last executing test programs: 5m53.404510819s ago: executing program 32 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000000240)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 5m34.051807497s ago: executing program 33 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() ptrace$peekuser(0x3, r2, 0x2) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 2m40.014924075s ago: executing program 4 (id=550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m38.943207985s ago: executing program 4 (id=552): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0x12, 0x2f, &(0x7f0000000740)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.859311136s ago: executing program 4 (id=554): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x100) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) 2m37.678911094s ago: executing program 3 (id=555): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m37.589866723s ago: executing program 4 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m36.523711212s ago: executing program 4 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000340)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34}, 0x28) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x24f, &(0x7f00000004c0)={0x0, 0x4ddb, 0x1, 0x1, 0x4e}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x0}, 0x20) 2m36.101549475s ago: executing program 3 (id=559): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000ff07"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) 2m35.361388871s ago: executing program 3 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m35.27545528s ago: executing program 4 (id=561): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x15d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setstatus(r1, 0x4, 0x800) accept(r1, 0x0, 0x0) 2m34.127639637s ago: executing program 34 (id=561): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x15d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setstatus(r1, 0x4, 0x800) accept(r1, 0x0, 0x0) 2m34.122020698s ago: executing program 0 (id=563): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000002900)="34000000070000000000000006", 0xd) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000002540)={0x8, 0x0, 0x1000000}, &(0x7f0000002580), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) 2m34.09875261s ago: executing program 3 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m33.761205055s ago: executing program 3 (id=567): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m33.295416822s ago: executing program 3 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000019640)={0x1, 0x0, 0x0, &(0x7f0000019680)=""/74, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 2m32.445053969s ago: executing program 35 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000019640)={0x1, 0x0, 0x0, &(0x7f0000019680)=""/74, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000019a40)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 2m30.506085867s ago: executing program 0 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m29.409682869s ago: executing program 0 (id=573): openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x80382, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f00000002c0)="653de841", 0x4, 0x8000}]) 2m28.216602061s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m28.039675699s ago: executing program 0 (id=575): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m27.658310228s ago: executing program 5 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000300)=0x1, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f000001a840)={0x8, 0x200}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019500)=0x410000002) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x841) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f000001a600)={0x0, 0x0, &(0x7f000001a640)=[{&(0x7f000001a680)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 2m27.495377905s ago: executing program 0 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) 2m26.37192326s ago: executing program 36 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) 2m25.19303998s ago: executing program 5 (id=579): socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) set_mempolicy(0x3, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x100) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m24.850531855s ago: executing program 5 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m23.689220314s ago: executing program 5 (id=581): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m23.564149927s ago: executing program 5 (id=582): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8946, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m22.039277552s ago: executing program 5 (id=583): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m21.368259271s ago: executing program 37 (id=583): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './dev\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000500)=""/144, 0x90, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000000c0)={0x0, 0x0}, 0x10) io_uring_setup(0x8136a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000b40)={0x1, &(0x7f0000000b80)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000bc0)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x3, 0x2, 0x1, 0x3, 0x200}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 2m15.338124647s ago: executing program 6 (id=562): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket(0x40000000015, 0x5, 0x0) socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000740)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m14.296962344s ago: executing program 6 (id=585): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000300)=0x1, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f000001a840)={0x8, 0x200}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019500)=0x410000002) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x841) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f000001a600)={0x0, 0x0, &(0x7f000001a640)=[{&(0x7f000001a680)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 2m12.311149427s ago: executing program 6 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m11.097995221s ago: executing program 6 (id=587): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m10.808257181s ago: executing program 6 (id=588): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a40)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001a80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001ac0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001bc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001c00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001c40)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000001c80)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007f9, &(0x7f0000001cc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) mount(0x0, &(0x7f0000001d40)='./mysys\x00', &(0x7f0000001d80)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000) shutdown(r3, 0x1) 2m10.090786774s ago: executing program 6 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x38, 0x2, 0x1}, 0x28) 2m9.522712662s ago: executing program 38 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x38, 0x2, 0x1}, 0x28) 2m8.813407585s ago: executing program 9 (id=584): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2m8.36219348s ago: executing program 9 (id=593): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m7.97328198s ago: executing program 9 (id=594): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) move_mount(r1, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x24000, 0x0) 2m7.730865465s ago: executing program 9 (id=595): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xe0bb, 0xfffffffffffffffe}) 2m7.231286136s ago: executing program 9 (id=596): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2m6.475948063s ago: executing program 39 (id=596): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 20.678501946s ago: executing program 2 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34}, 0x28) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x24f, &(0x7f00000004c0)={0x0, 0x4ddb, 0x1, 0x1, 0x4e}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x0}, 0x20) 18.481138081s ago: executing program 8 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000940)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x1000000000000006, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x6e94, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000e40)={0x2, {0x2, 0x9, 0x0, 0x101, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) 17.489766003s ago: executing program 8 (id=794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 16.847380488s ago: executing program 8 (id=796): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001200)=""/102392, 0x18ff8) r2 = socket(0x2, 0x3, 0x6) bind$inet6(r2, &(0x7f000001a200)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x13}, 0x1c) 15.589252477s ago: executing program 8 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r2 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r4, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 15.588293777s ago: executing program 1 (id=798): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 13.761265734s ago: executing program 1 (id=799): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') 13.30296933s ago: executing program 2 (id=800): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) pwrite64(r0, &(0x7f0000000140)="a3df", 0x2, 0x7fff) 11.202437945s ago: executing program 7 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x1000000000000006, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x6e94, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000e40)={0x2, {0x2, 0x9, 0x0, 0x101, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) 11.105608965s ago: executing program 2 (id=803): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000019380)={0xc, {"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", 0x1000}}, 0x1006) fanotify_mark(0xffffffffffffffff, 0x20, 0x1, 0xffffffffffffffff, &(0x7f000001a3c0)='./file0\x00') inotify_init1(0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000019280)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r5, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) 9.203424779s ago: executing program 2 (id=804): mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000001040)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000010c0)='10', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x1ff) 7.766675436s ago: executing program 8 (id=805): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001200)=""/102392, 0x18ff8) r2 = socket(0x2, 0x3, 0x6) bind$inet6(r2, &(0x7f000001a200)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x13}, 0x1c) 6.980334646s ago: executing program 1 (id=806): r0 = socket$kcm(0x10, 0x2, 0x4) unshare(0x22020600) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000000)=0x57) 5.619515206s ago: executing program 8 (id=807): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x3b89, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 5.606498827s ago: executing program 7 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x500, 0x0, &(0x7f0000000380)={0x0, 0x50}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000"], 0x0, 0x34}, 0x28) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x24f, &(0x7f00000004c0)={0x0, 0x4ddb, 0x1, 0x1, 0x4e}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/224, 0xe0}], 0x0}, 0x20) 5.503444808s ago: executing program 1 (id=809): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) 5.226579946s ago: executing program 1 (id=810): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002d40)=""/102392, 0x18ff8) socket(0x11, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3.153339968s ago: executing program 7 (id=811): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) pwrite64(r0, &(0x7f0000000140)="a3df", 0x2, 0x7fff) 3.039124259s ago: executing program 1 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000006c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000780)=0x0) syz_ublk_setup_queues(r4, r9, 0x0, 0x0, 0x4, 0x0, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r10, &(0x7f00000002c0)='1', 0x1) 2.917960102s ago: executing program 7 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r2 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r4, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2.844073389s ago: executing program 2 (id=814): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_emit_ethernet(0x72, &(0x7f0000000540)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @local, [@hopopts={0x11}]}}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x16, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.079331908s ago: executing program 7 (id=815): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001200)=""/102392, 0x18ff8) r3 = socket(0x2, 0x3, 0x6) bind$inet6(r3, &(0x7f000001a200)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x13}, 0x1c) 1.653184381s ago: executing program 2 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000940)={{0x6, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0x1, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0x10001, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x1000000000000006, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffffffffffff9, 0x6, 0x5, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x6e94, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x1, 0x1, 0x8]}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000e40)={0x2, {0x2, 0x9, 0x0, 0x101, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'bond0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) 0s ago: executing program 7 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) kernel console output (not intermixed with test programs): 5789] bridge_slave_0: entered promiscuous mode [ 88.679662][ T5790] Bluetooth: hci0: command tx timeout [ 88.757204][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.764688][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.772161][ T5789] bridge_slave_1: entered allmulticast mode [ 88.781433][ T5789] bridge_slave_1: entered promiscuous mode [ 88.801671][ T5796] team0: Port device team_slave_0 added [ 88.808113][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.816174][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.823519][ T5788] bridge_slave_0: entered allmulticast mode [ 88.831025][ T5788] bridge_slave_0: entered promiscuous mode [ 88.839003][ T5790] Bluetooth: hci2: command tx timeout [ 88.874489][ T5796] team0: Port device team_slave_1 added [ 88.882959][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.890526][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.897744][ T5788] bridge_slave_1: entered allmulticast mode [ 88.905267][ T5788] bridge_slave_1: entered promiscuous mode [ 88.912038][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.919116][ T5790] Bluetooth: hci1: command tx timeout [ 88.929498][ T5790] Bluetooth: hci3: command tx timeout [ 88.961002][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.973852][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.008394][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.046670][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.226054][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.242613][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.298740][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.335369][ T5788] team0: Port device team_slave_0 added [ 89.353876][ T5789] team0: Port device team_slave_0 added [ 89.362297][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.369900][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.396434][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.425766][ T5788] team0: Port device team_slave_1 added [ 89.434040][ T5789] team0: Port device team_slave_1 added [ 89.542618][ T5796] hsr_slave_0: entered promiscuous mode [ 89.550881][ T5796] hsr_slave_1: entered promiscuous mode [ 89.590319][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.597329][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.623938][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.637644][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.646690][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.673713][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.713807][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.720855][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.747633][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.819779][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.826972][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.857050][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.893644][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.001904][ T5789] hsr_slave_0: entered promiscuous mode [ 90.009717][ T5789] hsr_slave_1: entered promiscuous mode [ 90.019028][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.027056][ T5789] Cannot create hsr debugfs directory [ 90.123864][ T5788] hsr_slave_0: entered promiscuous mode [ 90.131794][ T5788] hsr_slave_1: entered promiscuous mode [ 90.139344][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.146955][ T5788] Cannot create hsr debugfs directory [ 90.477826][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 90.610459][ T5446] infiniband rxe0: set active [ 90.676008][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.728907][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.749443][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.756673][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.764688][ T5783] bridge_slave_0: entered allmulticast mode [ 90.769531][ T5790] Bluetooth: hci0: command tx timeout [ 90.776253][ T5783] bridge_slave_0: entered promiscuous mode [ 90.785460][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.793117][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.801908][ T5783] bridge_slave_1: entered allmulticast mode [ 90.809461][ T5783] bridge_slave_1: entered promiscuous mode [ 90.826870][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.839777][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.882534][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.911913][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.924857][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.930653][ T5790] Bluetooth: hci2: command tx timeout [ 90.999811][ T5786] Bluetooth: hci1: command tx timeout [ 91.005381][ T5790] Bluetooth: hci3: command tx timeout [ 91.060357][ T5783] team0: Port device team_slave_0 added [ 91.070143][ T5783] team0: Port device team_slave_1 added [ 91.099526][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.118429][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.135149][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.171837][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.183408][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.194964][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.206930][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214216][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.241838][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.286802][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.372159][ T5783] hsr_slave_0: entered promiscuous mode [ 91.379884][ T5783] hsr_slave_1: entered promiscuous mode [ 91.387608][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.396877][ T5783] Cannot create hsr debugfs directory [ 91.404941][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.424504][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.438481][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.450944][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.712734][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.762565][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.786688][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.823540][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.831687][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.866414][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.873659][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.924920][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.937406][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.948409][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.965735][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.986528][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.998031][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.041775][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.049008][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.079851][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.087014][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.103051][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.149926][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.157104][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.197367][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.204596][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.476114][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.533577][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.565918][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.573160][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.610588][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.617808][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.723043][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.745809][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.779425][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.839969][ T5790] Bluetooth: hci0: command tx timeout [ 92.935097][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.975890][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.999142][ T5790] Bluetooth: hci2: command tx timeout [ 93.045559][ T5796] veth0_vlan: entered promiscuous mode [ 93.079152][ T5790] Bluetooth: hci3: command tx timeout [ 93.084639][ T5790] Bluetooth: hci1: command tx timeout [ 93.094205][ T5796] veth1_vlan: entered promiscuous mode [ 93.204397][ T5789] veth0_vlan: entered promiscuous mode [ 93.228204][ T5796] veth0_macvtap: entered promiscuous mode [ 93.242737][ T5788] veth0_vlan: entered promiscuous mode [ 93.261083][ T5789] veth1_vlan: entered promiscuous mode [ 93.273866][ T5796] veth1_macvtap: entered promiscuous mode [ 93.298017][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.310838][ T5788] veth1_vlan: entered promiscuous mode [ 93.363687][ T5789] veth0_macvtap: entered promiscuous mode [ 93.390509][ T5789] veth1_macvtap: entered promiscuous mode [ 93.421572][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.446580][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.459077][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.471999][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.501720][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.520988][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.530054][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.539245][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.548029][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572801][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.586382][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.602896][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.617227][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626368][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.637079][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.652002][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.666301][ T5788] veth0_macvtap: entered promiscuous mode [ 93.706098][ T5788] veth1_macvtap: entered promiscuous mode [ 93.735803][ T5783] veth0_vlan: entered promiscuous mode [ 93.757195][ T5783] veth1_vlan: entered promiscuous mode [ 93.784659][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.813978][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.824328][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.835357][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.847732][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.897985][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.910381][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.920626][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.931578][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.946885][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.994615][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004114][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.014088][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023099][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.042892][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.053227][ T5783] veth0_macvtap: entered promiscuous mode [ 94.059374][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.108448][ T5783] veth1_macvtap: entered promiscuous mode [ 94.131355][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.150708][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.192587][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.203757][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.227984][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.241414][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.253493][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.253868][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.276679][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.296519][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.307083][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.317915][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.330752][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.402282][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.428046][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.438931][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.449961][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.459871][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.470757][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.486526][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.512552][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525247][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534996][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.547764][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.573499][ T5789] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.618293][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.644799][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.749645][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.789711][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.839838][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.847823][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.920279][ T5790] Bluetooth: hci0: command tx timeout [ 95.090304][ T5790] Bluetooth: hci2: command tx timeout [ 95.159977][ T5786] Bluetooth: hci3: command tx timeout [ 95.165733][ T5790] Bluetooth: hci1: command tx timeout [ 95.875544][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.901777][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.323967][ T5926] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.4' sets config #0 [ 97.333610][ T5926] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.4' sets config #1 [ 97.408519][ T23] cfg80211: failed to load regulatory.db [ 97.848648][ C0] sched: RT throttling activated [ 97.936580][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.938825][ T5943] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.10' sets config #1 [ 101.538905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.907646][ T5812] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.218812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.550364][ T6022] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 112.189195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 119.458973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.688670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 123.725382][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 127.958753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.368718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.449284][ T6135] random: crng reseeded on system resumption [ 131.599600][ T6145] fuse: Bad value for 'fd' [ 131.711048][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 133.133265][ T6154] syz.1.62[6154]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 133.166821][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.173903][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.659309][ T6182] random: crng reseeded on system resumption [ 140.758762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 141.168683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.083261][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 145.058837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 147.120232][ T5792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.781257][ T6222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.787468][ T6222] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.801313][ T6222] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 148.810733][ T6222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.817280][ T6222] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.826798][ T6222] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.841684][ T6222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.848913][ T6222] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.859934][ T6222] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 148.868670][ T6222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.874765][ T6222] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.882882][ T5792] usb 3-1: Using ep0 maxpacket: 16 [ 148.909232][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 148.923614][ T5792] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.933797][ T6222] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.940471][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.948724][ T5792] usb 3-1: Product: syz [ 148.954734][ T5792] usb 3-1: Manufacturer: syz [ 148.977888][ T5792] usb 3-1: SerialNumber: syz [ 149.112310][ T5792] usb 3-1: config 0 descriptor?? [ 149.172407][ T5792] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.216818][ T5792] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 149.421786][ T6229] random: crng reseeded on system resumption [ 149.820555][ T5792] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 150.839754][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.946690][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.953394][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.009018][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.200706][ T5792] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 151.236520][ T5792] em28xx 3-1:0.0: board has no eeprom [ 151.338935][ T5792] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 151.346958][ T5792] em28xx 3-1:0.0: dvb set to bulk mode. [ 151.357282][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 151.367875][ T1202] em28xx 3-1:0.0: Binding DVB extension [ 151.391231][ T5792] usb 3-1: USB disconnect, device number 2 [ 151.432797][ T5792] em28xx 3-1:0.0: Disconnecting em28xx [ 151.532810][ T1202] em28xx 3-1:0.0: Registering input extension [ 151.550073][ T5792] em28xx 3-1:0.0: Closing input extension [ 151.617168][ T5792] em28xx 3-1:0.0: Freeing device [ 153.183624][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.189848][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.195891][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.202103][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.848914][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.855029][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.861258][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.879983][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.500552][ T6273] random: crng reseeded on system resumption [ 162.064901][ T6298] Zero length message leads to an empty skb [ 164.901460][ T6313] md: could not open device unknown-block(1,2). [ 164.935369][ T6313] md: could not open device unknown-block(1,3). [ 166.761756][ T6323] autofs4:pid:6323:autofs_fill_super: called with bogus options [ 170.946226][ T6357] ======================================================= [ 170.946226][ T6357] WARNING: The mand mount option has been deprecated and [ 170.946226][ T6357] and is ignored by this kernel. Remove the mand [ 170.946226][ T6357] option from the mount to silence this warning. [ 170.946226][ T6357] ======================================================= [ 170.983120][ T6357] kAFS: unparsable volume name [ 178.891084][ T6388] loop9: detected capacity change from 0 to 7 [ 179.393754][ T6388] Dev loop9: unable to read RDB block 7 [ 179.399837][ T6388] loop9: unable to read partition table [ 179.405727][ T6388] loop9: partition table beyond EOD, truncated [ 179.412173][ T6388] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 186.366441][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 186.403571][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 190.506364][ T6480] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.517232][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 190.556728][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 191.713036][ T6500] FAULT_INJECTION: forcing a failure. [ 191.713036][ T6500] name failslab, interval 1, probability 0, space 0, times 1 [ 191.779283][ T6500] CPU: 1 PID: 6500 Comm: syz.1.159 Not tainted syzkaller #0 [ 191.786704][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 191.796835][ T6500] Call Trace: [ 191.800142][ T6500] [ 191.803087][ T6500] dump_stack_lvl+0x18c/0x250 [ 191.807809][ T6500] ? show_regs_print_info+0x20/0x20 [ 191.813049][ T6500] ? load_image+0x420/0x420 [ 191.817578][ T6500] ? __might_sleep+0xe0/0xe0 [ 191.822204][ T6500] ? __lock_acquire+0x7eb0/0x7eb0 [ 191.827297][ T6500] should_fail_ex+0x394/0x4c0 [ 191.832032][ T6500] should_failslab+0x9/0x20 [ 191.836553][ T6500] slab_pre_alloc_hook+0x59/0x300 [ 191.841591][ T6500] ? mark_lock+0x94/0x320 [ 191.845952][ T6500] ? allocate_partition+0x156/0x18b0 [ 191.851317][ T6500] __kmem_cache_alloc_node+0x53/0x260 [ 191.856809][ T6500] ? allocate_partition+0x156/0x18b0 [ 191.862145][ T6500] kmalloc_trace+0x2a/0xe0 [ 191.866720][ T6500] allocate_partition+0x156/0x18b0 [ 191.871991][ T6500] mtd_add_partition+0x1d9/0x510 [ 191.876969][ T6500] ? release_mtd_partition+0x80/0x80 [ 191.882331][ T6500] ? __might_fault+0xaa/0x120 [ 191.887054][ T6500] ? __might_fault+0xc6/0x120 [ 191.891755][ T6500] ? __might_fault+0xaa/0x120 [ 191.896988][ T6500] mtdchar_blkpg_ioctl+0x287/0x2b0 [ 191.902139][ T6500] ? shrink_ecclayout+0xae0/0xae0 [ 191.907202][ T6500] ? __lock_acquire+0x1431/0x7eb0 [ 191.912253][ T6500] ? __might_fault+0xaa/0x120 [ 191.916951][ T6500] ? __might_fault+0xc6/0x120 [ 191.921658][ T6500] ? __might_fault+0xaa/0x120 [ 191.926414][ T6500] mtdchar_ioctl+0x14f7/0x1b80 [ 191.931215][ T6500] ? mtdchar_close+0x180/0x180 [ 191.936052][ T6500] ? verify_lock_unused+0x140/0x140 [ 191.941274][ T6500] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 191.946940][ T6500] ? tomoyo_path_number_perm+0x217/0x5e0 [ 191.952619][ T6500] ? __lock_acquire+0x7eb0/0x7eb0 [ 191.957705][ T6500] ? tomoyo_path_number_perm+0x217/0x5e0 [ 191.963418][ T6500] ? __mutex_trylock_common+0x160/0x270 [ 191.968989][ T6500] ? trace_raw_output_contention_end+0xd0/0xd0 [ 191.975172][ T6500] ? rcu_is_watching+0x15/0xb0 [ 191.980066][ T6500] ? trace_contention_end+0x39/0xe0 [ 191.985279][ T6500] ? __mutex_lock+0x30d/0xce0 [ 191.989977][ T6500] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 191.995399][ T6500] ? mutex_lock_nested+0x20/0x20 [ 192.000351][ T6500] ? __fget_files+0x28/0x460 [ 192.004977][ T6500] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 192.010211][ T6500] ? mtdchar_write+0x5c0/0x5c0 [ 192.015002][ T6500] __se_sys_ioctl+0xfd/0x170 [ 192.019623][ T6500] do_syscall_64+0x55/0xb0 [ 192.024090][ T6500] ? clear_bhb_loop+0x40/0x90 [ 192.028803][ T6500] ? clear_bhb_loop+0x40/0x90 [ 192.033523][ T6500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.039445][ T6500] RIP: 0033:0x7fb405d9fb19 [ 192.043892][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.063719][ T6500] RSP: 002b:00007fb406c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.072287][ T6500] RAX: ffffffffffffffda RBX: 00007fb406025fa0 RCX: 00007fb405d9fb19 [ 192.080280][ T6500] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 192.088267][ T6500] RBP: 00007fb405e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 192.096359][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.104371][ T6500] R13: 00007fb406026038 R14: 00007fb406025fa0 R15: 00007fff5307df38 [ 192.112393][ T6500] [ 192.894772][ T6500] memory allocation error while creating partitions for "mtdram test device" [ 194.609251][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.615774][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.025515][ T6547] loop9: detected capacity change from 0 to 7 [ 199.989946][ T6547] Dev loop9: unable to read RDB block 7 [ 199.995666][ T6547] loop9: unable to read partition table [ 200.001611][ T6547] loop9: partition table beyond EOD, truncated [ 200.007810][ T6547] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 200.346582][ T5786] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 200.818740][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 202.084622][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.113895][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 202.141149][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.188689][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.228165][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.260993][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 202.278863][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 202.286957][ T9] usb 3-1: Product: syz [ 203.150093][ T9] usb 3-1: Manufacturer: syz [ 203.207770][ T9] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 203.416656][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 3 on unit 3: -71 (exp. 1). [ 203.453177][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 7 on unit 3: -71 (exp. 1). [ 203.476540][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 8 on unit 3: -71 (exp. 1). [ 204.353768][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 5 on unit 3: -71 (exp. 1). [ 204.418848][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1). [ 204.438415][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 14 on unit 3: -71 (exp. 1). [ 204.469212][ T9] usb 3-1: Failed to query (GET_INFO) UVC control 15 on unit 3: -71 (exp. 1). [ 204.475334][ T6594] md: could not open device unknown-block(1,2). [ 204.505099][ T9] usb 3-1: No streaming interface found for terminal 2. [ 204.516746][ T9] usb 3-1: Failed to create links for entity 3 [ 204.517929][ T6594] md: could not open device unknown-block(1,3). [ 204.555865][ T9] usb 3-1: Failed to register entities (-22). [ 204.618780][ T9] usb 3-1: USB disconnect, device number 3 [ 204.804263][ T6598] random: crng reseeded on system resumption [ 207.058822][ T6621] random: crng reseeded on system resumption [ 225.632265][ T5792] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 226.209460][ T5792] usb 4-1: Using ep0 maxpacket: 32 [ 226.224756][ T5792] usb 4-1: config 49 has too many interfaces: 48, using maximum allowed: 32 [ 226.246471][ T5792] usb 4-1: config 49 has an invalid descriptor of length 55, skipping remainder of the config [ 226.257788][ T5792] usb 4-1: config 49 has 0 interfaces, different from the descriptor's value: 48 [ 226.293201][ T5792] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 226.309377][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.147503][ T5792] usb 4-1: Product: syz [ 227.167812][ T5792] usb 4-1: Manufacturer: syz [ 227.172589][ T5792] usb 4-1: SerialNumber: syz [ 227.433484][ T5792] usb 4-1: USB disconnect, device number 2 [ 229.857292][ T6747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 232.038179][ T6761] fuse: Bad value for 'fd' [ 236.896488][ T6797] fuse: Bad value for 'fd' [ 236.935285][ T6796] md: could not open device unknown-block(1,6). [ 236.954747][ T6796] md: could not open device unknown-block(1,7). [ 237.385344][ T6809] syz.0.248 uses obsolete (PF_INET,SOCK_PACKET) [ 238.979965][ T6812] loop9: detected capacity change from 0 to 7 [ 239.400162][ T6812] Dev loop9: unable to read RDB block 7 [ 239.411374][ T6812] loop9: unable to read partition table [ 239.502033][ T6812] loop9: partition table beyond EOD, truncated [ 239.538688][ T6812] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 239.973474][ T6831] md: could not open device unknown-block(1,2). [ 240.003547][ T6831] md: could not open device unknown-block(1,3). [ 253.922484][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.061242][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.203985][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.395723][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.749169][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 256.045397][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.052222][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.330891][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.341787][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.362780][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.388968][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.399895][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.408336][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.430365][ T6948] md: could not open device unknown-block(1,0). [ 256.437236][ T6948] md: could not open device unknown-block(1,1). [ 256.651176][ T6943] rxe_eth0 speed is unknown, defaulting to 1000 [ 258.578709][ T5786] Bluetooth: hci0: command tx timeout [ 260.256241][ T6943] chnl_net:caif_netlink_parms(): no params data found [ 260.598806][ T5786] Bluetooth: hci0: command tx timeout [ 261.566025][ T7001] autofs4:pid:7001:autofs_fill_super: called with bogus options [ 262.689084][ T5786] Bluetooth: hci0: command tx timeout [ 262.869756][ T12] hsr_slave_0: left promiscuous mode [ 262.938850][ T12] hsr_slave_1: left promiscuous mode [ 262.985468][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.014174][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.070426][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.077955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.248251][ T12] bridge_slave_1: left allmulticast mode [ 263.284333][ T12] bridge_slave_1: left promiscuous mode [ 263.350519][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.025479][ T12] bridge_slave_0: left allmulticast mode [ 264.031849][ T12] bridge_slave_0: left promiscuous mode [ 264.037714][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.140003][ T12] veth1_macvtap: left promiscuous mode [ 264.146365][ T12] veth0_macvtap: left promiscuous mode [ 264.178816][ T12] veth1_vlan: left promiscuous mode [ 264.191936][ T12] veth0_vlan: left promiscuous mode [ 264.833936][ T5790] Bluetooth: hci0: command tx timeout [ 266.992234][ T12] team0 (unregistering): Port device team_slave_1 removed [ 267.158329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 267.302903][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.397124][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.016554][ T12] bond0 (unregistering): Released all slaves [ 269.134951][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.143945][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.154814][ T6943] bridge_slave_0: entered allmulticast mode [ 269.173441][ T6943] bridge_slave_0: entered promiscuous mode [ 269.187258][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.201542][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.219128][ T6943] bridge_slave_1: entered allmulticast mode [ 269.230813][ T6943] bridge_slave_1: entered promiscuous mode [ 269.268782][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 269.294841][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 269.496141][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.526844][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.674110][ T6943] team0: Port device team_slave_0 added [ 269.699465][ T6943] team0: Port device team_slave_1 added [ 270.578653][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.747710][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.764048][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 270.772451][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.808916][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.824613][ T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.840555][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.853703][ T27] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 270.887492][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.903206][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.915055][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.941448][ T27] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 270.950825][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.972533][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.984628][ T27] usb 4-1: config 0 descriptor?? [ 271.244556][ T6943] hsr_slave_0: entered promiscuous mode [ 271.251400][ T27] usb 4-1: USB disconnect, device number 3 [ 271.861308][ T6943] hsr_slave_1: entered promiscuous mode [ 272.002787][ T6943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.107961][ T6943] Cannot create hsr debugfs directory [ 273.557876][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.641655][ T6943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.905419][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.479128][ T6943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.686046][ T6943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.931171][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.996024][ T6943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.148054][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.300730][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.314161][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.326442][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.340310][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.354255][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.369315][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.594808][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.787713][ T6943] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.828462][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.835788][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.904369][ T7102] rxe_eth0 speed is unknown, defaulting to 1000 [ 276.925292][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.932587][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.964271][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 278.197688][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.470514][ T5790] Bluetooth: hci1: command tx timeout [ 280.935602][ T5790] Bluetooth: hci1: command tx timeout [ 281.219013][ T7148] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.225039][ T7148] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 281.251388][ T7148] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.257493][ T7148] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.263671][ T7148] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 281.270968][ T7148] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 281.279541][ T7148] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.285545][ T7148] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.302385][ T7148] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.482619][ T12] hsr_slave_0: left promiscuous mode [ 281.490054][ T12] hsr_slave_1: left promiscuous mode [ 281.496811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.549015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.594061][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.632127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.659642][ T12] bridge_slave_1: left allmulticast mode [ 281.666054][ T12] bridge_slave_1: left promiscuous mode [ 281.689137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.711369][ T12] bridge_slave_0: left allmulticast mode [ 281.717113][ T12] bridge_slave_0: left promiscuous mode [ 281.741963][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.815508][ T12] veth1_macvtap: left promiscuous mode [ 281.828328][ T12] veth0_macvtap: left promiscuous mode [ 281.999802][ T12] veth1_vlan: left promiscuous mode [ 282.005256][ T12] veth0_vlan: left promiscuous mode [ 283.318950][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.325247][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.325262][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.401864][ T5798] Bluetooth: hci1: command 0x0419 tx timeout [ 285.401513][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.408071][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.478868][ T5790] Bluetooth: hci1: command 0x0419 tx timeout [ 287.057147][ T12] team0 (unregistering): Port device team_slave_1 removed [ 287.167124][ T12] team0 (unregistering): Port device team_slave_0 removed [ 287.524571][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.578607][ T5790] Bluetooth: hci1: command 0x0419 tx timeout [ 287.834938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.932044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.639575][ T5790] Bluetooth: hci1: command 0x0419 tx timeout [ 290.441681][ T12] bond0 (unregistering): Released all slaves [ 291.567245][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 291.947940][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.968827][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.998233][ T7102] bridge_slave_0: entered allmulticast mode [ 292.006543][ T7102] bridge_slave_0: entered promiscuous mode [ 292.030978][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.038331][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.046471][ T7102] bridge_slave_1: entered allmulticast mode [ 292.105741][ T7102] bridge_slave_1: entered promiscuous mode [ 292.477273][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.038658][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.194171][ T6943] veth0_vlan: entered promiscuous mode [ 293.353580][ T7102] team0: Port device team_slave_0 added [ 293.386258][ T6943] veth1_vlan: entered promiscuous mode [ 293.414675][ T7102] team0: Port device team_slave_1 added [ 293.560842][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.567954][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.642745][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.701812][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.740682][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.806980][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.974989][ T6943] veth0_macvtap: entered promiscuous mode [ 294.103143][ T6943] veth1_macvtap: entered promiscuous mode [ 294.189646][ T7102] hsr_slave_0: entered promiscuous mode [ 294.197231][ T7102] hsr_slave_1: entered promiscuous mode [ 294.204084][ T7102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.222693][ T7102] Cannot create hsr debugfs directory [ 295.289983][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.330818][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.341116][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.351917][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.408182][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.171143][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.181718][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.191646][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.211564][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.260351][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.525368][ T6943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.550118][ T6943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.588938][ T6943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.598256][ T6943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.432979][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.441465][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.342958][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.363755][ T7102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.409169][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.432578][ T7102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.536355][ T7102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.580172][ T7102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 300.486759][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.562729][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.593167][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.601479][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.497283][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.504589][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.185474][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.978453][ T7102] veth0_vlan: entered promiscuous mode [ 306.047929][ T7102] veth1_vlan: entered promiscuous mode [ 306.054191][ T7332] md: could not open device unknown-block(1,6). [ 306.088452][ T7332] md: could not open device unknown-block(1,7). [ 306.231096][ T7102] veth0_macvtap: entered promiscuous mode [ 306.250323][ T7102] veth1_macvtap: entered promiscuous mode [ 306.312455][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.328046][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.368703][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.398692][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.438694][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.451551][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.477079][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.529928][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.558878][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.588676][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.628663][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.662041][ T7102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.683515][ T7102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.720461][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.777862][ T7102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.817758][ T7102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.875900][ T7102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.908640][ T7102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.645914][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.709224][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.189580][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.234914][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.671026][ T7359] Bluetooth: MGMT ver 1.22 [ 312.023479][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.312'. [ 312.038731][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.312'. [ 317.819604][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.826190][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.887787][ T7414] md: could not open device unknown-block(1,0). [ 318.913168][ T7414] md: could not open device unknown-block(1,1). [ 328.714221][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'. [ 329.585180][ T7509] md: could not open device unknown-block(1,0). [ 329.638472][ T7509] md: could not open device unknown-block(1,1). [ 335.480789][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.399'. [ 338.748825][ T7568] md: could not open device unknown-block(1,0). [ 338.759314][ T7568] md: could not open device unknown-block(1,1). [ 342.916226][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 357.663592][ T7690] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 367.459264][ T7778] input: syz0 as /devices/virtual/input/input7 [ 369.837551][ T7796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 374.022752][ T7831] input: syz0 as /devices/virtual/input/input8 [ 378.924777][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.934933][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.225202][ T7885] input: syz0 as /devices/virtual/input/input9 [ 403.335347][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.487'. [ 403.373916][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.487'. [ 407.090976][ T8085] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 440.369028][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375551][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.417977][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.431995][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.452220][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.473965][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.483711][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.491673][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.617132][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.861121][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.925502][ T8475] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.025862][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.222344][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.599698][ T5798] Bluetooth: hci0: command tx timeout [ 456.929181][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.959219][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.993173][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.018823][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.048856][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 457.106061][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 458.298279][ T8501] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.678610][ T5790] Bluetooth: hci0: command tx timeout [ 459.167543][ T5790] Bluetooth: hci2: command tx timeout [ 459.495401][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 460.758599][ T5790] Bluetooth: hci0: command tx timeout [ 461.239453][ T5790] Bluetooth: hci2: command tx timeout [ 461.770342][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.777542][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.829350][ T8475] bridge_slave_0: entered allmulticast mode [ 461.840352][ T8475] bridge_slave_0: entered promiscuous mode [ 461.874038][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.903056][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.919694][ T8475] bridge_slave_1: entered allmulticast mode [ 461.959017][ T8475] bridge_slave_1: entered promiscuous mode [ 462.174414][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.190804][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.200953][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.212002][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.227959][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 462.235832][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.235955][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.320039][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.549654][ T8475] team0: Port device team_slave_0 added [ 462.556924][ T8552] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.619568][ T8475] team0: Port device team_slave_1 added [ 462.703881][ T60] hsr_slave_0: left promiscuous mode [ 462.730899][ T60] hsr_slave_1: left promiscuous mode [ 462.765833][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.788706][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.810640][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.818138][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.856838][ T5798] Bluetooth: hci0: command tx timeout [ 462.864775][ T60] bridge_slave_1: left allmulticast mode [ 462.889145][ T60] bridge_slave_1: left promiscuous mode [ 462.895082][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.955309][ T60] bridge_slave_0: left allmulticast mode [ 462.979778][ T60] bridge_slave_0: left promiscuous mode [ 462.985665][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.139443][ T60] veth1_macvtap: left promiscuous mode [ 463.145088][ T60] veth0_macvtap: left promiscuous mode [ 463.157589][ T60] veth1_vlan: left promiscuous mode [ 463.163629][ T60] veth0_vlan: left promiscuous mode [ 463.348814][ T5798] Bluetooth: hci2: command tx timeout [ 464.374258][ T5798] Bluetooth: hci3: command tx timeout [ 464.700834][ T60] team0 (unregistering): Port device team_slave_1 removed [ 464.746923][ T60] team0 (unregistering): Port device team_slave_0 removed [ 464.798719][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.845509][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.194651][ T60] bond0 (unregistering): Released all slaves [ 465.391152][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.398221][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.431260][ T5798] Bluetooth: hci2: command tx timeout [ 465.438191][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.452693][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.460610][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.493781][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.517248][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 465.756394][ T8475] hsr_slave_0: entered promiscuous mode [ 465.789236][ T8475] hsr_slave_1: entered promiscuous mode [ 465.796108][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.819256][ T8475] Cannot create hsr debugfs directory [ 465.935898][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.943397][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.951220][ T8501] bridge_slave_0: entered allmulticast mode [ 465.964142][ T8501] bridge_slave_0: entered promiscuous mode [ 465.974003][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.982135][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.989940][ T8501] bridge_slave_1: entered allmulticast mode [ 465.997509][ T8501] bridge_slave_1: entered promiscuous mode [ 466.072183][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.121836][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.315916][ T8501] team0: Port device team_slave_0 added [ 466.332189][ T8501] team0: Port device team_slave_1 added [ 466.357796][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 466.439055][ T5798] Bluetooth: hci3: command tx timeout [ 466.600729][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.607848][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.678776][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.711969][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.728555][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.779593][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.003765][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.023087][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.034012][ T8552] bridge_slave_0: entered allmulticast mode [ 467.041077][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.042971][ T8552] bridge_slave_0: entered promiscuous mode [ 467.058005][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.067354][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.075612][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.094179][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 467.103375][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 467.140269][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.147690][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.167437][ T8552] bridge_slave_1: entered allmulticast mode [ 467.176218][ T8552] bridge_slave_1: entered promiscuous mode [ 467.228263][ T8501] hsr_slave_0: entered promiscuous mode [ 467.235193][ T8501] hsr_slave_1: entered promiscuous mode [ 467.242137][ T8501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.249997][ T8501] Cannot create hsr debugfs directory [ 467.279516][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.290151][ T8475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.309085][ T8606] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.351519][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.371046][ T8475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.433469][ T8475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.509595][ T8475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.567063][ T8552] team0: Port device team_slave_0 added [ 467.616825][ T8552] team0: Port device team_slave_1 added [ 467.828388][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.836447][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.863500][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.877377][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.885143][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.911957][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.053199][ T8552] hsr_slave_0: entered promiscuous mode [ 468.061181][ T8552] hsr_slave_1: entered promiscuous mode [ 468.067832][ T8552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.076194][ T8552] Cannot create hsr debugfs directory [ 468.138377][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.227776][ T8501] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.267809][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.307598][ T8501] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.328067][ T8501] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.371816][ T8501] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 468.401992][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.409356][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.508971][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.516216][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.524526][ T5790] Bluetooth: hci3: command tx timeout [ 468.856322][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 468.972744][ T8552] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.039176][ T8552] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.060600][ T8552] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.074938][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.129369][ T8552] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.177115][ T5790] Bluetooth: hci1: command tx timeout [ 469.244005][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.355672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.363020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.384955][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.417392][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.429085][ T8606] bridge_slave_0: entered allmulticast mode [ 469.459158][ T8606] bridge_slave_0: entered promiscuous mode [ 469.469886][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.477118][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.485547][ T8606] bridge_slave_1: entered allmulticast mode [ 469.510150][ T8606] bridge_slave_1: entered promiscuous mode [ 469.557368][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.613694][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.664644][ T8606] team0: Port device team_slave_0 added [ 469.682069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.689335][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.712544][ T8606] team0: Port device team_slave_1 added [ 469.745132][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.847113][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.862733][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.896430][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.939453][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.946487][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.987182][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.041307][ T8501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.170752][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.229482][ T8606] hsr_slave_0: entered promiscuous mode [ 470.260045][ T8606] hsr_slave_1: entered promiscuous mode [ 470.268717][ T8606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.276332][ T8606] Cannot create hsr debugfs directory [ 470.427559][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.544882][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.552385][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.600447][ T5790] Bluetooth: hci3: command tx timeout [ 470.686367][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.693645][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.872069][ T8475] veth0_vlan: entered promiscuous mode [ 470.904533][ T8475] veth1_vlan: entered promiscuous mode [ 470.961103][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.093072][ T8475] veth0_macvtap: entered promiscuous mode [ 471.142365][ T8475] veth1_macvtap: entered promiscuous mode [ 471.185229][ T8606] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.232707][ T8606] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.249224][ T5790] Bluetooth: hci1: command tx timeout [ 471.273752][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.284654][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.295541][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.307682][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.317979][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.330193][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.348871][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.360008][ T8606] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.386311][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.397742][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.408959][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.420869][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.431399][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.442324][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.454400][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.474249][ T8606] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.518018][ T8475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.532091][ T8475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.547139][ T8475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.557357][ T8475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.858549][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.866458][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.892537][ T8606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.021277][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.035985][ T8606] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.044478][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.085732][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.114448][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.121832][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.199551][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.206806][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.412567][ T8501] veth0_vlan: entered promiscuous mode [ 472.458942][ T8501] veth1_vlan: entered promiscuous mode [ 473.324057][ T5790] Bluetooth: hci1: command tx timeout [ 473.366698][ T8501] veth0_macvtap: entered promiscuous mode [ 473.443303][ T8501] veth1_macvtap: entered promiscuous mode [ 473.527434][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.549463][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.584802][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.619554][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.669081][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.697790][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.728560][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.790879][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.826882][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.863873][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.916031][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.940759][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.957225][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.974742][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.986337][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.997056][ T8501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.008594][ T8501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.049102][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.084081][ T8501] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.097837][ T8501] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.107625][ T8501] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.116892][ T8501] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.296547][ T8552] veth0_vlan: entered promiscuous mode [ 474.342205][ T8606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.427834][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.472755][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.501664][ T8552] veth1_vlan: entered promiscuous mode [ 474.590499][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.634640][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.743571][ T8552] veth0_macvtap: entered promiscuous mode [ 474.811165][ T8552] veth1_macvtap: entered promiscuous mode [ 474.883146][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.918376][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.947987][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.988574][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.018705][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.040846][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.068596][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.107029][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.128781][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.149810][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.191338][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.218794][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.244753][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.265199][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.297033][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.348286][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.368841][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.399443][ T5790] Bluetooth: hci1: command tx timeout [ 475.412812][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.443945][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.476768][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.523836][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.537396][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.629712][ T8552] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.690700][ T8552] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.745759][ T8552] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.768658][ T8552] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.682752][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.728649][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.823871][ T8606] veth0_vlan: entered promiscuous mode [ 476.847948][ T8606] veth1_vlan: entered promiscuous mode [ 476.922094][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.956030][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.126869][ T8606] veth0_macvtap: entered promiscuous mode [ 477.145332][ T8606] veth1_macvtap: entered promiscuous mode [ 477.218237][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.240977][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.263777][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.285674][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.296029][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.320973][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.337984][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.359755][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.371812][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.385222][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.395256][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.406559][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.437951][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.467534][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.498617][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.528773][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.559657][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.598686][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.628649][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.648583][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.692313][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.723910][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.765876][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.815630][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.860986][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.922173][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.953286][ T8606] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.004570][ T8606] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.039645][ T8606] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.048439][ T8606] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.400802][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.448216][ T28] audit: type=1800 audit(1793638940.398:2): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.589" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 478.473909][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.587752][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.630943][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.970550][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.584'. [ 479.040670][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.584'. [ 479.109612][ T8756] veth1: entered promiscuous mode [ 479.127420][ T8756] veth0: entered promiscuous mode [ 479.279883][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.298354][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.315471][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.332503][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.350226][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 479.359706][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.584320][ T8761] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.895957][ T8778] Bluetooth: MGMT ver 1.22 [ 481.134517][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 483.350365][ T5790] Bluetooth: hci0: command tx timeout [ 484.017118][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.056157][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.094300][ T8761] bridge_slave_0: entered allmulticast mode [ 484.124621][ T8761] bridge_slave_0: entered promiscuous mode [ 484.152945][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.168663][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.176013][ T8761] bridge_slave_1: entered allmulticast mode [ 484.193104][ T8761] bridge_slave_1: entered promiscuous mode [ 484.270059][ T8806] random: crng reseeded on system resumption [ 484.330280][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.7.601'. [ 484.401045][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.7.601'. [ 484.695033][ T8801] veth0_to_bridge: entered promiscuous mode [ 484.795841][ T8801] veth0_to_bridge: left promiscuous mode [ 485.578853][ T5790] Bluetooth: hci0: command tx timeout [ 485.690526][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.722651][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.821701][ T8761] team0: Port device team_slave_0 added [ 485.832402][ T8761] team0: Port device team_slave_1 added [ 485.920832][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.949530][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.075861][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.089293][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.096320][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.124662][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.262198][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.279234][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.287971][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.298741][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.306634][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 486.314625][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.107936][ T8761] hsr_slave_0: entered promiscuous mode [ 487.160235][ T8761] hsr_slave_1: entered promiscuous mode [ 487.187415][ T8761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.217939][ T8761] Cannot create hsr debugfs directory [ 487.520826][ T8812] rxe_eth0 speed is unknown, defaulting to 1000 [ 487.639376][ T5798] Bluetooth: hci0: command tx timeout [ 488.359839][ T5798] Bluetooth: hci1: command tx timeout [ 490.999489][ T5798] Bluetooth: hci0: command tx timeout [ 491.005031][ T5798] Bluetooth: hci1: command tx timeout [ 491.482092][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.610'. [ 491.498633][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.7.610'. [ 491.524625][ T8853] veth0_to_bridge: entered promiscuous mode [ 491.549515][ T8853] veth0_to_bridge: left promiscuous mode [ 492.431753][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 493.079606][ T5790] Bluetooth: hci1: command tx timeout [ 493.185449][ T8761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 493.357856][ T8761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.500605][ T8761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.687572][ T8761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 494.110885][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.118150][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.209417][ T8812] bridge_slave_0: entered allmulticast mode [ 494.270016][ T8812] bridge_slave_0: entered promiscuous mode [ 494.323330][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.388647][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.396280][ T8812] bridge_slave_1: entered allmulticast mode [ 494.471357][ T8812] bridge_slave_1: entered promiscuous mode [ 494.708053][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.811238][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.952275][ T8812] team0: Port device team_slave_0 added [ 494.982522][ T8812] team0: Port device team_slave_1 added [ 495.079695][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.086721][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.147337][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.163343][ T5790] Bluetooth: hci1: command tx timeout [ 495.209600][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.238376][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.254806][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.299851][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.505403][ T8812] hsr_slave_0: entered promiscuous mode [ 495.521585][ T8812] hsr_slave_1: entered promiscuous mode [ 495.535483][ T8812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.547629][ T8812] Cannot create hsr debugfs directory [ 495.572870][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.691134][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.698362][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.730842][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.738178][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.001684][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.621'. [ 498.372893][ T23] kernel write not supported for file /vcsa (pid: 23 comm: kworker/1:0) [ 499.742405][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.127804][ T8761] veth0_vlan: entered promiscuous mode [ 500.174282][ T8761] veth1_vlan: entered promiscuous mode [ 500.266993][ T8761] veth0_macvtap: entered promiscuous mode [ 500.289361][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.629'. [ 500.320857][ T8761] veth1_macvtap: entered promiscuous mode [ 500.523427][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.573085][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.620194][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.652493][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.662717][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.673551][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.683840][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.696483][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.706415][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.717549][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.738085][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.778552][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.828076][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.828101][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.979350][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.979458][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.003789][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.268748][ T8812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 502.319306][ T8812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 502.390946][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.390974][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.390991][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391006][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.391023][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391037][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.391055][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391069][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.391085][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391106][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.391121][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391135][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.391153][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.391167][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.393222][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.393352][ T8812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 502.422512][ T8812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 502.462297][ T8761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.462384][ T8761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.462414][ T8761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.462443][ T8761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.843045][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.843115][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.853847][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.003811][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.003835][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.007007][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.025097][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.025259][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.048497][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.048616][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.394733][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.960553][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.612156][ T9012] autofs4:pid:9012:autofs_fill_super: called with bogus options [ 506.911739][ T8812] veth0_vlan: entered promiscuous mode [ 506.982627][ T8812] veth1_vlan: entered promiscuous mode [ 507.141984][ T8812] veth0_macvtap: entered promiscuous mode [ 507.272050][ T8812] veth1_macvtap: entered promiscuous mode [ 508.891418][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.948587][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.968857][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.990946][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.019895][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.054440][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.079147][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.095360][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.118612][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.149500][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.178586][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.206910][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.234537][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.268660][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.298877][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.338536][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.370778][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.393192][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.448513][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.468548][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.508533][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.518431][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.571525][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.608525][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.638966][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.678809][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.738978][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.788552][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.844363][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.909220][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.408794][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.480091][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.528435][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.610560][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.655561][ T8812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.666125][ T8812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.674995][ T8812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.683955][ T8812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.972740][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.023182][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.173752][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.199913][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.476297][ T9054] autofs4:pid:9054:autofs_fill_super: called with bogus options [ 511.521035][ T9057] FAULT_INJECTION: forcing a failure. [ 511.521035][ T9057] name failslab, interval 1, probability 0, space 0, times 0 [ 511.534375][ T9057] CPU: 0 PID: 9057 Comm: syz.2.598 Not tainted syzkaller #0 [ 511.541722][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 511.551872][ T9057] Call Trace: [ 511.555269][ T9057] [ 511.558313][ T9057] dump_stack_lvl+0x18c/0x250 [ 511.563320][ T9057] ? lock_chain_count+0x20/0x20 [ 511.568335][ T9057] ? show_regs_print_info+0x20/0x20 [ 511.573694][ T9057] ? load_image+0x420/0x420 [ 511.578320][ T9057] should_fail_ex+0x394/0x4c0 [ 511.583143][ T9057] should_failslab+0x9/0x20 [ 511.587720][ T9057] slab_pre_alloc_hook+0x59/0x300 [ 511.592834][ T9057] kmem_cache_alloc+0x5a/0x2d0 [ 511.597656][ T9057] ? __inet_hash_connect+0x808/0x1870 [ 511.603152][ T9057] __inet_hash_connect+0x808/0x1870 [ 511.608423][ T9057] ? inet6_hash_connect+0xe0/0xe0 [ 511.613692][ T9057] ? inet_bhash2_reset_saddr+0x80/0x80 [ 511.619222][ T9057] ? sk_setup_caps+0x8ec/0xb30 [ 511.624161][ T9057] ? inet6_hash_connect+0x7b/0xe0 [ 511.629241][ T9057] tcp_v6_connect+0xf51/0x18e0 [ 511.634152][ T9057] ? tcp_v6_pre_connect+0xf0/0xf0 [ 511.639251][ T9057] ? tcp_sendmsg_locked+0x44ee/0x4ab0 [ 511.644695][ T9057] ? tcp_sendmsg+0x2f/0x50 [ 511.649171][ T9057] ? __sys_sendto+0x4a9/0x6b0 [ 511.653898][ T9057] ? __x64_sys_sendto+0xde/0xf0 [ 511.658807][ T9057] ? do_syscall_64+0x55/0xb0 [ 511.663476][ T9057] __inet_stream_connect+0x290/0xf50 [ 511.668884][ T9057] ? inet_dgram_connect+0x340/0x340 [ 511.674170][ T9057] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 511.679477][ T9057] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 511.684777][ T9057] ? verify_lock_unused+0x140/0x140 [ 511.690128][ T9057] ? futex_wait_queue+0x9d/0x1b0 [ 511.695260][ T9057] ? mark_lock+0x94/0x320 [ 511.699736][ T9057] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 511.705764][ T9057] ? lock_chain_count+0x20/0x20 [ 511.710656][ T9057] ? tcp_set_state+0x6c0/0x6c0 [ 511.715480][ T9057] tcp_sendmsg+0x2f/0x50 [ 511.719794][ T9057] __sys_sendto+0x4a9/0x6b0 [ 511.724428][ T9057] ? __ia32_sys_getpeername+0x90/0x90 [ 511.729947][ T9057] ? aa_af_perm+0x330/0x330 [ 511.734643][ T9057] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 511.740688][ T9057] ? lock_chain_count+0x20/0x20 [ 511.745673][ T9057] __x64_sys_sendto+0xde/0xf0 [ 511.750384][ T9057] do_syscall_64+0x55/0xb0 [ 511.754848][ T9057] ? clear_bhb_loop+0x40/0x90 [ 511.759694][ T9057] ? clear_bhb_loop+0x40/0x90 [ 511.764411][ T9057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.770436][ T9057] RIP: 0033:0x7fb752b9fb19 [ 511.774971][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.794668][ T9057] RSP: 002b:00007fb753a6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.803121][ T9057] RAX: ffffffffffffffda RBX: 00007fb752e25fa0 RCX: 00007fb752b9fb19 [ 511.811126][ T9057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 511.819138][ T9057] RBP: 00007fb752c37af8 R08: 0000200000000300 R09: 000000000000001c [ 511.827140][ T9057] R10: 0000000020000075 R11: 0000000000000246 R12: 0000000000000000 [ 511.835146][ T9057] R13: 00007fb752e26038 R14: 00007fb752e25fa0 R15: 00007ffd845d7338 [ 511.843422][ T9057] [ 517.468837][ T7693] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 517.534036][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 518.068634][ T7693] usb 8-1: device descriptor read/64, error -32 [ 518.348583][ T7693] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 519.378669][ T7693] usb 8-1: Using ep0 maxpacket: 16 [ 519.424289][ T7693] usb 8-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 519.495407][ T7693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.548544][ T7693] usb 8-1: Product: syz [ 519.552968][ T7693] usb 8-1: Manufacturer: syz [ 519.557605][ T7693] usb 8-1: SerialNumber: syz [ 519.631238][ T7693] usb 8-1: config 0 descriptor?? [ 519.695584][ T7693] usb-storage 8-1:0.0: USB Mass Storage device detected [ 519.787386][ T7693] usb-storage 8-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 520.187455][ T7693] usb 8-1: USB disconnect, device number 3 [ 521.217420][ T9131] FAULT_INJECTION: forcing a failure. [ 521.217420][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 521.242600][ T9133] autofs4:pid:9133:autofs_fill_super: called with bogus options [ 521.259446][ T9131] CPU: 0 PID: 9131 Comm: syz.2.661 Not tainted syzkaller #0 [ 521.266824][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 521.276972][ T9131] Call Trace: [ 521.280302][ T9131] [ 521.283300][ T9131] dump_stack_lvl+0x18c/0x250 [ 521.288062][ T9131] ? show_regs_print_info+0x20/0x20 [ 521.293346][ T9131] ? load_image+0x420/0x420 [ 521.297934][ T9131] ? __might_sleep+0xe0/0xe0 [ 521.302729][ T9131] ? __lock_acquire+0x7eb0/0x7eb0 [ 521.307926][ T9131] should_fail_ex+0x394/0x4c0 [ 521.312690][ T9131] should_failslab+0x9/0x20 [ 521.317305][ T9131] slab_pre_alloc_hook+0x59/0x300 [ 521.322409][ T9131] ? pcpu_alloc+0xee5/0x1880 [ 521.327115][ T9131] ? __kernfs_new_node+0xaa/0x7f0 [ 521.332245][ T9131] ? __kernfs_new_node+0xaa/0x7f0 [ 521.337469][ T9131] __kmem_cache_alloc_node+0x53/0x260 [ 521.342919][ T9131] ? __kernfs_new_node+0xaa/0x7f0 [ 521.348189][ T9131] __kmalloc_node_track_caller+0xa4/0x230 [ 521.353990][ T9131] kstrdup+0x3b/0x80 [ 521.358027][ T9131] __kernfs_new_node+0xaa/0x7f0 [ 521.362975][ T9131] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 521.369256][ T9131] ? _raw_spin_unlock+0x40/0x40 [ 521.374209][ T9131] ? kernfs_new_node+0x260/0x260 [ 521.379224][ T9131] ? pcpu_alloc+0x11e7/0x1880 [ 521.384060][ T9131] ? cgroup_rstat_init+0x67/0x1d0 [ 521.389164][ T9131] kernfs_new_node+0x14c/0x260 [ 521.393999][ T9131] kernfs_create_dir_ns+0x44/0x120 [ 521.399183][ T9131] cgroup_mkdir+0x4ae/0xe70 [ 521.403758][ T9131] ? __up_read+0x2b8/0x6b0 [ 521.408224][ T9131] ? css_task_iter_end+0x2c0/0x2c0 [ 521.413403][ T9131] ? up_read+0x20/0x20 [ 521.417532][ T9131] ? make_vfsuid+0x67/0xb0 [ 521.422045][ T9131] ? generic_permission+0x1ed/0x590 [ 521.427302][ T9131] ? kernfs_iop_permission+0x2c4/0x3b0 [ 521.432921][ T9131] ? css_task_iter_end+0x2c0/0x2c0 [ 521.438088][ T9131] kernfs_iop_mkdir+0x241/0x3e0 [ 521.443000][ T9131] vfs_mkdir+0x2a5/0x470 [ 521.447333][ T9131] do_mkdirat+0x1dc/0x450 [ 521.451728][ T9131] ? vfs_mkdir+0x470/0x470 [ 521.456218][ T9131] __x64_sys_mkdirat+0x89/0xa0 [ 521.461052][ T9131] do_syscall_64+0x55/0xb0 [ 521.465567][ T9131] ? clear_bhb_loop+0x40/0x90 [ 521.470308][ T9131] ? clear_bhb_loop+0x40/0x90 [ 521.475049][ T9131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.481445][ T9131] RIP: 0033:0x7fb752b9fb19 [ 521.485915][ T9131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.505591][ T9131] RSP: 002b:00007fb753a6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 521.514171][ T9131] RAX: ffffffffffffffda RBX: 00007fb752e25fa0 RCX: 00007fb752b9fb19 [ 521.522207][ T9131] RDX: 00000000000001ff RSI: 0000200000001100 RDI: ffffffffffffff9c [ 521.530248][ T9131] RBP: 00007fb752c37af8 R08: 0000000000000000 R09: 0000000000000000 [ 521.538379][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.546533][ T9131] R13: 00007fb752e26038 R14: 00007fb752e25fa0 R15: 00007ffd845d7338 [ 521.554602][ T9131] [ 523.646304][ T9148] netlink: 104 bytes leftover after parsing attributes in process `syz.2.667'. [ 525.004818][ T9159] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 525.038984][ T9159] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 525.046581][ T9159] FAULT_INJECTION: forcing a failure. [ 525.046581][ T9159] name failslab, interval 1, probability 0, space 0, times 0 [ 525.110659][ T9159] CPU: 1 PID: 9159 Comm: syz.2.670 Not tainted syzkaller #0 [ 525.118220][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 525.128359][ T9159] Call Trace: [ 525.131714][ T9159] [ 525.134709][ T9159] dump_stack_lvl+0x18c/0x250 [ 525.139472][ T9159] ? show_regs_print_info+0x20/0x20 [ 525.144746][ T9159] ? load_image+0x420/0x420 [ 525.149317][ T9159] ? __might_sleep+0xe0/0xe0 [ 525.153976][ T9159] ? __lock_acquire+0x7eb0/0x7eb0 [ 525.159097][ T9159] should_fail_ex+0x394/0x4c0 [ 525.163852][ T9159] should_failslab+0x9/0x20 [ 525.168420][ T9159] slab_pre_alloc_hook+0x59/0x300 [ 525.173508][ T9159] ? get_device_parent+0x255/0x390 [ 525.178764][ T9159] __kmem_cache_alloc_node+0x53/0x260 [ 525.184192][ T9159] ? get_device_parent+0x255/0x390 [ 525.189359][ T9159] kmalloc_trace+0x2a/0xe0 [ 525.193824][ T9159] get_device_parent+0x255/0x390 [ 525.198893][ T9159] device_add+0x2d4/0xc40 [ 525.203263][ T9159] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 525.208824][ T9159] wakeup_source_register+0x163/0x240 [ 525.214254][ T9159] device_wakeup_enable+0x102/0x290 [ 525.219515][ T9159] usb_hcd_submit_urb+0xdd4/0x1b40 [ 525.224709][ T9159] proc_do_submiturb+0x262b/0x3410 [ 525.229876][ T9159] proc_submiturb+0x135/0x1a0 [ 525.234608][ T9159] ? proc_setconfig+0x5c0/0x5c0 [ 525.239518][ T9159] usbdev_ioctl+0x1117/0x2160 [ 525.244237][ T9159] ? usbdev_poll+0x1f0/0x1f0 [ 525.248882][ T9159] ? bpf_lsm_file_ioctl+0x9/0x10 [ 525.253910][ T9159] ? security_file_ioctl+0x80/0xa0 [ 525.259118][ T9159] ? usbdev_poll+0x1f0/0x1f0 [ 525.263767][ T9159] __se_sys_ioctl+0xfd/0x170 [ 525.268414][ T9159] do_syscall_64+0x55/0xb0 [ 525.272882][ T9159] ? clear_bhb_loop+0x40/0x90 [ 525.277635][ T9159] ? clear_bhb_loop+0x40/0x90 [ 525.282369][ T9159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.288393][ T9159] RIP: 0033:0x7fb752b9fb19 [ 525.292846][ T9159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.312497][ T9159] RSP: 002b:00007fb753a6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.320963][ T9159] RAX: ffffffffffffffda RBX: 00007fb752e25fa0 RCX: 00007fb752b9fb19 [ 525.328967][ T9159] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000005 [ 525.336985][ T9159] RBP: 00007fb752c37af8 R08: 0000000000000000 R09: 0000000000000000 [ 525.344999][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.353006][ T9159] R13: 00007fb752e26038 R14: 00007fb752e25fa0 R15: 00007ffd845d7338 [ 525.361045][ T9159] [ 526.828866][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 527.138862][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 527.620964][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 527.671206][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.688558][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.729047][ T5876] usb 3-1: Product: syz [ 527.733476][ T5876] usb 3-1: Manufacturer: syz [ 527.738162][ T5876] usb 3-1: SerialNumber: syz [ 527.780093][ T5876] usb 3-1: config 0 descriptor?? [ 528.054543][ T5916] usb 3-1: USB disconnect, device number 4 [ 530.178910][ T9205] autofs4:pid:9205:autofs_fill_super: called with bogus options [ 532.844392][ T5916] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 533.054882][ T5916] usb 2-1: device descriptor read/64, error -71 [ 533.349677][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 533.548215][ T9237] block device autoloading is deprecated and will be removed. [ 533.557176][ T5916] usb 2-1: device descriptor read/64, error -71 [ 533.715577][ T5916] usb usb2-port1: attempt power cycle [ 534.173256][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 534.225873][ T5916] usb 2-1: device descriptor read/8, error -71 [ 534.543327][ T5916] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 534.690299][ T5916] usb 2-1: device descriptor read/8, error -71 [ 534.909176][ T5916] usb usb2-port1: unable to enumerate USB device [ 537.979051][ T5916] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 538.061059][ T7693] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 538.173346][ T5916] usb 9-1: Using ep0 maxpacket: 32 [ 538.187496][ T5916] usb 9-1: unable to get BOS descriptor or descriptor too short [ 538.213183][ T5916] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 538.241092][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.258323][ T5916] usb 9-1: Product: syz [ 538.268174][ T5916] usb 9-1: Manufacturer: syz [ 538.278289][ T5916] usb 9-1: SerialNumber: syz [ 538.290246][ T7693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 538.305684][ T7693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 538.335133][ T7693] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 538.353751][ T7693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.373739][ T7693] usb 2-1: Product: syz [ 538.383881][ T7693] usb 2-1: Manufacturer: syz [ 538.395285][ T7693] usb 2-1: SerialNumber: syz [ 538.419663][ T7693] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 538.481313][ T7693] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 538.505160][ T7693] input input10: usb_submit_urb failed [ 538.580585][ T5916] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 538.590728][ T7693] input: failed to attach handler kbd to device input10, error: -5 [ 538.614909][ T5916] usb 9-1: USB disconnect, device number 2 [ 538.634383][ T5136] input input10: usb_submit_urb failed [ 538.663096][ T7693] scsi host1: usb-storage 2-1:1.0 [ 538.700341][ T5136] input input10: usb_submit_urb failed [ 538.706678][ T7693] usb 2-1: USB disconnect, device number 6 [ 540.422200][ T9322] FAULT_INJECTION: forcing a failure. [ 540.422200][ T9322] name fail_futex, interval 1, probability 0, space 0, times 1 [ 540.514192][ T9322] CPU: 1 PID: 9322 Comm: syz.2.704 Not tainted syzkaller #0 [ 540.521580][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 540.531696][ T9322] Call Trace: [ 540.535019][ T9322] [ 540.537990][ T9322] dump_stack_lvl+0x18c/0x250 [ 540.542738][ T9322] ? show_regs_print_info+0x20/0x20 [ 540.548005][ T9322] ? load_image+0x420/0x420 [ 540.552571][ T9322] ? kasan_set_track+0x5f/0x70 [ 540.557392][ T9322] ? kasan_set_track+0x4e/0x70 [ 540.562306][ T9322] should_fail_ex+0x394/0x4c0 [ 540.567062][ T9322] get_futex_key+0x134/0xf40 [ 540.571750][ T9322] ? futex_setup_timer+0xc0/0xc0 [ 540.576928][ T9322] futex_wake+0x127/0x4f0 [ 540.581318][ T9322] ? futex_wake_mark+0x150/0x150 [ 540.586357][ T9322] ? kasan_quarantine_put+0xd8/0x220 [ 540.591716][ T9322] do_futex+0x35d/0x3e0 [ 540.595927][ T9322] ? __ia32_sys_get_robust_list+0x110/0x110 [ 540.601890][ T9322] __se_sys_futex+0x3a9/0x440 [ 540.606643][ T9322] ? __x64_sys_futex+0xf0/0xf0 [ 540.611581][ T9322] ? __x64_sys_futex+0x21/0xf0 [ 540.616406][ T9322] do_syscall_64+0x55/0xb0 [ 540.621056][ T9322] ? clear_bhb_loop+0x40/0x90 [ 540.625834][ T9322] ? clear_bhb_loop+0x40/0x90 [ 540.630606][ T9322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.636578][ T9322] RIP: 0033:0x7fb752b9fb19 [ 540.641055][ T9322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.660719][ T9322] RSP: 002b:00007fb753a6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 540.669224][ T9322] RAX: ffffffffffffffda RBX: 00007fb752e25fa8 RCX: 00007fb752b9fb19 [ 540.677348][ T9322] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb752e25fac [ 540.685403][ T9322] RBP: 00007fb752e25fa0 R08: 00000000007231a0 R09: 0000000000000000 [ 540.693427][ T9322] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 540.701445][ T9322] R13: 00007fb752e26038 R14: 00007ffd845d7250 R15: 00007ffd845d7338 [ 540.709488][ T9322] [ 541.336443][ T5785] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 543.167164][ T5785] usb 2-1: device descriptor read/64, error -71 [ 543.467428][ T5785] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 546.766012][ T9361] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 546.808984][ T9361] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 546.859819][ T9361] FAULT_INJECTION: forcing a failure. [ 546.859819][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 546.911526][ T9361] CPU: 0 PID: 9361 Comm: syz.1.715 Not tainted syzkaller #0 [ 546.919001][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 546.929216][ T9361] Call Trace: [ 546.932548][ T9361] [ 546.935539][ T9361] dump_stack_lvl+0x18c/0x250 [ 546.940343][ T9361] ? show_regs_print_info+0x20/0x20 [ 546.945631][ T9361] ? load_image+0x420/0x420 [ 546.950212][ T9361] ? __might_sleep+0xe0/0xe0 [ 546.954894][ T9361] ? __lock_acquire+0x7eb0/0x7eb0 [ 546.960041][ T9361] should_fail_ex+0x394/0x4c0 [ 546.964818][ T9361] should_failslab+0x9/0x20 [ 546.969672][ T9361] slab_pre_alloc_hook+0x59/0x300 [ 546.974786][ T9361] kmem_cache_alloc+0x5a/0x2d0 [ 546.979589][ T9361] ? __kernfs_new_node+0xe5/0x7f0 [ 546.984767][ T9361] __kernfs_new_node+0xe5/0x7f0 [ 546.989968][ T9361] ? lock_chain_count+0x20/0x20 [ 546.994854][ T9361] ? unwind_get_return_address+0x91/0xc0 [ 547.000595][ T9361] ? kernfs_new_node+0x260/0x260 [ 547.005583][ T9361] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 547.011531][ T9361] ? lockdep_hardirqs_on+0x98/0x150 [ 547.016840][ T9361] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 547.022879][ T9361] ? _raw_spin_unlock+0x40/0x40 [ 547.027788][ T9361] ? stack_trace_save+0xaa/0x100 [ 547.032791][ T9361] kernfs_new_node+0x14c/0x260 [ 547.037609][ T9361] kernfs_create_dir_ns+0x44/0x120 [ 547.042779][ T9361] sysfs_create_dir_ns+0x130/0x2a0 [ 547.047927][ T9361] ? __lock_acquire+0x7eb0/0x7eb0 [ 547.052988][ T9361] ? sysfs_warn_dup+0xa0/0xa0 [ 547.057739][ T9361] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.063950][ T9361] ? do_raw_spin_unlock+0x121/0x230 [ 547.069454][ T9361] kobject_add_internal+0x617/0xc90 [ 547.075154][ T9361] kobject_add+0x164/0x240 [ 547.079631][ T9361] ? kobject_init+0x1d0/0x1d0 [ 547.084348][ T9361] ? kobject_init+0x7f/0x1d0 [ 547.088999][ T9361] get_device_parent+0x316/0x390 [ 547.094020][ T9361] device_add+0x2d4/0xc40 [ 547.098393][ T9361] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 547.103892][ T9361] wakeup_source_register+0x163/0x240 [ 547.109298][ T9361] device_wakeup_enable+0x102/0x290 [ 547.114532][ T9361] usb_hcd_submit_urb+0xdd4/0x1b40 [ 547.119725][ T9361] proc_do_submiturb+0x262b/0x3410 [ 547.124918][ T9361] proc_submiturb+0x135/0x1a0 [ 547.129643][ T9361] ? proc_setconfig+0x5c0/0x5c0 [ 547.134702][ T9361] usbdev_ioctl+0x1117/0x2160 [ 547.139481][ T9361] ? usbdev_poll+0x1f0/0x1f0 [ 547.144134][ T9361] ? bpf_lsm_file_ioctl+0x9/0x10 [ 547.149123][ T9361] ? security_file_ioctl+0x80/0xa0 [ 547.154297][ T9361] ? usbdev_poll+0x1f0/0x1f0 [ 547.159101][ T9361] __se_sys_ioctl+0xfd/0x170 [ 547.163744][ T9361] do_syscall_64+0x55/0xb0 [ 547.168199][ T9361] ? clear_bhb_loop+0x40/0x90 [ 547.172908][ T9361] ? clear_bhb_loop+0x40/0x90 [ 547.177652][ T9361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.183590][ T9361] RIP: 0033:0x7fd37d79fb19 [ 547.188057][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.207805][ T9361] RSP: 002b:00007fd37e5a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.216262][ T9361] RAX: ffffffffffffffda RBX: 00007fd37da25fa0 RCX: 00007fd37d79fb19 [ 547.224272][ T9361] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000005 [ 547.232358][ T9361] RBP: 00007fd37d837af8 R08: 0000000000000000 R09: 0000000000000000 [ 547.240430][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.248444][ T9361] R13: 00007fd37da26038 R14: 00007fd37da25fa0 R15: 00007fffe58357e8 [ 547.256646][ T9361] [ 547.307336][ T9361] kobject: kobject_add_internal failed for wakeup (error: -12 parent: usb1) [ 549.015116][ T7801] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 549.199161][ T7801] usb 2-1: device descriptor read/64, error -71 [ 549.480256][ T7801] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 549.673244][ T7801] usb 2-1: device descriptor read/64, error -71 [ 551.068461][ T7801] usb usb2-port1: attempt power cycle [ 552.095922][ T7801] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 552.140543][ T7801] usb 2-1: device descriptor read/8, error -71 [ 557.468245][ T9458] autofs4:pid:9458:autofs_fill_super: called with bogus options [ 561.206689][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 561.379254][ T5876] usb 3-1: device descriptor read/64, error -71 [ 561.670816][ T5876] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 561.861572][ T5876] usb 3-1: device descriptor read/64, error -71 [ 563.199830][ T5876] usb usb3-port1: attempt power cycle [ 563.700579][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.708396][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.173129][ T5876] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 565.031808][ T5876] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 565.075687][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.083778][ T5876] usb 3-1: Product: syz [ 565.131063][ T5876] usb 3-1: Manufacturer: syz [ 565.151201][ T5876] usb 3-1: SerialNumber: syz [ 565.180057][ T9518] sctp: [Deprecated]: syz.7.747 (pid 9518) Use of int in max_burst socket option. [ 565.180057][ T9518] Use struct sctp_assoc_value instead [ 567.064948][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 567.148039][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 567.227567][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 567.260091][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 567.295270][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 567.370210][ T5876] lan78xx: probe of 3-1:1.0 failed with error -71 [ 567.444768][ T5876] usb 3-1: USB disconnect, device number 7 [ 567.935992][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 567.995279][ T9540] ptp ptp0: new virtual clock ptp1 [ 568.001071][ T9540] ptp ptp0: guarantee physical clock free running [ 568.563254][ T9537] sctp: failed to load transform for md5: -4 [ 568.618730][ T5876] usb 3-1: device descriptor read/64, error -71 [ 569.702442][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 570.121297][ T5876] usb 3-1: device descriptor read/64, error -71 [ 570.654965][ T5876] usb usb3-port1: attempt power cycle [ 572.754202][ T9584] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.761' sets config #0 [ 572.764382][ T9584] usb usb5: usbfs: interface 0 claimed by hub while 'syz.7.761' sets config #1 [ 579.061349][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 579.700082][ T5876] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 579.713897][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.727060][ T5876] usb 3-1: Product: syz [ 579.731392][ T5876] usb 3-1: Manufacturer: syz [ 579.736039][ T5876] usb 3-1: SerialNumber: syz [ 579.761037][ T5876] usb 3-1: config 0 descriptor?? [ 580.423984][ T5876] usb 3-1: Firmware version (0.0) predates our first public release. [ 580.600320][ T5876] usb 3-1: Please update to version 0.2 or newer [ 581.604635][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 582.002741][ T5876] usb 3-1: USB disconnect, device number 11 [ 583.745512][ T9682] sctp: [Deprecated]: syz.1.780 (pid 9682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.745512][ T9682] Use struct sctp_sack_info instead [ 584.599481][ T9690] tmpfs: Unknown parameter 'casefold' [ 585.043166][ T9692] overlay: ./file0 is not a directory [ 586.757101][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 595.434878][ T9765] dvmrp6: entered allmulticast mode [ 597.187330][ T9771] syz_tun: entered allmulticast mode [ 599.537256][ T9784] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 607.647762][ T60] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 607.677864][ T60] ref_tracker: vcan0@ffff888061018600 has 1/2 users at [ 607.677864][ T60] j1939_ecu_create_locked+0x1c6/0x400 [ 607.677864][ T60] j1939_local_ecu_get+0xec/0x400 [ 607.677864][ T60] j1939_sk_bind+0x70a/0xc60 [ 607.677864][ T60] __sys_bind+0x2f0/0x3f0 [ 607.677864][ T60] __x64_sys_bind+0x7a/0x90 [ 607.677864][ T60] do_syscall_64+0x55/0xb0 [ 607.677864][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.677864][ T60] [ 607.723796][ T60] ref_tracker: vcan0@ffff888061018600 has 1/2 users at [ 607.723796][ T60] j1939_netdev_start+0x37c/0xaf0 [ 607.723796][ T60] j1939_sk_bind+0x941/0xc60 [ 607.723796][ T60] __sys_bind+0x2f0/0x3f0 [ 607.723796][ T60] __x64_sys_bind+0x7a/0x90 [ 607.723796][ T60] do_syscall_64+0x55/0xb0 [ 607.723796][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.723796][ T60] [ 607.826110][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 609.480857][ T9854] FAULT_INJECTION: forcing a failure. [ 609.480857][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 609.554277][ T9854] CPU: 0 PID: 9854 Comm: syz.8.807 Not tainted syzkaller #0 [ 609.561701][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 609.571906][ T9854] Call Trace: [ 609.575258][ T9854] [ 609.578240][ T9854] dump_stack_lvl+0x18c/0x250 [ 609.583432][ T9854] ? show_regs_print_info+0x20/0x20 [ 609.589129][ T9854] ? load_image+0x420/0x420 [ 609.593886][ T9854] ? __might_sleep+0xe0/0xe0 [ 609.598544][ T9854] ? __lock_acquire+0x7eb0/0x7eb0 [ 609.603634][ T9854] ? kasan_set_track+0x5f/0x70 [ 609.608463][ T9854] ? kasan_set_track+0x4e/0x70 [ 609.613328][ T9854] should_fail_ex+0x394/0x4c0 [ 609.618167][ T9854] should_failslab+0x9/0x20 [ 609.622761][ T9854] slab_pre_alloc_hook+0x59/0x300 [ 609.627929][ T9854] ? mark_lock+0x94/0x320 [ 609.632327][ T9854] ? __kernfs_new_node+0xaa/0x7f0 [ 609.637426][ T9854] ? __kernfs_new_node+0xaa/0x7f0 [ 609.642512][ T9854] __kmem_cache_alloc_node+0x53/0x260 [ 609.648095][ T9854] ? __kernfs_new_node+0xaa/0x7f0 [ 609.653225][ T9854] __kmalloc_node_track_caller+0xa4/0x230 [ 609.659124][ T9854] kstrdup+0x3b/0x80 [ 609.663136][ T9854] __kernfs_new_node+0xaa/0x7f0 [ 609.668073][ T9854] ? kernfs_new_node+0x260/0x260 [ 609.673178][ T9854] ? kernfs_setattr+0x274/0x370 [ 609.678397][ T9854] ? __lock_acquire+0x7eb0/0x7eb0 [ 609.684145][ T9854] ? ktime_get_real_ts64+0x390/0x440 [ 609.689630][ T9854] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 609.696028][ T9854] ? rcu_is_watching+0x15/0xb0 [ 609.700869][ T9854] kernfs_new_node+0x14c/0x260 [ 609.705803][ T9854] __kernfs_create_file+0x4b/0x2e0 [ 609.711081][ T9854] cgroup_addrm_files+0x810/0xd60 [ 609.716387][ T9854] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 609.722704][ T9854] ? __kernfs_iattrs+0x1ec/0x280 [ 609.728178][ T9854] ? __lock_acquire+0x7eb0/0x7eb0 [ 609.733378][ T9854] ? ktime_get_real_ts64+0x115/0x440 [ 609.738892][ T9854] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 609.745484][ T9854] ? rcu_is_watching+0x15/0xb0 [ 609.750338][ T9854] css_populate_dir+0x195/0x380 [ 609.755338][ T9854] ? kernfs_setattr+0x274/0x370 [ 609.760258][ T9854] cgroup_mkdir+0xc65/0xe70 [ 609.764919][ T9854] ? css_task_iter_end+0x2c0/0x2c0 [ 609.770263][ T9854] ? kernfs_iop_permission+0x2c4/0x3b0 [ 609.775823][ T9854] ? css_task_iter_end+0x2c0/0x2c0 [ 609.781182][ T9854] kernfs_iop_mkdir+0x241/0x3e0 [ 609.786168][ T9854] vfs_mkdir+0x2a5/0x470 [ 609.790483][ T9854] do_mkdirat+0x1dc/0x450 [ 609.795071][ T9854] ? vfs_mkdir+0x470/0x470 [ 609.799666][ T9854] __x64_sys_mkdirat+0x89/0xa0 [ 609.804510][ T9854] do_syscall_64+0x55/0xb0 [ 609.809053][ T9854] ? clear_bhb_loop+0x40/0x90 [ 609.813814][ T9854] ? clear_bhb_loop+0x40/0x90 [ 609.818768][ T9854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.824815][ T9854] RIP: 0033:0x7f5c1999fb19 [ 609.829378][ T9854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.849497][ T9854] RSP: 002b:00007f5c1a927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 609.857994][ T9854] RAX: ffffffffffffffda RBX: 00007f5c19c25fa0 RCX: 00007f5c1999fb19 [ 609.866305][ T9854] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 609.874422][ T9854] RBP: 00007f5c19a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 609.882556][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.890679][ T9854] R13: 00007f5c19c26038 R14: 00007f5c19c25fa0 R15: 00007ffe669e8168 [ 609.898998][ T9854] [ 609.971127][ T9854] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 612.465755][ T5798] Bluetooth: hci1: command 0x0406 tx timeout