last executing test programs: 15m20.829820344s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 15m18.65704048s ago: executing program 2 (id=6): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)}}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f00000d0000/0x2000)=nil, &(0x7f000085c000/0x2000)=nil, &(0x7f0000b00000/0x1000)=nil, &(0x7f0000731000/0x4000)=nil, &(0x7f0000094000/0x3000)=nil, &(0x7f0000513000/0x1000)=nil, &(0x7f0000a5a000/0x1000)=nil, &(0x7f00009a2000/0x3000)=nil, &(0x7f0000424000/0x1000)=nil, &(0x7f00001dd000/0x2000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4e84, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) 15m17.430176319s ago: executing program 2 (id=8): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8c, @rand_addr=' \x01\x00', 0x24}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000900)="165a5d8618cd99005f470a0988560aa6a40a7643f09a0d259fb3876ebe8c3a7eb8c6a4869e0e8b1db0347745a1c7f1482d8604d0e1207a6d", 0x38}], 0x2}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xa0}}], 0x5, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 15m14.90754327s ago: executing program 2 (id=9): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001100)=0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000001140)=0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0x5bf, &(0x7f0000001380)={0x0, 0xfffffffc, 0x1000, 0x0, 0xdc}, &(0x7f00000004c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=""/4096) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x8c, &(0x7f00000021c0)=ANY=[]) r6 = memfd_secret(0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB]) ftruncate(r6, 0x51a9497) 15m9.693622407s ago: executing program 2 (id=13): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0) 15m3.261905745s ago: executing program 2 (id=17): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x29, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0xfffffdfd, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0xe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'sh\x00', 0x0, 0x6, 0x39}, 0x2c) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f00000005c0)='//\xf2/\x06\b/\x18\x17I\x97\xa0!\x90)\x11\xc0/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmDv\xcb2W\x00\x00\x00\x00\x00}\xf3\x9d\xe4_\x05\x9cqf4Y^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeasW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0xfffffdfd, 0x5, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x2000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, 0x0, 0x0) memfd_create(0x0, 0xe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'sh\x00', 0x0, 0x6, 0x39}, 0x2c) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f00000005c0)='//\xf2/\x06\b/\x18\x17I\x97\xa0!\x90)\x11\xc0/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmDv\xcb2W\x00\x00\x00\x00\x00}\xf3\x9d\xe4_\x05\x9cqf4Y^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeasW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 13m43.704407589s ago: executing program 1 (id=124): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x5, 0x800, 0x0, 0x0}, {0x7, 0x1000, 0x0, 0x0}], 0x2}) 13m40.592228895s ago: executing program 1 (id=134): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0040d07, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000004400)='/dev/comedi4\x00', 0x40000, 0x0) ioprio_set$pid(0x3, 0x0, 0x6a81434c31a3b5b8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x5, 0x80801) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'macvtap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x140, 0x20, [0xff0]}}, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf9}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @random="e4a76dfdd5f1"}, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "8bf1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9}}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 13m36.032770932s ago: executing program 1 (id=139): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/180, 0xb4}], 0x1) 13m34.591699883s ago: executing program 1 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d6, 0x200000010000, 0x6, 0x6, 0x20000001], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13m33.889094443s ago: executing program 1 (id=144): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close(r2) 13m17.905577072s ago: executing program 33 (id=144): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x8, @remote, 0xffffefff}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close(r2) 11m52.057142893s ago: executing program 0 (id=281): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(r0, &(0x7f0000006a40)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000cc0), 0x0, &(0x7f0000000d80)=[@hopopts={{0xf8, 0x29, 0x36, {0x3c, 0x1b, '\x00', [@ra={0x5, 0x2, 0x372e}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x0, 0xa9, "61016242da20c89c61fae3d925b456e62c1ddf0b8c30e3782f3e4849ce927314a87ceca4729797feec1618c26201653aa896903f0b4ab33451b9f1822e0eb9dc4c7772db898d632fa4b06fc2904ef3de6e2d898bfd3813bed4d38f09651200e431fbaa914b2e6924fcee3bffb0dba56ceca7e87223f328b89053e8992c5188dd5b194861058e4c750a1a7f86fcabea940b6f1e4539ad0580b1d487d5895513608fa415f30b2e229fa6"}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x7f, 0x4, [0x0]}}, @enc_lim={0x4, 0x1, 0xb}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x6, 0x6, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x9, [0xffffffffffffffff, 0x0, 0x0]}}]}}}], 0x148}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)='J', 0x1}], 0x1}}], 0x1, 0x0) 11m48.563866966s ago: executing program 4 (id=286): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d2e42d20c95f630048300100030109021b0001000000000904000001d5af530009090000"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 11m47.966420914s ago: executing program 0 (id=291): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)='<', 0x1, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x5, 0x81, 0xa6f, 0x14000, 0xffffffffffffffff, 0x8, '\x00', 0x0, r4, 0x2, 0x2, 0x2, 0x0, @void, @value, @value=r5}, 0x50) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8001"], 0x50) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007f0000000000000009000000630600000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) 11m44.67164595s ago: executing program 4 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x20, 0x1000, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2c, 0x42cd, 0x7f3, 0x3, 0xb6a, 0xf, 0x0, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x7, 0x4, 0x9, 0x6}}, &(0x7f0000000240)=0xb0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @local}}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 11m43.780680216s ago: executing program 0 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getrlimit(0x9, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4f21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x22c01) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000001200000000000000", @ANYRES16=r0, @ANYBLOB="00000000dfffffff00"/19], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r7, &(0x7f0000000fc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r4}, 0x20) r9 = epoll_create1(0x80000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, 0x0) io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x1, 0xfffffffe, 0x34d, 0x0, r10}) sendfile(r9, r10, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x29, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000140000a2a1eac652c4227d008500000083000000bf09000000000000550901000000000095000000000000009776feff04000000850000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185700000a0000000000000000000000184b00000200000000000000000000008520000003000000181a0000", @ANYBLOB="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", @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf910000"], &(0x7f0000000400)='GPL\x00', 0x207f, 0xb8, &(0x7f0000000480)=""/184, 0xeabda9b084f128, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r10], &(0x7f0000000b80)=[{0x2, 0x3, 0xc, 0x5}, {0x2, 0x5, 0x6, 0x9}, {0x0, 0x1, 0x1, 0x8}, {0x1, 0x3, 0x2, 0xe}], 0x10, 0x3}, 0x94) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mq_timedsend(r5, &(0x7f0000000600)="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", 0x230, 0x5, 0x0) 11m41.099675639s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)}], 0x1}, 0x20048812) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f00002a0000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bind$unix(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 11m39.272949622s ago: executing program 0 (id=301): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 11m38.85935597s ago: executing program 4 (id=303): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet(r3, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 11m38.836627287s ago: executing program 0 (id=304): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000140)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 11m35.75939256s ago: executing program 4 (id=306): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x6382c1, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3b9ac9ff, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000000100, 0xfffffffffffffffd, 0xfffffffffffffffd}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x200, 0x0) setregid(0xee00, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='sysfs\x00', 0x200013, 0x0) 11m35.272899888s ago: executing program 4 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) connect$inet(r0, 0x0, 0x0) 11m34.652908618s ago: executing program 4 (id=309): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0) 11m23.029570041s ago: executing program 34 (id=304): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x8000000004) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000140)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 11m19.272695007s ago: executing program 35 (id=309): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0) 10.777206776s ago: executing program 3 (id=902): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240)=0xffffffffffffffff, 0x12) 10.292515945s ago: executing program 3 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) ioctl$FIONREAD(r0, 0x7041, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)="25484a50867aece5bc433bde2c1075f1f8ad9f53f1718f19c72981adffc3722b518d361cf5bf15af3b631f01e1e0f042448fca9a9fae3e2eeed12ac7705c265b1d5acb7058f59e461b02fc967be4d0c7e4c48c81b5f281a3ba17c7ad597dfb752dc90f0a6ecdc3f5debd619b26e180f3c426ee72f8c693f96dd0376208f2398ddfca79c2f62a2a210fa875beca947b8e1783e2c6cf5f6c9fca0527a795bab6640d83cc51fb1ae8b7e0dd1fd533f2cb3d09abff8a804b05b4f53bcf2e0b83376d5db14365fd3e600da473b57400540418bb6b94de7c0a2fd68c6db8789a162b13a5", 0xe1) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x1, 0x80000) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x40084149, &(0x7f0000000080)) 6.311697243s ago: executing program 3 (id=904): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)='R', 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x80) 5.72708426s ago: executing program 3 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) 2.055332138s ago: executing program 3 (id=906): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r1, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x20, 0xfd}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) kernel console output (not intermixed with test programs): g): Port device team_slave_1 removed [ 578.196248][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 578.487055][ T806] usb 4-1: USB disconnect, device number 26 [ 580.639988][ T8510] 9pnet_fd: Insufficient options for proto=fd [ 587.494834][ T49] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 587.656943][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 587.659081][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.659107][ T49] usb 4-1: config 0 has no interface number 0 [ 587.662640][ T49] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 587.662671][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.662691][ T49] usb 4-1: Product: syz [ 587.662702][ T49] usb 4-1: Manufacturer: syz [ 587.662712][ T49] usb 4-1: SerialNumber: syz [ 587.719413][ T49] usb 4-1: config 0 descriptor?? [ 587.752929][ T49] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 587.752963][ T49] usb 4-1: selecting invalid altsetting 1 [ 587.752974][ T49] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 587.781486][ T49] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 587.781760][ T49] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 587.781797][ T49] usb 4-1: media controller created [ 587.818496][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.970863][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 588.275699][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 588.955768][ T49] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 588.957664][ T49] zl10353_read_register: readreg error (reg=127, ret==-110) [ 588.987197][ T8531] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 589.063955][ T49] usb 4-1: USB disconnect, device number 27 [ 590.191296][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 590.199556][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 590.202711][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 590.240163][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 590.241025][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.315301][ T806] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 590.474533][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 590.481022][ T806] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 590.481055][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.481076][ T806] usb 4-1: Product: syz [ 590.481091][ T806] usb 4-1: Manufacturer: syz [ 590.481107][ T806] usb 4-1: SerialNumber: syz [ 590.488051][ T806] usb 4-1: config 0 descriptor?? [ 590.750960][ T806] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 590.750976][ T806] 00 00 00 00 00 00 00 00 [ 590.751032][ T806] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 590.954577][ T807] usb 4-1: USB disconnect, device number 28 [ 591.930266][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.949784][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.951260][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 591.952637][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 591.953543][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.839627][ T5799] Bluetooth: hci1: command tx timeout [ 593.517517][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 593.775463][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 594.064622][ T5799] Bluetooth: hci3: command tx timeout [ 594.864615][ T5799] Bluetooth: hci1: command tx timeout [ 595.557724][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 595.563737][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 595.567631][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 595.621948][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.622797][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 596.136588][ T5799] Bluetooth: hci3: command tx timeout [ 596.936736][ T5799] Bluetooth: hci1: command tx timeout [ 597.734684][ T5799] Bluetooth: hci6: command tx timeout [ 598.214793][ T5799] Bluetooth: hci3: command tx timeout [ 599.015084][ T5799] Bluetooth: hci1: command tx timeout [ 599.782263][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 599.814692][ T5799] Bluetooth: hci6: command tx timeout [ 600.064584][ T807] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 600.224480][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 600.228432][ T807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.228494][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.228515][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.228531][ T807] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 600.228548][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.231898][ T807] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 600.231931][ T807] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 600.231946][ T807] usb 4-1: Manufacturer: syz [ 600.240948][ T807] usb 4-1: config 0 descriptor?? [ 600.294507][ T5799] Bluetooth: hci3: command tx timeout [ 600.370905][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 600.408305][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 600.591434][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 600.615478][ T807] rc_core: IR keymap rc-hauppauge not found [ 600.615502][ T807] Registered IR keymap rc-empty [ 600.615674][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.637813][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.656893][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 600.668831][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 600.686451][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.707342][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.726707][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.746173][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.764648][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.784737][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.805262][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.827569][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.844606][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.879106][ T807] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.978092][ T807] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 600.978178][ T807] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 601.049738][ T807] usb 4-1: USB disconnect, device number 29 [ 601.903050][ T5799] Bluetooth: hci6: command tx timeout [ 602.214719][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.214933][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.215193][ T8434] bridge_slave_0: entered allmulticast mode [ 602.217972][ T8434] bridge_slave_0: entered promiscuous mode [ 602.351807][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.351929][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.352103][ T8434] bridge_slave_1: entered allmulticast mode [ 602.354000][ T8434] bridge_slave_1: entered promiscuous mode [ 603.974512][ T5799] Bluetooth: hci6: command tx timeout [ 604.036029][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.036180][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.036357][ T8539] bridge_slave_0: entered allmulticast mode [ 604.038215][ T8539] bridge_slave_0: entered promiscuous mode [ 604.071620][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.088127][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.088216][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.088417][ T8544] bridge_slave_0: entered allmulticast mode [ 604.100475][ T8544] bridge_slave_0: entered promiscuous mode [ 604.238848][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.239160][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.239325][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.239535][ T8539] bridge_slave_1: entered allmulticast mode [ 604.242776][ T8539] bridge_slave_1: entered promiscuous mode [ 604.300099][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.300195][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.300403][ T8544] bridge_slave_1: entered allmulticast mode [ 604.302482][ T8544] bridge_slave_1: entered promiscuous mode [ 604.333885][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.334021][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.348802][ T8553] bridge_slave_0: entered allmulticast mode [ 604.361772][ T8553] bridge_slave_0: entered promiscuous mode [ 604.626041][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.626175][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.626416][ T8553] bridge_slave_1: entered allmulticast mode [ 604.628667][ T8553] bridge_slave_1: entered promiscuous mode [ 605.409969][ T8434] team0: Port device team_slave_0 added [ 605.422594][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.449514][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.659906][ T8434] team0: Port device team_slave_1 added [ 605.663193][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.670964][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.693224][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.929069][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.856799][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.856814][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.856834][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.860493][ T8539] team0: Port device team_slave_0 added [ 607.998057][ T8544] team0: Port device team_slave_0 added [ 608.080367][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.080384][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.080414][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.084054][ T8539] team0: Port device team_slave_1 added [ 608.247999][ T8544] team0: Port device team_slave_1 added [ 608.264158][ T8553] team0: Port device team_slave_0 added [ 608.560455][ T8553] team0: Port device team_slave_1 added [ 608.777315][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.777334][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.777365][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.912164][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.912180][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.912201][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.114231][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.114245][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.114266][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.119342][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.119393][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.119469][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.337369][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.337384][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.337404][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.485747][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.485762][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.485783][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.492144][ T8434] hsr_slave_0: entered promiscuous mode [ 609.536176][ T8434] hsr_slave_1: entered promiscuous mode [ 609.538698][ T8434] debugfs: 'hsr0' already exists in 'hsr' [ 609.538792][ T8434] Cannot create hsr debugfs directory [ 610.782679][ T8539] hsr_slave_0: entered promiscuous mode [ 610.790962][ T8539] hsr_slave_1: entered promiscuous mode [ 610.792234][ T8539] debugfs: 'hsr0' already exists in 'hsr' [ 610.792260][ T8539] Cannot create hsr debugfs directory [ 610.830359][ T8544] hsr_slave_0: entered promiscuous mode [ 610.831471][ T8544] hsr_slave_1: entered promiscuous mode [ 610.832301][ T8544] debugfs: 'hsr0' already exists in 'hsr' [ 610.832321][ T8544] Cannot create hsr debugfs directory [ 611.093563][ T8553] hsr_slave_0: entered promiscuous mode [ 611.100921][ T8553] hsr_slave_1: entered promiscuous mode [ 611.102187][ T8553] debugfs: 'hsr0' already exists in 'hsr' [ 611.102216][ T8553] Cannot create hsr debugfs directory [ 615.340201][ T6029] bridge_slave_1: left allmulticast mode [ 615.340230][ T6029] bridge_slave_1: left promiscuous mode [ 615.340504][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.406653][ T6029] bridge_slave_0: left allmulticast mode [ 615.406677][ T6029] bridge_slave_0: left promiscuous mode [ 615.406879][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.479892][ T6029] bridge_slave_1: left allmulticast mode [ 615.479918][ T6029] bridge_slave_1: left promiscuous mode [ 615.480108][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.565788][ T6029] bridge_slave_0: left allmulticast mode [ 615.565813][ T6029] bridge_slave_0: left promiscuous mode [ 615.566009][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.679279][ T6029] bridge_slave_1: left allmulticast mode [ 615.679304][ T6029] bridge_slave_1: left promiscuous mode [ 615.679482][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.759444][ T6029] bridge_slave_0: left allmulticast mode [ 615.759477][ T6029] bridge_slave_0: left promiscuous mode [ 615.760344][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.876235][ T6029] bridge_slave_1: left allmulticast mode [ 615.876280][ T6029] bridge_slave_1: left promiscuous mode [ 615.877014][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.945533][ T8665] ptrace attach of "./syz-executor exec"[8666] was attempted by "./syz-executor exec"[8665] [ 615.956587][ T6029] bridge_slave_0: left allmulticast mode [ 615.956661][ T6029] bridge_slave_0: left promiscuous mode [ 615.988745][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.212272][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.306200][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.366958][ T6029] bond0 (unregistering): Released all slaves [ 617.605909][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.685663][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.750382][ T6029] bond0 (unregistering): Released all slaves [ 617.985331][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.066228][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.137139][ T6029] bond0 (unregistering): Released all slaves [ 619.786063][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.845346][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.867842][ T6029] bond0 (unregistering): Released all slaves [ 621.056745][ T6029] hsr_slave_0: left promiscuous mode [ 621.114564][ T6029] hsr_slave_1: left promiscuous mode [ 621.115786][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.169204][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.344593][ T6029] hsr_slave_0: left promiscuous mode [ 621.364633][ T6029] hsr_slave_1: left promiscuous mode [ 621.365696][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.389423][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.566616][ T6029] hsr_slave_0: left promiscuous mode [ 621.606185][ T6029] hsr_slave_1: left promiscuous mode [ 621.606979][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.647490][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.814952][ T6029] hsr_slave_0: left promiscuous mode [ 621.844641][ T6029] hsr_slave_1: left promiscuous mode [ 621.860173][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.934885][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.121378][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 625.275410][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 626.577006][ T8708] ptrace attach of "./syz-executor exec"[8709] was attempted by "./syz-executor exec"[8708] [ 627.247127][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 627.499236][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 629.518645][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.518748][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.935286][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 630.085432][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 630.649272][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.654325][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.681828][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.683481][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.684256][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.444614][ T5799] Bluetooth: hci0: command tx timeout [ 633.515312][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 635.494543][ T5799] Bluetooth: hci0: command tx timeout [ 636.114642][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 637.664616][ T5799] Bluetooth: hci0: command tx timeout [ 639.734729][ T5799] Bluetooth: hci0: command tx timeout [ 643.584026][ T8722] chnl_net:caif_netlink_parms(): no params data found [ 646.515827][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.517089][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.519423][ T8722] bridge_slave_0: entered allmulticast mode [ 646.623500][ T8722] bridge_slave_0: entered promiscuous mode [ 646.644253][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.657396][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.657655][ T8722] bridge_slave_1: entered allmulticast mode [ 646.660442][ T8722] bridge_slave_1: entered promiscuous mode [ 647.676059][ T8722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.726692][ T8722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.078701][ T8722] team0: Port device team_slave_0 added [ 648.082532][ T8722] team0: Port device team_slave_1 added [ 648.265608][ T8539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 648.390732][ T8539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 648.442846][ T8722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.442874][ T8722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.442903][ T8722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.575576][ T8539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 648.656828][ T8722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.656849][ T8722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.656879][ T8722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.821477][ T8539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 649.324632][ T807] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 649.392560][ T8722] hsr_slave_0: entered promiscuous mode [ 649.393617][ T8722] hsr_slave_1: entered promiscuous mode [ 649.415596][ T8553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 649.476678][ T8553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 649.484675][ T807] usb 4-1: Using ep0 maxpacket: 32 [ 649.496983][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.499404][ T807] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 649.499434][ T807] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 649.499456][ T807] usb 4-1: Manufacturer: syz [ 649.499472][ T807] usb 4-1: SerialNumber: syz [ 649.541852][ T807] usb 4-1: config 0 descriptor?? [ 649.585987][ T8553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 649.798054][ T807] usb 4-1: USB disconnect, device number 30 [ 649.887624][ T8553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 650.497130][ T8544] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.643258][ T8544] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.844646][ T8544] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.958172][ T8544] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 651.134005][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.191735][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.198395][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.213902][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.224055][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 652.641969][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.658455][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.659847][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.661698][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.662605][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.444530][ T5807] Bluetooth: hci1: command tx timeout [ 654.794011][ T5807] Bluetooth: hci2: command tx timeout [ 655.144544][ T5915] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 655.314470][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 655.316521][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.320487][ T5915] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 655.320517][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 655.320539][ T5915] usb 4-1: Manufacturer: syz [ 655.320555][ T5915] usb 4-1: SerialNumber: syz [ 655.366648][ T5915] usb 4-1: config 0 descriptor?? [ 655.388823][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.496314][ T5807] Bluetooth: hci1: command tx timeout [ 655.771815][ T8834] overlayfs: failed to resolve './bus': -2 [ 656.264089][ T807] usb 4-1: USB disconnect, device number 31 [ 656.854616][ T5807] Bluetooth: hci2: command tx timeout [ 657.136068][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.141912][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.149461][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.151618][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.152558][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 657.585965][ T5799] Bluetooth: hci1: command tx timeout [ 658.721029][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 658.942871][ T5799] Bluetooth: hci2: command tx timeout [ 659.163396][ T8722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 659.261152][ T5799] Bluetooth: hci3: command tx timeout [ 659.662101][ T8722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 659.898488][ T5799] Bluetooth: hci1: command tx timeout [ 660.566232][ T8722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 660.931348][ T8880] 9pnet_fd: Insufficient options for proto=fd [ 661.094932][ T5799] Bluetooth: hci2: command tx timeout [ 661.308148][ T8722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 661.334553][ T5799] Bluetooth: hci3: command tx timeout [ 663.827706][ T5799] Bluetooth: hci3: command tx timeout [ 664.024740][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.024964][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.025233][ T8815] bridge_slave_0: entered allmulticast mode [ 664.028057][ T8815] bridge_slave_0: entered promiscuous mode [ 664.104262][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.112303][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.112567][ T8815] bridge_slave_1: entered allmulticast mode [ 664.133787][ T8815] bridge_slave_1: entered promiscuous mode [ 665.052217][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.077925][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.205919][ T6029] bridge_slave_1: left allmulticast mode [ 665.205950][ T6029] bridge_slave_1: left promiscuous mode [ 665.206252][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.276170][ T6029] bridge_slave_0: left allmulticast mode [ 665.276202][ T6029] bridge_slave_0: left promiscuous mode [ 665.276529][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.349277][ T6029] bridge_slave_1: left allmulticast mode [ 665.349303][ T6029] bridge_slave_1: left promiscuous mode [ 665.349499][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.394523][ T6182] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 665.425807][ T6029] bridge_slave_0: left allmulticast mode [ 665.425833][ T6029] bridge_slave_0: left promiscuous mode [ 665.426024][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.546160][ T6182] usb 4-1: Using ep0 maxpacket: 32 [ 665.548737][ T6182] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.551046][ T6182] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 665.551076][ T6182] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 665.551098][ T6182] usb 4-1: Manufacturer: syz [ 665.551114][ T6182] usb 4-1: SerialNumber: syz [ 665.585283][ T6182] usb 4-1: config 0 descriptor?? [ 665.805212][ T6182] usb 4-1: USB disconnect, device number 32 [ 665.894964][ T5799] Bluetooth: hci3: command tx timeout [ 666.026255][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.116994][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.177821][ T6029] bond0 (unregistering): Released all slaves [ 666.415305][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.515783][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.005888][ T8914] ptrace attach of ""[8915] was attempted by "./syz-executor exec"[8914] [ 667.530627][ T6029] bond0 (unregistering): Released all slaves [ 667.796487][ T8920] 9pnet_fd: Insufficient options for proto=fd [ 668.574077][ T8815] team0: Port device team_slave_0 added [ 668.625753][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 668.645055][ T8815] team0: Port device team_slave_1 added [ 670.098690][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.105443][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.105486][ T8815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.173378][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.173398][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.173428][ T8815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.414672][ T6029] hsr_slave_0: left promiscuous mode [ 670.454905][ T6029] hsr_slave_1: left promiscuous mode [ 670.456868][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.495862][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.636132][ T6029] hsr_slave_0: left promiscuous mode [ 670.657232][ T6029] hsr_slave_1: left promiscuous mode [ 670.673796][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.695507][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.495543][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 671.645350][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 672.925377][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 673.135304][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 673.956438][ T8939] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 674.180461][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.180608][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.180849][ T8828] bridge_slave_0: entered allmulticast mode [ 674.185977][ T8828] bridge_slave_0: entered promiscuous mode [ 674.234792][ T6182] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 674.266469][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.266558][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.266719][ T8828] bridge_slave_1: entered allmulticast mode [ 674.268503][ T8828] bridge_slave_1: entered promiscuous mode [ 674.329394][ T8815] hsr_slave_0: entered promiscuous mode [ 674.342401][ T8815] hsr_slave_1: entered promiscuous mode [ 674.344087][ T8815] debugfs: 'hsr0' already exists in 'hsr' [ 674.344108][ T8815] Cannot create hsr debugfs directory [ 674.426676][ T6182] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 674.426704][ T6182] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 674.426733][ T6182] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 674.426751][ T6182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.475134][ T8939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 674.510051][ T6182] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.857261][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.858231][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 675.277519][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.781760][ T8828] team0: Port device team_slave_0 added [ 675.839940][ T8828] team0: Port device team_slave_1 added [ 676.289582][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.289597][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.289620][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.538390][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.538405][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.538426][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.540344][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.541151][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.541320][ T8840] bridge_slave_0: entered allmulticast mode [ 676.554768][ T8840] bridge_slave_0: entered promiscuous mode [ 676.725385][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.726064][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.726233][ T8840] bridge_slave_1: entered allmulticast mode [ 676.728368][ T8840] bridge_slave_1: entered promiscuous mode [ 676.918457][ T10] usb 4-1: USB disconnect, device number 33 [ 677.271120][ T8722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.303306][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.454679][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 677.482639][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.551585][ T8828] hsr_slave_0: entered promiscuous mode [ 677.552651][ T8828] hsr_slave_1: entered promiscuous mode [ 677.553370][ T8828] debugfs: 'hsr0' already exists in 'hsr' [ 677.553390][ T8828] Cannot create hsr debugfs directory [ 677.614849][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 677.620257][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.620285][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.622779][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 677.622810][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.622831][ T10] usb 4-1: Product: syz [ 677.622841][ T10] usb 4-1: Manufacturer: syz [ 677.622852][ T10] usb 4-1: SerialNumber: syz [ 677.687738][ T10] usb 4-1: config 0 descriptor?? [ 678.221082][ T8840] team0: Port device team_slave_0 added [ 678.467825][ T8840] team0: Port device team_slave_1 added [ 679.146005][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.146021][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.146041][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.203301][ T8722] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.426253][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.426271][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.426302][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.648346][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.648581][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.238597][ T5915] usb 4-1: USB disconnect, device number 34 [ 680.597367][ T9012] 9pnet_fd: Insufficient options for proto=fd [ 681.303996][ T8840] hsr_slave_0: entered promiscuous mode [ 681.311219][ T8840] hsr_slave_1: entered promiscuous mode [ 681.311947][ T8840] debugfs: 'hsr0' already exists in 'hsr' [ 681.311967][ T8840] Cannot create hsr debugfs directory [ 681.313970][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.314132][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.355960][ T8815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 682.849853][ T8815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 682.913389][ T8815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 683.145736][ T8815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 684.451833][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.248388][ T9074] ptrace attach of ""[9076] was attempted by "./syz-executor exec"[9074] [ 685.719949][ T6029] bridge_slave_1: left allmulticast mode [ 685.719982][ T6029] bridge_slave_1: left promiscuous mode [ 685.723249][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.796042][ T6029] bridge_slave_0: left allmulticast mode [ 685.796065][ T6029] bridge_slave_0: left promiscuous mode [ 685.796275][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.879093][ T6029] bridge_slave_1: left allmulticast mode [ 685.879127][ T6029] bridge_slave_1: left promiscuous mode [ 685.879387][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.927794][ T6029] bridge_slave_0: left allmulticast mode [ 685.927827][ T6029] bridge_slave_0: left promiscuous mode [ 685.928096][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.969434][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.045260][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.106915][ T6029] bond0 (unregistering): Released all slaves [ 688.476394][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.535728][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.596957][ T6029] bond0 (unregistering): Released all slaves [ 689.315105][ T6029] hsr_slave_0: left promiscuous mode [ 689.334568][ T6029] hsr_slave_1: left promiscuous mode [ 689.335617][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.404905][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.594570][ T6029] hsr_slave_0: left promiscuous mode [ 689.634516][ T6029] hsr_slave_1: left promiscuous mode [ 689.635667][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.685335][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.432959][ T9120] 9pnet_fd: Insufficient options for proto=fd [ 690.965380][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.965435][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.036753][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 691.205236][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 692.086845][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.113301][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.141101][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.149295][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.166483][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.935338][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 694.095260][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 695.018943][ T5799] Bluetooth: hci5: command tx timeout [ 695.935098][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.260644][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.292085][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.292256][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.311882][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.312840][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.116744][ T5799] Bluetooth: hci5: command tx timeout [ 697.515594][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 698.106349][ T8828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 698.247112][ T8828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 699.174857][ T5799] Bluetooth: hci5: command tx timeout [ 699.617284][ T8828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 700.592441][ T8828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 700.738379][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.738592][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.738790][ T9124] bridge_slave_0: entered allmulticast mode [ 700.740990][ T9124] bridge_slave_0: entered promiscuous mode [ 700.900212][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.900359][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.900619][ T9124] bridge_slave_1: entered allmulticast mode [ 700.926342][ T9124] bridge_slave_1: entered promiscuous mode [ 701.254565][ T5799] Bluetooth: hci5: command tx timeout [ 701.520949][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.564765][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.731334][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.936002][ T8840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.980418][ T9124] team0: Port device team_slave_0 added [ 701.995930][ T8840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 702.047708][ T9124] team0: Port device team_slave_1 added [ 702.217944][ T8840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 702.433522][ T8840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 702.551195][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.551216][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.551246][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.608696][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.608717][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.608746][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.776131][ T6012] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 702.941121][ T6012] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.941153][ T6012] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.975800][ T6012] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.975832][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.975851][ T6012] usb 4-1: Product: syz [ 702.975864][ T6012] usb 4-1: Manufacturer: syz [ 702.975876][ T6012] usb 4-1: SerialNumber: syz [ 703.414772][ T6012] usb 4-1: cannot find UAC_HEADER [ 703.476683][ T9124] hsr_slave_0: entered promiscuous mode [ 703.479134][ T9124] hsr_slave_1: entered promiscuous mode [ 703.480352][ T9124] debugfs: 'hsr0' already exists in 'hsr' [ 703.480379][ T9124] Cannot create hsr debugfs directory [ 703.540896][ T6012] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 703.564909][ T6012] usb 4-1: USB disconnect, device number 35 [ 703.620692][ T9257] udevd[9257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.634236][ T8815] veth0_vlan: entered promiscuous mode [ 706.989706][ T8815] veth1_vlan: entered promiscuous mode [ 707.195304][ T6029] bridge_slave_1: left allmulticast mode [ 707.195336][ T6029] bridge_slave_1: left promiscuous mode [ 707.195623][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.274184][ T6029] bridge_slave_0: left allmulticast mode [ 707.274212][ T6029] bridge_slave_0: left promiscuous mode [ 707.279703][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.931957][ T49] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 710.077779][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.077809][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.081336][ T49] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.081374][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.081389][ T49] usb 4-1: SerialNumber: syz [ 710.343916][ T49] usb 4-1: 0:2 : does not exist [ 710.344015][ T49] usb 4-1: unit 255 not found! [ 710.391814][ T49] usb 4-1: USB disconnect, device number 36 [ 710.466023][ T9257] udevd[9257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.145374][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.207213][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.247458][ T6029] bond0 (unregistering): Released all slaves [ 711.331950][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.938649][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.941453][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.942649][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.943759][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.979796][ T6029] hsr_slave_0: left promiscuous mode [ 711.994092][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.021962][ T6029] hsr_slave_1: left promiscuous mode [ 712.023009][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.066423][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.426131][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 713.450363][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 713.451772][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 713.477663][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 713.479499][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 713.554653][ T5937] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 713.662606][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 713.724608][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 713.726923][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.728786][ T5937] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 713.728818][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 713.728832][ T5937] usb 4-1: Manufacturer: syz [ 713.728843][ T5937] usb 4-1: SerialNumber: syz [ 713.733244][ T5937] usb 4-1: config 0 descriptor?? [ 714.021060][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 714.120774][ T9321] overlayfs: failed to resolve './bus': -2 [ 714.137980][ T5807] Bluetooth: hci0: command tx timeout [ 714.582341][ T5937] usb 4-1: USB disconnect, device number 37 [ 715.607018][ T5807] Bluetooth: hci1: command tx timeout [ 716.228273][ T5807] Bluetooth: hci0: command tx timeout [ 717.744647][ T5807] Bluetooth: hci1: command tx timeout [ 718.333539][ T5807] Bluetooth: hci0: command tx timeout [ 718.443102][ T8205] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 718.749907][ T8205] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 718.762167][ T8205] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 718.772117][ T8205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 718.773542][ T8205] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 720.750146][ T5799] Bluetooth: hci0: command tx timeout [ 720.750154][ T8205] Bluetooth: hci1: command tx timeout [ 720.856107][ T8205] Bluetooth: hci6: command tx timeout [ 722.784582][ T8205] Bluetooth: hci1: command tx timeout [ 722.939546][ T8205] Bluetooth: hci6: command tx timeout [ 723.316689][ T9124] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 723.481909][ T9124] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 723.693235][ T9124] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 723.900824][ T9124] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 724.416367][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 724.441804][ T9319] chnl_net:caif_netlink_parms(): no params data found [ 724.918628][ T9334] chnl_net:caif_netlink_parms(): no params data found [ 725.015502][ T8205] Bluetooth: hci6: command tx timeout [ 725.209209][ T9386] ptrace attach of "./syz-executor exec"[9388] was attempted by "./syz-executor exec"[9386] [ 726.319965][ T9391] ptrace attach of ""[9392] was attempted by "./syz-executor exec"[9391] [ 727.187258][ T8205] Bluetooth: hci6: command tx timeout [ 728.791643][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.791855][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.792103][ T9302] bridge_slave_0: entered allmulticast mode [ 728.806898][ T9302] bridge_slave_0: entered promiscuous mode [ 728.928633][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.928733][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.928916][ T9319] bridge_slave_0: entered allmulticast mode [ 728.932835][ T9319] bridge_slave_0: entered promiscuous mode [ 728.939848][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.940170][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.940702][ T9302] bridge_slave_1: entered allmulticast mode [ 728.973783][ T9302] bridge_slave_1: entered promiscuous mode [ 729.075434][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.075527][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.075673][ T9319] bridge_slave_1: entered allmulticast mode [ 729.087007][ T9319] bridge_slave_1: entered promiscuous mode [ 729.278304][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.278395][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.278596][ T9334] bridge_slave_0: entered allmulticast mode [ 729.307787][ T9334] bridge_slave_0: entered promiscuous mode [ 729.559887][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.559999][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.560175][ T9334] bridge_slave_1: entered allmulticast mode [ 729.562143][ T9334] bridge_slave_1: entered promiscuous mode [ 729.706413][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.825963][ T9319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.849649][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.001154][ T9319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.101800][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.386203][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.020423][ T9302] team0: Port device team_slave_0 added [ 731.115525][ T9319] team0: Port device team_slave_0 added [ 731.372676][ T9302] team0: Port device team_slave_1 added [ 732.261198][ T9319] team0: Port device team_slave_1 added [ 732.392672][ T9334] team0: Port device team_slave_0 added [ 732.607133][ T9334] team0: Port device team_slave_1 added [ 734.037666][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.037687][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.037713][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.176476][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.176497][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.176539][ T9319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.181776][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.181794][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.181823][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.350201][ T9319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.350222][ T9319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.350250][ T9319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.679829][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.679849][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.679880][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.747268][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.747283][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.747305][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.220632][ T9450] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 737.343685][ T9302] hsr_slave_0: entered promiscuous mode [ 737.351600][ T9302] hsr_slave_1: entered promiscuous mode [ 737.455295][ T6668] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 737.542840][ T9319] hsr_slave_0: entered promiscuous mode [ 737.554814][ T9319] hsr_slave_1: entered promiscuous mode [ 737.556363][ T9319] debugfs: 'hsr0' already exists in 'hsr' [ 737.556382][ T9319] Cannot create hsr debugfs directory [ 737.630393][ T6668] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 737.630421][ T6668] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 737.630450][ T6668] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 737.630473][ T6668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.676817][ T9450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 737.710293][ T6668] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.771071][ T9334] hsr_slave_0: entered promiscuous mode [ 737.772002][ T9334] hsr_slave_1: entered promiscuous mode [ 737.772655][ T9334] debugfs: 'hsr0' already exists in 'hsr' [ 737.772673][ T9334] Cannot create hsr debugfs directory [ 738.949542][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.074973][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.143086][ T5937] usb 4-1: USB disconnect, device number 38 [ 740.349717][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.349944][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.382238][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.382522][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.280689][ T6029] bridge_slave_1: left allmulticast mode [ 742.280715][ T6029] bridge_slave_1: left promiscuous mode [ 742.280972][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.407836][ T6029] bridge_slave_0: left allmulticast mode [ 742.407867][ T6029] bridge_slave_0: left promiscuous mode [ 742.408157][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.490238][ T6029] bridge_slave_1: left allmulticast mode [ 742.490262][ T6029] bridge_slave_1: left promiscuous mode [ 742.490441][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.575697][ T6029] bridge_slave_0: left allmulticast mode [ 742.575722][ T6029] bridge_slave_0: left promiscuous mode [ 742.575931][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.647844][ T6029] bridge_slave_1: left allmulticast mode [ 742.647870][ T6029] bridge_slave_1: left promiscuous mode [ 742.648073][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.716151][ T6029] bridge_slave_0: left allmulticast mode [ 742.716185][ T6029] bridge_slave_0: left promiscuous mode [ 742.716396][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.764582][ T806] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 742.914448][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 742.933291][ T806] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 742.933327][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.933342][ T806] usb 4-1: Product: syz [ 742.933352][ T806] usb 4-1: Manufacturer: syz [ 742.933363][ T806] usb 4-1: SerialNumber: syz [ 742.975861][ T806] usb 4-1: config 0 descriptor?? [ 743.676522][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.765253][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.830590][ T6029] bond0 (unregistering): Released all slaves [ 745.558475][ T9096] usb 4-1: USB disconnect, device number 39 [ 745.595279][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.885316][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.777898][ T6029] bond0 (unregistering): Released all slaves [ 751.525561][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.605170][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.627782][ T6029] bond0 (unregistering): Released all slaves [ 751.961703][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.304445][ T6029] hsr_slave_0: left promiscuous mode [ 752.354552][ T6029] hsr_slave_1: left promiscuous mode [ 752.357056][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.393796][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.393891][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.429374][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.664684][ T6029] hsr_slave_0: left promiscuous mode [ 752.714696][ T6029] hsr_slave_1: left promiscuous mode [ 752.715749][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.738001][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.905668][ T6029] hsr_slave_0: left promiscuous mode [ 752.944541][ T6029] hsr_slave_1: left promiscuous mode [ 752.945402][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.968298][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.039929][ T6029] veth1_vlan: left promiscuous mode [ 753.040145][ T6029] veth0_vlan: left promiscuous mode [ 753.220444][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 753.245510][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 753.250310][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 753.252058][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 753.253875][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 754.881859][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 755.355687][ T8205] Bluetooth: hci2: command tx timeout [ 755.395212][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 757.424493][ T8205] Bluetooth: hci2: command tx timeout [ 758.685576][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 758.877861][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 759.535174][ T8205] Bluetooth: hci2: command tx timeout [ 761.574724][ T8205] Bluetooth: hci2: command tx timeout [ 764.115246][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 764.417421][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 766.734580][ T9461] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 766.904512][ T9461] usb 4-1: Using ep0 maxpacket: 8 [ 766.912024][ T9461] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 766.912057][ T9461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.912072][ T9461] usb 4-1: Product: syz [ 766.912083][ T9461] usb 4-1: Manufacturer: syz [ 766.912093][ T9461] usb 4-1: SerialNumber: syz [ 766.923275][ T9461] usb 4-1: config 0 descriptor?? [ 768.614611][ T9515] chnl_net:caif_netlink_parms(): no params data found [ 769.295772][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.296351][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.296606][ T9515] bridge_slave_0: entered allmulticast mode [ 769.301708][ T9515] bridge_slave_0: entered promiscuous mode [ 769.335205][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.335424][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.335649][ T9515] bridge_slave_1: entered allmulticast mode [ 769.338049][ T9515] bridge_slave_1: entered promiscuous mode [ 769.481442][ T49] usb 4-1: USB disconnect, device number 40 [ 769.575598][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.600745][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.841036][ T9515] team0: Port device team_slave_0 added [ 770.890304][ T9515] team0: Port device team_slave_1 added [ 771.187611][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.187631][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.187660][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.322283][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.322302][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.322333][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.920996][ T9515] hsr_slave_0: entered promiscuous mode [ 771.922130][ T9515] hsr_slave_1: entered promiscuous mode [ 771.923072][ T9515] debugfs: 'hsr0' already exists in 'hsr' [ 771.923102][ T9515] Cannot create hsr debugfs directory [ 772.740077][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.743309][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.753516][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.761574][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.766749][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.914476][ T49] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 773.086124][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 773.092244][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 773.098461][ T49] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 773.098540][ T49] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 773.098598][ T49] usb 4-1: Manufacturer: syz [ 773.098629][ T49] usb 4-1: SerialNumber: syz [ 773.146780][ T49] usb 4-1: config 0 descriptor?? [ 773.433464][ T9601] overlayfs: failed to resolve './bus': -2 [ 774.078454][ T9461] usb 4-1: USB disconnect, device number 41 [ 774.426303][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.429147][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.447632][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.463772][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.478382][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.854468][ T8205] Bluetooth: hci3: command tx timeout [ 775.682823][ T9599] chnl_net:caif_netlink_parms(): no params data found [ 776.442286][ T9334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 776.543418][ T8205] Bluetooth: hci0: command tx timeout [ 776.565736][ T9334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 776.666324][ T9334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 776.712887][ T9334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 776.806840][ T6029] bridge_slave_1: left allmulticast mode [ 776.806865][ T6029] bridge_slave_1: left promiscuous mode [ 776.807055][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.875722][ T6029] bridge_slave_0: left allmulticast mode [ 776.875748][ T6029] bridge_slave_0: left promiscuous mode [ 776.875945][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.944540][ T8205] Bluetooth: hci3: command tx timeout [ 778.624745][ T8205] Bluetooth: hci0: command tx timeout [ 779.014528][ T8205] Bluetooth: hci3: command tx timeout [ 779.602274][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.622495][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.631829][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.633216][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.637840][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.756201][ T37] audit: type=1326 audit(1767255685.350:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.756260][ T37] audit: type=1326 audit(1767255685.430:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.865420][ T37] audit: type=1326 audit(1767255685.530:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.865465][ T37] audit: type=1326 audit(1767255685.530:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.865499][ T37] audit: type=1326 audit(1767255685.530:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.940277][ T37] audit: type=1326 audit(1767255685.610:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 779.955597][ T37] audit: type=1326 audit(1767255685.630:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 780.019116][ T37] audit: type=1326 audit(1767255685.630:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 780.019178][ T37] audit: type=1326 audit(1767255685.630:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 780.019225][ T37] audit: type=1326 audit(1767255685.630:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.3.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 780.285533][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.445196][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.502574][ T6029] bond0 (unregistering): Released all slaves [ 780.570012][ T9334] kthread_run failed with err -4 [ 780.694670][ T8205] Bluetooth: hci0: command tx timeout [ 781.104387][ T8205] Bluetooth: hci3: command tx timeout [ 781.609803][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.610575][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.610811][ T9599] bridge_slave_0: entered allmulticast mode [ 781.614236][ T9599] bridge_slave_0: entered promiscuous mode [ 781.735751][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.737186][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.737398][ T9599] bridge_slave_1: entered allmulticast mode [ 781.739397][ T9599] bridge_slave_1: entered promiscuous mode [ 781.744692][ T8205] Bluetooth: hci1: command tx timeout [ 781.974537][ T6029] hsr_slave_0: left promiscuous mode [ 782.001941][ T6029] hsr_slave_1: left promiscuous mode [ 782.002794][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.025341][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.774846][ T8205] Bluetooth: hci0: command tx timeout [ 783.344457][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 783.817374][ T8205] Bluetooth: hci1: command tx timeout [ 783.996603][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 785.894883][ T8205] Bluetooth: hci1: command tx timeout [ 787.749188][ T9693] 9p: Bad value for 'wfdno' [ 787.991977][ T8205] Bluetooth: hci1: command tx timeout [ 790.248624][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.337807][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.709165][ T9611] chnl_net:caif_netlink_parms(): no params data found [ 790.732728][ T9599] team0: Port device team_slave_0 added [ 790.792586][ T9599] team0: Port device team_slave_1 added [ 791.369847][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.369868][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.369898][ T9599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.530217][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.530237][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.530266][ T9599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.232872][ T9716] ptrace attach of ""[9718] was attempted by "./syz-executor exec"[9716] [ 792.963961][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.964172][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.974675][ T9611] bridge_slave_0: entered allmulticast mode [ 792.976602][ T9611] bridge_slave_0: entered promiscuous mode [ 793.005290][ T9722] 9p: Bad value for 'wfdno' [ 793.088134][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.088247][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.088404][ T9611] bridge_slave_1: entered allmulticast mode [ 793.090267][ T9611] bridge_slave_1: entered promiscuous mode [ 793.418583][ T9599] hsr_slave_0: entered promiscuous mode [ 793.420833][ T9599] hsr_slave_1: entered promiscuous mode [ 793.421723][ T9599] debugfs: 'hsr0' already exists in 'hsr' [ 793.421743][ T9599] Cannot create hsr debugfs directory [ 793.624208][ T9611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.754684][ T9515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 793.813035][ T9611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.825779][ T9515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.358263][ T9515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.516216][ T9515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 794.853907][ T9611] team0: Port device team_slave_0 added [ 795.850272][ T9611] team0: Port device team_slave_1 added [ 796.312410][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.312425][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.312446][ T9611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.321589][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 796.396952][ T9611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.396967][ T9611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.396988][ T9611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.481406][ T9758] 9p: Bad value for 'wfdno' [ 798.552112][ T9611] hsr_slave_0: entered promiscuous mode [ 798.553602][ T9611] hsr_slave_1: entered promiscuous mode [ 798.566755][ T9611] debugfs: 'hsr0' already exists in 'hsr' [ 798.566777][ T9611] Cannot create hsr debugfs directory [ 799.023167][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.054504][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.071817][ T9654] bridge_slave_0: entered allmulticast mode [ 799.080550][ T9654] bridge_slave_0: entered promiscuous mode [ 799.190311][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.190442][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.190654][ T9654] bridge_slave_1: entered allmulticast mode [ 799.192514][ T9654] bridge_slave_1: entered promiscuous mode [ 799.918717][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.047048][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.422217][ T9654] team0: Port device team_slave_0 added [ 800.572966][ T9654] team0: Port device team_slave_1 added [ 801.159162][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.159176][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.159197][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.258682][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.258697][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.258718][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.474471][ T9246] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 801.629104][ T9246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.629133][ T9246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.630439][ T9246] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 801.630468][ T9246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 801.630495][ T9246] usb 4-1: SerialNumber: syz [ 801.893923][ T9246] usb 4-1: 0:2 : does not exist [ 801.967661][ T9246] usb 4-1: USB disconnect, device number 42 [ 802.034160][ T9762] udevd[9762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.183679][ T9654] hsr_slave_0: entered promiscuous mode [ 802.200881][ T9654] hsr_slave_1: entered promiscuous mode [ 802.201647][ T9654] debugfs: 'hsr0' already exists in 'hsr' [ 802.201668][ T9654] Cannot create hsr debugfs directory [ 802.984875][ T9599] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 803.700880][ T9599] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 803.871925][ T9599] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 803.890783][ T9781] 9p: Bad value for 'wfdno' [ 803.969541][ T9599] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 804.202539][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.074093][ T6029] bridge_slave_1: left allmulticast mode [ 805.074125][ T6029] bridge_slave_1: left promiscuous mode [ 805.074647][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.305725][ T6029] bridge_slave_0: left allmulticast mode [ 805.305750][ T6029] bridge_slave_0: left promiscuous mode [ 805.305989][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.368529][ T6029] bridge_slave_1: left allmulticast mode [ 805.368555][ T6029] bridge_slave_1: left promiscuous mode [ 805.368744][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.445828][ T6029] bridge_slave_0: left allmulticast mode [ 805.445903][ T6029] bridge_slave_0: left promiscuous mode [ 805.446128][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.517895][ T6029] bridge_slave_1: left allmulticast mode [ 805.517919][ T6029] bridge_slave_1: left promiscuous mode [ 805.518101][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.586190][ T6029] bridge_slave_0: left allmulticast mode [ 805.586214][ T6029] bridge_slave_0: left promiscuous mode [ 805.586485][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.066908][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.175639][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.267011][ T6029] bond0 (unregistering): Released all slaves [ 806.497633][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.585279][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.658495][ T6029] bond0 (unregistering): Released all slaves [ 806.885135][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.968385][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.036882][ T6029] bond0 (unregistering): Released all slaves [ 807.387412][ T9515] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.564818][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 807.564838][ T37] audit: type=1326 audit(1767255713.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.564889][ T37] audit: type=1326 audit(1767255713.220:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.564938][ T37] audit: type=1326 audit(1767255713.220:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.564987][ T37] audit: type=1326 audit(1767255713.220:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565034][ T37] audit: type=1326 audit(1767255713.220:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565092][ T37] audit: type=1326 audit(1767255713.220:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565142][ T37] audit: type=1326 audit(1767255713.220:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565193][ T37] audit: type=1326 audit(1767255713.220:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565241][ T37] audit: type=1326 audit(1767255713.220:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921027f749 code=0x7ffc0000 [ 807.565288][ T37] audit: type=1326 audit(1767255713.220:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f921027df90 code=0x7ffc0000 [ 807.583967][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.584447][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.829315][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.829455][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.034552][ T6029] hsr_slave_0: left promiscuous mode [ 808.080748][ T6029] hsr_slave_1: left promiscuous mode [ 808.082929][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.105925][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.244604][ T6029] hsr_slave_0: left promiscuous mode [ 808.266562][ T6029] hsr_slave_1: left promiscuous mode [ 808.267303][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.296197][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.414498][ T6029] hsr_slave_0: left promiscuous mode [ 808.434487][ T6029] hsr_slave_1: left promiscuous mode [ 808.435218][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.459155][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.356188][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 809.535275][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 810.775233][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 810.938193][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 813.185962][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 813.367582][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 813.820122][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.820224][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.491940][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.518863][ T9599] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.530595][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.531164][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.610667][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.610779][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.791561][ T9812] 9p: Bad value for 'wfdno' [ 814.866756][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 814.886422][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 814.907022][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 814.911491][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 814.912714][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 815.304085][ T9820] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 815.614906][ T9246] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 815.789814][ T9246] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 815.789843][ T9246] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 815.789871][ T9246] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 815.789888][ T9246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.868393][ T9820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 815.887490][ T9246] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.095558][ T8205] Bluetooth: hci2: command tx timeout [ 817.781962][ T9599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.654858][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 819.174480][ T8205] Bluetooth: hci2: command tx timeout [ 819.875661][ T49] usb 4-1: USB disconnect, device number 43 [ 820.018765][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.021144][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.021390][ T9813] bridge_slave_0: entered allmulticast mode [ 820.024243][ T9813] bridge_slave_0: entered promiscuous mode [ 820.342187][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.342350][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.342592][ T9813] bridge_slave_1: entered allmulticast mode [ 820.383206][ T9813] bridge_slave_1: entered promiscuous mode [ 820.398841][ T9611] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 820.520403][ T9611] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 820.776853][ T9611] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 820.846475][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.921497][ T9611] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 820.952787][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.254571][ T8205] Bluetooth: hci2: command tx timeout [ 821.880089][ T9813] team0: Port device team_slave_0 added [ 821.955255][ T9813] team0: Port device team_slave_1 added [ 822.228238][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.228258][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.228286][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.296260][ T9654] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 822.342647][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.342668][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.342698][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.397975][ T9654] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 822.504701][ T9654] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 822.568280][ T9654] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 822.682046][ T9599] veth0_vlan: entered promiscuous mode [ 823.014597][ T9813] hsr_slave_0: entered promiscuous mode [ 823.016159][ T9813] hsr_slave_1: entered promiscuous mode [ 823.175946][ T9599] veth1_vlan: entered promiscuous mode [ 823.334889][ T8205] Bluetooth: hci2: command tx timeout [ 823.391854][ T6029] bridge_slave_1: left allmulticast mode [ 823.391887][ T6029] bridge_slave_1: left promiscuous mode [ 823.392172][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.477153][ T6029] bridge_slave_0: left allmulticast mode [ 823.477184][ T6029] bridge_slave_0: left promiscuous mode [ 823.477594][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.015223][ T9911] 9p: Bad value for 'wfdno' [ 826.145053][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 826.145178][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 826.149105][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 827.526282][ T6029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.609357][ T6029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.667087][ T6029] bond0 (unregistering): Released all slaves [ 828.033592][ T9937] 9p: Bad value for 'wfdno' [ 828.344827][ T6029] hsr_slave_0: left promiscuous mode [ 828.384750][ T6029] hsr_slave_1: left promiscuous mode [ 828.385659][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.429049][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.325136][ T6029] team0 (unregistering): Port device team_slave_1 removed [ 829.535326][ T6029] team0 (unregistering): Port device team_slave_0 removed [ 830.535848][ T9463] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 830.694458][ T9463] usb 4-1: Using ep0 maxpacket: 16 [ 830.697048][ T9463] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.697081][ T9463] usb 4-1: config 0 interface 0 has no altsetting 0 [ 830.697118][ T9463] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 830.697135][ T9463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.701563][ T9463] usb 4-1: config 0 descriptor?? [ 830.753592][ T9463] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 831.962132][ T9599] veth0_macvtap: entered promiscuous mode [ 831.983168][ T9599] veth1_macvtap: entered promiscuous mode [ 832.027088][ T9611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.184638][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.231840][ T9611] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.263613][ T9599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.289759][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.290409][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.417768][ T145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.422661][ T145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.491480][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.491625][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.510071][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.511492][ T145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.534498][ T145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.778118][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.864140][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.874069][ T3769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.983234][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.992483][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.219666][ T9246] usb 4-1: USB disconnect, device number 44 [ 833.623270][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 833.638003][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 833.655233][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 833.660449][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 833.664091][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 833.916626][ T6008] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.956180][ T9813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 834.004467][ T9813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 834.193467][ T6008] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.245580][ T9813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 834.274099][ T9813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 834.499775][ T6008] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.868082][ T6008] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.339893][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.351809][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.371077][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.372986][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.373873][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.511562][ T9985] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 835.734574][ T5799] Bluetooth: hci3: command tx timeout [ 835.768999][ T49] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 835.939339][ T49] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.939367][ T49] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.939398][ T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.939422][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.986773][ T9985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.048887][ T49] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 836.152023][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.594114][ T9960] chnl_net:caif_netlink_parms(): no params data found [ 836.759382][ T6008] bridge_slave_1: left allmulticast mode [ 836.759416][ T6008] bridge_slave_1: left promiscuous mode [ 836.759688][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.830241][ T6008] bridge_slave_0: left allmulticast mode [ 836.830273][ T6008] bridge_slave_0: left promiscuous mode [ 836.830578][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.424618][ T5799] Bluetooth: hci0: command tx timeout [ 837.824353][ T5799] Bluetooth: hci3: command tx timeout [ 839.168435][ T5884] usb 4-1: USB disconnect, device number 45 [ 839.494730][ T5799] Bluetooth: hci0: command tx timeout [ 840.070164][ T5799] Bluetooth: hci3: command tx timeout [ 840.865745][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.918688][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.921302][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.922482][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.923206][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.574725][ T5799] Bluetooth: hci0: command tx timeout [ 841.905092][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.988508][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.029392][ T6008] bond0 (unregistering): Released all slaves [ 842.144806][ T5799] Bluetooth: hci3: command tx timeout [ 842.734542][ T6008] hsr_slave_0: left promiscuous mode [ 842.774884][ T6008] hsr_slave_1: left promiscuous mode [ 842.776144][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.776171][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.818335][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.818372][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.081450][ T6008] veth1_macvtap: left promiscuous mode [ 843.081531][ T6008] veth0_macvtap: left promiscuous mode [ 843.081712][ T6008] veth1_vlan: left promiscuous mode [ 843.081834][ T6008] veth0_vlan: left promiscuous mode [ 843.658877][ T8205] Bluetooth: hci0: command tx timeout [ 843.658961][ T5799] Bluetooth: hci5: command tx timeout [ 845.803003][ T5799] Bluetooth: hci5: command tx timeout [ 847.814700][ T5799] Bluetooth: hci5: command tx timeout [ 849.895162][ T5799] Bluetooth: hci5: command tx timeout [ 851.745083][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 852.845035][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 852.939348][ T9461] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 853.087137][ T9461] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 853.087169][ T9461] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 853.087188][ T9461] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 853.087237][ T9461] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 853.087264][ T9461] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 853.089301][ T9461] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 853.089332][ T9461] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 853.089352][ T9461] usb 4-1: Product: syz [ 853.089366][ T9461] usb 4-1: Manufacturer: syz [ 853.186550][ T9461] cdc_wdm 4-1:1.0: skipping garbage [ 853.186565][ T9461] cdc_wdm 4-1:1.0: skipping garbage [ 853.238366][ T9461] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 853.238394][ T9461] cdc_wdm 4-1:1.0: Unknown control protocol [ 853.488105][ T49] usb 4-1: USB disconnect, device number 46 [ 855.549293][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 855.549333][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 855.549414][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 856.362425][T10077] ptrace attach of ""[10079] was attempted by "./syz-executor exec"[10077] [ 857.392505][T10083] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 857.419267][T10083] overlayfs: failed to resolve './bus': -2 [ 859.709082][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 859.709104][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 859.709174][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 860.154462][ T9461] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 860.195035][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.195255][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.195460][ T9960] bridge_slave_0: entered allmulticast mode [ 860.197570][ T9960] bridge_slave_0: entered promiscuous mode [ 860.268627][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.268847][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.269071][ T9960] bridge_slave_1: entered allmulticast mode [ 860.271865][ T9960] bridge_slave_1: entered promiscuous mode [ 860.350632][ T9461] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.350662][ T9461] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.351909][ T9461] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 860.351929][ T9461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 860.351944][ T9461] usb 4-1: SerialNumber: syz [ 860.599738][ T9960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.618536][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.630954][ T9461] usb 4-1: 0:2 : does not exist [ 860.706847][ T9960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.712053][ T9461] usb 4-1: USB disconnect, device number 47 [ 860.786352][T10101] udevd[10101]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.052015][ T9960] team0: Port device team_slave_0 added [ 861.072407][ T9960] team0: Port device team_slave_1 added [ 862.466146][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.466160][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.466181][ T9960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.549521][ T9982] chnl_net:caif_netlink_parms(): no params data found [ 862.576904][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.576923][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.576952][ T9960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.652944][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.460528][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.461812][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.949910][ T9960] hsr_slave_0: entered promiscuous mode [ 865.950977][ T9960] hsr_slave_1: entered promiscuous mode [ 865.952344][ T9960] debugfs: 'hsr0' already exists in 'hsr' [ 865.952363][ T9960] Cannot create hsr debugfs directory [ 866.987150][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.988948][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.992295][T10004] chnl_net:caif_netlink_parms(): no params data found [ 868.410660][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.410792][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.411048][ T9982] bridge_slave_0: entered allmulticast mode [ 868.437400][ T9982] bridge_slave_0: entered promiscuous mode [ 868.479728][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.479855][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.480049][ T9982] bridge_slave_1: entered allmulticast mode [ 868.482009][ T9982] bridge_slave_1: entered promiscuous mode [ 868.634476][ T5933] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 868.784600][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 868.787148][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.790806][ T5933] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 868.790832][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 868.790849][ T5933] usb 4-1: Manufacturer: syz [ 868.790863][ T5933] usb 4-1: SerialNumber: syz [ 868.821567][ T5933] usb 4-1: config 0 descriptor?? [ 869.182318][T10173] overlayfs: failed to resolve './bus': -2 [ 869.240523][ T9982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.306358][ T9982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.975645][T10004] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.976096][T10004] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.976246][T10004] bridge_slave_0: entered allmulticast mode [ 869.981270][T10004] bridge_slave_0: entered promiscuous mode [ 870.077000][ T49] usb 4-1: USB disconnect, device number 48 [ 870.232862][ T9982] team0: Port device team_slave_0 added [ 870.316006][T10004] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.316278][T10004] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.316446][T10004] bridge_slave_1: entered allmulticast mode [ 870.318353][T10004] bridge_slave_1: entered promiscuous mode [ 870.323982][ T9982] team0: Port device team_slave_1 added [ 872.490865][T10004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.565784][T10184] Device name cannot be null; rc = [-22] [ 872.846524][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.846635][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.846693][ T9982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.189189][T10004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.193586][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.193605][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.193636][ T9982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.678275][T10004] team0: Port device team_slave_0 added [ 874.790980][T10004] team0: Port device team_slave_1 added [ 875.260524][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.260628][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.448010][ T9982] hsr_slave_0: entered promiscuous mode [ 875.449534][ T9982] hsr_slave_1: entered promiscuous mode [ 875.454590][ T9982] debugfs: 'hsr0' already exists in 'hsr' [ 875.454618][ T9982] Cannot create hsr debugfs directory [ 875.477725][T10004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.477776][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.477859][T10004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.571000][T10004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.571021][T10004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.571050][T10004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.550115][ T8205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 876.568959][ T8205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 876.570686][ T8205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 876.572079][ T8205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 876.573175][ T8205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 878.697548][ T8205] Bluetooth: hci1: command tx timeout [ 880.409011][T10004] hsr_slave_0: entered promiscuous mode [ 880.410546][T10004] hsr_slave_1: entered promiscuous mode [ 880.411610][T10004] debugfs: 'hsr0' already exists in 'hsr' [ 880.411636][T10004] Cannot create hsr debugfs directory [ 881.484272][ T8205] Bluetooth: hci1: command tx timeout [ 881.817615][ T9461] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 881.967501][ T9461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.967544][ T9461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.967574][ T9461] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 881.967597][ T9461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.984629][ T9461] usb 4-1: config 0 descriptor?? [ 882.473544][ T9960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 882.580901][ T9960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 882.625681][ T9461] usbhid 4-1:0.0: can't add hid device: -71 [ 882.625799][ T9461] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 882.656986][ T9461] usb 4-1: USB disconnect, device number 49 [ 882.692642][ T9960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 882.754432][ T9960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 883.197328][ T6008] bridge_slave_1: left allmulticast mode [ 883.197358][ T6008] bridge_slave_1: left promiscuous mode [ 883.197635][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.256948][ T6008] bridge_slave_0: left allmulticast mode [ 883.256972][ T6008] bridge_slave_0: left promiscuous mode [ 883.257160][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.576751][ T5799] Bluetooth: hci1: command tx timeout [ 883.780809][ T6008] bridge_slave_1: left allmulticast mode [ 883.780866][ T6008] bridge_slave_1: left promiscuous mode [ 883.781155][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.896132][ T6008] bridge_slave_0: left allmulticast mode [ 883.896162][ T6008] bridge_slave_0: left promiscuous mode [ 883.896463][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.270528][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 884.270639][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 884.271392][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 886.215869][ T5799] Bluetooth: hci1: command tx timeout [ 887.965537][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.027418][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.059324][ T6008] bond0 (unregistering): Released all slaves [ 890.364467][ T5933] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 890.518865][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.518895][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 890.520352][ T5933] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 890.520382][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 890.520451][ T5933] usb 4-1: SerialNumber: syz [ 890.789516][ T5933] usb 4-1: 0:2 : does not exist [ 890.869160][ T5933] usb 4-1: USB disconnect, device number 50 [ 890.971527][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.260443][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.316424][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.338324][ T6008] bond0 (unregistering): Released all slaves [ 891.814662][ T49] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 891.854654][ T6008] hsr_slave_0: left promiscuous mode [ 891.874596][ T6008] hsr_slave_1: left promiscuous mode [ 891.875470][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.927622][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.967138][ T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.967168][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.968427][ T49] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 891.968456][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 891.968478][ T49] usb 4-1: SerialNumber: syz [ 892.074554][ T6008] hsr_slave_0: left promiscuous mode [ 892.114542][ T6008] hsr_slave_1: left promiscuous mode [ 892.115716][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.140998][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.198676][ T49] usb 4-1: 0:2 : does not exist [ 892.198744][ T49] usb 4-1: unit 5 not found! [ 892.244691][ T49] usb 4-1: USB disconnect, device number 51 [ 892.302000][T10290] udevd[10290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.495231][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 893.795688][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 896.373653][ T8205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 896.391355][ T8205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 896.393165][ T8205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 896.395749][ T8205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 896.396643][ T8205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.515815][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 897.521439][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 897.523556][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 897.591905][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 897.592820][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 899.201891][ T8205] Bluetooth: hci2: command tx timeout [ 899.616882][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 899.616991][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 899.619524][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 899.678790][ T8205] Bluetooth: hci6: command tx timeout [ 901.277665][ T8205] Bluetooth: hci2: command tx timeout [ 901.495532][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 901.775213][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 902.058321][ T8205] Bluetooth: hci6: command tx timeout [ 902.108089][ T5799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 902.112192][ T5799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 902.136305][ T5799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 902.137695][ T5799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 902.138573][ T5799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 903.343688][ T5799] Bluetooth: hci2: command tx timeout [ 904.149819][ T5799] Bluetooth: hci6: command tx timeout [ 904.235983][ T5799] Bluetooth: hci7: command tx timeout [ 905.422212][ T5799] Bluetooth: hci2: command tx timeout [ 906.220132][ T5799] Bluetooth: hci6: command tx timeout [ 906.303150][ T5799] Bluetooth: hci7: command tx timeout [ 907.236661][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 907.236777][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 907.237388][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 908.718332][ T5799] Bluetooth: hci7: command tx timeout [ 910.935402][ T5799] Bluetooth: hci7: command tx timeout [ 911.664591][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 911.664638][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 920.331533][T10214] chnl_net:caif_netlink_parms(): no params data found [ 920.923265][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 920.923385][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 920.924149][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 933.864688][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.864918][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.865507][T10214] bridge_slave_0: entered allmulticast mode [ 933.895192][T10214] bridge_slave_0: entered promiscuous mode [ 934.526533][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.526675][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.526938][T10214] bridge_slave_1: entered allmulticast mode [ 934.565285][T10214] bridge_slave_1: entered promiscuous mode [ 936.929694][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.939189][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.755200][ T8205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 943.776833][ T8205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 943.779207][ T8205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 943.786556][ T8205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 943.788627][ T8205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 945.815949][ T8205] Bluetooth: hci3: command tx timeout [ 947.894690][ T8205] Bluetooth: hci3: command tx timeout [ 950.224520][ T8205] Bluetooth: hci3: command tx timeout [ 952.088359][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 952.088405][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 952.294326][ T8205] Bluetooth: hci3: command tx timeout [ 953.898942][T10331] chnl_net:caif_netlink_parms(): no params data found [ 957.120226][T10312] chnl_net:caif_netlink_parms(): no params data found [ 959.285877][ T8205] Bluetooth: hci0: command 0x0406 tx timeout [ 960.654112][ T8205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.663414][ T8205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.760245][ T8205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.808950][ T8205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.809845][ T8205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 962.295818][ T5799] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 962.310461][ T5799] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 962.323370][T10478] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 962.341952][T10478] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 962.351795][T10478] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 963.567263][ T8205] Bluetooth: hci1: command tx timeout [ 964.397107][ T8205] Bluetooth: hci5: command 0x0406 tx timeout [ 964.454372][ T8205] Bluetooth: hci8: command tx timeout [ 965.657381][ T8205] Bluetooth: hci1: command tx timeout [ 966.535890][T10477] Bluetooth: hci8: command tx timeout [ 966.676573][ T8205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.717803][ T8205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.811186][ T8205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.926980][ T8205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.928153][ T8205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.874385][T10477] Bluetooth: hci1: command tx timeout [ 968.637974][T10477] Bluetooth: hci8: command tx timeout [ 969.633746][T10477] Bluetooth: hci2: command tx timeout [ 970.076381][T10477] Bluetooth: hci1: command tx timeout [ 970.694956][T10477] Bluetooth: hci8: command tx timeout [ 971.679993][T10477] Bluetooth: hci2: command tx timeout [ 974.103406][T10477] Bluetooth: hci2: command tx timeout [ 976.893119][T10477] Bluetooth: hci2: command tx timeout [ 988.515821][T10424] chnl_net:caif_netlink_parms(): no params data found [ 998.138491][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.138593][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.056551][T10475] chnl_net:caif_netlink_parms(): no params data found [ 1000.110458][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.204422][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.204719][T10424] bridge_slave_0: entered allmulticast mode [ 1000.207755][T10424] bridge_slave_0: entered promiscuous mode [ 1001.533287][T10470] chnl_net:caif_netlink_parms(): no params data found [ 1003.449935][ T8205] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1003.471253][ T8205] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1003.546660][ T8205] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1003.704640][ T8205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1003.801934][ T8205] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1004.645935][T10487] chnl_net:caif_netlink_parms(): no params data found [ 1006.135306][T10477] Bluetooth: hci6: command tx timeout [ 1008.215161][T10477] Bluetooth: hci6: command tx timeout [ 1010.074430][ T5933] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1010.298971][T10477] Bluetooth: hci6: command tx timeout [ 1010.390523][ T5933] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1010.390554][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1010.392095][ T5933] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1010.392124][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1010.392146][ T5933] usb 4-1: SerialNumber: syz [ 1012.414372][T10477] Bluetooth: hci6: command tx timeout [ 1012.464611][ T5933] usb 4-1: can't set config #1, error -71 [ 1012.544618][ T5933] usb 4-1: USB disconnect, device number 52 [ 1018.428992][T10470] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1018.510055][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.560111][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.560412][T10475] bridge_slave_0: entered allmulticast mode [ 1018.577584][T10475] bridge_slave_0: entered promiscuous mode [ 1018.729540][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.729678][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.729926][T10475] bridge_slave_1: entered allmulticast mode [ 1018.732782][T10475] bridge_slave_1: entered promiscuous mode [ 1020.447903][ T8205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1020.524327][ T8205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1020.589386][ T8205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1020.726227][ T8205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1020.727229][ T8205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1022.775999][ T8205] Bluetooth: hci3: command tx timeout [ 1023.636709][T10477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1023.662877][T10477] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1023.664347][T10477] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1023.690048][T10477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1023.737218][T10477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1025.478031][T10477] Bluetooth: hci3: command tx timeout [ 1026.214371][T10477] Bluetooth: hci7: command tx timeout [ 1027.565957][T10477] Bluetooth: hci3: command tx timeout [ 1028.297229][T10477] Bluetooth: hci7: command tx timeout [ 1029.604370][T10477] Bluetooth: hci3: command tx timeout [ 1030.091718][ T8205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1030.424389][T10478] Bluetooth: hci7: command tx timeout [ 1030.818090][ T8205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1030.822736][ T8205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1030.849764][ T8205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1030.850700][ T8205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1032.454383][ T8205] Bluetooth: hci7: command tx timeout [ 1032.934457][ T8205] Bluetooth: hci1: command tx timeout [ 1035.014321][ T8205] Bluetooth: hci1: command tx timeout [ 1035.894709][ T38] INFO: task syz-executor:10004 blocked for more than 143 seconds. [ 1035.894745][ T38] Tainted: G L syzkaller #0 [ 1035.894758][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1035.894768][ T38] task:syz-executor state:D stack:22392 pid:10004 tgid:10004 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1035.894839][ T38] Call Trace: [ 1035.894851][ T38] [ 1035.894867][ T38] __schedule+0x145f/0x5070 [ 1035.895144][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1035.895195][ T38] ? __pfx___schedule+0x10/0x10 [ 1035.895249][ T38] rt_mutex_schedule+0x77/0xf0 [ 1035.895325][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1035.895394][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1035.895431][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1035.895465][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1035.895497][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1035.895542][ T38] ? del_device_store+0xd1/0x360 [ 1035.895639][ T38] ? del_device_store+0xd1/0x360 [ 1035.895670][ T38] ? del_device_store+0xd1/0x360 [ 1035.895692][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1035.895729][ T38] del_device_store+0xd1/0x360 [ 1035.895753][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1035.895816][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1035.895841][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1035.895871][ T38] ? sysfs_kf_write+0x166/0x260 [ 1035.895906][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1035.895936][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1035.895971][ T38] vfs_write+0x5d5/0xb40 [ 1035.896025][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1035.896055][ [ 1035.896055][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1035.896084][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1035.896111][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1035.896160][ T38] ? do_sys_openat2+0x15a/0x200 [ 1035.896203][ T38] ksys_write+0x14b/0x260 [ 1035.896239][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1035.896286][ T38] do_syscall_64+0xec/0xf80 [ 1035.896334][ T38] ? rcu_is_watching+0x15/0xb0 [ 1035.896369][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.896412][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1035.896441][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.896465][ T38] RIP: 0033:0x7eff5fbde1ff [ 1035.896489][ T38] RSP: 002b:00007ffc3e46e0a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1035.896512][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007eff5fbde1ff [ 1035.896528][ T38] RDX: 0000000000000001 RSI: 00007ffc3e46e0f0 RDI: 0000000000000005 [ 1035.896548][ T38] RBP: 00007eff5fc652cb R08: 0000000000000000 R09: 00007ffc3e46def7 [ 1035.896564][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1035.896577][ T38] R13: 00007ffc3e46e0f0 R14: 00007eff60964620 R15: 0000000000000003 [ 1035.896614][ T38] [ 1035.896663][ T38] [ 1035.896663][ T38] Showing all locks held in the system: [ 1035.896675][ T38] 3 locks held by rcuc/0/20: [ 1035.896689][ T38] 3 locks held by rcuc/1/28: [ 1035.896702][ T38] 1 lock held by khungtaskd/38: [ 1035.896714][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1035.896807][ T38] 3 locks held by kworker/u8:4/68: [ 1035.896820][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1035.896888][ T38] #1: ffffc9000153fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1035.896944][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1035.897070][ T38] 2 locks held by kworker/u8:5/137: [ 1035.897084][ T38] #0: ffff88801bf3e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1035.897146][ T38] #1: ffffc90003ad7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1035.897240][ T38] 4 locks held by udevd/5167: [ 1035.897253][ T38] 2 locks held by dhcpcd/5461: [ 1035.897265][ T38] #0: ffffffff8e90dd60 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1035.897355][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 1035.897452][ T38] 2 locks held by getty/5560: [ 1035.897465][ T38] #0: ffff88823bfa40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1035.897607][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1035.897662][ T38] 3 locks held by kworker/u8:18/5968: [ 1035.897675][ T38] #0: ffff88814ceea938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1035.897732][ T38] #1: ffffc90004e5fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1035.897790][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1035.897913][ T38] 5 locks held by kworker/u8:20/6008: [ 1035.897926][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1035.897983][ T38] #1: ffffc9000538fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1035.898037][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1035.898133][ T38] #3: ffff888035f417b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1035.898251][ T38] #4: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.898309][ T38] 5 locks held by kworker/u8:24/6343: [ 1035.898326][ T38] 2 locks held by kworker/u8:0/8643: [ 1035.898338][ T38] #0: ffff88801bf3e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1035.898395][ T38] #1: ffffc90004007bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1035.898456][ T38] 7 locks held by syz-executor/9982: [ 1035.898469][ T38] #0: ffff888034f4a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1035.898535][ T38] #1: ffff88803aa0cc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1035.898601][ T38] #2: ffff888143b42c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1035.898663][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1035.898718][ T38] #4: ffff8880337fb0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1035.898820][ T38] #5: ffff8880290d9300 (&devlink->lock_key#32){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1035.898912][ T38] #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.898969][ T38] 4 locks held by syz-executor/10004: [ 1035.898982][ T38] #0: ffff888034f4a480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1035.899048][ T38] #1: ffff88802fe51c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1035.899104][ T38] #2: ffff888143b42c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1035.899166][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1035.899224][ T38] 1 lock held by syz-executor/10302: [ 1035.899236][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.899292][ T38] 1 lock held by syz-executor/10312: [ 1035.899305][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.899360][ T38] 1 lock held by syz-executor/10331: [ 1035.899373][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.899429][ T38] 1 lock held by syz-executor/10424: [ 1035.899442][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1035.899497][ T38] 1 lock held by syz-executor/10470: [ 1035.899510][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1035.899615][ T38] 1 lock held by syz-executor/10475: [ 1035.899628][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1035.899686][ T38] 4 locks held by syz-executor/10487: [ 1035.899698][ T38] #0: ffff888031e1cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1035.899795][ T38] #1: ffff888031e1c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1035.899893][ T38] #2: ffffffff8ea15378 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1035.899956][ T38] #3: ffff88805bc1c358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 1035.900058][ T38] 2 locks held by syz-executor/10564: [ 1035.900071][ T38] #0: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1035.900124][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1035.900233][ T38] 1 lock held by syz-executor/10600: [ 1035.900246][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1035.900303][ T38] 1 lock held by syz-executor/10605: [ 1035.900315][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1035.900370][ T38] 1 lock held by syz-executor/10617: [ 1035.900383][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1035.900462][ T38] 1 lock held by syz.3.907/10620: [ 1035.900475][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1035.900529][ T38] 1 lock held by syz.3.907/10621: [ 1035.900548][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1035.900603][ T38] 1 lock held by syz.3.907/10622: [ 1035.900615][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b20 [ 1035.900699][ T38] 6 locks held by udevd/10623: [ 1035.900712][ T38] [ 1035.900718][ T38] ============================================= [ 1035.900718][ T38] [ 1035.900728][ T38] NMI backtrace for cpu 1 [ 1035.900760][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1035.900789][ T38] Tainted: [L]=SOFTLOCKUP [ 1035.900797][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.900810][ T38] Call Trace: [ 1035.900818][ T38] [ 1035.900828][ T38] dump_stack_lvl+0xe8/0x150 [ 1035.900874][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1035.900941][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1035.900980][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1035.901014][ T38] sys_info+0x135/0x170 [ 1035.901059][ T38] watchdog+0xf95/0xfe0 [ 1035.901098][ T38] ? watchdog+0x20a/0xfe0 [ 1035.901131][ T38] kthread+0x711/0x8a0 [ 1035.901168][ T38] ? __pfx_watchdog+0x10/0x10 [ 1035.901192][ T38] ? __pfx_kthread+0x10/0x10 [ 1035.901221][ T38] ? rt_spin_unlock+0x150/0x200 [ 1035.901255][ T38] ? rt_spin_unlock+0x161/0x200 [ 1035.901283][ T38] ? __pfx_kthread+0x10/0x10 [ 1035.901316][ T38] ret_from_fork+0x510/0xa50 [ 1035.901351][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1035.901373][ T38] ? __switch_to+0xc9e/0x1480 [ 1035.901413][ T38] ? __pfx_kthread+0x10/0x10 [ 1035.901445][ T38] ret_from_fork_asm+0x1a/0x30 [ 1035.901498][ T38] [ 1035.901506][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1035.901539][ C0] NMI backtrace for cpu 0 [ 1035.901558][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1035.901584][ C0] Tainted: [L]=SOFTLOCKUP [ 1035.901591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.901602][ C0] RIP: 0010:__lock_acquire+0x461/0x2cf0 [ 1035.901643][ C0] Code: 0f 44 ca 89 0c 24 45 8b a6 88 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d [ 1035.901659][ C0] RSP: 0018:ffffc90000196890 EFLAGS: 00000046 [ 1035.901675][ C0] RAX: 000000000002000b RBX: 0000000000000002 RCX: 0000000000000000 [ 1035.901688][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.901699][ C0] RBP: ffff88801b6de6c8 R08: ffffffff8173dd35 R09: ffffffff8d5ae940 [ 1035.901714][ C0] R10: ffffc90000196b98 R11: ffffffff81ab9860 R12: 0000000000000000 [ 1035.901726][ C0] R13: 0000000000000000 R14: ffff88801b6ddac0 R15: 0000000000000001 [ 1035.901739][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1035.901754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1035.901767][ C0] CR2: 00007fca52480457 CR3: 000000003f112000 CR4: 00000000003526f0 [ 1035.901784][ C0] Call Trace: [ 1035.901790][ C0] [ 1035.901802][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.901841][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.901868][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.901892][ C0] lock_acquire+0x107/0x340 [ 1035.901916][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.901944][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.901968][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1035.901997][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.902021][ C0] unwind_next_frame+0xc2/0x23d0 [ 1035.902045][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.902072][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1035.902096][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1035.902131][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1035.902161][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1035.902232][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1035.902258][ C0] arch_stack_walk+0x11c/0x150 [ 1035.902285][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1035.902323][ C0] stack_trace_save+0x9c/0xe0 [ 1035.902346][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1035.902368][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1035.902396][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 1035.902418][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1035.902444][ C0] kasan_save_track+0x3e/0x80 [ 1035.902470][ C0] ? kasan_save_track+0x3e/0x80 [ 1035.902495][ C0] ? kasan_save_free_info+0x46/0x50 [ 1035.902517][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1035.902544][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1035.902599][ C0] kasan_save_free_info+0x46/0x50 [ 1035.902621][ C0] __kasan_slab_free+0x5c/0x80 [ 1035.902649][ C0] kmem_cache_free+0x18f/0x8d0 [ 1035.902677][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 1035.902701][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 1035.902724][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1035.902746][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1035.902805][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1035.902826][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1035.902849][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1035.902878][ C0] nft_do_chain+0x40c/0x1920 [ 1035.902920][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1035.902938][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 1035.902985][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1035.903023][ C0] nft_do_chain_inet+0x25d/0x340 [ 1035.903060][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1035.903084][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1035.903136][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1035.903160][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1035.903180][ C0] nf_hook_slow+0xc5/0x220 [ 1035.903210][ C0] NF_HOOK+0x206/0x3a0 [ 1035.903235][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1035.903260][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1035.903284][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1035.903313][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1035.903340][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1035.903371][ C0] ? skb_dst+0x4f/0xd0 [ 1035.903395][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1035.903422][ C0] NF_HOOK+0x30c/0x3a0 [ 1035.903446][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1035.903471][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1035.903494][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1035.903519][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1035.903549][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1035.903573][ C0] __netif_receive_skb+0x143/0x380 [ 1035.903615][ C0] ? process_backlog+0x272/0x8f0 [ 1035.903635][ C0] process_backlog+0x315/0x8f0 [ 1035.903660][ C0] __napi_poll+0xae/0x520 [ 1035.903679][ C0] net_rx_action+0x64a/0xdb0 [ 1035.903706][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1035.903725][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1035.903760][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1035.903799][ C0] handle_softirqs+0x1df/0x650 [ 1035.903827][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 1035.903848][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 1035.903878][ C0] rcu_cpu_kthread+0xbec/0x1af0 [ 1035.903910][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 1035.903945][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1035.903974][ C0] ? schedule+0x91/0x360 [ 1035.904005][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1035.904029][ C0] smpboot_thread_fn+0x542/0xa60 [ 1035.904053][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1035.904080][ C0] kthread+0x711/0x8a0 [ 1035.904108][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1035.904132][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.904161][ C0] ? rt_spin_unlock+0x150/0x200 [ 1035.904190][ C0] ? rt_spin_unlock+0x161/0x200 [ 1035.904215][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.904244][ C0] ret_from_fork+0x510/0xa50 [ 1035.904265][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1035.904283][ C0] ? __switch_to+0xc9e/0x1480 [ 1035.904320][ C0] ? __pfx_kthread+0x10/0x10 [ 1035.904347][ C0] ret_from_fork_asm+0x1a/0x30 [ 1035.904384][ C0] [ 1036.335845][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1036.335878][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1036.335909][ T38] Tainted: [L]=SOFTLOCKUP [ 1036.335918][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.335933][ T38] Call Trace: [ 1036.335942][ T38] [ 1036.335953][ T38] vpanic+0x1e0/0x670 [ 1036.335995][ T38] panic+0xb9/0xc0 [ 1036.336026][ T38] ? __pfx_panic+0x10/0x10 [ 1036.336058][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1036.336091][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1036.336129][ T38] watchdog+0xfdf/0xfe0 [ 1036.336161][ T38] ? watchdog+0x20a/0xfe0 [ 1036.336195][ T38] kthread+0x711/0x8a0 [ 1036.336232][ T38] ? __pfx_watchdog+0x10/0x10 [ 1036.336257][ T38] ? __pfx_kthread+0x10/0x10 [ 1036.336286][ T38] ? rt_spin_unlock+0x150/0x200 [ 1036.336322][ T38] ? rt_spin_unlock+0x161/0x200 [ 1036.336349][ T38] ? __pfx_kthread+0x10/0x10 [ 1036.336384][ T38] ret_from_fork+0x510/0xa50 [ 1036.336412][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1036.336436][ T38] ? __switch_to+0xc9e/0x1480 [ 1036.336483][ T38] ? __pfx_kthread+0x10/0x10 [ 1036.336516][ T38] ret_from_fork_asm+0x1a/0x30 [ 1036.336592][ T38] [ 1036.337237][ T38] Kernel Offset: disabled