd(0x3) sync_file_range(r5, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 4m19.174103686s ago: executing program 36 (id=154): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) semget(0x0, 0x2, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0xfffffffe, 0xfffffffd}, 0x14}}, 0x4000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) unshare(0x2040400) r5 = eventfd(0x3) sync_file_range(r5, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) 3m9.501927052s ago: executing program 7 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}, [{0x8, 0xb, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000800}, 0x4041080) 3m7.249954649s ago: executing program 7 (id=193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 3m2.093144358s ago: executing program 7 (id=200): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3800009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file0/file1'}}, {@nfs_export_on}]}) 3m0.515249758s ago: executing program 7 (id=206): syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2m48.19117304s ago: executing program 7 (id=232): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup=r1, 0x2f, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m46.820079981s ago: executing program 7 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) 2m30.754784317s ago: executing program 37 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) 15.501280765s ago: executing program 9 (id=640): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/93, 0x5d}, 0x0) 13.598536585s ago: executing program 9 (id=647): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_ivalue=0x3ff}) 12.619909318s ago: executing program 9 (id=652): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be7534fe9ac703e0d5393ac3ae20cfc32f48dbde4abc4321e50afdc5ab0acc41838c105ea74d3b809ffaf40c7d6204dc5c67b6ea256af7392250", 0xa0}, {&(0x7f0000000100)="061f49caf4482983b8416d18a6695be8091160b13c54f615a1dc3f43f68dcb5cd7c2784c2c7db612175ce0b423d7c878365939b271eb08881a284ae59d65633a2f33ed5ee16646594a8ba3bd0db5547923e04e8cb62fc1f829bc6f56374445fb4e7ec3c26e5327cbc51f916fec5026f0185e27eba7464ff437d029a512d65244c0a73221a4e6b7f45ad796a8eef8d2", 0x8f}, {&(0x7f00000001c0)="2af7a9be2789e60f5731568224dadc67fc49d196f1abbee4de5e2e22b0c7519659ec98dcd23cb1bccc8edbe876da89325c55848a1623", 0x36}, {&(0x7f0000000200)="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", 0xdff}], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) 9.353017283s ago: executing program 6 (id=660): setresuid(0x0, 0xee00, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 8.50851668s ago: executing program 6 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.181527822s ago: executing program 5 (id=665): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4898, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 7.51098409s ago: executing program 8 (id=666): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=wit', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) 7.373113874s ago: executing program 5 (id=667): setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) 7.032574069s ago: executing program 9 (id=669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nolazytime}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 6.370856732s ago: executing program 5 (id=670): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/93, 0x5d}, 0x0) 5.905017224s ago: executing program 8 (id=672): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x20000}, 0x1}, 0x6d) 4.903963317s ago: executing program 5 (id=673): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.464749473s ago: executing program 8 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040014) 4.320906216s ago: executing program 2 (id=675): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8880) 3.559624662s ago: executing program 6 (id=676): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 3.440029013s ago: executing program 8 (id=677): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close(0xffffffffffffffff) splice(r1, 0x0, r0, 0x0, 0x31652042, 0xa) 3.287842676s ago: executing program 2 (id=678): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x20, "5c83276f6ca662254709b89e1e0000010000000000335b021f55001d00000000"}}) 2.581070494s ago: executing program 6 (id=679): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.53525996s ago: executing program 8 (id=680): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1008, 0x4) 2.373671094s ago: executing program 2 (id=681): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be7534fe9ac703e0d5393ac3ae20cfc32f48dbde4abc4321e50afdc5ab0acc41838c105ea74d3b809ffaf40c7d6204dc5c67b6ea256af7392250", 0xa0}, {&(0x7f0000000100)="061f49caf4482983b8416d18a6695be8091160b13c54f615a1dc3f43f68dcb5cd7c2784c2c7db612175ce0b423d7c878365939b271eb08881a284ae59d65633a2f33ed5ee16646594a8ba3bd0db5547923e04e8cb62fc1f829bc6f56374445fb4e7ec3c26e5327cbc51f916fec5026f0185e27eba7464ff437d029a512d65244c0a73221a4e6b7f45ad796a8eef8d2", 0x8f}, {&(0x7f00000001c0)="2af7a9be2789e60f5731568224dadc67fc49d196f1abbee4de5e2e22b0c7519659ec98dcd23cb1bccc8edbe876da89325c55848a1623", 0x36}, {&(0x7f0000000200)="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", 0xdff}], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x2, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x8}}}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 1.763476276s ago: executing program 9 (id=682): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,n', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) 1.67336488s ago: executing program 5 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/93, 0x5d}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0xffe0, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20040050) 1.617238508s ago: executing program 2 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x20000}, 0x1}, 0x6d) 1.502249453s ago: executing program 6 (id=685): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b10009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000080)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="2030fb"], 0x0, 0x0}) 1.425091599s ago: executing program 8 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 951.318877ms ago: executing program 2 (id=687): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x7, 0xe, 0x7, 0x1000, 0xb614, 0x1}) 63.791636ms ago: executing program 6 (id=688): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x80049367, 0x0) 63.28006ms ago: executing program 5 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb08", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.741153ms ago: executing program 2 (id=690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x2, 0x0, &(0x7f0000000000)=0x8328be7a30208093) 0s ago: executing program 9 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x5, 0x3, 0x3, 0x2, 0x14}, @arp=@generic={0x8, 0x8035, 0x6, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1b}, "", @random="5e9e6fffcb96", "fe4e8e5d0c33c237"}}, 0x2a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) kernel console output (not intermixed with test programs): local softirq work is pending, handler #08!!! [ 233.751884][ T5999] overlayfs: overlapping lowerdir path [ 234.549665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.651765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.960069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 235.061445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 235.369970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.079634][ T3081] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 246.292212][ T3081] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.459357][ T3081] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.648005][ T3081] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.699630][ T3081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.708339][ T3081] usb 1-1: Product: syz [ 246.803399][ T3081] usb 1-1: Manufacturer: syz [ 246.808478][ T3081] usb 1-1: SerialNumber: syz [ 247.199490][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.262896][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.407607][ T3081] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 247.546610][ T3081] usb 1-1: USB disconnect, device number 3 [ 247.950352][ T6022] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 248.050227][ T3081] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 248.280810][ T3081] usb 1-1: Using ep0 maxpacket: 8 [ 248.363444][ T3081] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 248.432592][ T3081] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 248.479625][ T3081] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.549382][ T3081] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.639579][ T3081] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 248.753203][ T3081] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.799459][ T3081] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.899372][ T3081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.070135][ T3081] usb 1-1: can't set config #16, error -71 [ 249.159692][ T3081] usb 1-1: USB disconnect, device number 4 [ 249.391402][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.422895][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.434924][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.463500][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.541439][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.083316][ T6030] warning: `syz.0.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.163058][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.192473][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.218888][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.293577][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.310014][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.709729][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 251.004193][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 251.112999][ T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.187414][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.243796][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 251.284721][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.370282][ T10] usb 5-1: config 0 descriptor?? [ 251.694089][ T5780] Bluetooth: hci5: command tx timeout [ 252.021712][ T10] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 252.489625][ T5780] Bluetooth: hci6: command tx timeout [ 252.504594][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.554147][ T6038] loop0: detected capacity change from 0 to 4096 [ 252.584115][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.766437][ T6038] ntfs3(loop0): ino=0, mi_enum_attr [ 252.856169][ T3081] usb 5-1: USB disconnect, device number 2 [ 253.090243][ T6038] ntfs3(loop0): ino=0, mi_enum_attr [ 253.433146][ T6045] fido_id[6045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 253.775737][ T5780] Bluetooth: hci5: command tx timeout [ 254.572757][ T5780] Bluetooth: hci6: command tx timeout [ 255.544923][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 255.879818][ T6054] overlayfs: overlapping lowerdir path [ 256.589332][ T5780] Bluetooth: hci5: command tx timeout [ 256.651865][ T5780] Bluetooth: hci6: command tx timeout [ 259.591227][ T5780] Bluetooth: hci5: command tx timeout [ 259.597551][ T5780] Bluetooth: hci6: command tx timeout [ 267.570916][ T6064] Bluetooth: MGMT ver 1.23 [ 268.173769][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 269.231965][ T6074] binder: 6072:6074 ioctl 4018620d 0 returned -22 [ 269.300796][ T6074] binder: 6072:6074 ioctl c0306201 800004c0 returned -22 [ 270.070333][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.124656][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.165095][ T6025] bridge_slave_0: entered allmulticast mode [ 270.223624][ T6025] bridge_slave_0: entered promiscuous mode [ 270.339606][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.370401][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.378122][ T6025] bridge_slave_1: entered allmulticast mode [ 270.438046][ T6025] bridge_slave_1: entered promiscuous mode [ 270.755808][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.780191][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.149724][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 271.193546][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.277107][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.319888][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 271.361016][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.424872][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.449657][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 271.479430][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.495480][ T10] usb 2-1: config 0 descriptor?? [ 271.628080][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.837351][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.906016][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.937783][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.950395][ T6087] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 271.956502][ T6031] bridge_slave_0: entered allmulticast mode [ 272.003954][ T6031] bridge_slave_0: entered promiscuous mode [ 272.083443][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.133927][ T10] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 272.136759][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.198704][ T6031] bridge_slave_1: entered allmulticast mode [ 272.257693][ T6031] bridge_slave_1: entered promiscuous mode [ 272.479608][ T3081] usb 2-1: USB disconnect, device number 3 [ 272.599130][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.801140][ T6093] fido_id[6093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 272.834650][ T6025] team0: Port device team_slave_0 added [ 272.910318][ T6025] team0: Port device team_slave_1 added [ 272.944416][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.313890][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.508801][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.529688][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.609022][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.701161][ T6098] loop4: detected capacity change from 0 to 128 [ 273.708432][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.738560][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.745748][ T6098] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.780950][ T6098] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.829412][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.894494][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.429726][ T6031] team0: Port device team_slave_0 added [ 274.657355][ T6031] team0: Port device team_slave_1 added [ 274.909556][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 275.130783][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.149335][ T10] usb 5-1: config 0 has no interfaces? [ 275.155198][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.212156][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.236732][ T6025] hsr_slave_0: entered promiscuous mode [ 275.242521][ T10] usb 5-1: config 0 descriptor?? [ 275.267053][ T6025] hsr_slave_1: entered promiscuous mode [ 275.296610][ T6025] debugfs: 'hsr0' already exists in 'hsr' [ 275.335277][ T6025] Cannot create hsr debugfs directory [ 275.440744][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.484832][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.544533][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.545095][ T10] usb 5-1: USB disconnect, device number 3 [ 275.579203][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.607755][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.694596][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.717408][ T12] bridge_slave_1: left allmulticast mode [ 275.729937][ T12] bridge_slave_1: left promiscuous mode [ 275.736710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.765120][ T12] bridge_slave_0: left allmulticast mode [ 275.786347][ T12] bridge_slave_0: left promiscuous mode [ 275.802120][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.761252][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.820976][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.885664][ T12] bond0 (unregistering): Released all slaves [ 277.682714][ T6113] syzkaller1: entered promiscuous mode [ 277.699404][ T6113] syzkaller1: entered allmulticast mode [ 278.490277][ T6031] hsr_slave_0: entered promiscuous mode [ 278.521951][ T6031] hsr_slave_1: entered promiscuous mode [ 278.562282][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 278.568232][ T6031] Cannot create hsr debugfs directory [ 279.017590][ T12] hsr_slave_0: left promiscuous mode [ 279.048556][ T12] hsr_slave_1: left promiscuous mode [ 279.073146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.111256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.135545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.149511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.201199][ T12] veth1_macvtap: left promiscuous mode [ 279.207089][ T12] veth0_macvtap: left promiscuous mode [ 279.230079][ T12] veth1_vlan: left promiscuous mode [ 279.235707][ T12] veth0_vlan: left promiscuous mode [ 281.066189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 281.097867][ T12] team0 (unregistering): Port device team_slave_0 removed [ 281.332215][ T6126] loop1: detected capacity change from 0 to 2048 [ 281.428929][ T6126] NILFS (loop1): invalid segment: Magic number mismatch [ 281.437929][ T6126] NILFS (loop1): trying rollback from an earlier position [ 281.515658][ T6126] NILFS (loop1): recovery complete [ 281.551676][ T6128] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.660903][ T6131] netlink: 72 bytes leftover after parsing attributes in process `syz.1.48'. [ 284.305807][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.613106][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.695143][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.752575][ T6025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.867247][ T6025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.969782][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.004800][ T5841] usb 5-1: config 0 has no interfaces? [ 285.038176][ T5841] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.057307][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.079433][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.142285][ T5841] usb 5-1: config 0 descriptor?? [ 285.148957][ T6025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.287494][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.444286][ T10] usb 5-1: USB disconnect, device number 4 [ 285.534509][ T6025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.902888][ T6031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.036366][ T6031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.263006][ T6031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.395186][ T6031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 287.193673][ T12] bridge_slave_1: left allmulticast mode [ 287.208534][ T12] bridge_slave_1: left promiscuous mode [ 287.230174][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.270350][ T12] bridge_slave_0: left allmulticast mode [ 287.292066][ T12] bridge_slave_0: left promiscuous mode [ 287.315300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.497762][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.576922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.618662][ T12] bond0 (unregistering): Released all slaves [ 290.907655][ T6176] netlink: 72 bytes leftover after parsing attributes in process `syz.4.57'. [ 291.380583][ T12] hsr_slave_0: left promiscuous mode [ 291.414155][ T12] hsr_slave_1: left promiscuous mode [ 291.452958][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.479658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.542417][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.579578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.740805][ T12] veth1_macvtap: left promiscuous mode [ 291.746668][ T12] veth0_macvtap: left promiscuous mode [ 291.770999][ T12] veth1_vlan: left promiscuous mode [ 291.776625][ T12] veth0_vlan: left promiscuous mode [ 293.701799][ T12] team0 (unregistering): Port device team_slave_1 removed [ 293.846445][ T12] team0 (unregistering): Port device team_slave_0 removed [ 294.319396][ T3081] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.538257][ T3081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.588560][ T3081] usb 2-1: config 0 has no interfaces? [ 294.600751][ T3081] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.633587][ T3081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.674932][ T3081] usb 2-1: config 0 descriptor?? [ 294.957797][ T5838] usb 2-1: USB disconnect, device number 4 [ 295.453769][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.486606][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.804053][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.904967][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.325555][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.333381][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.310934][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.318684][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.335949][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.343956][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.317058][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.324957][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.308371][ T6025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.500985][ T6025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.494305][ T6222] netlink: 72 bytes leftover after parsing attributes in process `syz.1.67'. [ 313.164690][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.201551][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.220494][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.264083][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.276515][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.333075][ T3081] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 313.631582][ T3081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.755119][ T3081] usb 2-1: config 0 has no interfaces? [ 313.782632][ T3081] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.858842][ T3081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.869986][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 313.993939][ T3081] usb 2-1: config 0 descriptor?? [ 314.101023][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.132244][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.145809][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.154014][ T5838] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.179406][ T5838] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 314.188819][ T5838] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.223376][ T5838] usb 5-1: config 220 has no interface number 2 [ 314.230329][ T5838] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.244417][ T5838] usb 5-1: config 220 interface 0 has no altsetting 0 [ 314.251724][ T5838] usb 5-1: config 220 interface 76 has no altsetting 0 [ 314.259272][ T5838] usb 5-1: config 220 interface 1 has no altsetting 0 [ 314.302248][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.339919][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.549523][ T5838] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.643981][ T3081] usb 2-1: USB disconnect, device number 5 [ 314.664268][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.679696][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.747038][ T5838] usb 5-1: Product: syz [ 314.789392][ T5838] usb 5-1: Manufacturer: syz [ 314.811479][ T5838] usb 5-1: SerialNumber: syz [ 314.977563][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.171040][ T5838] usb 5-1: selecting invalid altsetting 0 [ 315.189957][ T5838] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 315.219446][ T5838] uvcvideo 5-1:220.0: No valid video chain found. [ 315.281354][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.294165][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.304193][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.306142][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.322332][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.329517][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.369601][ T5782] Bluetooth: hci2: command tx timeout [ 315.415283][ T5838] usb 5-1: selecting invalid altsetting 0 [ 315.431899][ T5838] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 315.466745][ T5838] usb 5-1: USB disconnect, device number 5 [ 315.976826][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.574025][ T5782] Bluetooth: hci0: command tx timeout [ 317.454573][ T5782] Bluetooth: hci3: command tx timeout [ 317.460809][ T5782] Bluetooth: hci2: command tx timeout [ 317.871132][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.78'. [ 318.649481][ T5782] Bluetooth: hci0: command tx timeout [ 319.331978][ T146] bridge_slave_1: left allmulticast mode [ 319.366995][ T146] bridge_slave_1: left promiscuous mode [ 319.383195][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.471448][ T146] bridge_slave_0: left allmulticast mode [ 319.488739][ T146] bridge_slave_0: left promiscuous mode [ 319.497998][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.529817][ T5782] Bluetooth: hci3: command tx timeout [ 319.552376][ T5782] Bluetooth: hci2: command tx timeout [ 320.509889][ T29] audit: type=1326 audit(1773818595.335:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.1.82" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704ef6c code=0x0 [ 321.150183][ T5782] Bluetooth: hci0: command tx timeout [ 321.618621][ T5782] Bluetooth: hci2: command tx timeout [ 321.624427][ T5782] Bluetooth: hci3: command tx timeout [ 321.879914][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.972078][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.015847][ T146] bond0 (unregistering): Released all slaves [ 323.229385][ T5780] Bluetooth: hci0: command tx timeout [ 323.689923][ T5780] Bluetooth: hci3: command tx timeout [ 324.129552][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 324.210407][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 325.814309][ T146] hsr_slave_0: left promiscuous mode [ 325.919604][ T146] hsr_slave_1: left promiscuous mode [ 325.928030][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.008036][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.080212][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.088012][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.324304][ T146] veth1_macvtap: left promiscuous mode [ 326.344592][ T146] veth0_macvtap: left promiscuous mode [ 326.373957][ T146] veth1_vlan: left promiscuous mode [ 326.411354][ T146] veth0_vlan: left promiscuous mode [ 329.209566][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 329.216023][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 330.102974][ T146] team0 (unregistering): Port device team_slave_1 removed [ 330.224845][ T146] team0 (unregistering): Port device team_slave_0 removed [ 331.349728][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 332.224337][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.240941][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.000580][ T6335] netlink: 60 bytes leftover after parsing attributes in process `syz.4.87'. [ 334.120401][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.128307][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.236442][ T6248] bridge_slave_0: entered allmulticast mode [ 334.272344][ T6248] bridge_slave_0: entered promiscuous mode [ 334.302642][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.88'. [ 334.566944][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.649731][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.657542][ T6248] bridge_slave_1: entered allmulticast mode [ 334.783612][ T6248] bridge_slave_1: entered promiscuous mode [ 336.079834][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.087928][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.153287][ T6253] bridge_slave_0: entered allmulticast mode [ 336.312465][ T6253] bridge_slave_0: entered promiscuous mode [ 336.372404][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.550224][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.557806][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.590262][ T6253] bridge_slave_1: entered allmulticast mode [ 336.612380][ T6253] bridge_slave_1: entered promiscuous mode [ 336.764069][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.781004][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.801195][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.816403][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.828316][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.896911][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.079613][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.094956][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.111920][ T6257] bridge_slave_0: entered allmulticast mode [ 337.141829][ T6257] bridge_slave_0: entered promiscuous mode [ 337.188730][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.212444][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.230841][ T6257] bridge_slave_1: entered allmulticast mode [ 337.259665][ T6257] bridge_slave_1: entered promiscuous mode [ 337.498907][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.642696][ T6248] team0: Port device team_slave_0 added [ 337.883383][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.120568][ T6248] team0: Port device team_slave_1 added [ 338.704501][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.764368][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.866797][ T6253] team0: Port device team_slave_0 added [ 338.888342][ T6253] team0: Port device team_slave_1 added [ 338.894469][ T5780] Bluetooth: hci5: command tx timeout [ 339.237980][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.261053][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.305407][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.481464][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.488720][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.534427][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.587048][ T6257] team0: Port device team_slave_0 added [ 339.596134][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.606873][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.637506][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.787369][ T6257] team0: Port device team_slave_1 added [ 339.814993][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.823707][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.852210][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.471316][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.478744][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.521165][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.675293][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.683130][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.711264][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.750260][ T6253] hsr_slave_0: entered promiscuous mode [ 340.767859][ T6253] hsr_slave_1: entered promiscuous mode [ 340.806759][ T6248] hsr_slave_0: entered promiscuous mode [ 340.817857][ T6248] hsr_slave_1: entered promiscuous mode [ 340.829613][ T6248] debugfs: 'hsr0' already exists in 'hsr' [ 340.835890][ T6248] Cannot create hsr debugfs directory [ 340.970209][ T5780] Bluetooth: hci5: command tx timeout [ 341.534737][ T6257] hsr_slave_0: entered promiscuous mode [ 341.548361][ T6257] hsr_slave_1: entered promiscuous mode [ 341.583080][ T6257] debugfs: 'hsr0' already exists in 'hsr' [ 341.590128][ T6257] Cannot create hsr debugfs directory [ 342.150088][ T146] bridge_slave_1: left allmulticast mode [ 342.156015][ T146] bridge_slave_1: left promiscuous mode [ 342.166661][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.193902][ T146] bridge_slave_0: left allmulticast mode [ 342.200394][ T146] bridge_slave_0: left promiscuous mode [ 342.207319][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.232461][ T146] bridge_slave_1: left allmulticast mode [ 342.238454][ T146] bridge_slave_1: left promiscuous mode [ 342.247392][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.278512][ T146] bridge_slave_0: left allmulticast mode [ 342.284987][ T146] bridge_slave_0: left promiscuous mode [ 342.295601][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.980869][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.005666][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.039859][ T146] bond0 (unregistering): Released all slaves [ 343.049404][ T5780] Bluetooth: hci5: command tx timeout [ 343.434853][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.464835][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.511515][ T146] bond0 (unregistering): Released all slaves [ 343.534243][ T6378] netlink: 60 bytes leftover after parsing attributes in process `syz.4.95'. [ 343.994921][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 344.042215][ T6352] chnl_net:caif_netlink_parms(): no params data found [ 344.078297][ T146] hsr_slave_0: left promiscuous mode [ 344.087002][ T146] hsr_slave_1: left promiscuous mode [ 344.096539][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.107929][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.142831][ T146] hsr_slave_0: left promiscuous mode [ 344.151353][ T146] hsr_slave_1: left promiscuous mode [ 344.160658][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.170715][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.825529][ T146] team0 (unregistering): Port device team_slave_1 removed [ 344.873158][ T146] team0 (unregistering): Port device team_slave_0 removed [ 345.129405][ T5780] Bluetooth: hci5: command tx timeout [ 345.415067][ T146] team0 (unregistering): Port device team_slave_1 removed [ 345.438472][ T146] team0 (unregistering): Port device team_slave_0 removed [ 347.411449][ T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.544916][ T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.630013][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.650460][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.658386][ T6352] bridge_slave_0: entered allmulticast mode [ 347.677939][ T6352] bridge_slave_0: entered promiscuous mode [ 347.793746][ T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.870527][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.881161][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.906679][ T6352] bridge_slave_1: entered allmulticast mode [ 347.917806][ T6352] bridge_slave_1: entered promiscuous mode [ 347.952893][ T6396] netlink: 48 bytes leftover after parsing attributes in process `syz.4.102'. [ 348.018756][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.256713][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 348.317148][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.363248][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.812741][ T6352] team0: Port device team_slave_0 added [ 348.984140][ T6352] team0: Port device team_slave_1 added [ 349.261307][ T146] bridge_slave_1: left allmulticast mode [ 349.267427][ T146] bridge_slave_1: left promiscuous mode [ 349.274451][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.293711][ T146] bridge_slave_0: left allmulticast mode [ 349.300128][ T146] bridge_slave_0: left promiscuous mode [ 349.306976][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.144170][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.171887][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.198630][ T146] bond0 (unregistering): Released all slaves [ 350.373997][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.383832][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.425353][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.497066][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.509780][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.541568][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.656809][ T6253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.880509][ T6253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.932584][ T6253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.195434][ T6253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.374868][ T146] hsr_slave_0: left promiscuous mode [ 351.389812][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.4.109'. [ 351.406249][ T146] hsr_slave_1: left promiscuous mode [ 351.454757][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.499560][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.514533][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.539415][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.591773][ T146] veth1_macvtap: left promiscuous mode [ 351.620185][ T146] veth0_macvtap: left promiscuous mode [ 351.626348][ T146] veth1_vlan: left promiscuous mode [ 351.649615][ T146] veth0_vlan: left promiscuous mode [ 351.714271][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.110'. [ 352.279656][ T146] team0 (unregistering): Port device team_slave_1 removed [ 352.304951][ T146] team0 (unregistering): Port device team_slave_0 removed [ 352.767630][ T6352] hsr_slave_0: entered promiscuous mode [ 352.791128][ T6352] hsr_slave_1: entered promiscuous mode [ 352.811022][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 352.817242][ T6352] Cannot create hsr debugfs directory [ 353.622610][ T6257] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.872961][ T6257] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 354.080072][ T6257] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 354.416560][ T6257] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 354.693606][ T6248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.908752][ T6248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.045798][ T6248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.089411][ T5779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 355.150012][ T6248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.299219][ T5779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.330194][ T5779] usb 5-1: config 0 has no interfaces? [ 355.336065][ T5779] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.366134][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.391225][ T5779] usb 5-1: config 0 descriptor?? [ 355.637042][ T5779] usb 5-1: USB disconnect, device number 6 [ 355.806178][ T6352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.898448][ T6352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 355.983292][ T6352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.121038][ T6352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 356.595918][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.624867][ T6451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.116'. [ 356.971846][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.088953][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.096746][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.127242][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 357.177234][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.296922][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.304902][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.857459][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.065202][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.073000][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.202622][ T6248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.387160][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.395453][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.922629][ T6248] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.012992][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.280811][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.288779][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.551666][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.678075][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.686031][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.523096][ T6248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.543410][ T6248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.799310][ T6482] vivid-000: ================= START STATUS ================= [ 360.809430][ T6482] vivid-000: Generate PTS: true [ 360.814695][ T6482] vivid-000: Generate SCR: true [ 360.820565][ T6482] tpg source WxH: 320x240 (Y'CbCr) [ 360.825946][ T6482] tpg field: 1 [ 360.829618][ T6482] tpg crop: (0,0)/320x240 [ 360.834308][ T6482] tpg compose: (0,0)/320x240 [ 360.839241][ T6482] tpg colorspace: 8 [ 360.843370][ T6482] tpg transfer function: 0/0 [ 360.848134][ T6482] tpg Y'CbCr encoding: 0/0 [ 360.853440][ T6482] tpg quantization: 0/0 [ 360.857843][ T6482] tpg RGB range: 0/2 [ 360.862069][ T6482] vivid-000: ================== END STATUS ================== [ 361.183397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.191254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.347737][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.355599][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.632062][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.586836][ T6496] netlink: 48 bytes leftover after parsing attributes in process `syz.4.123'. [ 364.526102][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 364.602305][ T6248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.798120][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.755728][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.715306][ T6253] veth0_vlan: entered promiscuous mode [ 366.990699][ T6253] veth1_vlan: entered promiscuous mode [ 367.548922][ T6253] veth0_macvtap: entered promiscuous mode [ 367.654597][ T6253] veth1_macvtap: entered promiscuous mode [ 368.137313][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.446415][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.076171][ T6248] veth0_vlan: entered promiscuous mode [ 369.161383][ T6257] veth0_vlan: entered promiscuous mode [ 369.398725][ T6248] veth1_vlan: entered promiscuous mode [ 369.521254][ T6257] veth1_vlan: entered promiscuous mode [ 369.836151][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.857568][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.867630][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.902418][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.965958][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.442413][ T6352] veth0_vlan: entered promiscuous mode [ 370.816676][ T6558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.130'. [ 370.908731][ T6257] veth0_macvtap: entered promiscuous mode [ 371.068922][ T6352] veth1_vlan: entered promiscuous mode [ 371.293936][ T6257] veth1_macvtap: entered promiscuous mode [ 371.628259][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.658330][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.676811][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.692032][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.715945][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 371.731856][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.089395][ T5782] Bluetooth: hci1: command tx timeout [ 372.657974][ T6352] veth0_macvtap: entered promiscuous mode [ 373.854100][ T5782] Bluetooth: hci6: command tx timeout [ 374.016972][ T6352] veth1_macvtap: entered promiscuous mode [ 374.124393][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.134552][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.148126][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.172573][ T5780] Bluetooth: hci1: command tx timeout [ 374.183914][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.203695][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.634819][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 375.935820][ T5780] Bluetooth: hci6: command tx timeout [ 376.193988][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.249762][ T5780] Bluetooth: hci0: command tx timeout [ 376.250885][ T5782] Bluetooth: hci1: command tx timeout [ 376.642052][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.697516][ T12] bridge_slave_1: left allmulticast mode [ 376.700363][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.137'. [ 376.704447][ T12] bridge_slave_1: left promiscuous mode [ 376.723155][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.766242][ T12] bridge_slave_0: left allmulticast mode [ 376.781715][ T12] bridge_slave_0: left promiscuous mode [ 376.788813][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.078809][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 377.409734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.428360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.451361][ T12] bond0 (unregistering): Released all slaves [ 377.990885][ T78] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.009877][ T5782] Bluetooth: hci6: command tx timeout [ 378.151806][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.171287][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.189848][ T6553] bridge_slave_0: entered allmulticast mode [ 378.206473][ T6553] bridge_slave_0: entered promiscuous mode [ 378.314463][ T12] hsr_slave_0: left promiscuous mode [ 378.332782][ T5782] Bluetooth: hci1: command tx timeout [ 378.333066][ T5780] Bluetooth: hci0: command tx timeout [ 378.362369][ T12] hsr_slave_1: left promiscuous mode [ 378.372468][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.382634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.398753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.410051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.447190][ T12] veth1_macvtap: left promiscuous mode [ 378.453983][ T12] veth0_macvtap: left promiscuous mode [ 378.470103][ T12] veth1_vlan: left promiscuous mode [ 378.475842][ T12] veth0_vlan: left promiscuous mode [ 379.094617][ T6614] overlayfs: failed to resolve './bus': -2 [ 379.782686][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.838501][ T12] team0 (unregistering): Port device team_slave_0 removed [ 380.089544][ T5780] Bluetooth: hci6: command tx timeout [ 380.313647][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.324073][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.371090][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.420243][ T5780] Bluetooth: hci0: command tx timeout [ 380.444002][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.465430][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.499653][ T6553] bridge_slave_1: entered allmulticast mode [ 380.541260][ T6553] bridge_slave_1: entered promiscuous mode [ 380.950332][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 381.155350][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.207770][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.087449][ T6553] team0: Port device team_slave_0 added [ 382.357113][ T6553] team0: Port device team_slave_1 added [ 382.390513][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 382.491126][ T5780] Bluetooth: hci0: command tx timeout [ 383.207334][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.246159][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.296501][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.442388][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.469896][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.564538][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.597549][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.620722][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.631677][ T6561] bridge_slave_0: entered allmulticast mode [ 384.654487][ T6561] bridge_slave_0: entered promiscuous mode [ 384.995485][ T6553] hsr_slave_0: entered promiscuous mode [ 385.011080][ T6553] hsr_slave_1: entered promiscuous mode [ 385.040436][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.051763][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.070137][ T6561] bridge_slave_1: entered allmulticast mode [ 385.095899][ T6561] bridge_slave_1: entered promiscuous mode [ 385.425655][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.437231][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.447947][ T6580] bridge_slave_0: entered allmulticast mode [ 385.466695][ T6580] bridge_slave_0: entered promiscuous mode [ 385.789807][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.825631][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.860372][ T6580] bridge_slave_1: entered allmulticast mode [ 385.887522][ T6580] bridge_slave_1: entered promiscuous mode [ 385.992212][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.352165][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.127175][ T6561] team0: Port device team_slave_0 added [ 387.176309][ T6561] team0: Port device team_slave_1 added [ 387.274380][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.799931][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.408238][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.421954][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.461472][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.742035][ T6580] team0: Port device team_slave_0 added [ 388.763919][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.775127][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.807001][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.955706][ T6580] team0: Port device team_slave_1 added [ 389.361169][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.386161][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.487731][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.507087][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.538737][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.555568][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.563438][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.596846][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.737095][ T6561] hsr_slave_0: entered promiscuous mode [ 389.746959][ T6561] hsr_slave_1: entered promiscuous mode [ 389.759763][ T6561] debugfs: 'hsr0' already exists in 'hsr' [ 389.766958][ T6561] Cannot create hsr debugfs directory [ 390.117076][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.136794][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.681541][ T1145] bridge_slave_1: left allmulticast mode [ 390.687895][ T1145] bridge_slave_1: left promiscuous mode [ 390.698603][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.755782][ T1145] bridge_slave_0: left allmulticast mode [ 390.763038][ T1145] bridge_slave_0: left promiscuous mode [ 390.771932][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.803233][ T1145] bridge_slave_1: left allmulticast mode [ 390.811594][ T1145] bridge_slave_1: left promiscuous mode [ 390.826548][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.868736][ T1145] bridge_slave_0: left allmulticast mode [ 390.880155][ T1145] bridge_slave_0: left promiscuous mode [ 390.891313][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.842357][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.920365][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.957307][ T1145] bond0 (unregistering): Released all slaves [ 392.968164][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.096915][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.115975][ T1145] bond0 (unregistering): Released all slaves [ 393.221401][ T6580] hsr_slave_0: entered promiscuous mode [ 393.252652][ T6580] hsr_slave_1: entered promiscuous mode [ 393.315353][ T6580] debugfs: 'hsr0' already exists in 'hsr' [ 393.325905][ T6580] Cannot create hsr debugfs directory [ 393.505160][ T6665] netlink: 48 bytes leftover after parsing attributes in process `syz.4.144'. [ 393.651767][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.658567][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.809402][ T1145] hsr_slave_0: left promiscuous mode [ 393.829679][ T1145] hsr_slave_1: left promiscuous mode [ 393.855103][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.882689][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.965416][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 393.975368][ T1145] hsr_slave_0: left promiscuous mode [ 393.987379][ T1145] hsr_slave_1: left promiscuous mode [ 393.998477][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.009976][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.058777][ T1145] veth1_macvtap: left promiscuous mode [ 394.065278][ T1145] veth0_macvtap: left promiscuous mode [ 394.078520][ T1145] veth1_vlan: left promiscuous mode [ 394.084565][ T1145] veth0_vlan: left promiscuous mode [ 394.100689][ T1145] veth1_vlan: left promiscuous mode [ 394.106467][ T1145] veth0_vlan: left promiscuous mode [ 394.109490][ T795] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 394.287189][ T795] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.328699][ T795] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.341216][ T795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.351164][ T795] usb 9-1: Product: syz [ 394.356093][ T795] usb 9-1: Manufacturer: syz [ 394.363156][ T795] usb 9-1: SerialNumber: syz [ 395.412910][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 395.443898][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 395.479935][ T795] cdc_ncm 9-1:1.0: SET_NTB_FORMAT failed [ 395.525789][ T795] cdc_ncm 9-1:1.0: bind() failure [ 395.588273][ T795] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 395.596692][ T795] cdc_ncm 9-1:1.1: bind() failure [ 395.644584][ T795] usb 9-1: USB disconnect, device number 2 [ 396.322427][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 396.387573][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 398.275893][ T6682] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 398.955003][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz.4.152'. [ 398.989494][ T6553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.200880][ T6553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.260183][ T6553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.447163][ T6694] loop8: detected capacity change from 0 to 512 [ 399.488022][ T6553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.604359][ T6694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.654496][ T6694] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.680083][ T6694] capability: warning: `syz.8.153' uses deprecated v2 capabilities in a way that may be insecure [ 399.934002][ T6352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.742123][ T6561] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.793327][ T6561] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.974361][ T6561] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.193256][ T6561] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.733006][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.156'. [ 401.749989][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.310618][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.448130][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.455951][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.547022][ T6580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.769386][ T6580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.935464][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.943692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.004547][ T6580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.087290][ T6580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.054979][ T6723] loop8: detected capacity change from 0 to 4096 [ 404.126815][ T6723] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 404.470896][ T6723] ntfs3(loop8): ino=19, mi_enum_attr [ 404.477033][ T6723] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 404.527348][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.718543][ T29] audit: type=1800 audit(1773818679.705:3): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.158" name="file1" dev="loop8" ino=33 res=0 errno=0 [ 404.956600][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.113644][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.121509][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.316237][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.324125][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.613486][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.704206][ T5780] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 407.973162][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.355821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.363809][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.104973][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.165697][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.173994][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.311648][ T6750] netlink: 48 bytes leftover after parsing attributes in process `syz.8.161'. [ 411.078467][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.151436][ T5780] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 417.634121][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.435568][ T6553] veth0_vlan: entered promiscuous mode [ 418.585441][ T6553] veth1_vlan: entered promiscuous mode [ 419.142194][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.166494][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.181891][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.204405][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.208366][ T6553] veth0_macvtap: entered promiscuous mode [ 419.236677][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.508701][ T6553] veth1_macvtap: entered promiscuous mode [ 420.127907][ T6561] veth0_vlan: entered promiscuous mode [ 420.305662][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.348486][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.712030][ T6561] veth1_vlan: entered promiscuous mode [ 420.950169][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.969685][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.187377][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.214537][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.369667][ T5780] Bluetooth: hci2: command tx timeout [ 422.192283][ T6580] veth0_vlan: entered promiscuous mode [ 422.292306][ T6561] veth0_macvtap: entered promiscuous mode [ 422.336486][ T6561] veth1_macvtap: entered promiscuous mode [ 422.927025][ T6580] veth1_vlan: entered promiscuous mode [ 423.214490][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.450901][ T5780] Bluetooth: hci2: command tx timeout [ 423.623205][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.885665][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.952065][ T1139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.974722][ T1139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.012786][ T6798] chnl_net:caif_netlink_parms(): no params data found [ 424.159796][ T1139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.189631][ T1139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.239777][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.690457][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.934953][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.056825][ T6580] veth0_macvtap: entered promiscuous mode [ 425.167515][ T6580] veth1_macvtap: entered promiscuous mode [ 425.549398][ T5780] Bluetooth: hci2: command tx timeout [ 425.777769][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.108611][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.505964][ T34] bridge_slave_1: left allmulticast mode [ 426.525059][ T34] bridge_slave_1: left promiscuous mode [ 426.583169][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.626482][ T34] bridge_slave_0: left allmulticast mode [ 426.651928][ T34] bridge_slave_0: left promiscuous mode [ 426.690317][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.479603][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.518725][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.541498][ T34] bond0 (unregistering): Released all slaves [ 427.575555][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.589596][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.619402][ T5780] Bluetooth: hci2: command tx timeout [ 427.723394][ T6798] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.762097][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.820083][ T6798] bridge_slave_0: entered allmulticast mode [ 427.841032][ T6798] bridge_slave_0: entered promiscuous mode [ 427.909326][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.919767][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.927334][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.975154][ T6798] bridge_slave_1: entered allmulticast mode [ 427.996562][ T6798] bridge_slave_1: entered promiscuous mode [ 428.346082][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.866980][ T6798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.446650][ T6798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.219700][ T34] hsr_slave_0: left promiscuous mode [ 431.269950][ T34] hsr_slave_1: left promiscuous mode [ 431.278228][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.339752][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.392397][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.429375][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.516314][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.540705][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.561183][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.576337][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.653221][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.670193][ T34] veth1_macvtap: left promiscuous mode [ 431.676184][ T34] veth0_macvtap: left promiscuous mode [ 431.719730][ T34] veth1_vlan: left promiscuous mode [ 431.761904][ T34] veth0_vlan: left promiscuous mode [ 432.326375][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.372350][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.387442][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.405829][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.431832][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 433.714117][ T34] team0 (unregistering): Port device team_slave_1 removed [ 433.770107][ T5782] Bluetooth: hci3: command tx timeout [ 433.821801][ T34] team0 (unregistering): Port device team_slave_0 removed [ 434.149761][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.172239][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.182821][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.204526][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.232148][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.376807][ T6798] team0: Port device team_slave_0 added [ 434.490322][ T5780] Bluetooth: hci4: command tx timeout [ 434.728927][ T6798] team0: Port device team_slave_1 added [ 435.201145][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.208589][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.246621][ T6798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.264954][ T6798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.274531][ T6798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.302257][ T6798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.544825][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.773401][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.856287][ T5780] Bluetooth: hci3: command tx timeout [ 435.864256][ T6798] hsr_slave_0: entered promiscuous mode [ 435.883938][ T6798] hsr_slave_1: entered promiscuous mode [ 435.894283][ T6798] debugfs: 'hsr0' already exists in 'hsr' [ 435.903566][ T6798] Cannot create hsr debugfs directory [ 436.034953][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.169987][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.336931][ T5780] Bluetooth: hci1: command tx timeout [ 436.569578][ T5780] Bluetooth: hci4: command tx timeout [ 437.260285][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 437.597620][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.876542][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.934263][ T5780] Bluetooth: hci3: command tx timeout [ 438.000029][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 438.088224][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.106368][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 438.418560][ T5780] Bluetooth: hci1: command tx timeout [ 438.486261][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.649511][ T5780] Bluetooth: hci4: command tx timeout [ 438.741574][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.755349][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.763972][ T6855] bridge_slave_0: entered allmulticast mode [ 438.775304][ T6855] bridge_slave_0: entered promiscuous mode [ 438.794828][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.806213][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.814999][ T6855] bridge_slave_1: entered allmulticast mode [ 438.832677][ T6855] bridge_slave_1: entered promiscuous mode [ 439.005192][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.176495][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.487025][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.499850][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.507787][ T6862] bridge_slave_0: entered allmulticast mode [ 439.518608][ T6862] bridge_slave_0: entered promiscuous mode [ 439.614259][ T6855] team0: Port device team_slave_0 added [ 439.674172][ T6798] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 439.698685][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.706912][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.715882][ T6862] bridge_slave_1: entered allmulticast mode [ 439.728317][ T6862] bridge_slave_1: entered promiscuous mode [ 439.792561][ T6855] team0: Port device team_slave_1 added [ 439.851003][ T6798] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 439.877191][ T34] bridge_slave_1: left allmulticast mode [ 439.884400][ T34] bridge_slave_1: left promiscuous mode [ 439.896772][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.910947][ T34] bridge_slave_0: left allmulticast mode [ 439.917110][ T34] bridge_slave_0: left promiscuous mode [ 439.923871][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.941563][ T34] bridge_slave_1: left allmulticast mode [ 439.947517][ T34] bridge_slave_1: left promiscuous mode [ 439.956865][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.970617][ T34] bridge_slave_0: left allmulticast mode [ 439.976586][ T34] bridge_slave_0: left promiscuous mode [ 439.990604][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.010176][ T5780] Bluetooth: hci3: command tx timeout [ 440.489593][ T5780] Bluetooth: hci1: command tx timeout [ 440.529907][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.556195][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.582547][ T34] bond0 (unregistering): Released all slaves [ 440.730157][ T5780] Bluetooth: hci4: command tx timeout [ 440.767429][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.790895][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.817219][ T34] bond0 (unregistering): Released all slaves [ 440.928398][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.937964][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.946920][ T6859] bridge_slave_0: entered allmulticast mode [ 440.958671][ T6859] bridge_slave_0: entered promiscuous mode [ 440.987124][ T6798] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 441.070887][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.108813][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.116827][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.133083][ T6859] bridge_slave_1: entered allmulticast mode [ 441.143764][ T6859] bridge_slave_1: entered promiscuous mode [ 441.163686][ T6798] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 441.218574][ T34] hsr_slave_0: left promiscuous mode [ 441.278507][ T34] hsr_slave_1: left promiscuous mode [ 441.288066][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.297333][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.311794][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.321893][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.343340][ T34] hsr_slave_0: left promiscuous mode [ 441.354565][ T34] hsr_slave_1: left promiscuous mode [ 441.362647][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.375722][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.388036][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.401136][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.433282][ T34] veth1_macvtap: left promiscuous mode [ 441.439443][ T34] veth0_macvtap: left promiscuous mode [ 441.445411][ T34] veth1_vlan: left promiscuous mode [ 441.452049][ T34] veth0_vlan: left promiscuous mode [ 441.459564][ T34] veth1_macvtap: left promiscuous mode [ 441.465328][ T34] veth0_macvtap: left promiscuous mode [ 441.473960][ T34] veth1_vlan: left promiscuous mode [ 441.484668][ T34] veth0_vlan: left promiscuous mode [ 442.470730][ T34] team0 (unregistering): Port device team_slave_1 removed [ 442.524827][ T34] team0 (unregistering): Port device team_slave_0 removed [ 442.580798][ T5780] Bluetooth: hci1: command tx timeout [ 443.161945][ T34] team0 (unregistering): Port device team_slave_1 removed [ 443.200754][ T34] team0 (unregistering): Port device team_slave_0 removed [ 443.505322][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.572410][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.585918][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.635616][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.761986][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.769579][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.798107][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.905527][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.942428][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.985814][ T6862] team0: Port device team_slave_0 added [ 444.078401][ T6862] team0: Port device team_slave_1 added [ 444.184079][ T6859] team0: Port device team_slave_0 added [ 444.251075][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.258407][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.285747][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.314943][ T6859] team0: Port device team_slave_1 added [ 444.394824][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.402482][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.429828][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.578462][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.609214][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.637157][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.672394][ T6855] hsr_slave_0: entered promiscuous mode [ 444.683265][ T6855] hsr_slave_1: entered promiscuous mode [ 444.713591][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.722133][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.751446][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.986596][ T6862] hsr_slave_0: entered promiscuous mode [ 444.996772][ T6862] hsr_slave_1: entered promiscuous mode [ 445.006992][ T6862] debugfs: 'hsr0' already exists in 'hsr' [ 445.013736][ T6862] Cannot create hsr debugfs directory [ 445.231981][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.413880][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.445266][ T6859] hsr_slave_0: entered promiscuous mode [ 445.456199][ T6859] hsr_slave_1: entered promiscuous mode [ 445.476587][ T6859] debugfs: 'hsr0' already exists in 'hsr' [ 445.482689][ T6859] Cannot create hsr debugfs directory [ 445.557376][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.826920][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.749879][ T34] bridge_slave_1: left allmulticast mode [ 446.755795][ T34] bridge_slave_1: left promiscuous mode [ 446.763737][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.780852][ T34] bridge_slave_0: left allmulticast mode [ 446.786912][ T34] bridge_slave_0: left promiscuous mode [ 446.794244][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.152426][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.174758][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.206611][ T34] bond0 (unregistering): Released all slaves [ 447.407714][ T34] hsr_slave_0: left promiscuous mode [ 447.416189][ T34] hsr_slave_1: left promiscuous mode [ 447.425506][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.433559][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.444746][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.453688][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.476302][ T34] veth1_macvtap: left promiscuous mode [ 447.482354][ T34] veth0_macvtap: left promiscuous mode [ 447.488223][ T34] veth1_vlan: left promiscuous mode [ 447.494498][ T34] veth0_vlan: left promiscuous mode [ 448.146652][ T34] team0 (unregistering): Port device team_slave_1 removed [ 448.173257][ T34] team0 (unregistering): Port device team_slave_0 removed [ 448.486913][ T6798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.702004][ T6798] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.785736][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.793524][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.886066][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.893788][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.995606][ T6855] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.054929][ T6855] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.122886][ T6855] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.223380][ T6855] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.795838][ T6862] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 449.918814][ T6862] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 450.041838][ T6862] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 450.198168][ T6862] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.076096][ T6859] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.136818][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.165086][ T6798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.187063][ T6859] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.245807][ T6859] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.326418][ T6859] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.525999][ T6855] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.649114][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.656971][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.732450][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.740209][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.183759][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.475759][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.533641][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.541593][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.715067][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.722767][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.194551][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.356374][ T6798] veth0_vlan: entered promiscuous mode [ 453.485838][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.597216][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.605132][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.720071][ T6798] veth1_vlan: entered promiscuous mode [ 453.836324][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.844233][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.040991][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.556734][ T6798] veth0_macvtap: entered promiscuous mode [ 454.694962][ T6798] veth1_macvtap: entered promiscuous mode [ 454.974350][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.015612][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.076342][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.083250][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.153271][ T6798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.382454][ T6003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.414912][ T6003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.527678][ T6003] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.593579][ T6003] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.916452][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.992023][ T6855] veth0_vlan: entered promiscuous mode [ 457.078913][ T6855] veth1_vlan: entered promiscuous mode [ 457.824632][ T6855] veth0_macvtap: entered promiscuous mode [ 457.897239][ T6855] veth1_macvtap: entered promiscuous mode [ 458.406531][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.531813][ T6862] veth0_vlan: entered promiscuous mode [ 458.588564][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.792011][ T1139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.833187][ T1139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.874330][ T1139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.944294][ T1139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.021397][ T6862] veth1_vlan: entered promiscuous mode [ 459.723363][ T6862] veth0_macvtap: entered promiscuous mode [ 459.792517][ T6862] veth1_macvtap: entered promiscuous mode [ 460.081968][ T6859] veth0_vlan: entered promiscuous mode [ 460.191869][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.328222][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.391882][ T6859] veth1_vlan: entered promiscuous mode [ 460.535714][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.640811][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.684602][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.853487][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.231987][ T6859] veth0_macvtap: entered promiscuous mode [ 461.315606][ T6859] veth1_macvtap: entered promiscuous mode [ 461.776269][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.862064][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.022340][ T146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.042801][ T146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.196004][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.234756][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.251842][ T5782] Bluetooth: hci5: command 0x0406 tx timeout [ 462.527505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.591914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.963675][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.047953][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.323313][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.9.164'. [ 465.639831][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.8.179'. [ 470.839313][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.847408][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.409765][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.461096][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.803663][ T7046] binder: 7044:7046 ioctl c0306201 0 returned -14 [ 478.165592][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.219647][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.899233][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.907577][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.940043][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.948199][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.589394][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.597797][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.679423][ T40] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 480.929478][ T40] usb 8-1: Using ep0 maxpacket: 16 [ 480.985920][ T40] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.111513][ T40] usb 8-1: config 0 interface 0 has no altsetting 0 [ 481.118641][ T40] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 481.249635][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.468635][ T40] usb 8-1: config 0 descriptor?? [ 482.154635][ T40] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 482.204199][ T7076] loop8: detected capacity change from 0 to 4096 [ 482.231051][ T7076] ======================================================= [ 482.231051][ T7076] WARNING: The mand mount option has been deprecated and [ 482.231051][ T7076] and is ignored by this kernel. Remove the mand [ 482.231051][ T7076] option from the mount to silence this warning. [ 482.231051][ T7076] ======================================================= [ 482.302018][ T7076] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 482.577702][ T40] usb 8-1: USB disconnect, device number 2 [ 482.973498][ T7076] ntfs3(loop8): ino=19, mi_enum_attr [ 482.999441][ T7076] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 483.408244][ T7086] fido_id[7086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 483.629256][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 483.886247][ T10] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 483.966550][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.047916][ T10] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 484.082628][ T7099] loop7: detected capacity change from 0 to 256 [ 484.139269][ T10] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 484.147856][ T10] usb 10-1: Manufacturer: syz [ 484.256150][ T10] usb 10-1: config 0 descriptor?? [ 484.895118][ T7099] FAT-fs (loop7): Directory bread(block 64) failed [ 484.919414][ T7099] FAT-fs (loop7): Directory bread(block 65) failed [ 484.951274][ T7099] FAT-fs (loop7): Directory bread(block 66) failed [ 485.020751][ T7099] FAT-fs (loop7): Directory bread(block 67) failed [ 485.045165][ T10] rc_core: IR keymap rc-hauppauge not found [ 485.058625][ T7099] FAT-fs (loop7): Directory bread(block 68) failed [ 485.077144][ T10] Registered IR keymap rc-empty [ 485.097494][ T7099] FAT-fs (loop7): Directory bread(block 69) failed [ 485.108088][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 485.128859][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input5 [ 485.201981][ T7099] FAT-fs (loop7): Directory bread(block 70) failed [ 485.208770][ T7099] FAT-fs (loop7): Directory bread(block 71) failed [ 485.292430][ T7110] rc rc0: two consecutive events of type space [ 485.297384][ T7099] FAT-fs (loop7): Directory bread(block 72) failed [ 485.307962][ T7099] FAT-fs (loop7): Directory bread(block 73) failed [ 485.529734][ T5779] usb 10-1: USB disconnect, device number 2 [ 486.865621][ T7117] tipc: Started in network mode [ 486.909359][ T7117] tipc: Node identity 4, cluster identity 4711 [ 486.915934][ T7117] tipc: Node number set to 4 [ 490.114257][ T40] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 490.139950][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 490.350075][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 490.372049][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.403215][ T24] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.450213][ T40] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.479512][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 490.486531][ T24] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 490.506603][ T40] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.579607][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.633967][ T40] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.669294][ T24] usb 9-1: config 0 descriptor?? [ 490.675499][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.775662][ T40] usb 8-1: config 0 descriptor?? [ 491.422104][ T24] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 491.678172][ T40] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 492.720527][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 492.859435][ T40] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 493.352832][ T5096] usb 9-1: USB disconnect, device number 3 [ 493.513387][ T7170] trusted_key: encrypted_key: key user:syz not found [ 493.799500][ T24] usb 8-1: USB disconnect, device number 3 [ 493.991301][ T7165] fido_id[7165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 494.390514][ T7173] syzkaller0: entered promiscuous mode [ 494.946669][ T7180] overlay: filesystem on ./file0/file1 not supported as upperdir [ 496.017864][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 497.384538][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 497.627521][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 497.691792][ T24] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.748879][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 497.756437][ T24] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 497.843126][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.927350][ T7216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 497.959928][ T24] usb 7-1: config 0 descriptor?? [ 498.642713][ T24] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 498.930619][ T24] usb 7-1: USB disconnect, device number 2 [ 499.884049][ T7223] fido_id[7223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 500.934795][ T7237] syzkaller0: entered promiscuous mode [ 501.318276][ T7238] tipc: Started in network mode [ 501.359789][ T7238] tipc: Node identity 5a41709fae5c, cluster identity 4711 [ 501.441665][ T7238] tipc: Enabled bearer , priority 0 [ 501.539977][ T7244] syzkaller0: entered promiscuous mode [ 501.564731][ T7244] syzkaller0: entered allmulticast mode [ 501.831493][ T7236] tipc: Resetting bearer [ 501.943087][ T7235] tipc: Resetting bearer [ 502.022922][ T7235] tipc: Disabling bearer [ 506.749406][ T5779] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 506.989275][ T5779] usb 6-1: Using ep0 maxpacket: 16 [ 507.029146][ T5779] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.091363][ T5779] usb 6-1: config 0 interface 0 has no altsetting 0 [ 507.098417][ T5779] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 507.249511][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.372970][ T5779] usb 6-1: config 0 descriptor?? [ 508.008630][ T5779] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 508.286096][ T5779] usb 6-1: USB disconnect, device number 2 [ 509.345711][ T7296] fido_id[7296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 511.146551][ T7314] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 511.449321][ T7314] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 511.460575][ T7314] overlayfs: failed to look up (tracing) for ino (-66) [ 514.929489][ T5096] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 515.389572][ T5096] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 515.713475][ T5096] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 515.803559][ T5096] usb 9-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 515.980742][ T5096] usb 9-1: config 220 has no interface number 1 [ 516.123392][ T5096] usb 9-1: config 220 interface 76 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 516.361155][ T5096] usb 9-1: config 220 interface 0 has no altsetting 0 [ 516.368657][ T5096] usb 9-1: config 220 interface 76 has no altsetting 0 [ 516.517124][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.524407][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.700960][ T5096] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.846226][ T5096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.929684][ T5096] usb 9-1: Product: syz [ 516.934198][ T5096] usb 9-1: Manufacturer: syz [ 516.984167][ T5096] usb 9-1: SerialNumber: syz [ 517.221599][ T7338] fuse: Unknown parameter '0x0000000000000004' [ 517.703199][ T5096] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 517.748454][ T5096] uvcvideo 9-1:220.0: No valid video chain found. [ 518.284739][ T5096] usb 9-1: USB disconnect, device number 4 [ 520.909285][ T5096] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 521.205182][ T5096] usb 7-1: Using ep0 maxpacket: 16 [ 521.319368][ T5096] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.411147][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 521.498697][ T5096] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 521.595961][ T5096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.820393][ T5096] usb 7-1: config 0 descriptor?? [ 522.943329][ T5096] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 523.664521][ T5096] usb 7-1: USB disconnect, device number 3 [ 526.288115][ T7365] fido_id[7365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 527.660978][ T7378] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 527.906844][ T7380] loop2: detected capacity change from 0 to 7 [ 528.036598][ T7380] Dev loop2: unable to read RDB block 7 [ 528.110044][ T7380] loop2: unable to read partition table [ 528.180804][ T7380] loop2: partition table beyond EOD, truncated [ 528.285228][ T7380] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.366939][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.387904][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.405491][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.421759][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.442186][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.777660][ T7387] fuse: Unknown parameter '0x0000000000000004' [ 529.824334][ T1145] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.415852][ T1145] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.594635][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.257'. [ 530.720591][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.257'. [ 531.008887][ T1145] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.329730][ T7397] loop8: detected capacity change from 0 to 128 [ 531.397097][ T7397] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 531.546593][ T7397] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 531.625185][ T1145] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.698913][ T5782] Bluetooth: hci0: command tx timeout [ 533.590402][ T1145] bridge_slave_1: left allmulticast mode [ 533.596783][ T1145] bridge_slave_1: left promiscuous mode [ 533.605871][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.737081][ T1145] bridge_slave_0: left allmulticast mode [ 533.749358][ T1145] bridge_slave_0: left promiscuous mode [ 533.756250][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.785952][ T5782] Bluetooth: hci0: command tx timeout [ 534.403977][ T7432] fuse: Unknown parameter '0x0000000000000004' [ 535.680629][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.766501][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.849331][ T5782] Bluetooth: hci0: command tx timeout [ 535.854351][ T1145] bond0 (unregistering): Released all slaves [ 536.407553][ T7447] loop8: detected capacity change from 0 to 128 [ 536.539355][ T7447] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 536.591787][ T7447] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 537.094232][ T7452] Bluetooth: MGMT ver 1.23 [ 537.115545][ T7452] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 537.933408][ T5782] Bluetooth: hci0: command tx timeout [ 538.111420][ T1145] hsr_slave_0: left promiscuous mode [ 538.176729][ T1145] hsr_slave_1: left promiscuous mode [ 538.192203][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.241426][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.333154][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.510194][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.633896][ T1145] veth1_macvtap: left promiscuous mode [ 538.685173][ T1145] veth0_macvtap: left promiscuous mode [ 538.713364][ T1145] veth1_vlan: left promiscuous mode [ 538.758435][ T1145] veth0_vlan: left promiscuous mode [ 539.352619][ T7468] fuse: Unknown parameter '0x0000000000000004' [ 542.289825][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 542.521041][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 543.855483][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 544.043517][ T7500] fuse: Unknown parameter '0x0000000000000004' [ 544.189526][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 546.161323][ T7516] netlink: 24 bytes leftover after parsing attributes in process `syz.9.302'. [ 546.503296][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.564135][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.614507][ T7384] bridge_slave_0: entered allmulticast mode [ 546.664686][ T7384] bridge_slave_0: entered promiscuous mode [ 546.745986][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.813965][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.849759][ T7384] bridge_slave_1: entered allmulticast mode [ 546.906191][ T7384] bridge_slave_1: entered promiscuous mode [ 547.578519][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.691803][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.188830][ T7536] loop8: detected capacity change from 0 to 256 [ 548.246555][ T7384] team0: Port device team_slave_0 added [ 548.362852][ T7384] team0: Port device team_slave_1 added [ 548.919502][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.999848][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.169417][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.277646][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.339599][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.494453][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.246781][ T7384] hsr_slave_0: entered promiscuous mode [ 550.272690][ T7384] hsr_slave_1: entered promiscuous mode [ 550.347905][ T7384] debugfs: 'hsr0' already exists in 'hsr' [ 550.409784][ T7384] Cannot create hsr debugfs directory [ 554.201948][ T7384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.392850][ T7384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.409519][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 554.615598][ T7384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.734430][ T7384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 557.946825][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.245717][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.398410][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.407821][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.646260][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.654352][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.529562][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 559.730448][ T7632] loop2: detected capacity change from 0 to 7 [ 559.775944][ T7161] Dev loop2: unable to read RDB block 7 [ 559.810124][ T7161] loop2: unable to read partition table [ 559.855293][ T7161] loop2: partition table beyond EOD, truncated [ 559.914280][ T7632] Dev loop2: unable to read RDB block 7 [ 559.939950][ T7632] loop2: unable to read partition table [ 559.982358][ T7632] loop2: partition table beyond EOD, truncated [ 560.052531][ T7632] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.216708][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.975209][ T7665] batadv_slave_1: entered promiscuous mode [ 563.996573][ T7663] batadv_slave_1: left promiscuous mode [ 564.186281][ T7384] veth0_vlan: entered promiscuous mode [ 564.374919][ T7384] veth1_vlan: entered promiscuous mode [ 564.381985][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.352'. [ 565.879986][ T7384] veth0_macvtap: entered promiscuous mode [ 566.048373][ T7384] veth1_macvtap: entered promiscuous mode [ 567.076851][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.798663][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.040976][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.053403][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.102091][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.194798][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.520066][ T7719] veth1_to_bond: entered allmulticast mode [ 569.865360][ T7719] team0 (unregistering): Port device team_slave_0 removed [ 570.061077][ T7719] team0 (unregistering): Port device team_slave_1 removed [ 570.264506][ T7714] veth1_to_bond: left allmulticast mode [ 570.644372][ T7726] loop5: detected capacity change from 0 to 7 [ 570.720989][ T7726] Dev loop5: unable to read RDB block 7 [ 570.726989][ T7726] loop5: AHDI p1 p2 p3 [ 570.764435][ T7726] loop5: partition table partially beyond EOD, truncated [ 570.850069][ T7726] loop5: p1 start 1818582900 is beyond EOD, truncated [ 570.869714][ T7726] loop5: p3 start 335544320 is beyond EOD, truncated [ 573.673954][ T7759] loop6: detected capacity change from 0 to 256 [ 573.745762][ T7759] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 573.893032][ T7759] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 577.974968][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.989602][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.621041][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.677509][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.793207][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.829202][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.872449][ T7860] fuse: Bad value for 'fd' [ 585.200300][ T7864] loop5: detected capacity change from 0 to 128 [ 585.310156][ T7864] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 585.588629][ T7864] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.789730][ T1139] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 589.107396][ T7898] devtmpfs: Bad value for 'nr_inodes' [ 592.319530][ T5779] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 592.518792][ T5779] usb 9-1: device descriptor read/64, error -71 [ 592.809628][ T5779] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 592.840907][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 593.010483][ T5779] usb 9-1: device descriptor read/64, error -71 [ 593.058057][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.109872][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.160004][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.168481][ T10] usb 6-1: Product: syz [ 593.184506][ T5779] usb usb9-port1: attempt power cycle [ 593.211852][ T10] usb 6-1: Manufacturer: syz [ 593.216794][ T10] usb 6-1: SerialNumber: syz [ 593.619499][ T5779] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 593.672683][ T5779] usb 9-1: device descriptor read/8, error -71 [ 593.964715][ T5779] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 594.020874][ T5779] usb 9-1: device descriptor read/8, error -71 [ 594.066707][ T10] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 594.084686][ T10] cdc_ncm 6-1:1.0: bind() failure [ 594.153581][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 594.179462][ T5779] usb usb9-port1: unable to enumerate USB device [ 594.209520][ T10] cdc_ncm 6-1:1.1: bind() failure [ 595.655867][ T40] usb 6-1: USB disconnect, device number 3 [ 598.324761][ T7977] fuse: Bad value for 'fd' [ 599.926762][ T7991] 9p: Bad value for 'wfdno' [ 600.679131][ T29] audit: type=1326 audit(1773818875.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.446" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x0 [ 602.729891][ T7024] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 602.908225][ T7024] usb 9-1: device descriptor read/64, error -71 [ 603.194821][ T7024] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 603.391245][ T7024] usb 9-1: device descriptor read/64, error -71 [ 603.500794][ T7024] usb usb9-port1: attempt power cycle [ 603.554851][ T8028] netlink: 'syz.5.458': attribute type 1 has an invalid length. [ 603.939444][ T7024] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 603.995215][ T8028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.996591][ T7024] usb 9-1: device descriptor read/8, error -71 [ 604.126333][ T8033] vlan2: entered allmulticast mode [ 604.163770][ T8033] syz_tun: entered allmulticast mode [ 604.241914][ T8033] bond1: (slave vlan2): making interface the new active one [ 604.293013][ T8033] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 604.311150][ T7024] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 604.362915][ T7024] usb 9-1: device descriptor read/8, error -71 [ 604.445678][ T8035] vlan3: entered allmulticast mode [ 604.470434][ T8035] bond1: entered allmulticast mode [ 604.494947][ T7024] usb usb9-port1: unable to enumerate USB device [ 605.068384][ T29] audit: type=1326 audit(1773818880.055:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.2.461" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 605.384216][ T8046] Invalid ELF header magic: != ELF [ 607.012698][ T8062] fuse: Bad value for 'fd' [ 608.511371][ T29] audit: type=1326 audit(1773818883.505:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.5.474" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x0 [ 609.971460][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.480'. [ 610.870703][ T29] audit: type=1804 audit(1773818885.865:7): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.486" name="file1" dev="tmpfs" ino=426 res=1 errno=0 [ 610.981378][ T8112] fuse: Bad value for 'fd' [ 612.566085][ T29] audit: type=1326 audit(1773818887.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.8.489" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62f6c code=0x0 [ 613.609801][ T5855] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 613.841223][ T5855] usb 7-1: config 0 has no interfaces? [ 613.879595][ T5855] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.925300][ T5855] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.957964][ T5855] usb 7-1: Manufacturer: syz [ 614.006305][ T5855] usb 7-1: config 0 descriptor?? [ 615.492496][ T29] audit: type=1326 audit(1773818890.485:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.8.503" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62f6c code=0x0 [ 616.282292][ T8164] netlink: 35 bytes leftover after parsing attributes in process `syz.5.505'. [ 616.902728][ T5855] usb 7-1: USB disconnect, device number 4 [ 617.632096][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.6.509'. [ 618.121347][ T8174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.247108][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.515'. [ 629.437184][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.551'. [ 633.447065][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 636.309962][ T29] audit: type=1326 audit(1773818911.285:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.9.577" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb7f6c code=0x0 [ 636.760119][ T8394] syzkaller0: entered promiscuous mode [ 637.080000][ T8400] capability: warning: `syz.2.579' uses 32-bit capabilities (legacy support in use) [ 637.387987][ T8403] lo: entered promiscuous mode [ 637.493799][ T8403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.399719][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.429393][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.768013][ T29] audit: type=1326 audit(1773818914.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.6.590" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62f6c code=0x0 [ 640.455793][ T8432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.775409][ T8438] bond_slave_0: entered promiscuous mode [ 640.781658][ T8438] bond_slave_1: entered promiscuous mode [ 640.928267][ T8438] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 641.088068][ T8438] bond2: (slave macvlan2): making interface the new active one [ 641.230040][ T8438] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 641.483797][ T8456] loop6: detected capacity change from 0 to 512 [ 641.615458][ T8456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 641.720528][ T8456] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 641.929217][ T8456] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.596: bad orphan inode 131083 [ 641.959292][ T8456] loop6: lost filesystem error report for type 5 error -117 [ 641.963663][ T8456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.133724][ T29] audit: type=1800 audit(1773818917.115:12): pid=8456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.596" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 642.434175][ T8468] mmap: syz.5.597 (8468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 642.740973][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.751540][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.910447][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.072258][ T8473] loop8: detected capacity change from 0 to 4096 [ 644.184956][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.327959][ T8473] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.408471][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.540478][ T8473] netlink: 72 bytes leftover after parsing attributes in process `syz.8.599'. [ 644.671757][ T8482] loop6: detected capacity change from 0 to 512 [ 644.760415][ T8482] ext4: Unknown parameter 'uid>00000000000000000000' [ 647.519884][ T6352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.923836][ T8559] loop6: detected capacity change from 0 to 1024 [ 648.032328][ T8559] EXT4-fs: inline encryption not supported [ 648.154095][ T8559] EXT4-fs: Ignoring removed bh option [ 648.494085][ T8559] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.971139][ T8521] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.022931][ T8534] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.047111][ T6859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.088600][ T8534] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.127931][ T8521] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.167855][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.8.602'. [ 649.218632][ T8565] netlink: 60 bytes leftover after parsing attributes in process `syz.8.602'. [ 650.533025][ T8577] dummy0: entered promiscuous mode [ 650.562792][ T8577] vlan2: entered promiscuous mode [ 652.764951][ T3081] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 653.039286][ T3081] usb 7-1: Using ep0 maxpacket: 32 [ 653.091327][ T3081] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 653.125793][ T3081] usb 7-1: config 0 has no interface number 0 [ 653.253539][ T3081] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 653.293880][ T3081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.319255][ T3081] usb 7-1: Product: syz [ 653.349178][ T3081] usb 7-1: Manufacturer: syz [ 653.375131][ T3081] usb 7-1: SerialNumber: syz [ 653.422674][ T3081] usb 7-1: config 0 descriptor?? [ 653.959913][ T3081] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 654.014589][ T3081] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 655.726126][ T3081] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 655.760651][ T3081] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 656.820040][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 657.354987][ T6689] usb 7-1: USB disconnect, device number 5 [ 658.139286][ T8666] tmpfs: Bad value for 'huge' [ 658.227621][ T8663] bond1: Removing last arp target with arp_interval on [ 658.237726][ T8663] bond1: entered promiscuous mode [ 658.243748][ T8663] bond1: entered allmulticast mode [ 658.310769][ T8663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.610228][ T29] audit: type=1326 audit(1773818935.595:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.8.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62f6c code=0x7fc00000 [ 660.771667][ T29] audit: type=1326 audit(1773818935.645:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.8.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f62f6c code=0x7fc00000 [ 660.969316][ T29] audit: type=1326 audit(1773818935.735:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8694 comm="syz.8.638" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62f6c code=0x7fc00000 [ 663.129634][ T8725] tmpfs: Bad value for 'huge' [ 665.570985][ T8747] netlink: 240 bytes leftover after parsing attributes in process `syz.2.656'. [ 665.671071][ T8748] netlink: 'syz.2.656': attribute type 6 has an invalid length. [ 669.142145][ T8781] tmpfs: Bad value for 'huge' [ 675.048350][ T8828] tmpfs: Unknown parameter 'n00000000000000000000' [ 675.072262][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 676.801077][ T8849] ===================================================== [ 676.808632][ T8849] BUG: KMSAN: uninit-value in batadv_interface_tx+0x581/0x1dd0 [ 676.817182][ T8849] batadv_interface_tx+0x581/0x1dd0 [ 676.822723][ T8849] dev_hard_start_xmit+0x24e/0xad0 [ 676.828121][ T8849] __dev_queue_xmit+0x3412/0x5980 [ 676.833592][ T8849] __bpf_redirect+0x162e/0x1760 [ 676.838664][ T8849] bpf_clone_redirect+0x4a6/0x6c0 [ 676.844295][ T8849] ___bpf_prog_run+0x12af/0xeb60 [ 676.850242][ T8849] __bpf_prog_run512+0xc5/0x100 [ 676.855571][ T8849] bpf_test_run+0x493/0xdf0 [ 676.860628][ T8849] bpf_prog_test_run_skb+0x22a5/0x3050 [ 676.866484][ T8849] bpf_prog_test_run+0x5bb/0x9f0 [ 676.872023][ T8849] __sys_bpf+0x925/0xee0 [ 676.876729][ T8849] __ia32_sys_bpf+0xa4/0xf0 [ 676.881644][ T8849] ia32_sys_call+0x33e7/0x4360 [ 676.886926][ T8849] __do_fast_syscall_32+0x17f/0x3f0 [ 676.892545][ T8849] do_fast_syscall_32+0x37/0x80 [ 676.897717][ T8849] do_SYSENTER_32+0x1f/0x30 [ 676.902646][ T8849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.909407][ T8849] [ 676.911831][ T8849] Uninit was stored to memory at: [ 676.917214][ T8849] batadv_interface_tx+0x57a/0x1dd0 [ 676.922848][ T8849] dev_hard_start_xmit+0x24e/0xad0 [ 676.928423][ T8849] __dev_queue_xmit+0x3412/0x5980 [ 676.933851][ T8849] __bpf_redirect+0x162e/0x1760 [ 676.939483][ T8849] bpf_clone_redirect+0x4a6/0x6c0 [ 676.944990][ T8849] ___bpf_prog_run+0x12af/0xeb60 [ 676.950579][ T8849] __bpf_prog_run512+0xc5/0x100 [ 676.955657][ T8849] bpf_test_run+0x493/0xdf0 [ 676.960508][ T8849] bpf_prog_test_run_skb+0x22a5/0x3050 [ 676.966278][ T8849] bpf_prog_test_run+0x5bb/0x9f0 [ 676.971665][ T8849] __sys_bpf+0x925/0xee0 [ 676.976391][ T8849] __ia32_sys_bpf+0xa4/0xf0 [ 676.981305][ T8849] ia32_sys_call+0x33e7/0x4360 [ 676.986260][ T8849] __do_fast_syscall_32+0x17f/0x3f0 [ 676.991984][ T8849] do_fast_syscall_32+0x37/0x80 [ 676.997206][ T8849] do_SYSENTER_32+0x1f/0x30 [ 677.002359][ T8849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.009118][ T8849] [ 677.011541][ T8849] Uninit was created at: [ 677.016061][ T8849] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 677.022710][ T8849] pskb_expand_head+0x2ef/0x1fb0 [ 677.028225][ T8849] skb_ensure_writable+0x44e/0x510 [ 677.033808][ T8849] bpf_clone_redirect+0x301/0x6c0 [ 677.039134][ T8849] ___bpf_prog_run+0x12af/0xeb60 [ 677.044289][ T8849] __bpf_prog_run512+0xc5/0x100 [ 677.049750][ T8849] bpf_test_run+0x493/0xdf0 [ 677.054601][ T8849] bpf_prog_test_run_skb+0x22a5/0x3050 [ 677.060661][ T8849] bpf_prog_test_run+0x5bb/0x9f0 [ 677.065903][ T8849] __sys_bpf+0x925/0xee0 [ 677.070637][ T8849] __ia32_sys_bpf+0xa4/0xf0 [ 677.075495][ T8849] ia32_sys_call+0x33e7/0x4360 [ 677.080745][ T8849] __do_fast_syscall_32+0x17f/0x3f0 [ 677.086827][ T8849] do_fast_syscall_32+0x37/0x80 [ 677.092165][ T8849] do_SYSENTER_32+0x1f/0x30 [ 677.097064][ T8849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.103797][ T8849] [ 677.106307][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.5.689 Not tainted syzkaller #0 PREEMPT(full) [ 677.116054][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.126685][ T8849] ===================================================== [ 677.134270][ T8849] Disabling lock debugging due to kernel taint [ 677.140944][ T8849] Kernel panic - not syncing: kmsan.panic set ... [ 677.148179][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.5.689 Tainted: G B syzkaller #0 PREEMPT(full) [ 677.159993][ T8849] Tainted: [B]=BAD_PAGE [ 677.164717][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.175088][ T8849] Call Trace: [ 677.178841][ T8849] [ 677.182065][ T8849] __dump_stack+0x26/0x30 [ 677.186891][ T8849] dump_stack_lvl+0x50/0x1c0 [ 677.191938][ T8849] ? dump_stack+0x12/0x25 [ 677.196672][ T8849] dump_stack+0x1e/0x25 [ 677.201214][ T8849] vpanic+0x7b4/0x1430 [ 677.205532][ T8849] panic+0x15d/0x160 [ 677.209863][ T8849] kmsan_report+0x31a/0x320 [ 677.215397][ T8849] ? __msan_warning+0x1b/0x30 [ 677.220385][ T8849] ? batadv_interface_tx+0x581/0x1dd0 [ 677.226030][ T8849] ? dev_hard_start_xmit+0x24e/0xad0 [ 677.231588][ T8849] ? __dev_queue_xmit+0x3412/0x5980 [ 677.237418][ T8849] ? __bpf_redirect+0x162e/0x1760 [ 677.242887][ T8849] ? bpf_clone_redirect+0x4a6/0x6c0 [ 677.248449][ T8849] ? ___bpf_prog_run+0x12af/0xeb60 [ 677.254195][ T8849] ? __bpf_prog_run512+0xc5/0x100 [ 677.259437][ T8849] ? bpf_test_run+0x493/0xdf0 [ 677.264335][ T8849] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 677.270159][ T8849] ? bpf_prog_test_run+0x5bb/0x9f0 [ 677.275468][ T8849] ? __sys_bpf+0x925/0xee0 [ 677.280059][ T8849] ? __ia32_sys_bpf+0xa4/0xf0 [ 677.284997][ T8849] ? ia32_sys_call+0x33e7/0x4360 [ 677.290375][ T8849] ? __do_fast_syscall_32+0x17f/0x3f0 [ 677.296132][ T8849] ? do_fast_syscall_32+0x37/0x80 [ 677.301499][ T8849] ? do_SYSENTER_32+0x1f/0x30 [ 677.306470][ T8849] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.313368][ T8849] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.320336][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.326777][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.333326][ T8849] ? batadv_interface_tx+0x91/0x1dd0 [ 677.338831][ T8849] ? filter_irq_stacks+0x49/0x190 [ 677.344124][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.349637][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.355993][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.361447][ T8849] __msan_warning+0x1b/0x30 [ 677.366258][ T8849] batadv_interface_tx+0x581/0x1dd0 [ 677.371706][ T8849] ? __pfx_batadv_interface_tx+0x10/0x10 [ 677.377822][ T8849] dev_hard_start_xmit+0x24e/0xad0 [ 677.383507][ T8849] __dev_queue_xmit+0x3412/0x5980 [ 677.388799][ T8849] ? skb_release_data+0x107c/0x11b0 [ 677.394375][ T8849] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 677.401031][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.406583][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.412656][ T8849] ? __dev_queue_xmit+0x27a/0x5980 [ 677.418073][ T8849] ? pskb_expand_head+0x1c0e/0x1fb0 [ 677.423575][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.428970][ T8849] __bpf_redirect+0x162e/0x1760 [ 677.434301][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.439976][ T8849] bpf_clone_redirect+0x4a6/0x6c0 [ 677.445430][ T8849] ___bpf_prog_run+0x12af/0xeb60 [ 677.450872][ T8849] __bpf_prog_run512+0xc5/0x100 [ 677.456037][ T8849] ? kmsan_internal_poison_memory+0x78/0x90 [ 677.462351][ T8849] ? kmsan_internal_poison_memory+0x4a/0x90 [ 677.468769][ T8849] ? kmsan_slab_alloc+0xdc/0x160 [ 677.473956][ T8849] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 677.480127][ T8849] ? slab_build_skb+0x5c/0x5b0 [ 677.485141][ T8849] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 677.490883][ T8849] ? bpf_prog_test_run+0x5bb/0x9f0 [ 677.496207][ T8849] ? __sys_bpf+0x925/0xee0 [ 677.500842][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.506384][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.512537][ T8849] ? bpf_test_run+0x71/0xdf0 [ 677.517392][ T8849] ? filter_irq_stacks+0x49/0x190 [ 677.522741][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.528154][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.533780][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.539135][ T8849] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 677.545807][ T8849] ? kmsan_get_metadata+0x146/0x160 [ 677.551344][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.557666][ T8849] ? __pfx___bpf_prog_run512+0x10/0x10 [ 677.563643][ T8849] ? __pfx___bpf_prog_run512+0x10/0x10 [ 677.569569][ T8849] bpf_test_run+0x493/0xdf0 [ 677.574575][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.580954][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.586481][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.593204][ T8849] ? bpf_test_run+0x2f4/0xdf0 [ 677.598296][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.603787][ T8849] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 677.609978][ T8849] bpf_prog_test_run_skb+0x22a5/0x3050 [ 677.615907][ T8849] ? kmsan_get_metadata+0xf1/0x160 [ 677.621451][ T8849] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 677.627562][ T8849] bpf_prog_test_run+0x5bb/0x9f0 [ 677.632846][ T8849] __sys_bpf+0x925/0xee0 [ 677.637420][ T8849] __ia32_sys_bpf+0xa4/0xf0 [ 677.642297][ T8849] ia32_sys_call+0x33e7/0x4360 [ 677.647513][ T8849] __do_fast_syscall_32+0x17f/0x3f0 [ 677.653035][ T8849] do_fast_syscall_32+0x37/0x80 [ 677.658179][ T8849] do_SYSENTER_32+0x1f/0x30 [ 677.662993][ T8849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.669630][ T8849] RIP: 0023:0xf705ef6c [ 677.673840][ T8849] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 677.693646][ T8849] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 677.702271][ T8849] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 677.710599][ T8849] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 677.718798][ T8849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.727081][ T8849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 677.735275][ T8849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.743605][ T8849] [ 677.747503][ T8849] Kernel Offset: disabled [ 677.751921][ T8849] Rebooting in 86400 seconds..