last executing test programs: 12m5.664006074s ago: executing program 4 (id=12): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb0806000608100604"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000003c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x605, 0x9, 0x2f26, 0x9825, 0x1, "9d40549be176126b5b819e91a3da05d7e6d83a3fb405ad0a7082f31b0b08d5348d526eff61434d40155d1c4a04358efaaaf4a05c32b4bfe64741e18b7a92078af96f6c90990be3e9fbb4c6cc4aa49d8da98e90ec1bd235ee309b7e4aada9b5308ca4f08883c2b524de79910248b422c0e1f2879ca983ef8e5dea74e4e761400b"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x2c}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net\x00') getdents(r6, &(0x7f0000000040)=""/44, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0xf) ptrace(0x4206, r7) ptrace(0x4207, r7) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 12m0.499709707s ago: executing program 3 (id=23): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x80, 0xa6, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x11}, 0x0) 11m59.236140243s ago: executing program 3 (id=24): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) landlock_restrict_self(r0, 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 11m58.378188502s ago: executing program 3 (id=29): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)="05d9", 0x2, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @local}, 0x14) 11m57.578538676s ago: executing program 3 (id=31): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x9060, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x1, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 11m56.90672391s ago: executing program 3 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit}, 0x1c) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 11m56.181922463s ago: executing program 3 (id=37): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @local, {[], {0xfffc, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x3, 0xf6, 0x0, @void}, "85ce23b2a2f00c5e0e7a79e4ca107dd7a248aa015c3c4138fb15c68e503f0d9526872da8"}}}}}}}, 0x0) 11m53.775131179s ago: executing program 32 (id=37): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @local, {[], {0xfffc, 0xe22, 0x30, 0x0, @gue={{0x1, 0x1, 0x3, 0xf6, 0x0, @void}, "85ce23b2a2f00c5e0e7a79e4ca107dd7a248aa015c3c4138fb15c68e503f0d9526872da8"}}}}}}}, 0x0) 11m53.667287414s ago: executing program 4 (id=43): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb0806000608100604"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0xf) ptrace(0x4206, r3) 11m51.305561994s ago: executing program 4 (id=47): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x395, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x7, 0x0, 0x32315559, 0x9, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}}) 11m50.606911474s ago: executing program 4 (id=49): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000440)=""/65, 0x18) 11m48.10328647s ago: executing program 4 (id=53): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 11m46.103977319s ago: executing program 4 (id=58): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r2, 0x1, 0x47, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc9"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 11m30.571353943s ago: executing program 33 (id=58): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r2, 0x1, 0x47, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc9"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 11m15.101630993s ago: executing program 2 (id=85): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/65, 0x18) 11m9.550101174s ago: executing program 2 (id=89): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004380), 0x0, 0x0) recvmsg(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x700) 11m8.679027611s ago: executing program 2 (id=90): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m6.622253573s ago: executing program 2 (id=92): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 10m58.551872641s ago: executing program 2 (id=102): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 10m57.723503322s ago: executing program 2 (id=105): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a01020000000000000000020000000900010073797a3000000000220003009104002404cf378042f26c43f91f68d8a907000000020a090000000000000000000000000014000000110001000000000000000000000028040359c47b6847d637bed4eeda037e00"], 0x80}}, 0x4000000) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac0524030000000000010902240024000070000904000001030000000921000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10m41.616166049s ago: executing program 34 (id=105): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a01020000000000000000020000000900010073797a3000000000220003009104002404cf378042f26c43f91f68d8a907000000020a090000000000000000000000000014000000110001000000000000000000000028040359c47b6847d637bed4eeda037e00"], 0x80}}, 0x4000000) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac0524030000000000010902240024000070000904000001030000000921000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m59.795069535s ago: executing program 0 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x101, 0x43, 0x1, 0x8c91, 0xffffffffffffffff, 0x1, 0x0, 0x4}}) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00001200000000ff00000100000000000000000000000100000000200002000a00000000000000f2ff0000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x1e4, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5e4}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000001600)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x2b0, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @private0, 0x10}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a5}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc68}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x381a9b0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x29}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000014000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47) close_range(r1, r4, 0x0) 4m58.611866418s ago: executing program 0 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4m53.75299963s ago: executing program 0 (id=382): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x8850) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) 4m49.50315004s ago: executing program 0 (id=383): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r5, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac08]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x38}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r8 = memfd_create(0x0, 0x1) ftruncate(r8, 0x800799c) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r9, 0x8004550f, &(0x7f0000000000)) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 4m46.828854645s ago: executing program 0 (id=385): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 4m39.786289637s ago: executing program 0 (id=387): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x1100}, {r0, 0x1120}, {r0, 0x56b4}, {r0, 0xe005}, {r0, 0x40}, {r0, 0x100}], 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 4m23.947467186s ago: executing program 35 (id=387): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x1100}, {r0, 0x1120}, {r0, 0x56b4}, {r0, 0xe005}, {r0, 0x40}, {r0, 0x100}], 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 1m52.894507117s ago: executing program 1 (id=467): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r5 = request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000640)='@+\x00', 0xfffffffffffffffa) request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f00000007c0)='\x00\x89\xe8:\x9e\xd9;P\xb9\xbe\xe8\xc1!\xd2\xee\xdb\xac9\x1d\x9d\b2~\x14\xa5z\xa4\xcfB\xb3\xd6\xfb\xd1\xae\x89\xc6n\xb8\x96\xb5\x8c\xa5\x0e\x91\r\x85\x1b\xa1\xec\x10c\x80\x89\xa1>,w%\xd4v\xcb}P\xc1l\\\x10M{\x00\x1b\x88\xcd\x12\x10\x1c\xa8Ky\xc69\xf0\x84\xdf\xd8`\x89Wv\xc4\xc5\xa1\xe9\xc8\xaf\x15J\xf6S\xd3.D\x80Y\x12\xd03\xe8\x91.\x8f\xa4\xf3\x92 ~\xf8P\xe4\x01\x00\x00\x80\x00\x00\x00\x00t\x11\xa72\xf2\xbf\xce5\n\x00\xb71c\xf8\xaa\x8chq\xa3,\xd4\x01\xc0\xc1\x9f\x1d\xdf\x04\x00\x9f\xf2\xdd\x1b\x8eM\n\xcd\xda\xc3\x97\f\a@Z\xbd9\x93u\x0f1\x05X;\xa5\xbe\xc2\xe8?7\voB\xd1\x1cn\xbe[\x04\x17\xf7h\xf9\x1b,G\f\x1b\xeb\xc0\xdb\xe7\t\xe2\x9e\x9d0\b_\xa8\x00\xde\x12 \x02\xf90\xa4\x9f\xcf\xa2\xf1\x04\xe7\x98\xbb@\x04\x10PP6\xee\x17\apR,0\x1a\x11\x80j\x80\xa8\a\n', r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x430601, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) 1m49.313342017s ago: executing program 1 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r3 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, r3, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x1, 0x0, 0x0, r5, r6, 0x110, 0x7fff}, 0x0, 0x0, 0x4, 0x8000000000000001, 0x6, 0x9, 0xadb, 0x5, 0x8, 0x2, r0, r2}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='./file0\x00') r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 1m46.599859493s ago: executing program 1 (id=469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r3, 0xffffffffffffffff, 0x0) 1m44.128054279s ago: executing program 1 (id=470): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) poll(&(0x7f0000000140)=[{r3, 0x1100}, {r0, 0x1120}, {r0, 0x56b4}, {r0, 0xe005}, {r0, 0x40}, {r0, 0x100}], 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 1m43.233989271s ago: executing program 1 (id=471): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1m36.978623719s ago: executing program 1 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x31101) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xb, 0x8, 0x4, 0x80, 0x7, 0x101, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xeeef0000, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) 1m21.46851483s ago: executing program 36 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x31101) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xb, 0x8, 0x4, 0x80, 0x7, 0x101, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xeeef0000, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) 1m11.601079776s ago: executing program 9 (id=476): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r3, 0xffffffffffffffff, 0x0) 4.531477874s ago: executing program 7 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x10, 0x2d, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) accept$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x2, 0x0, @multicast1}, &(0x7f0000001200)=0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r8, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000000)=0x4) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000012c0)=0x14) r10 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r6, r7, r8, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}, @rights={{0x10}}], 0x78, 0x40000}, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) 4.192945028s ago: executing program 7 (id=520): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 1.307358021s ago: executing program 7 (id=521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce63, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0xffffffff, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 261.142607ms ago: executing program 7 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, 0x0, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf0ffff, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 86.117013ms ago: executing program 7 (id=523): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 0s ago: executing program 7 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x7ffffc, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0x980, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x28, 0x9880, 0x5, 0x6c51, 0x8, 0x2, 0x4, 0x20000000009, 0x10, 0x1fd, 0x8, 0x0, 0x7, 0x9, 0x9, 0xb, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x0, 0xfffffffdfffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x15, 0x3, 0x5, 0x7, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x23, 0xfffffffffffffc01, 0xfffffffffffffffd, 0xc01, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x4, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4000000004, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) kernel console output (not intermixed with test programs): config 0 interface 0 has no altsetting 0 [ 613.616540][ T119] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 613.683891][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.742632][ T119] usb 1-1: config 0 descriptor?? [ 614.023632][ T1328] hsr_slave_0: left promiscuous mode [ 614.035947][ T1328] hsr_slave_1: left promiscuous mode [ 614.068169][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.089031][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.596729][ T119] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 614.762101][ T8033] loop0: detected capacity change from 0 to 256 [ 615.160692][ T119] usb 1-1: USB disconnect, device number 8 [ 615.557304][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 615.620755][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 616.631752][ T8038] fido_id[8038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 617.106794][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 617.700086][ T7914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 617.870581][ T7914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 617.901553][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 617.937747][ T7914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.963360][ T7914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.844657][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 618.856737][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 618.864321][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 619.247672][ T8056] infiniband syz2: set active [ 619.252739][ T8056] infiniband syz2: added vxcan1 [ 619.260990][ T8056] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 619.269035][ T8056] infiniband syz2: Couldn't open port 1 [ 619.291817][ T7579] vxcan1 speed is unknown, defaulting to 1000 [ 619.353603][ T8056] RDS/IB: syz2: added [ 619.357797][ T8056] smc: adding ib device syz2 with port count 1 [ 619.364540][ T8056] smc: ib device syz2 port 1 has no pnetid [ 619.473366][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 619.881839][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 620.426508][ T7579] vxcan1 speed is unknown, defaulting to 1000 [ 620.451178][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 620.465701][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.487014][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.512336][ T7967] bridge_slave_0: entered allmulticast mode [ 620.523371][ T7967] bridge_slave_0: entered promiscuous mode [ 620.587639][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.630557][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.638560][ T7967] bridge_slave_1: entered allmulticast mode [ 620.666517][ T7967] bridge_slave_1: entered promiscuous mode [ 621.029099][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 621.173314][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.508325][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.530207][ T8056] vxcan1 speed is unknown, defaulting to 1000 [ 622.355755][ T7920] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 622.776373][ T8065] loop0: detected capacity change from 0 to 512 [ 622.899630][ T8065] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.382: inode has both inline data and extents flags [ 622.918797][ T8065] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 622.925202][ T8065] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.382: couldn't read orphan inode 15 (err -117) [ 622.934849][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 622.934946][ C0] EXT4-fs (loop0): initial error at time 1772106702: ext4_orphan_get:1391: inode 15 [ 622.935120][ C0] EXT4-fs (loop0): last error at time 1772106702: ext4_orphan_get:1391: inode 15 [ 623.125852][ T8065] loop0: lost filesystem error report for type 5 error -117 [ 623.168471][ T8065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.697657][ T8071] overlayfs: missing 'lowerdir' [ 626.466931][ T7967] team0: Port device team_slave_0 added [ 626.571028][ T7967] team0: Port device team_slave_1 added [ 626.585313][ T7920] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 626.681273][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.693321][ T7920] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 628.977175][ T7920] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.250170][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.257277][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.486319][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.556109][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.588813][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.134393][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.141048][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.179941][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.078388][ T7967] hsr_slave_0: entered promiscuous mode [ 637.091366][ T7967] hsr_slave_1: entered promiscuous mode [ 638.048913][ T7967] debugfs: 'hsr0' already exists in 'hsr' [ 638.055022][ T7967] Cannot create hsr debugfs directory [ 639.271862][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.282187][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.291905][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.312059][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.331310][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 639.896900][ T8095] syzkaller1: entered promiscuous mode [ 639.920120][ T8095] syzkaller1: entered allmulticast mode [ 640.341948][ T8091] vxcan1 speed is unknown, defaulting to 1000 [ 641.152288][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.440249][ T49] Bluetooth: hci2: command tx timeout [ 641.468948][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.559370][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.559685][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.329492][ T35] bridge_slave_1: left allmulticast mode [ 642.374246][ T35] bridge_slave_1: left promiscuous mode [ 642.410939][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.469315][ T35] bridge_slave_0: left allmulticast mode [ 642.477213][ T35] bridge_slave_0: left promiscuous mode [ 642.501510][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.411444][ T49] Bluetooth: hci2: command tx timeout [ 647.484824][ T5778] Bluetooth: hci2: command tx timeout [ 649.128860][ T8105] loop1: detected capacity change from 0 to 512 [ 649.238252][ T8105] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.391: inode has both inline data and extents flags [ 649.255836][ T8105] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 649.256602][ T8105] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.391: couldn't read orphan inode 15 (err -117) [ 649.266183][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 649.266270][ C0] EXT4-fs (loop1): initial error at time 1772106729: ext4_orphan_get:1391: inode 15 [ 649.266418][ C0] EXT4-fs (loop1): last error at time 1772106729: ext4_orphan_get:1391: inode 15 [ 649.312862][ T8105] loop1: lost filesystem error report for type 5 error -117 [ 649.315479][ T8105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.540528][ T5778] Bluetooth: hci2: command tx timeout [ 649.695113][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.835572][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.911988][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 649.921763][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 649.941484][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 649.978929][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.033135][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.069667][ T35] bond0 (unregistering): Released all slaves [ 650.166014][ T8113] overlayfs: missing 'lowerdir' [ 651.146091][ T7967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 651.292834][ T7967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 651.496257][ T7967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 651.573905][ T7967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 652.080598][ T5778] Bluetooth: hci5: command tx timeout [ 652.628047][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.978547][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 653.343634][ T8123] bridge1: port 1(veth3) entered blocking state [ 653.390592][ T8123] bridge1: port 1(veth3) entered disabled state [ 653.397546][ T8123] veth3: entered allmulticast mode [ 653.467502][ T8123] veth3: entered promiscuous mode [ 653.575483][ T8124] bridge1: port 2(veth0_to_bond) entered blocking state [ 653.610606][ T8124] bridge1: port 2(veth0_to_bond) entered disabled state [ 653.640634][ T8124] veth0_to_bond: entered allmulticast mode [ 653.671598][ T8124] veth0_to_bond: entered promiscuous mode [ 653.715084][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.731900][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.750634][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.778881][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.797332][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.899975][ T35] hsr_slave_0: left promiscuous mode [ 653.920245][ T35] hsr_slave_1: left promiscuous mode [ 653.940797][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.972676][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.160278][ T5778] Bluetooth: hci5: command tx timeout [ 654.659193][ T35] team0 (unregistering): Port device team_slave_1 removed [ 654.731980][ T35] team0 (unregistering): Port device team_slave_0 removed [ 654.824464][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 654.852166][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 654.881681][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 654.903414][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 654.918573][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.435678][ T8122] bridge1: port 3(veth5) entered blocking state [ 655.442903][ T8122] bridge1: port 3(veth5) entered disabled state [ 655.456263][ T8122] veth5: entered allmulticast mode [ 655.466640][ T8122] veth5: entered promiscuous mode [ 655.709307][ T8109] vxcan1 speed is unknown, defaulting to 1000 [ 655.966007][ T49] Bluetooth: hci4: command tx timeout [ 656.250562][ T49] Bluetooth: hci5: command tx timeout [ 657.040072][ T49] Bluetooth: hci6: command tx timeout [ 657.862358][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.984544][ T8126] vxcan1 speed is unknown, defaulting to 1000 [ 658.000290][ T49] Bluetooth: hci4: command tx timeout [ 658.320090][ T49] Bluetooth: hci5: command tx timeout [ 658.459404][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.770480][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 659.120259][ T49] Bluetooth: hci6: command tx timeout [ 659.228378][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.398854][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.079974][ T49] Bluetooth: hci4: command tx timeout [ 661.038047][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 661.199981][ T49] Bluetooth: hci6: command tx timeout [ 661.384724][ T8128] vxcan1 speed is unknown, defaulting to 1000 [ 661.588190][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.611242][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.618959][ T8091] bridge_slave_0: entered allmulticast mode [ 661.653641][ T8091] bridge_slave_0: entered promiscuous mode [ 661.779291][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.795134][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.804634][ T8091] bridge_slave_1: entered allmulticast mode [ 661.817475][ T8091] bridge_slave_1: entered promiscuous mode [ 661.836523][ T8168] syzkaller1: entered promiscuous mode [ 661.845881][ T8168] syzkaller1: entered allmulticast mode [ 662.160495][ T49] Bluetooth: hci4: command tx timeout [ 662.338921][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.412909][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 662.440924][ T8178] bridge_slave_1: left allmulticast mode [ 662.446903][ T8178] bridge_slave_1: left promiscuous mode [ 662.455575][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.467017][ T8178] bridge_slave_0: left allmulticast mode [ 662.473776][ T8178] bridge_slave_0: left promiscuous mode [ 662.482621][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.606860][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.682975][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.691507][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.705540][ T8109] bridge_slave_0: entered allmulticast mode [ 662.725169][ T8109] bridge_slave_0: entered promiscuous mode [ 662.990687][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.010236][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.019380][ T8109] bridge_slave_1: entered allmulticast mode [ 663.041550][ T8109] bridge_slave_1: entered promiscuous mode [ 663.138675][ T8091] team0: Port device team_slave_0 added [ 663.256485][ T8091] team0: Port device team_slave_1 added [ 663.280540][ T49] Bluetooth: hci6: command tx timeout [ 663.363991][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.433734][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.528409][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 663.744935][ T8187] bridge0: port 1(veth7) entered blocking state [ 663.752034][ T8187] bridge0: port 1(veth7) entered disabled state [ 663.758876][ T8187] veth7: entered allmulticast mode [ 663.768042][ T8187] veth7: entered promiscuous mode [ 663.787021][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.795125][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.825157][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.869515][ T8188] bridge0: port 2(veth9) entered blocking state [ 663.876763][ T8188] bridge0: port 2(veth9) entered disabled state [ 663.883856][ T8188] veth9: entered allmulticast mode [ 663.892507][ T8188] veth9: entered promiscuous mode [ 663.931126][ T8190] veth0_to_bond: left allmulticast mode [ 663.936917][ T8190] veth0_to_bond: left promiscuous mode [ 663.944276][ T8190] bridge1: port 2(veth0_to_bond) entered disabled state [ 663.958212][ T8190] bridge0: port 3(veth0_to_bond) entered blocking state [ 663.965964][ T8190] bridge0: port 3(veth0_to_bond) entered disabled state [ 663.973876][ T8190] veth0_to_bond: entered allmulticast mode [ 663.982746][ T8190] veth0_to_bond: entered promiscuous mode [ 664.036107][ T8109] team0: Port device team_slave_0 added [ 664.158063][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.174543][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.207631][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.256639][ T8109] team0: Port device team_slave_1 added [ 664.581138][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.588259][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.619155][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.636323][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.650893][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.678859][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.775285][ T8126] chnl_net:caif_netlink_parms(): no params data found [ 665.030891][ T8091] hsr_slave_0: entered promiscuous mode [ 665.040927][ T8091] hsr_slave_1: entered promiscuous mode [ 665.048759][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 665.056445][ T8091] Cannot create hsr debugfs directory [ 665.426949][ T8109] hsr_slave_0: entered promiscuous mode [ 665.451717][ T8109] hsr_slave_1: entered promiscuous mode [ 665.467905][ T8109] debugfs: 'hsr0' already exists in 'hsr' [ 665.509290][ T8199] hub 2-0:1.0: USB hub found [ 665.514736][ T8109] Cannot create hsr debugfs directory [ 665.527635][ T8199] hub 2-0:1.0: 1 port detected [ 665.682840][ T53] bridge_slave_1: left allmulticast mode [ 665.739503][ T53] bridge_slave_1: left promiscuous mode [ 665.818584][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.948356][ T53] bridge_slave_0: left allmulticast mode [ 665.994945][ T53] bridge_slave_0: left promiscuous mode [ 666.042383][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.206407][ T53] veth0_to_bond: left allmulticast mode [ 666.240935][ T53] veth0_to_bond: left promiscuous mode [ 666.247019][ T53] bridge1: port 3(veth0_to_bond) entered disabled state [ 666.285514][ T53] veth5: left allmulticast mode [ 666.300025][ T53] veth5: left promiscuous mode [ 666.305477][ T53] bridge1: port 2(veth5) entered disabled state [ 666.343778][ T53] veth3: left allmulticast mode [ 666.348774][ T53] veth3: left promiscuous mode [ 666.355524][ T53] bridge1: port 1(veth3) entered disabled state [ 666.385164][ T53] veth9: left allmulticast mode [ 666.392902][ T53] veth9: left promiscuous mode [ 666.398481][ T53] bridge2: port 1(veth9) entered disabled state [ 666.462156][ T53] bridge_slave_1: left allmulticast mode [ 666.468509][ T53] bridge_slave_1: left promiscuous mode [ 666.506803][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.523588][ T53] bridge_slave_0: left allmulticast mode [ 666.530929][ T53] bridge_slave_0: left promiscuous mode [ 666.537124][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.550627][ T53] bridge_slave_1: left allmulticast mode [ 666.556446][ T53] bridge_slave_1: left promiscuous mode [ 666.565814][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.576661][ T53] bridge_slave_0: left allmulticast mode [ 666.582657][ T53] bridge_slave_0: left promiscuous mode [ 666.602763][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.281698][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.296503][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.315044][ T53] bond0 (unregistering): Released all slaves [ 667.474656][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.488846][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.504093][ T53] bond0 (unregistering): Released all slaves [ 667.684182][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.700460][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.720714][ T53] bond0 (unregistering): Released all slaves [ 668.129123][ T53] tipc: Left network mode [ 668.237902][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 668.464336][ T7579] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 668.529330][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.545728][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.554752][ T8126] bridge_slave_0: entered allmulticast mode [ 668.567889][ T8126] bridge_slave_0: entered promiscuous mode [ 668.641060][ T7579] usb 2-1: Using ep0 maxpacket: 16 [ 668.663661][ T7579] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.675260][ T7579] usb 2-1: config 0 interface 0 has no altsetting 0 [ 668.684282][ T7579] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 668.698243][ T7579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.716009][ T7579] usb 2-1: config 0 descriptor?? [ 668.765346][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.775343][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.784015][ T8126] bridge_slave_1: entered allmulticast mode [ 668.794083][ T8126] bridge_slave_1: entered promiscuous mode [ 668.977712][ T8211] loop1: detected capacity change from 0 to 256 [ 669.119684][ T7579] usbhid 2-1:0.0: can't add hid device: -71 [ 669.140764][ T7579] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 669.165076][ T7579] usb 2-1: USB disconnect, device number 8 [ 669.495503][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.947079][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.777199][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.802739][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.814818][ T8128] bridge_slave_0: entered allmulticast mode [ 670.824797][ T8128] bridge_slave_0: entered promiscuous mode [ 670.881105][ T53] hsr_slave_0: left promiscuous mode [ 670.913761][ T53] hsr_slave_1: left promiscuous mode [ 670.924929][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.934109][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.947251][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.968761][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.999700][ T53] hsr_slave_0: left promiscuous mode [ 671.024539][ T53] hsr_slave_1: left promiscuous mode [ 671.032377][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.062078][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.089462][ T53] hsr_slave_0: left promiscuous mode [ 671.098739][ T53] hsr_slave_1: left promiscuous mode [ 671.107123][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.116521][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.141931][ T53] veth1_macvtap: left promiscuous mode [ 671.147896][ T53] veth0_macvtap: left promiscuous mode [ 671.153892][ T53] veth1_vlan: left promiscuous mode [ 671.159383][ T53] veth0_vlan: left promiscuous mode [ 672.800690][ T53] team0 (unregistering): Port device macvlan0 removed [ 673.366593][ T53] team0 (unregistering): Port device team_slave_1 removed [ 673.427564][ T53] team0 (unregistering): Port device team_slave_0 removed [ 673.619130][ T141] smc: removing ib device syz2 [ 675.036831][ T8226] loop1: detected capacity change from 0 to 32768 [ 675.051400][ T8226] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.407 (8226) [ 675.070986][ T8226] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 675.083246][ T8226] BTRFS info (device loop1): using crc32c checksum algorithm [ 675.092892][ T8226] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 675.216134][ T8226] BTRFS info (device loop1): rebuilding free space tree [ 675.243613][ T8226] BTRFS info (device loop1): disabling free space tree [ 675.250989][ T8226] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 675.261103][ T8226] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 675.294676][ T8226] BTRFS info (device loop1): enabling ssd optimizations [ 675.302109][ T8226] BTRFS info (device loop1): turning on async discard [ 675.309143][ T8226] BTRFS info (device loop1): enabling disk space caching [ 675.316814][ T8226] BTRFS info (device loop1): force clearing of disk cache [ 675.324307][ T8226] BTRFS info (device loop1): use zstd compression, level 3 [ 675.591531][ T53] team0 (unregistering): Port device team_slave_1 removed [ 675.683719][ T53] team0 (unregistering): Port device team_slave_0 removed [ 678.326931][ T5776] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 678.457598][ T53] team0 (unregistering): Port device team_slave_1 removed [ 678.541970][ T53] team0 (unregistering): Port device team_slave_0 removed [ 678.916976][ T8126] team0: Port device team_slave_0 added [ 679.000918][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.025853][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.058918][ T8128] bridge_slave_1: entered allmulticast mode [ 679.107146][ T8128] bridge_slave_1: entered promiscuous mode [ 679.330516][ T8185] vxcan1 speed is unknown, defaulting to 1000 [ 679.337417][ T8185] syz2: Port: 1 Link DOWN [ 679.376516][ T8126] team0: Port device team_slave_1 added [ 679.701677][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.723637][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.733541][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.771279][ T8126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.788192][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.795846][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.827889][ T8126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.854136][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.039107][ T8128] team0: Port device team_slave_0 added [ 680.131659][ T8128] team0: Port device team_slave_1 added [ 680.142692][ T8248] hub 2-0:1.0: USB hub found [ 680.149248][ T8248] hub 2-0:1.0: 1 port detected [ 681.086358][ T8126] hsr_slave_0: entered promiscuous mode [ 681.097086][ T8126] hsr_slave_1: entered promiscuous mode [ 681.119848][ T8126] debugfs: 'hsr0' already exists in 'hsr' [ 681.125817][ T8126] Cannot create hsr debugfs directory [ 681.267205][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.274909][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.303197][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.419662][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.427949][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.477309][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.527694][ T8252] syzkaller1: entered promiscuous mode [ 681.534622][ T8252] syzkaller1: entered allmulticast mode [ 681.610857][ T8091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 681.734160][ T8091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 681.937576][ T8091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 682.004012][ T8128] hsr_slave_0: entered promiscuous mode [ 682.023674][ T8128] hsr_slave_1: entered promiscuous mode [ 682.032823][ T8128] debugfs: 'hsr0' already exists in 'hsr' [ 682.038739][ T8128] Cannot create hsr debugfs directory [ 682.078401][ T8091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 682.170193][ T8185] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 682.340402][ T8185] usb 2-1: Using ep0 maxpacket: 16 [ 682.368306][ T8185] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.388370][ T8185] usb 2-1: config 0 interface 0 has no altsetting 0 [ 682.395645][ T8185] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 682.405441][ T8185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.422336][ T8185] usb 2-1: config 0 descriptor?? [ 682.686945][ T8257] loop1: detected capacity change from 0 to 256 [ 682.850023][ T8109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.960263][ T8185] usbhid 2-1:0.0: can't add hid device: -71 [ 682.966804][ T8185] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 682.998438][ T8109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 683.042190][ T8185] usb 2-1: USB disconnect, device number 9 [ 683.096334][ T8109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.149600][ T8109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 683.306269][ T8126] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 683.427506][ T8126] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 683.530429][ T8126] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 683.625176][ T8126] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 683.837132][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.429664][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.970409][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.977882][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.064897][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.072510][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.560148][ T8128] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 685.636250][ T8128] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 685.727555][ T8128] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 685.831255][ T8128] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 686.234568][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.673346][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.697464][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.816218][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.823760][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.988349][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.059153][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.066850][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.119026][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.126576][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.222041][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.229858][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.744540][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.169206][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.609178][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.826423][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.834016][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.954786][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.962341][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.136875][ T8316] hub 2-0:1.0: USB hub found [ 690.151526][ T8316] hub 2-0:1.0: 1 port detected [ 691.837265][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.286539][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.499205][ T8091] veth0_vlan: entered promiscuous mode [ 692.745698][ T8091] veth1_vlan: entered promiscuous mode [ 693.124708][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.508166][ T8091] veth0_macvtap: entered promiscuous mode [ 693.611551][ T8091] veth1_macvtap: entered promiscuous mode [ 693.838149][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.981608][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.159159][ T1328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.196634][ T1328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.304247][ T1328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.349909][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.842400][ T8373] loop1: detected capacity change from 0 to 512 [ 694.954559][ T8373] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.419: inode has both inline data and extents flags [ 695.025334][ T8373] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 695.029880][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 695.045922][ C1] EXT4-fs (loop1): initial error at time 1772106774: ext4_orphan_get:1391: inode 15 [ 695.055755][ C1] EXT4-fs (loop1): last error at time 1772106774: ext4_orphan_get:1391: inode 15 [ 695.070896][ T8373] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.419: couldn't read orphan inode 15 (err -117) [ 695.111640][ T8373] loop1: lost filesystem error report for type 5 error -117 [ 695.121453][ T8373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.175732][ T8109] veth0_vlan: entered promiscuous mode [ 695.397489][ T8126] veth0_vlan: entered promiscuous mode [ 695.562206][ T8109] veth1_vlan: entered promiscuous mode [ 695.627812][ T8126] veth1_vlan: entered promiscuous mode [ 695.642614][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.649626][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.024957][ T8383] overlayfs: missing 'lowerdir' [ 697.788226][ T8128] veth0_vlan: entered promiscuous mode [ 697.790860][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.958202][ T8128] veth1_vlan: entered promiscuous mode [ 698.121300][ T8109] veth0_macvtap: entered promiscuous mode [ 699.248502][ T8109] veth1_macvtap: entered promiscuous mode [ 699.372064][ T8126] veth0_macvtap: entered promiscuous mode [ 699.544223][ T8126] veth1_macvtap: entered promiscuous mode [ 699.704550][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.913042][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.270544][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.323094][ T8128] veth0_macvtap: entered promiscuous mode [ 700.455124][ T759] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.525485][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.538475][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.547627][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.560279][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.618358][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.697511][ T8128] veth1_macvtap: entered promiscuous mode [ 700.740617][ T759] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.793542][ T759] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.862759][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.906949][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 700.935359][ T759] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.110849][ T141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.140151][ T141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.225383][ T141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.274154][ T141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.530366][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.800215][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.069587][ T6333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.090377][ T6333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.207421][ T8420] hub 2-0:1.0: USB hub found [ 702.219073][ T8420] hub 2-0:1.0: 1 port detected [ 702.720762][ T49] Bluetooth: hci0: command tx timeout [ 702.938482][ T6333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.006350][ T6073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.064722][ T759] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.441085][ T759] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.705841][ T759] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.800140][ T49] Bluetooth: hci0: command tx timeout [ 705.041494][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 705.305278][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.314254][ T759] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.336872][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.350896][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.367067][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.381678][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 706.884674][ T49] Bluetooth: hci0: command tx timeout [ 707.008733][ T759] bridge_slave_1: left allmulticast mode [ 707.029345][ T759] bridge_slave_1: left promiscuous mode [ 707.037245][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.075950][ T759] bridge_slave_0: left allmulticast mode [ 707.092503][ T759] bridge_slave_0: left promiscuous mode [ 707.099123][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.450746][ T49] Bluetooth: hci2: command tx timeout [ 707.877852][ T8477] loop1: detected capacity change from 0 to 32768 [ 707.890628][ T8477] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.426 (8477) [ 707.929957][ T8477] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 707.940900][ T8477] BTRFS info (device loop1): using crc32c checksum algorithm [ 707.948573][ T8477] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 708.070376][ T8477] BTRFS info (device loop1): rebuilding free space tree [ 708.099192][ T8477] BTRFS info (device loop1): disabling free space tree [ 708.107665][ T8477] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 708.119173][ T8477] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 708.145668][ T8477] BTRFS info (device loop1): enabling ssd optimizations [ 708.152955][ T8477] BTRFS info (device loop1): turning on async discard [ 708.160144][ T8477] BTRFS info (device loop1): enabling disk space caching [ 708.168684][ T8477] BTRFS info (device loop1): force clearing of disk cache [ 708.176212][ T8477] BTRFS info (device loop1): use zstd compression, level 3 [ 708.961046][ T49] Bluetooth: hci0: command tx timeout [ 708.979378][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.251468][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.306089][ T759] bond0 (unregistering): Released all slaves [ 709.570263][ T49] Bluetooth: hci2: command tx timeout [ 710.545967][ T759] hsr_slave_0: left promiscuous mode [ 710.605007][ T759] hsr_slave_1: left promiscuous mode [ 710.661670][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.669226][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.782722][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.834094][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.055557][ T759] veth1_macvtap: left promiscuous mode [ 711.066996][ T759] veth0_macvtap: left promiscuous mode [ 711.110192][ T759] veth1_vlan: left promiscuous mode [ 711.115752][ T759] veth0_vlan: left promiscuous mode [ 711.172354][ T5776] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 711.601506][ T49] Bluetooth: hci2: command tx timeout [ 712.364754][ T759] team0 (unregistering): Port device team_slave_1 removed [ 712.452018][ T759] team0 (unregistering): Port device team_slave_0 removed [ 712.911138][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.960320][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.968414][ T8399] bridge_slave_0: entered allmulticast mode [ 713.003616][ T8399] bridge_slave_0: entered promiscuous mode [ 713.043342][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.070273][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.101566][ T8399] bridge_slave_1: entered allmulticast mode [ 713.132698][ T8399] bridge_slave_1: entered promiscuous mode [ 713.348698][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 713.368571][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 713.386017][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 713.406817][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 713.425920][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 713.690308][ T49] Bluetooth: hci2: command tx timeout [ 713.943794][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.018441][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.447207][ T8399] team0: Port device team_slave_0 added [ 714.543383][ T8399] team0: Port device team_slave_1 added [ 714.767243][ T759] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.098775][ T8541] tipc: Enabling of bearer rejected, failed to enable media [ 715.184551][ T759] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.473793][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 715.522630][ T49] Bluetooth: hci3: command tx timeout [ 716.561750][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 716.632004][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 716.644086][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 716.733841][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 716.773869][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.947905][ T759] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.601797][ T5774] Bluetooth: hci3: command tx timeout [ 718.178626][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.245566][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.638668][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.705678][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.757689][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.801355][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.124688][ T759] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.302613][ T8562] hub 2-0:1.0: USB hub found [ 719.315747][ T8562] hub 2-0:1.0: 1 port detected [ 719.680219][ T5774] Bluetooth: hci3: command tx timeout [ 720.250308][ T5774] Bluetooth: hci5: command tx timeout [ 720.624777][ T8399] hsr_slave_0: entered promiscuous mode [ 720.636010][ T8399] hsr_slave_1: entered promiscuous mode [ 720.656604][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 720.662982][ T8399] Cannot create hsr debugfs directory [ 721.230882][ T8570] syzkaller1: entered promiscuous mode [ 721.238168][ T8570] syzkaller1: entered allmulticast mode [ 721.640256][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.647715][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.671464][ T8454] bridge_slave_0: entered allmulticast mode [ 721.683116][ T8454] bridge_slave_0: entered promiscuous mode [ 721.696600][ T759] bridge_slave_1: left allmulticast mode [ 721.722557][ T759] bridge_slave_1: left promiscuous mode [ 721.729050][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.763832][ T5774] Bluetooth: hci3: command tx timeout [ 721.778530][ T759] bridge_slave_0: left allmulticast mode [ 721.786647][ T759] bridge_slave_0: left promiscuous mode [ 721.834663][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.320386][ T5774] Bluetooth: hci5: command tx timeout [ 723.871632][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.938789][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.958024][ T759] bond0 (unregistering): Released all slaves [ 725.452929][ T5774] Bluetooth: hci5: command tx timeout [ 727.571161][ T49] Bluetooth: hci5: command tx timeout [ 727.589012][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.604366][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.613063][ T8454] bridge_slave_1: entered allmulticast mode [ 729.579392][ T8454] bridge_slave_1: entered promiscuous mode [ 731.976794][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 732.108277][ T8604] veth0_to_bond: left allmulticast mode [ 732.118823][ T8604] veth0_to_bond: left promiscuous mode [ 732.134026][ T8604] bridge0: port 3(veth0_to_bond) entered disabled state [ 732.158649][ T759] hsr_slave_0: left promiscuous mode [ 732.166168][ T759] hsr_slave_1: left promiscuous mode [ 732.173873][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.181597][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.193302][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.201214][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.230309][ T759] veth1_macvtap: left promiscuous mode [ 732.236008][ T759] veth0_macvtap: left promiscuous mode [ 732.242225][ T759] veth1_vlan: left promiscuous mode [ 732.247808][ T759] veth0_vlan: left promiscuous mode [ 732.746525][ T759] team0 (unregistering): Port device team_slave_1 removed [ 732.798538][ T759] team0 (unregistering): Port device team_slave_0 removed [ 733.125888][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.196059][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.231250][ T8528] chnl_net:caif_netlink_parms(): no params data found [ 733.834788][ T8454] team0: Port device team_slave_0 added [ 733.881807][ T7560] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 734.034884][ T8454] team0: Port device team_slave_1 added [ 734.060243][ T7560] usb 2-1: Using ep0 maxpacket: 16 [ 734.072020][ T7560] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.089500][ T7560] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 734.098939][ T7560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.131328][ T7560] usb 2-1: config 0 descriptor?? [ 734.374877][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.409868][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.483191][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.520767][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.528453][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.599311][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.632158][ T7560] hid (null): unknown global tag 0xd [ 734.637890][ T7560] hid (null): invalid report_count -788205420 [ 734.654220][ T7560] hid (null): unknown global tag 0x4a [ 734.661255][ T7560] hid (null): unknown global tag 0xc [ 734.675336][ T7560] hid (null): nested delimiters [ 734.692047][ T7560] hid (null): invalid report_size -1696494009 [ 734.705144][ T7560] hid (null): unknown global tag 0xc [ 734.714497][ T7560] hid (null): unknown global tag 0xca [ 734.721003][ T7560] hid (null): unknown global tag 0xb8 [ 734.727809][ T7560] hid (null): unknown global tag 0xd [ 734.752026][ T7560] hid (null): unknown global tag 0xd [ 734.757627][ T7560] hid (null): unknown global tag 0xd [ 734.774134][ T759] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.832514][ T7560] input: HID 28bd:1903 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:1903.0003/input/input8 [ 734.956283][ T7560] uclogic 0003:28BD:1903.0003: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.1-1/input0 [ 735.020907][ T7560] usb 2-1: USB disconnect, device number 10 [ 735.132496][ T759] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.176405][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 735.337498][ T8627] fido_id[8627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 735.338037][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.360751][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.368899][ T8528] bridge_slave_0: entered allmulticast mode [ 735.395131][ T8528] bridge_slave_0: entered promiscuous mode [ 735.513119][ T759] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.766799][ T759] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.213219][ T759] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.250427][ T8629] loop1: detected capacity change from 0 to 32768 [ 736.261352][ T8629] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.437 (8629) [ 736.283188][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.290646][ T8629] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 736.301235][ T8629] BTRFS info (device loop1): using crc32c checksum algorithm [ 736.308887][ T8629] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 736.331399][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.339118][ T8528] bridge_slave_1: entered allmulticast mode [ 736.350984][ T8528] bridge_slave_1: entered promiscuous mode [ 736.503328][ T8629] BTRFS info (device loop1): rebuilding free space tree [ 736.564440][ T8629] BTRFS info (device loop1): disabling free space tree [ 736.572158][ T8629] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 736.582252][ T8629] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 736.633356][ T8629] BTRFS info (device loop1): enabling ssd optimizations [ 736.640739][ T8629] BTRFS info (device loop1): turning on async discard [ 736.647693][ T8629] BTRFS info (device loop1): enabling disk space caching [ 736.656011][ T8629] BTRFS info (device loop1): force clearing of disk cache [ 736.663494][ T8629] BTRFS info (device loop1): use zstd compression, level 3 [ 736.699344][ T8454] hsr_slave_0: entered promiscuous mode [ 736.714639][ T8454] hsr_slave_1: entered promiscuous mode [ 737.327407][ T8454] debugfs: 'hsr0' already exists in 'hsr' [ 737.335317][ T8454] Cannot create hsr debugfs directory [ 737.415829][ T759] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.767704][ T759] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.878861][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.940540][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.461908][ T8528] team0: Port device team_slave_0 added [ 738.674629][ T8528] team0: Port device team_slave_1 added [ 738.726204][ T759] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.074553][ T8399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 739.354255][ T8399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 739.429325][ T8399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 739.486543][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.523003][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.574297][ T5776] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 739.620833][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.666289][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.710751][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.799996][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.060055][ T8399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 740.794017][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.814231][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.830448][ T8553] bridge_slave_0: entered allmulticast mode [ 740.845779][ T8553] bridge_slave_0: entered promiscuous mode [ 740.890701][ T8666] syzkaller1: entered promiscuous mode [ 740.897952][ T8666] syzkaller1: entered allmulticast mode [ 741.022300][ T8528] hsr_slave_0: entered promiscuous mode [ 741.052684][ T8528] hsr_slave_1: entered promiscuous mode [ 741.071287][ T8528] debugfs: 'hsr0' already exists in 'hsr' [ 741.079577][ T8528] Cannot create hsr debugfs directory [ 741.166913][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.183010][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.210684][ T8553] bridge_slave_1: entered allmulticast mode [ 741.238785][ T8553] bridge_slave_1: entered promiscuous mode [ 741.443263][ T759] bridge_slave_1: left allmulticast mode [ 741.449122][ T759] bridge_slave_1: left promiscuous mode [ 741.471185][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.504391][ T759] bridge_slave_0: left allmulticast mode [ 741.513728][ T759] bridge_slave_0: left promiscuous mode [ 741.526075][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.556955][ T759] bridge_slave_1: left allmulticast mode [ 741.591082][ T759] bridge_slave_1: left promiscuous mode [ 741.597584][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.690731][ T759] bridge_slave_0: left allmulticast mode [ 741.696570][ T759] bridge_slave_0: left promiscuous mode [ 741.720984][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.720354][ T8688] loop1: detected capacity change from 0 to 32768 [ 742.732744][ T8688] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.440 (8688) [ 742.760007][ T8688] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 742.770462][ T8688] BTRFS info (device loop1): using crc32c checksum algorithm [ 742.779294][ T8688] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 742.972414][ T8688] BTRFS info (device loop1): rebuilding free space tree [ 743.006176][ T8688] BTRFS info (device loop1): disabling free space tree [ 743.013535][ T8688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 743.024034][ T8688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 743.048111][ T8688] BTRFS info (device loop1): enabling ssd optimizations [ 743.055481][ T8688] BTRFS info (device loop1): turning on async discard [ 743.062737][ T8688] BTRFS info (device loop1): enabling disk space caching [ 743.070067][ T8688] BTRFS info (device loop1): force clearing of disk cache [ 743.077357][ T8688] BTRFS info (device loop1): use zstd compression, level 3 [ 743.948507][ T29] audit: type=1804 audit(1772106823.804:5): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.440" name="/newroot/234/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 744.799564][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.826153][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.845961][ T759] bond0 (unregistering): Released all slaves [ 745.448700][ T759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.474487][ T759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.498444][ T759] bond0 (unregistering): Released all slaves [ 745.873424][ T5776] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 745.944761][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.121843][ T759] hsr_slave_0: left promiscuous mode [ 746.141050][ T759] hsr_slave_1: left promiscuous mode [ 746.160550][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.184508][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.202996][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.215877][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.245927][ T759] hsr_slave_0: left promiscuous mode [ 746.253825][ T759] hsr_slave_1: left promiscuous mode [ 746.263062][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.270787][ T759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.293347][ T759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.301093][ T759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.340267][ T759] veth1_macvtap: left promiscuous mode [ 746.346057][ T759] veth0_macvtap: left promiscuous mode [ 746.354514][ T759] veth1_vlan: left promiscuous mode [ 746.361194][ T759] veth0_vlan: left promiscuous mode [ 746.368376][ T759] veth1_macvtap: left promiscuous mode [ 746.376613][ T759] veth0_macvtap: left promiscuous mode [ 746.382571][ T759] veth1_vlan: left promiscuous mode [ 746.388047][ T759] veth0_vlan: left promiscuous mode [ 746.804869][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 747.267969][ T759] team0 (unregistering): Port device team_slave_1 removed [ 747.297682][ T759] team0 (unregistering): Port device team_slave_0 removed [ 747.729492][ T759] team0 (unregistering): Port device team_slave_1 removed [ 747.752206][ T759] team0 (unregistering): Port device team_slave_0 removed [ 747.970980][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.329112][ T8553] team0: Port device team_slave_0 added [ 748.357364][ T8553] team0: Port device team_slave_1 added [ 748.474436][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 748.762685][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.770543][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.800670][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.952726][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.980156][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.007104][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.089588][ T8728] loop1: detected capacity change from 0 to 16 [ 749.124120][ T8728] erofs (device loop1): invalid ishare xattr prefix id 0 [ 749.323606][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.795192][ T8553] hsr_slave_0: entered promiscuous mode [ 749.803799][ T8553] hsr_slave_1: entered promiscuous mode [ 749.812361][ T8553] debugfs: 'hsr0' already exists in 'hsr' [ 749.818185][ T8553] Cannot create hsr debugfs directory [ 749.824856][ T8454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 750.140800][ T8454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 750.244885][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.347307][ T8454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 750.470864][ T8454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.524824][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.532458][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.795119][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.802804][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.961584][ T8528] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 753.016894][ T8528] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 753.517386][ T8528] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 753.585296][ T8528] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 754.312050][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.922913][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.586619][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.155060][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.163238][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.230885][ T8553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.713504][ T8553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.974959][ T8553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 757.014226][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.023954][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.240404][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.247852][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.556293][ T8553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.277142][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.024661][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.693952][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.701544][ T8757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.317261][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.329946][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.341797][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.390618][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.402924][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.756685][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.764313][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.480042][ T49] Bluetooth: hci4: command tx timeout [ 765.177154][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.329137][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.686947][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.861952][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.869416][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.571233][ T49] Bluetooth: hci4: command tx timeout [ 767.531321][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.538868][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.286609][ T13] bridge_slave_1: left allmulticast mode [ 768.340281][ T13] bridge_slave_1: left promiscuous mode [ 768.346777][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.450911][ T13] bridge_slave_0: left allmulticast mode [ 768.451473][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 768.459239][ T13] bridge_slave_0: left promiscuous mode [ 768.482231][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 768.501556][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 768.524625][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 768.536002][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 768.559377][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.647027][ T49] Bluetooth: hci4: command tx timeout [ 769.121810][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.138782][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.154063][ T13] bond0 (unregistering): Released all slaves [ 769.193104][ T8769] chnl_net:caif_netlink_parms(): no params data found [ 769.357721][ T13] hsr_slave_0: left promiscuous mode [ 769.387275][ T13] hsr_slave_1: left promiscuous mode [ 769.399073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.409668][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.142912][ T13] team0 (unregistering): Port device team_slave_1 removed [ 770.194216][ T13] team0 (unregistering): Port device team_slave_0 removed [ 770.639944][ T49] Bluetooth: hci0: command tx timeout [ 770.722638][ T49] Bluetooth: hci4: command tx timeout [ 771.179519][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.061211][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.090037][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.097841][ T8769] bridge_slave_0: entered allmulticast mode [ 772.135049][ T8769] bridge_slave_0: entered promiscuous mode [ 772.384713][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.642057][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.720143][ T49] Bluetooth: hci0: command tx timeout [ 772.785771][ T8769] bridge_slave_1: entered allmulticast mode [ 772.842854][ T8769] bridge_slave_1: entered promiscuous mode [ 774.216972][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.800324][ T49] Bluetooth: hci0: command tx timeout [ 775.323910][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.500342][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 775.517314][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 775.540358][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 775.555387][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 775.566899][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.673644][ T8769] team0: Port device team_slave_0 added [ 776.393619][ T8769] team0: Port device team_slave_1 added [ 776.894619][ T49] Bluetooth: hci0: command tx timeout [ 777.210742][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 777.340889][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.350110][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 777.359040][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 777.364173][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.376289][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 777.400491][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 777.429186][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.590617][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.680304][ T5774] Bluetooth: hci2: command tx timeout [ 777.765382][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.800732][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.899906][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.342834][ T13] bridge_slave_1: left allmulticast mode [ 778.348765][ T13] bridge_slave_1: left promiscuous mode [ 778.402159][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.465717][ T13] bridge_slave_0: left allmulticast mode [ 778.485067][ T13] bridge_slave_0: left promiscuous mode [ 778.505915][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.770780][ T8840] overlayfs: missing 'lowerdir' [ 779.643934][ T5774] Bluetooth: hci6: command tx timeout [ 780.641076][ T49] Bluetooth: hci2: command tx timeout [ 781.535950][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.557513][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.575090][ T13] bond0 (unregistering): Released all slaves [ 781.680302][ T49] Bluetooth: hci6: command tx timeout [ 782.069292][ T13] hsr_slave_0: left promiscuous mode [ 782.078265][ T13] hsr_slave_1: left promiscuous mode [ 782.098473][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.113804][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.720284][ T49] Bluetooth: hci2: command tx timeout [ 783.542370][ T13] team0 (unregistering): Port device team_slave_1 removed [ 783.569050][ T13] team0 (unregistering): Port device team_slave_0 removed [ 783.759884][ T49] Bluetooth: hci6: command tx timeout [ 783.973844][ T8769] hsr_slave_0: entered promiscuous mode [ 783.994713][ T8769] hsr_slave_1: entered promiscuous mode [ 784.013852][ T8769] debugfs: 'hsr0' already exists in 'hsr' [ 784.030743][ T8769] Cannot create hsr debugfs directory [ 784.801706][ T49] Bluetooth: hci2: command tx timeout [ 785.020929][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.028504][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.051331][ T8793] bridge_slave_0: entered allmulticast mode [ 785.061210][ T8793] bridge_slave_0: entered promiscuous mode [ 785.266095][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.278144][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.296075][ T8793] bridge_slave_1: entered allmulticast mode [ 785.311381][ T8793] bridge_slave_1: entered promiscuous mode [ 785.706945][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.841342][ T49] Bluetooth: hci6: command tx timeout [ 787.064204][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.433730][ T8793] team0: Port device team_slave_0 added [ 787.543574][ T8793] team0: Port device team_slave_1 added [ 787.911806][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.919337][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.964904][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.980537][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 788.007293][ T8826] chnl_net:caif_netlink_parms(): no params data found [ 788.120095][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.127911][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.203253][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.135669][ T8793] hsr_slave_0: entered promiscuous mode [ 790.216591][ T8793] hsr_slave_1: entered promiscuous mode [ 790.254680][ T8793] debugfs: 'hsr0' already exists in 'hsr' [ 790.260806][ T8793] Cannot create hsr debugfs directory [ 790.833462][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.841472][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.851315][ T8834] bridge_slave_0: entered allmulticast mode [ 790.861872][ T8834] bridge_slave_0: entered promiscuous mode [ 790.968270][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.976280][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.987839][ T8834] bridge_slave_1: entered allmulticast mode [ 790.998646][ T8834] bridge_slave_1: entered promiscuous mode [ 791.029370][ T8769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 791.219264][ T8769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 795.859863][ T8769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 795.930865][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.938530][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.947862][ T8826] bridge_slave_0: entered allmulticast mode [ 795.958543][ T8826] bridge_slave_0: entered promiscuous mode [ 796.058790][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.068726][ T8769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 796.111921][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.119407][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.150580][ T8826] bridge_slave_1: entered allmulticast mode [ 796.160952][ T8826] bridge_slave_1: entered promiscuous mode [ 796.257231][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.346733][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.367200][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.548518][ T8834] team0: Port device team_slave_0 added [ 796.565730][ T8834] team0: Port device team_slave_1 added [ 796.653312][ T8826] team0: Port device team_slave_0 added [ 796.712299][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.719417][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.776960][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.813365][ T8826] team0: Port device team_slave_1 added [ 796.937205][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.962772][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.990934][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.172207][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.179320][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.206871][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.277431][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.296635][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.332170][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.495986][ T8834] hsr_slave_0: entered promiscuous mode [ 797.506110][ T8834] hsr_slave_1: entered promiscuous mode [ 797.515310][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 797.521913][ T8834] Cannot create hsr debugfs directory [ 797.693647][ T13] bridge_slave_1: left allmulticast mode [ 797.699489][ T13] bridge_slave_1: left promiscuous mode [ 797.710415][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.725337][ T13] bridge_slave_0: left allmulticast mode [ 797.731517][ T13] bridge_slave_0: left promiscuous mode [ 797.738029][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.757187][ T13] bridge_slave_1: left allmulticast mode [ 797.764625][ T13] bridge_slave_1: left promiscuous mode [ 797.772719][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.794270][ T13] bridge_slave_0: left allmulticast mode [ 797.800235][ T13] bridge_slave_0: left promiscuous mode [ 797.806871][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.350836][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.367502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.391582][ T13] bond0 (unregistering): Released all slaves [ 798.616471][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.638074][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.654052][ T13] bond0 (unregistering): Released all slaves [ 798.845011][ T8826] hsr_slave_0: entered promiscuous mode [ 798.855195][ T8826] hsr_slave_1: entered promiscuous mode [ 798.865219][ T8826] debugfs: 'hsr0' already exists in 'hsr' [ 798.872040][ T8826] Cannot create hsr debugfs directory [ 798.987736][ T13] hsr_slave_0: left promiscuous mode [ 798.998020][ T13] hsr_slave_1: left promiscuous mode [ 799.011737][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.023281][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.057331][ T13] hsr_slave_0: left promiscuous mode [ 799.065929][ T13] hsr_slave_1: left promiscuous mode [ 799.092420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.105343][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.755606][ T13] team0 (unregistering): Port device team_slave_1 removed [ 799.795842][ T13] team0 (unregistering): Port device team_slave_0 removed [ 800.952997][ T13] team0 (unregistering): Port device team_slave_1 removed [ 800.995973][ T13] team0 (unregistering): Port device team_slave_0 removed [ 802.074908][ T8793] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 802.320798][ T8793] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 802.464679][ T8793] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 802.509041][ T8793] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 803.566996][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.615526][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.730532][ T8793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 803.743821][ T8793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.818826][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.899019][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.906584][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.938641][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.946675][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.117220][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.208892][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.216500][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.856927][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.864524][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.276164][ T8834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 807.316655][ T8834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 807.363661][ T8834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 807.584940][ T8834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 808.873643][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.686806][ T8826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 809.849233][ T8826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 809.948848][ T8826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 810.194545][ T8826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 810.674171][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.087654][ T8793] veth0_vlan: entered promiscuous mode [ 811.159610][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.233344][ T8793] veth1_vlan: entered promiscuous mode [ 811.506442][ T8834] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.769169][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.776752][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.933708][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.941240][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.120725][ T8793] veth0_macvtap: entered promiscuous mode [ 812.156428][ T8793] veth1_macvtap: entered promiscuous mode [ 812.394180][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.569480][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.648695][ T8826] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.755773][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.849503][ T8769] veth0_vlan: entered promiscuous mode [ 812.931149][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.938784][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.005487][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.013244][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.097744][ T7259] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.120835][ T7259] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.165360][ T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.174653][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.214545][ T8769] veth1_vlan: entered promiscuous mode [ 813.674280][ T8769] veth0_macvtap: entered promiscuous mode [ 813.804958][ T8769] veth1_macvtap: entered promiscuous mode [ 813.978015][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.126743][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.246451][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.412292][ T759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.426123][ T759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.477151][ T759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.757886][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.772411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.110044][ T759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.979351][ T8826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.017269][ T8834] veth0_vlan: entered promiscuous mode [ 821.178005][ T8834] veth1_vlan: entered promiscuous mode [ 821.687024][ T8834] veth0_macvtap: entered promiscuous mode [ 821.739623][ T8834] veth1_macvtap: entered promiscuous mode [ 821.949272][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.048856][ T8834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.287218][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.330590][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.394406][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.437971][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.837315][ T8826] veth0_vlan: entered promiscuous mode [ 822.971049][ T8826] veth1_vlan: entered promiscuous mode [ 823.535400][ T759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.560263][ T759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.586069][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.596180][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.596759][ T8826] veth0_macvtap: entered promiscuous mode [ 823.626824][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.643024][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.662780][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 823.838741][ T8826] veth1_macvtap: entered promiscuous mode [ 824.234883][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.310122][ T759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.318158][ T759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.546455][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.635239][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.830921][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.278716][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.525645][ T8826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.762428][ T49] Bluetooth: hci3: command tx timeout [ 825.895684][ T8757] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.928991][ T8757] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.050061][ T8757] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.071759][ T8757] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.727924][ T9084] loop7: detected capacity change from 0 to 32768 [ 827.741810][ T9084] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.474 (9084) [ 827.820975][ T9084] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 827.831478][ T9084] BTRFS info (device loop7): using crc32c checksum algorithm [ 827.841842][ T9084] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 827.862994][ T49] Bluetooth: hci3: command tx timeout [ 827.900296][ T13] bridge_slave_1: left allmulticast mode [ 827.976094][ T13] bridge_slave_1: left promiscuous mode [ 828.009492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.018920][ T9084] BTRFS info (device loop7): rebuilding free space tree [ 828.049537][ T9084] BTRFS info (device loop7): disabling free space tree [ 828.056884][ T9084] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 828.066937][ T9084] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 828.117208][ T13] bridge_slave_0: left allmulticast mode [ 828.131226][ T9084] BTRFS info (device loop7): enabling ssd optimizations [ 828.138654][ T9084] BTRFS info (device loop7): turning on async discard [ 828.145850][ T9084] BTRFS info (device loop7): enabling disk space caching [ 828.146870][ T13] bridge_slave_0: left promiscuous mode [ 828.153128][ T9084] BTRFS info (device loop7): force clearing of disk cache [ 828.153223][ T9084] BTRFS info (device loop7): use zstd compression, level 3 [ 828.250672][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.032892][ T29] audit: type=1804 audit(1772106908.884:6): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.474" name="/newroot/2/file1/bus" dev="loop7" ino=263 res=1 errno=0 [ 829.922751][ T49] Bluetooth: hci3: command tx timeout [ 830.851051][ T8793] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 831.191464][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.243837][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.262303][ T13] bond0 (unregistering): Released all slaves [ 831.278952][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 831.659220][ T13] hsr_slave_0: left promiscuous mode [ 831.730749][ T13] hsr_slave_1: left promiscuous mode [ 831.738590][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.779897][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.838647][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.880034][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.923402][ T13] veth1_macvtap: left promiscuous mode [ 831.929199][ T13] veth0_macvtap: left promiscuous mode [ 831.951340][ T13] veth1_vlan: left promiscuous mode [ 831.956875][ T13] veth0_vlan: left promiscuous mode [ 831.999959][ T49] Bluetooth: hci3: command tx timeout [ 834.420274][ T13] team0 (unregistering): Port device team_slave_1 removed [ 834.573562][ T13] team0 (unregistering): Port device team_slave_0 removed [ 841.169978][ T49] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 841.658494][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 841.811808][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 841.843073][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 841.901805][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 841.995564][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.011919][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.763975][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.807947][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.840696][ T9045] bridge_slave_0: entered allmulticast mode [ 842.875168][ T9045] bridge_slave_0: entered promiscuous mode [ 842.954016][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.991457][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.999169][ T9045] bridge_slave_1: entered allmulticast mode [ 843.075629][ T9045] bridge_slave_1: entered promiscuous mode [ 843.615581][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.798860][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.090807][ T5774] Bluetooth: hci5: command tx timeout [ 844.208402][ T9145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 844.493517][ T9045] team0: Port device team_slave_0 added [ 844.578565][ T9045] team0: Port device team_slave_1 added [ 844.649328][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 844.671585][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 844.685542][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 844.721060][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 844.738297][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 845.218087][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.266096][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.459839][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.511202][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.518320][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.546896][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.001458][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.179127][ T49] Bluetooth: hci5: command tx timeout [ 846.316174][ T9045] hsr_slave_0: entered promiscuous mode [ 846.361617][ T9045] hsr_slave_1: entered promiscuous mode [ 846.383762][ T9045] debugfs: 'hsr0' already exists in 'hsr' [ 846.393606][ T9045] Cannot create hsr debugfs directory [ 846.468299][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.688762][ T9148] chnl_net:caif_netlink_parms(): no params data found [ 846.800281][ T49] Bluetooth: hci4: command tx timeout [ 846.808084][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.211789][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.307455][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 847.321545][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 847.333775][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 847.359430][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 847.375033][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 848.246765][ T5774] Bluetooth: hci5: command tx timeout [ 848.880435][ T5774] Bluetooth: hci4: command tx timeout [ 849.450003][ T5774] Bluetooth: hci2: command tx timeout [ 850.323255][ T5774] Bluetooth: hci5: command tx timeout [ 852.262455][ T5774] Bluetooth: hci4: command tx timeout [ 852.268087][ T5774] Bluetooth: hci2: command tx timeout [ 855.270231][ T5774] Bluetooth: hci2: command tx timeout [ 855.276011][ T5774] Bluetooth: hci4: command tx timeout [ 857.360923][ T5774] Bluetooth: hci2: command tx timeout [ 858.437273][ T13] bridge_slave_1: left allmulticast mode [ 858.443782][ T13] bridge_slave_1: left promiscuous mode [ 858.455773][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.525853][ T13] bridge_slave_0: left allmulticast mode [ 858.574258][ T13] bridge_slave_0: left promiscuous mode [ 858.585490][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.656047][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.703731][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.745683][ T13] bond0 (unregistering): Released all slaves [ 861.050542][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.090132][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.133382][ T9148] bridge_slave_0: entered allmulticast mode [ 861.169203][ T9148] bridge_slave_0: entered promiscuous mode [ 861.286694][ T13] hsr_slave_0: left promiscuous mode [ 861.324974][ T13] hsr_slave_1: left promiscuous mode [ 861.334929][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.348283][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.366695][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.379554][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.410244][ T13] veth1_macvtap: left promiscuous mode [ 861.416327][ T13] veth0_macvtap: left promiscuous mode [ 861.427322][ T13] veth1_vlan: left promiscuous mode [ 861.449484][ T13] veth0_vlan: left promiscuous mode [ 862.577886][ T13] team0 (unregistering): Port device team_slave_1 removed [ 862.617385][ T13] team0 (unregistering): Port device team_slave_0 removed [ 863.030130][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.037975][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.075100][ T9148] bridge_slave_1: entered allmulticast mode [ 863.097919][ T9148] bridge_slave_1: entered promiscuous mode [ 863.288688][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 864.426708][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.446406][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.820246][ T9148] team0: Port device team_slave_0 added [ 864.865070][ T9148] team0: Port device team_slave_1 added [ 866.347954][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.459027][ T9045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 866.577068][ T9045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 866.691194][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.698380][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.748131][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.880447][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.919505][ T9045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 867.026278][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.058682][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.092991][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.178880][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.187539][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.203571][ T9163] bridge_slave_0: entered allmulticast mode [ 867.213909][ T9163] bridge_slave_0: entered promiscuous mode [ 867.258859][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.294353][ T9045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 867.401108][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 868.079386][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.098807][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.136040][ T9163] bridge_slave_1: entered allmulticast mode [ 868.197969][ T9163] bridge_slave_1: entered promiscuous mode [ 868.391327][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.863729][ T9262] loop7: detected capacity change from 0 to 16 [ 870.908591][ T9262] erofs (device loop7): invalid ishare xattr prefix id 0 [ 870.992127][ T9148] hsr_slave_0: entered promiscuous mode [ 871.632447][ T9148] hsr_slave_1: entered promiscuous mode [ 871.647084][ T9148] debugfs: 'hsr0' already exists in 'hsr' [ 871.658840][ T9148] Cannot create hsr debugfs directory [ 872.834484][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.917739][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.036395][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.097864][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.130676][ T9185] bridge_slave_0: entered allmulticast mode [ 874.163458][ T9185] bridge_slave_0: entered promiscuous mode [ 874.203477][ T9163] team0: Port device team_slave_0 added [ 874.340877][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.366887][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.411049][ T9185] bridge_slave_1: entered allmulticast mode [ 874.441601][ T9185] bridge_slave_1: entered promiscuous mode [ 874.578316][ T9163] team0: Port device team_slave_1 added [ 874.961917][ T13] bridge_slave_1: left allmulticast mode [ 874.967777][ T13] bridge_slave_1: left promiscuous mode [ 874.980483][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.995358][ T13] bridge_slave_0: left allmulticast mode [ 875.001837][ T13] bridge_slave_0: left promiscuous mode [ 875.008370][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.478852][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.538989][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.559097][ T13] bond0 (unregistering): Released all slaves [ 875.595140][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.742086][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.758176][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.788076][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.830256][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.853273][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.861411][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.888893][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.052298][ T13] hsr_slave_0: left promiscuous mode [ 876.077178][ T13] hsr_slave_1: left promiscuous mode [ 876.096260][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.108622][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.119169][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.126982][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.152676][ T13] veth1_macvtap: left promiscuous mode [ 876.158660][ T13] veth0_macvtap: left promiscuous mode [ 876.170759][ T13] veth1_vlan: left promiscuous mode [ 876.176303][ T13] veth0_vlan: left promiscuous mode [ 876.783869][ T9288] slcan: can't register candev [ 877.274240][ T13] team0 (unregistering): Port device team_slave_1 removed [ 877.554599][ T13] team0 (unregistering): Port device team_slave_0 removed [ 879.879754][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.109868][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.354895][ T9185] team0: Port device team_slave_0 added [ 880.478825][ T9185] team0: Port device team_slave_1 added [ 881.820543][ T9163] hsr_slave_0: entered promiscuous mode [ 881.904559][ T9163] hsr_slave_1: entered promiscuous mode [ 881.961391][ T9163] debugfs: 'hsr0' already exists in 'hsr' [ 881.968283][ T9163] Cannot create hsr debugfs directory [ 882.650230][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.669056][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.696234][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.743439][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.770110][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.810275][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.467118][ T9185] hsr_slave_0: entered promiscuous mode [ 883.494502][ T9185] hsr_slave_1: entered promiscuous mode [ 883.523447][ T9185] debugfs: 'hsr0' already exists in 'hsr' [ 883.539858][ T9185] Cannot create hsr debugfs directory [ 884.946418][ T9148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 885.177190][ T9148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 885.283640][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 885.294789][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 885.304321][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 885.321927][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 885.336243][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 885.558559][ T9148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 885.814473][ T9148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 887.440182][ T49] Bluetooth: hci6: command tx timeout [ 887.694416][ T9163] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 888.889823][ T9163] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 889.340205][ T9163] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 889.570150][ T49] Bluetooth: hci6: command tx timeout [ 889.640644][ T9163] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 890.142705][ T9185] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 890.374661][ T9185] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 890.457690][ T9311] chnl_net:caif_netlink_parms(): no params data found [ 890.569897][ T9185] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 890.620980][ T9185] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 891.157791][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.476627][ T9148] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.599935][ T5774] Bluetooth: hci6: command tx timeout [ 891.704185][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.711850][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.755864][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.763432][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.792500][ T106] bridge_slave_1: left allmulticast mode [ 891.798428][ T106] bridge_slave_1: left promiscuous mode [ 891.811688][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.825362][ T106] bridge_slave_0: left allmulticast mode [ 891.835797][ T106] bridge_slave_0: left promiscuous mode [ 891.860864][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.262023][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 892.384947][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.435244][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.494144][ T106] bond0 (unregistering): Released all slaves [ 893.231785][ T106] hsr_slave_0: left promiscuous mode [ 893.280968][ T106] hsr_slave_1: left promiscuous mode [ 893.292237][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.304006][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.684569][ T49] Bluetooth: hci6: command tx timeout [ 893.998358][ T106] team0 (unregistering): Port device team_slave_1 removed [ 894.084676][ T106] team0 (unregistering): Port device team_slave_0 removed [ 894.490349][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.507376][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.521203][ T9311] bridge_slave_0: entered allmulticast mode [ 894.536286][ T9311] bridge_slave_0: entered promiscuous mode [ 894.585384][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.605098][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.624916][ T9311] bridge_slave_1: entered allmulticast mode [ 894.642995][ T9311] bridge_slave_1: entered promiscuous mode [ 894.721819][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 894.741765][ T9311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.769426][ T9311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.814804][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.919288][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.937775][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.952536][ T10] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 894.967232][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.988297][ T10] usb 8-1: config 0 descriptor?? [ 895.124489][ T9311] team0: Port device team_slave_0 added [ 895.267220][ T9311] team0: Port device team_slave_1 added [ 895.462704][ T106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.776173][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 895.795037][ T106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.811217][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 895.866367][ T10] usb 8-1: USB disconnect, device number 2 [ 895.992095][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.999457][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.069823][ T9311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.116639][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.194754][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.211132][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.226674][ T106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.238218][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 896.256270][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 896.274752][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 896.285183][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.297221][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.434519][ T9311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.539176][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.546819][ T6242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.673306][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.680861][ T6242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.732033][ T106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.907134][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.930670][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.510'. [ 897.167697][ T9311] hsr_slave_0: entered promiscuous mode [ 897.178299][ T9311] hsr_slave_1: entered promiscuous mode [ 897.187194][ T9311] debugfs: 'hsr0' already exists in 'hsr' [ 897.197405][ T9311] Cannot create hsr debugfs directory [ 897.232758][ T9362] bridge_slave_1: left allmulticast mode [ 897.243933][ T9362] bridge_slave_1: left promiscuous mode [ 897.254691][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.279169][ T9362] bridge_slave_0: left allmulticast mode [ 897.303736][ T9362] bridge_slave_0: left promiscuous mode [ 897.314094][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.943191][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.209004][ T106] veth5: left allmulticast mode [ 898.223545][ T106] veth5: left promiscuous mode [ 898.229801][ T106] bridge1: port 3(veth5) entered disabled state [ 898.246748][ T106] veth3: left allmulticast mode [ 898.253338][ T106] veth3: left promiscuous mode [ 898.259201][ T106] bridge1: port 1(veth3) entered disabled state [ 898.275389][ T106] veth9: left allmulticast mode [ 898.281107][ T106] veth9: left promiscuous mode [ 898.287383][ T106] bridge0: port 2(veth9) entered disabled state [ 898.315146][ T106] veth7: left allmulticast mode [ 898.325205][ T106] veth7: left promiscuous mode [ 898.334297][ T106] bridge0: port 1(veth7) entered disabled state [ 898.400737][ T5774] Bluetooth: hci1: command tx timeout [ 899.398159][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.417482][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.447644][ T106] bond0 (unregistering): Released all slaves [ 899.863180][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.871084][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.472615][ T106] tipc: Left network mode [ 900.496523][ T5774] Bluetooth: hci1: command tx timeout [ 900.575367][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.583012][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.023305][ T9358] chnl_net:caif_netlink_parms(): no params data found [ 901.924681][ T106] hsr_slave_0: left promiscuous mode [ 901.939067][ T106] hsr_slave_1: left promiscuous mode [ 901.954789][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.968182][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.987318][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.996813][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.023000][ T106] veth1_macvtap: left promiscuous mode [ 902.028712][ T106] veth0_macvtap: left promiscuous mode [ 902.035952][ T106] veth1_vlan: left promiscuous mode [ 902.042472][ T106] veth0_vlan: left promiscuous mode [ 902.380868][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.516'. [ 902.559958][ T5774] Bluetooth: hci1: command tx timeout [ 902.866009][ T106] team0 (unregistering): Port device team_slave_1 removed [ 902.931084][ T106] team0 (unregistering): Port device team_slave_0 removed [ 904.272210][ T9358] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.280315][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.288465][ T9358] bridge_slave_0: entered allmulticast mode [ 904.298337][ T9358] bridge_slave_0: entered promiscuous mode [ 904.337899][ T9358] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.346433][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.358689][ T9358] bridge_slave_1: entered allmulticast mode [ 904.405474][ T9358] bridge_slave_1: entered promiscuous mode [ 904.650073][ T5774] Bluetooth: hci1: command tx timeout [ 905.591193][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 905.601465][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 905.613635][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 905.657339][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 905.668831][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.845007][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 905.854083][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 905.861603][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 906.249084][ T9401] infiniband syz2: set active [ 906.254214][ T9401] infiniband syz2: added vxcan1 [ 906.262691][ T9401] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 906.270681][ T9401] infiniband syz2: Couldn't open port 1 [ 906.291063][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 906.323500][ T9401] RDS/IB: syz2: added [ 906.327679][ T9401] smc: adding ib device syz2 with port count 1 [ 906.334999][ T9401] smc: ib device syz2 port 1 has no pnetid [ 906.342958][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 906.752118][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 906.948246][ T9358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.047859][ T9358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.339522][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 907.346227][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 907.833041][ T49] Bluetooth: hci3: command tx timeout [ 908.001498][ T9311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 908.030819][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 908.052220][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 908.062815][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 908.077398][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 908.091040][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 908.127210][ T9311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 908.152618][ T9311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 908.201366][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 908.207269][ T9311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 908.391258][ T9358] team0: Port device team_slave_0 added [ 908.708300][ T9358] team0: Port device team_slave_1 added [ 908.737756][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 909.221960][ T106] bridge_slave_1: left allmulticast mode [ 909.227815][ T106] bridge_slave_1: left promiscuous mode [ 909.251540][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.265491][ T106] bridge_slave_0: left allmulticast mode [ 909.278256][ T106] bridge_slave_0: left promiscuous mode [ 909.286440][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.715223][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.732324][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.748408][ T106] bond0 (unregistering): Released all slaves [ 909.798294][ T9402] vxcan1 speed is unknown, defaulting to 1000 [ 909.820721][ T9358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.828092][ T9358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.854961][ T49] Bluetooth: hci3: command tx timeout [ 909.873680][ T9358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.972108][ T9358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.986779][ T9358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.017108][ T9358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.161577][ T49] Bluetooth: hci5: command tx timeout [ 910.348908][ T9358] hsr_slave_0: entered promiscuous mode [ 910.362221][ T9358] hsr_slave_1: entered promiscuous mode [ 910.381150][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 910.949026][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 911.248513][ T9406] vxcan1 speed is unknown, defaulting to 1000 [ 911.925838][ T49] Bluetooth: hci3: command tx timeout [ 912.320302][ T49] Bluetooth: hci5: command tx timeout [ 912.673981][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.682001][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.691181][ T9402] bridge_slave_0: entered allmulticast mode [ 913.193765][ T9402] bridge_slave_0: entered promiscuous mode [ 913.709578][ T106] hsr_slave_0: left promiscuous mode [ 913.727205][ T106] hsr_slave_1: left promiscuous mode [ 913.747772][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.768574][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.099158][ T49] Bluetooth: hci3: command tx timeout [ 914.399901][ T49] Bluetooth: hci5: command tx timeout [ 914.686697][ T106] team0 (unregistering): Port device team_slave_1 removed [ 914.738868][ T106] team0 (unregistering): Port device team_slave_0 removed [ 914.958575][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.980390][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.988100][ T9402] bridge_slave_1: entered allmulticast mode [ 914.997844][ T9402] bridge_slave_1: entered promiscuous mode [ 915.405801][ T9424] syzkaller0: entered promiscuous mode [ 915.411482][ T9424] syzkaller0: entered allmulticast mode [ 915.645822][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.667370][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.979948][ T9402] team0: Port device team_slave_0 added [ 916.006338][ T9311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.150233][ T9402] team0: Port device team_slave_1 added [ 916.471764][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.479920][ T49] Bluetooth: hci5: command tx timeout [ 916.493845][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.521860][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.540071][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.548333][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.576517][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.835711][ C0] ===================================================== [ 916.842905][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 916.851651][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 916.858034][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 916.865113][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 916.871155][ C0] sysvec_call_function_single+0x7c/0x90 [ 916.878003][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 916.884138][ C0] _raw_spin_unlock_irq+0x25/0x50 [ 916.889309][ C0] process_scheduled_works+0xabf/0x1e30 [ 916.894987][ C0] worker_thread+0xede/0x1580 [ 916.899781][ C0] kthread+0x53f/0x600 [ 916.903983][ C0] ret_from_fork+0x20f/0x910 [ 916.908699][ C0] ret_from_fork_asm+0x1a/0x30 [ 916.913595][ C0] [ 916.915965][ C0] Local variable pflags created at: [ 916.921208][ C0] try_charge_memcg+0x63/0x1c20 [ 916.926173][ C0] __mem_cgroup_charge+0x114/0x5c0 [ 916.931393][ C0] [ 916.933817][ C0] CPU: 0 UID: 0 PID: 6242 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.945066][ C0] Tainted: [L]=SOFTLOCKUP [ 916.949456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.959714][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 916.966641][ C0] ===================================================== [ 916.973728][ C0] Disabling lock debugging due to kernel taint [ 916.980128][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 916.986651][ C0] CPU: 0 UID: 0 PID: 6242 Comm: kworker/u8:12 Tainted: G B L syzkaller #0 PREEMPT(full) [ 916.997910][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 917.003798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 917.013950][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 917.020880][ C0] Call Trace: [ 917.024228][ C0] [ 917.027132][ C0] __dump_stack+0x26/0x30 [ 917.031602][ C0] dump_stack_lvl+0x50/0x1c0 [ 917.036500][ C0] ? dump_stack+0x12/0x25 [ 917.040991][ C0] dump_stack+0x1e/0x25 [ 917.045272][ C0] vpanic+0x7b4/0x1430 [ 917.049500][ C0] panic+0x15d/0x160 [ 917.053593][ C0] kmsan_report+0x31a/0x320 [ 917.058255][ C0] ? __msan_warning+0x1b/0x30 [ 917.063091][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 917.069646][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 917.076924][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 917.083240][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 917.089850][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 917.096169][ C0] ? _raw_spin_unlock_irq+0x25/0x50 [ 917.101516][ C0] ? process_scheduled_works+0xabf/0x1e30 [ 917.107456][ C0] ? worker_thread+0xede/0x1580 [ 917.112442][ C0] ? kthread+0x53f/0x600 [ 917.116831][ C0] ? ret_from_fork+0x20f/0x910 [ 917.121717][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 917.126809][ C0] ? ktime_get+0x530/0x590 [ 917.131357][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 917.136725][ C0] ? native_apic_msr_write+0x15/0x70 [ 917.142144][ C0] ? lapic_next_event+0x22/0x50 [ 917.147164][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 917.152695][ C0] ? clockevents_program_event+0x58d/0xcb0 [ 917.158684][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 917.163951][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 917.169308][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 917.175799][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 917.181154][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 917.187144][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 917.192419][ C0] __msan_warning+0x1b/0x30 [ 917.197062][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 917.203660][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 917.210923][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 917.217056][ C0] sysvec_call_function_single+0x7c/0x90 [ 917.222942][ C0] [ 917.225934][ C0] [ 917.228932][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 917.235075][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x50 [ 917.243423][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 53 48 89 fb e8 0f 77 a2 f1 48 89 df e8 47 6a a2 f1 c6 00 00 c6 03 00 fb be 04 00 00 00 <48> c7 c7 28 60 84 95 e8 5f 6c a2 f1 65 ff 0d 40 b5 7b 04 74 08 5b [ 917.265359][ C0] RSP: 0018:ffff888055693bf0 EFLAGS: 00000286 [ 917.273035][ C0] RAX: ffff8880bb87a400 RBX: ffff88810047a400 RCX: 0000000000500262 [ 917.282016][ C0] RDX: ffff88810007a400 RSI: 0000000000000004 RDI: ffff88810047a400 [ 917.290202][ C0] RBP: ffff888055693bf8 R08: ffffea000000000f R09: 0000000000000000 [ 917.298391][ C0] R10: ffff888237c90028 R11: ffffffff818e9240 R12: ffff88801bbaf980 [ 917.306494][ C0] R13: 0000000000000000 R14: ffff88804aecee58 R15: 0000000000007d06 [ 917.314596][ C0] ? __pfx_native_smp_send_reschedule+0x10/0x10 [ 917.321009][ C0] process_scheduled_works+0xabf/0x1e30 [ 917.326758][ C0] worker_thread+0xede/0x1580 [ 917.331604][ C0] kthread+0x53f/0x600 [ 917.336096][ C0] ? __pfx_worker_thread+0x10/0x10 [ 917.341362][ C0] ? __pfx_kthread+0x10/0x10 [ 917.346107][ C0] ret_from_fork+0x20f/0x910 [ 917.350828][ C0] ? __switch_to+0x51c/0x750 [ 917.355586][ C0] ? __pfx_kthread+0x10/0x10 [ 917.360409][ C0] ret_from_fork_asm+0x1a/0x30 [ 917.365358][ C0] [ 917.368882][ C0] Kernel Offset: disabled [ 917.373249][ C0] Rebooting in 86400 seconds..