last executing test programs: 13m5.292556994s ago: executing program 2 (id=3214): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) close(0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x5}, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, 0x0) 13m3.895620527s ago: executing program 2 (id=3215): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 13m3.724181807s ago: executing program 2 (id=3216): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) read(r1, &(0x7f0000000040), 0x0) 13m2.520274053s ago: executing program 2 (id=3219): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) 13m1.229331521s ago: executing program 2 (id=3223): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)}) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) listen(r0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, 0x0, 0x0) 12m59.098290812s ago: executing program 2 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 12m42.978806854s ago: executing program 32 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7m42.847594251s ago: executing program 1 (id=3909): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000980)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x4}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x403, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x8054) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) sendto$inet6(r7, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) 7m40.295185922s ago: executing program 1 (id=3912): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f00000001c0)="5eae7d3b271f9e081891c11a32b252c098cb29684081e4629da0f1c7f163853d280da926c66c9fb800917b87c1e38a1dac7bea10983b0e45d74f236b1f984e", &(0x7f0000000400)}}, &(0x7f0000000000)) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c80cb6dc71bbb6e6fe7389565b0fe703b37fdce8173e60d636428eb484f585a7d271efae1ae456f0eae7563e33", 0x2d, r0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) gettid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) unshare(0x2a020400) 7m39.489299914s ago: executing program 1 (id=3913): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x0) 7m39.357697055s ago: executing program 1 (id=3914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 7m38.038571147s ago: executing program 1 (id=3915): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='status\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg$nl_route_sched(r4, 0x0, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) 7m36.421591248s ago: executing program 1 (id=3920): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m20.131866356s ago: executing program 33 (id=3920): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.918127919s ago: executing program 4 (id=5226): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) 2m1.864957338s ago: executing program 4 (id=5227): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, 0x0, 0x0) 2m0.901195529s ago: executing program 4 (id=5229): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m0.738731843s ago: executing program 4 (id=5231): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x640, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x12a54000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x591f) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x2, 0x5004) sendfile(r5, r6, 0x0, 0x20000023896) 1m59.558077864s ago: executing program 4 (id=5233): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='wchan\x00') 1m59.476568387s ago: executing program 4 (id=5235): socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xcd5, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.861233271s ago: executing program 5 (id=5478): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(0xffffffffffffffff) 12.121098634s ago: executing program 3 (id=5481): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r2, @ANYBLOB="0800020001"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 11.919335701s ago: executing program 5 (id=5483): socket$packet(0x11, 0xa, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="0405"], 0x7) 11.76085591s ago: executing program 5 (id=5484): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x41, 0x0) 11.733528062s ago: executing program 5 (id=5485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x1000000, 0x8, 0x80000, 0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="308da3e4b19fa92efb19479fd6c8d88d72685b7f4806df239e3544f502f09974a1eca6c38a230abeca45cb896f02196d50695c78770c1fab65af50ff14d7fa5837", 0x41}], 0x1}, 0x0) 11.022290882s ago: executing program 3 (id=5486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x7, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b21", 0x52}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x0, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.677636212s ago: executing program 3 (id=5487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="010300000008fedb000010", @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.184264639s ago: executing program 3 (id=5488): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.421376806s ago: executing program 6 (id=5489): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x4020744f, &(0x7f0000000040)=0x80) 9.306238887s ago: executing program 6 (id=5490): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x82, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 9.170021744s ago: executing program 6 (id=5491): socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x2000000007d, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) 7.355840399s ago: executing program 5 (id=5494): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r5, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 7.116112446s ago: executing program 0 (id=5495): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r2, @ANYBLOB="0800020001"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 6.847455234s ago: executing program 3 (id=5496): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r3, r5, &(0x7f0000000080)=0x5, 0xffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4000) 6.782751827s ago: executing program 6 (id=5497): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) bind$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00000004c0)=0x3, 0x4) 4.991498627s ago: executing program 3 (id=5498): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r3, 0x0, 0x40044) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000001cc0)=""/239, 0xef}, {&(0x7f0000001880)=""/192, 0xc0}], 0x3, &(0x7f00000019c0)=""/121, 0x79}, 0xfff}, {{&(0x7f0000001a40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/162, 0xa2}], 0x1}, 0xfffffffe}], 0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x6e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x8, @rand_addr=0x64010100, 0x4e24, 0x6, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0}, 0x40004) r5 = openat$dsp(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e1f, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000600)=0xdf8, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.853262122s ago: executing program 6 (id=5499): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f0000000040)=0x80) 4.796227543s ago: executing program 0 (id=5500): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) close_range(r0, 0xffffffffffffffff, 0x0) 4.643059114s ago: executing program 0 (id=5501): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = memfd_create(&(0x7f00000004c0)='y\x82BEm/\xe0\x15\xba\x04\x00\x00\x00\x00\x00\x00\x00\'\xd6\xae+%\xa3=*\xf5\x7f\x11X\x0e\xa0\xcf\x1a\xd8S\b\x00\x00\x03\x00\x00\x00\x00@9fe[\r<\xe5\x03k\x00F\x87D]Rb\x00\x8b\x88%\xb9\xb6p~\x8e\x96a\xa8\xed\x84\xce8\x9c\x98\xe76o\xa6>\a\xa8\xa5r_\x85\xa2\xab\"\x04\xb1)\xb3l\x9d1\x8f\x1e(\xe3\xcb\xa0?O\x91\x85\x11\xc6\xe6\v\xa8\xc9\x02\x91w-\xff&\xb1\xa3O\\\xe8$\xdb\x85n*Z\x95)9h\x1c\xfd\xdb\xff\"\b.\x91\xe6\xc2m\xe8\xdf\xf3C\xf9\xae.\xc5)\xe5\xe9\xb7\xa4\xcb\xc4\xb3\x91\xbe\x06\xe8jBW{\xcbt\xea\xeew\xa4mpT\xe2xpr\xe2g\'\xad\x17h\xe4\xb1\x05g\xb9y\xb3\x04\xbe\x02\xfeQG\x96sB\xd0\xc9\xfb\x95\xfe\xeb\x02\x8a&a\xee\xb1\xcc\xe5\xe9S\xa39\xd3\x9c\xd7\xe3#H<=@\x85\xd8\x82k\x06\xa3O\xe9\x02\x93f\xa8F\xe3\x15\xd5\x05\"1*2\xa8\x1a\xb26h>\xdf\x98\xb1\x85m\x1c\xb79f\xeevuRx\tM\xfe\x8b\xd5||\x12\x9f\x97\x95X$\x9e[\a\xe2\xc6\x8d\xcf', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f00000004070000000000000002000000420000000c000000000000000000"], 0x0, 0x45, 0x0, 0x1}, 0x28) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) 3.1549864s ago: executing program 0 (id=5502): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r5) 1.832767641s ago: executing program 0 (id=5503): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x20000020, 0x0) 1.229522777s ago: executing program 0 (id=5504): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x1000000, 0x8, 0x80000, 0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="308da3e4b19fa92efb19479fd6c8d88d72685b7f4806df239e3544f502f09974a1eca6c38a230abeca45cb896f02196d50695c78770c1fab65af50ff14d7fa5837", 0x41}], 0x1}, 0x0) 1.228961062s ago: executing program 5 (id=5505): socket$nl_generic(0x10, 0x3, 0x10) r0 = fanotify_init(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0xb7) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x9, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00\x00`\x00', '\x00', ["2408000ce61c0000c6cb00", "bed0f3d6ce7a5f7389827f04", "d409343c60abd64f2fdc9ddf", "fc43009f621000"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x4, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xfc, 0x0, 0x10}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000140)={0x8, 0x800, 0xf, 0x0, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x78, 0x3, 0xa7, 0x7, 0xc, 0x7, 0x29}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendto$inet_nvme_of_msg(r3, &(0x7f0000000680)={@cmd={{0x4, 0xd, 0x48, 0xa}, {@auth_common={0x7f, 0x80, 0xbe0, 0x6, "e9cf4b6db6f5510d94b6f59c0a4bd46abd4dc0", @anon_struct={0x3, 0x7e}, 0x7, 0xe, 0x2, 0x3, 0xb, "9ef322afa195add877c93c24d19dcae4"}}}, @void}, 0x80, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5506): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120120007516b7108c0d0e008f8e0018030109021b00010000000d0904080001030000000905", @ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.1.3862'. [ 1156.476550][T18547] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1156.476564][T18547] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1156.511041][T18547] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1161.345767][T18590] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3872'. [ 1161.554069][ T67] bridge_slave_1: left allmulticast mode [ 1161.554103][ T67] bridge_slave_1: left promiscuous mode [ 1161.554344][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.575513][T18601] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1161.575533][T18601] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1161.913867][ T67] bridge_slave_0: left allmulticast mode [ 1161.913900][ T67] bridge_slave_0: left promiscuous mode [ 1161.914122][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.208964][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.294431][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.318049][ T67] bond0 (unregistering): Released all slaves [ 1164.457443][T18601] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1164.541678][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1165.482158][T18441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.482262][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.482431][T18441] bridge_slave_0: entered allmulticast mode [ 1165.485169][T18441] bridge_slave_0: entered promiscuous mode [ 1165.491537][T18441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.491640][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.491792][T18441] bridge_slave_1: entered allmulticast mode [ 1165.494004][T18441] bridge_slave_1: entered promiscuous mode [ 1166.458677][T18643] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1166.509903][T18420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.510087][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.510257][T18420] bridge_slave_0: entered allmulticast mode [ 1166.512835][T18420] bridge_slave_0: entered promiscuous mode [ 1166.709234][T18652] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1166.709254][T18652] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1166.954606][ T67] hsr_slave_0: left promiscuous mode [ 1167.777541][ T67] hsr_slave_1: left promiscuous mode [ 1167.779020][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.863476][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.873706][ T1241] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1168.050277][ T1241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1168.050318][ T1241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.053054][ T1241] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1168.053082][ T1241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.053101][ T1241] usb 5-1: Product: syz [ 1168.053115][ T1241] usb 5-1: Manufacturer: syz [ 1168.053130][ T1241] usb 5-1: SerialNumber: syz [ 1168.143552][ T1241] usb 5-1: config 0 descriptor?? [ 1168.144587][T18649] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1168.187784][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 1168.188365][ T1241] port100 5-1:0.0: NFC: Could not get supported command types [ 1168.633176][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1168.829141][T18676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3891'. [ 1168.953487][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1168.985449][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1169.188569][T18420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.188655][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.188809][T18420] bridge_slave_1: entered allmulticast mode [ 1169.190527][T18420] bridge_slave_1: entered promiscuous mode [ 1169.231804][T18441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.234022][T18652] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1169.240781][T12993] usb 5-1: USB disconnect, device number 6 [ 1169.354647][T18441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.435827][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.476038][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.488419][T18441] team0: Port device team_slave_0 added [ 1169.514911][T18441] team0: Port device team_slave_1 added [ 1169.559644][T18420] team0: Port device team_slave_0 added [ 1169.587236][T18420] team0: Port device team_slave_1 added [ 1169.588211][T18441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.588225][T18441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.588251][T18441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.685144][T18441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.685160][T18441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.685186][T18441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.731951][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.731967][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.731992][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.757655][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.757671][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.757696][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.130499][T18441] hsr_slave_0: entered promiscuous mode [ 1170.132952][T18441] hsr_slave_1: entered promiscuous mode [ 1170.977753][T18420] hsr_slave_0: entered promiscuous mode [ 1170.981699][T18420] hsr_slave_1: entered promiscuous mode [ 1170.985958][T18420] debugfs: 'hsr0' already exists in 'hsr' [ 1170.985982][T18420] Cannot create hsr debugfs directory [ 1171.234701][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1177.586797][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1180.758461][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1182.574213][ T67] bridge_slave_1: left allmulticast mode [ 1182.574247][ T67] bridge_slave_1: left promiscuous mode [ 1182.574509][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.921083][ T67] bridge_slave_0: left allmulticast mode [ 1182.921117][ T67] bridge_slave_0: left promiscuous mode [ 1182.927357][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.186346][T18816] usb usb7: usbfs: process 18816 (syz.3.3916) did not claim interface 0 before use [ 1185.528719][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.020844][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.020983][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.318235][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.259118][ T67] bond0 (unregistering): Released all slaves [ 1201.032715][ T67] hsr_slave_0: left promiscuous mode [ 1201.071642][T18882] netlink: 181284 bytes leftover after parsing attributes in process `syz.3.3929'. [ 1201.085962][ T67] hsr_slave_1: left promiscuous mode [ 1201.086954][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.142436][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.524282][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1201.645481][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1203.333332][ T129] kworker/u8:5 (129) used greatest stack depth: 16864 bytes left [ 1203.452665][T16513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1203.518594][T16513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1203.537779][T16513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1203.606950][T16513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1203.622790][T16513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1205.780678][T16513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1205.905181][T16513] Bluetooth: hci4: command tx timeout [ 1206.014735][T16513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.049776][T16513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1206.641159][T16513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1207.097135][T16513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1208.127926][ T5603] Bluetooth: hci4: command tx timeout [ 1208.325594][T16513] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1208.370720][T16513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1208.375242][T16513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.397677][T16513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.419215][T16513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1209.583734][T16513] Bluetooth: hci0: command tx timeout [ 1210.468121][T16513] Bluetooth: hci4: command tx timeout [ 1210.692854][ T5603] Bluetooth: hci2: command tx timeout [ 1210.957290][T18441] netdevsim netdevsim0: probe with driver netdevsim failed with error -12 [ 1212.212526][ T5603] Bluetooth: hci0: command tx timeout [ 1212.854584][ T5603] Bluetooth: hci4: command tx timeout [ 1212.950511][ T5603] Bluetooth: hci2: command tx timeout [ 1214.577503][ T5603] Bluetooth: hci0: command tx timeout [ 1214.947979][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.948015][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.137978][ T5603] Bluetooth: hci2: command tx timeout [ 1216.218937][T18897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.219013][T18897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.219180][T18897] bridge_slave_0: entered allmulticast mode [ 1216.224120][T18897] bridge_slave_0: entered promiscuous mode [ 1216.763748][ T5603] Bluetooth: hci0: command tx timeout [ 1216.856334][T18897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.856469][T18897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.856704][T18897] bridge_slave_1: entered allmulticast mode [ 1216.880173][T18897] bridge_slave_1: entered promiscuous mode [ 1218.339020][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1218.339056][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.864221][T16513] Bluetooth: hci2: command tx timeout [ 1218.941258][T19071] fuse: Bad value for 'group_id' [ 1218.941277][T19071] fuse: Bad value for 'group_id' [ 1219.451709][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1219.451744][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.554348][T18897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.640177][T18897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.697096][ T67] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1222.697130][ T67] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.819073][T18897] team0: Port device team_slave_0 added [ 1222.852042][T18897] team0: Port device team_slave_1 added [ 1224.857297][T18897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.857314][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.857340][T18897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.888749][T18897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.888765][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.888790][T18897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.209227][T18919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.211083][T18919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.211263][T18919] bridge_slave_0: entered allmulticast mode [ 1225.213733][T18919] bridge_slave_0: entered promiscuous mode [ 1225.244061][T18919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.244267][T18919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.244434][T18919] bridge_slave_1: entered allmulticast mode [ 1225.416456][T18919] bridge_slave_1: entered promiscuous mode [ 1228.466211][T18897] hsr_slave_0: entered promiscuous mode [ 1228.467525][T18897] hsr_slave_1: entered promiscuous mode [ 1228.468441][T18897] debugfs: 'hsr0' already exists in 'hsr' [ 1228.468465][T18897] Cannot create hsr debugfs directory [ 1228.736036][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.482453][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.344951][T18919] team0: Port device team_slave_0 added [ 1230.444717][T18919] team0: Port device team_slave_1 added [ 1234.567961][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.567978][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.568004][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.652213][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.652230][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.652256][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.865013][T18942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.865231][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.865448][T18942] bridge_slave_0: entered allmulticast mode [ 1235.868494][T18942] bridge_slave_0: entered promiscuous mode [ 1235.911110][T18942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.911231][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.911404][T18942] bridge_slave_1: entered allmulticast mode [ 1235.914895][T18942] bridge_slave_1: entered promiscuous mode [ 1236.091983][T18919] hsr_slave_0: entered promiscuous mode [ 1236.099611][T18919] hsr_slave_1: entered promiscuous mode [ 1236.100165][T18919] debugfs: 'hsr0' already exists in 'hsr' [ 1236.100188][T18919] Cannot create hsr debugfs directory [ 1236.129196][T18942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.248360][ T67] bridge_slave_1: left allmulticast mode [ 1236.248394][ T67] bridge_slave_1: left promiscuous mode [ 1236.248670][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.319993][ T67] bridge_slave_0: left allmulticast mode [ 1236.320027][ T67] bridge_slave_0: left promiscuous mode [ 1236.320298][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.726745][ T67] bridge_slave_1: left allmulticast mode [ 1236.726779][ T67] bridge_slave_1: left promiscuous mode [ 1236.727010][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.812580][ T67] bridge_slave_0: left allmulticast mode [ 1236.812614][ T67] bridge_slave_0: left promiscuous mode [ 1236.812841][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.418534][ T5610] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1237.583915][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1237.583947][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1237.586074][ T5610] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1237.586096][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.586106][ T5610] usb 5-1: Product: syz [ 1237.586114][ T5610] usb 5-1: Manufacturer: syz [ 1237.586121][ T5610] usb 5-1: SerialNumber: syz [ 1237.592186][ T5610] usb 5-1: config 0 descriptor?? [ 1237.648315][T19192] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1237.674100][ T5610] port100 5-1:0.0: NFC: Could not get supported command types [ 1238.017297][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.102846][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.168919][ T67] bond0 (unregistering): Released all slaves [ 1239.289421][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.374740][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.398165][ T67] bond0 (unregistering): Released all slaves [ 1239.404377][ T67] bond1 (unregistering): Released all slaves [ 1239.427776][ T67] bond2 (unregistering): Released all slaves [ 1239.445052][ T67] bond3 (unregistering): Released all slaves [ 1239.470847][ T67] bond4 (unregistering): Released all slaves [ 1239.490799][ T67] bond5 (unregistering): Released all slaves [ 1239.537140][T18942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.553076][ T36] usb 5-1: USB disconnect, device number 7 [ 1239.888268][T18942] team0: Port device team_slave_0 added [ 1239.954631][T18942] team0: Port device team_slave_1 added [ 1240.100398][ T67] tipc: Left network mode [ 1240.167660][T18942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.167676][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.167703][T18942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.171360][T18942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.171373][T18942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.171396][T18942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.593173][T18942] hsr_slave_0: entered promiscuous mode [ 1246.594625][T18942] hsr_slave_1: entered promiscuous mode [ 1246.595247][T18942] debugfs: 'hsr0' already exists in 'hsr' [ 1246.595265][T18942] Cannot create hsr debugfs directory [ 1246.624728][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1246.625262][T18897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.618876][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.758480][T18897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.873732][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.951637][T18897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1248.011308][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.031377][T18897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1248.064939][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1251.645479][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1251.645547][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.932801][ T67] hsr_slave_0: left promiscuous mode [ 1251.973043][ T67] hsr_slave_1: left promiscuous mode [ 1251.973688][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.996860][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.893433][ T67] hsr_slave_0: left promiscuous mode [ 1253.963510][ T67] hsr_slave_1: left promiscuous mode [ 1254.034910][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.610489][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.795699][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.795726][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.105686][ T67] veth1_macvtap: left promiscuous mode [ 1255.105801][ T67] veth0_macvtap: left promiscuous mode [ 1255.106107][ T67] veth1_vlan: left promiscuous mode [ 1255.106292][ T67] veth0_vlan: left promiscuous mode [ 1259.379012][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1259.422014][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1260.376755][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1260.426582][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1265.486647][T18919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1265.521701][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.101433][T16513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1267.201171][T18919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1267.789360][T16513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1268.404723][T16513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1268.406355][T16513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1268.407093][T16513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1268.760944][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1268.780731][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1269.852439][T18942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1270.191768][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1270.206623][T18942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1270.707430][ T5603] Bluetooth: hci1: command tx timeout [ 1270.901955][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1270.903652][T18942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1271.438066][T16513] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1271.480599][T16513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1271.484648][T16513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1271.512904][T16513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1271.513766][T16513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1272.056137][T18942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1272.088589][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1273.046491][T16513] Bluetooth: hci1: command tx timeout [ 1274.233954][ T5603] Bluetooth: hci6: command tx timeout [ 1274.763133][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1274.803979][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1274.808172][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1274.812256][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1274.820105][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1275.863233][ T5603] Bluetooth: hci1: command tx timeout [ 1277.205266][ T5603] Bluetooth: hci6: command tx timeout [ 1277.205345][ T5603] Bluetooth: hci0: command tx timeout [ 1277.405742][T19452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1277.466115][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1278.057533][ T5603] Bluetooth: hci1: command tx timeout [ 1279.225826][ T67] IPVS: stop unused estimator thread 0... [ 1279.479158][ T5603] Bluetooth: hci0: command tx timeout [ 1279.479191][ T5603] Bluetooth: hci6: command tx timeout [ 1281.901530][T16513] Bluetooth: hci6: command tx timeout [ 1281.901567][T16513] Bluetooth: hci0: command tx timeout [ 1283.388410][T19397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.388538][T19397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.389056][T19397] bridge_slave_0: entered allmulticast mode [ 1283.396064][T19397] bridge_slave_0: entered promiscuous mode [ 1283.926283][T19397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.926432][T19397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.926597][T19397] bridge_slave_1: entered allmulticast mode [ 1283.934110][T19397] bridge_slave_1: entered promiscuous mode [ 1284.072299][T19554] usb usb7: usbfs: process 19554 (syz.3.4038) did not claim interface 0 before use [ 1284.127141][T16513] Bluetooth: hci0: command tx timeout [ 1289.072985][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.073108][T19421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.073292][T19421] bridge_slave_0: entered allmulticast mode [ 1289.078396][T19421] bridge_slave_0: entered promiscuous mode [ 1289.504509][T19421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.518503][T19421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.532010][T19421] bridge_slave_1: entered allmulticast mode [ 1289.718380][T19421] bridge_slave_1: entered promiscuous mode [ 1289.745825][T19397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.031515][T19397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.119223][T19421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.158313][T19421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.160935][T19397] team0: Port device team_slave_0 added [ 1291.280133][T19397] team0: Port device team_slave_1 added [ 1291.647014][T19421] team0: Port device team_slave_0 added [ 1291.699732][T19421] team0: Port device team_slave_1 added [ 1291.700514][T19397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.700527][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.700551][T19397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.794928][T19397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.794943][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.794968][T19397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.089154][T19421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.089170][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.089197][T19421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.162037][T19421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.162054][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.162081][T19421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.332892][T19397] hsr_slave_0: entered promiscuous mode [ 1292.349446][T19397] hsr_slave_1: entered promiscuous mode [ 1292.350352][T19397] debugfs: 'hsr0' already exists in 'hsr' [ 1292.350376][T19397] Cannot create hsr debugfs directory [ 1293.823874][T19421] hsr_slave_0: entered promiscuous mode [ 1293.825558][T19421] hsr_slave_1: entered promiscuous mode [ 1293.826471][T19421] debugfs: 'hsr0' already exists in 'hsr' [ 1293.826494][T19421] Cannot create hsr debugfs directory [ 1293.990439][T17539] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1294.147000][T17539] usb 4-1: device descriptor read/64, error -71 [ 1294.363498][T19453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.363573][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.363689][T19453] bridge_slave_0: entered allmulticast mode [ 1294.369427][T19453] bridge_slave_0: entered promiscuous mode [ 1294.524803][T17539] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1294.676589][T17539] usb 4-1: device descriptor read/64, error -71 [ 1294.808752][T17539] usb usb4-port1: attempt power cycle [ 1294.875194][T19453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.878657][T19453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.878967][T19453] bridge_slave_1: entered allmulticast mode [ 1294.881971][T19453] bridge_slave_1: entered promiscuous mode [ 1295.116818][T19453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.222451][T17539] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1295.279610][T17539] usb 4-1: device descriptor read/8, error -71 [ 1295.335314][T19453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.626576][T17539] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1295.664070][T17539] usb 4-1: device descriptor read/8, error -71 [ 1296.450023][T17539] usb usb4-port1: unable to enumerate USB device [ 1297.116042][T19453] team0: Port device team_slave_0 added [ 1297.140200][T19453] team0: Port device team_slave_1 added [ 1297.186471][T17539] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1297.392503][T17539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1297.392536][T17539] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1297.394824][T17539] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1297.394848][T17539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.394866][T17539] usb 5-1: Product: syz [ 1297.394879][T17539] usb 5-1: Manufacturer: syz [ 1297.394893][T17539] usb 5-1: SerialNumber: syz [ 1297.434446][T17539] usb 5-1: config 0 descriptor?? [ 1297.459423][T19625] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1297.532664][T17539] port100 5-1:0.0: NFC: Could not get supported command types [ 1297.711282][T17539] usb 5-1: USB disconnect, device number 8 [ 1298.042576][T19453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.042587][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.042602][T19453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.055093][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1298.096854][T19453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.096868][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.096907][T19453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.152092][T19453] hsr_slave_0: entered promiscuous mode [ 1304.157391][T19453] hsr_slave_1: entered promiscuous mode [ 1304.158307][T19453] debugfs: 'hsr0' already exists in 'hsr' [ 1304.158329][T19453] Cannot create hsr debugfs directory [ 1308.460997][ T67] bridge_slave_1: left allmulticast mode [ 1308.461311][ T67] bridge_slave_1: left promiscuous mode [ 1308.553503][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.047893][ T67] bridge_slave_0: left allmulticast mode [ 1309.047917][ T67] bridge_slave_0: left promiscuous mode [ 1309.048079][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.272276][ T67] bridge_slave_1: left allmulticast mode [ 1309.272299][ T67] bridge_slave_1: left promiscuous mode [ 1309.272444][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.363078][ T67] bridge_slave_0: left allmulticast mode [ 1309.363110][ T67] bridge_slave_0: left promiscuous mode [ 1309.363345][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.549407][ T67] bridge_slave_1: left allmulticast mode [ 1309.549431][ T67] bridge_slave_1: left promiscuous mode [ 1309.549579][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.646251][ T67] bridge_slave_0: left allmulticast mode [ 1309.646273][ T67] bridge_slave_0: left promiscuous mode [ 1309.646431][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.795194][ T67] bridge_slave_1: left allmulticast mode [ 1309.795218][ T67] bridge_slave_1: left promiscuous mode [ 1309.795372][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.860055][ T67] bridge_slave_0: left allmulticast mode [ 1309.860078][ T67] bridge_slave_0: left promiscuous mode [ 1309.860226][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.148284][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.255092][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.320255][ T67] bond0 (unregistering): Released all slaves [ 1310.469796][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.597098][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.684320][ T67] bond0 (unregistering): Released all slaves [ 1310.885438][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.949651][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.994129][ T67] bond0 (unregistering): Released all slaves [ 1311.238337][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1311.324022][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.388733][ T67] bond0 (unregistering): Released all slaves [ 1317.307375][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1317.307441][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1320.471690][ T67] hsr_slave_0: left promiscuous mode [ 1321.998783][ T67] hsr_slave_1: left promiscuous mode [ 1321.999773][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.181067][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.772394][ T67] hsr_slave_0: left promiscuous mode [ 1323.986287][ T67] hsr_slave_1: left promiscuous mode [ 1323.986956][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.140570][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.775242][ T67] hsr_slave_0: left promiscuous mode [ 1327.655400][ T67] hsr_slave_1: left promiscuous mode [ 1327.655995][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.784021][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.030135][ T67] hsr_slave_0: left promiscuous mode [ 1329.072786][ T67] hsr_slave_1: left promiscuous mode [ 1329.074350][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.598051][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.943158][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1330.987279][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1331.353006][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1331.397082][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1331.636767][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1331.673107][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1331.700891][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1331.705572][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1331.758550][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1332.013251][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1332.055820][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1332.429093][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1332.451895][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1332.654419][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1334.321018][T16513] Bluetooth: hci2: command tx timeout [ 1336.542506][T16513] Bluetooth: hci2: command tx timeout [ 1337.178989][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1337.209626][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1337.214276][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1337.254635][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1337.254967][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1337.256839][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1338.768105][ T5603] Bluetooth: hci2: command tx timeout [ 1338.910929][T16513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1339.044948][T16513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1339.074453][T16513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1339.114743][T16513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1339.134486][T16513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1339.561456][ T5603] Bluetooth: hci4: command tx timeout [ 1341.678483][ T5603] Bluetooth: hci2: command tx timeout [ 1341.678562][ T5603] Bluetooth: hci1: command tx timeout [ 1341.792662][ T5603] Bluetooth: hci4: command tx timeout [ 1344.974960][ T5603] Bluetooth: hci1: command tx timeout [ 1344.976999][ T5603] Bluetooth: hci4: command tx timeout [ 1347.132186][ T5603] Bluetooth: hci4: command tx timeout [ 1347.132198][T16513] Bluetooth: hci1: command tx timeout [ 1349.354836][T16513] Bluetooth: hci1: command tx timeout [ 1355.684199][T19887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.684271][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.684438][T19887] bridge_slave_0: entered allmulticast mode [ 1355.693642][T19887] bridge_slave_0: entered promiscuous mode [ 1355.840705][T19887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.845961][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.909677][T19887] bridge_slave_1: entered allmulticast mode [ 1356.602022][T19887] bridge_slave_1: entered promiscuous mode [ 1358.001353][T19887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.142035][T19887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.759507][T19887] team0: Port device team_slave_0 added [ 1360.824910][T19887] team0: Port device team_slave_1 added [ 1360.861632][T20109] usb usb7: usbfs: process 20109 (syz.4.4122) did not claim interface 0 before use [ 1360.991962][T12993] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1361.035050][T19887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.035067][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.035091][T19887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.084871][T19887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.084887][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.084911][T19887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.199439][T12993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1361.199473][T12993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1361.202577][T12993] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1361.202603][T12993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.202623][T12993] usb 4-1: Product: syz [ 1361.202636][T12993] usb 4-1: Manufacturer: syz [ 1361.202649][T12993] usb 4-1: SerialNumber: syz [ 1361.218031][T12993] usb 4-1: config 0 descriptor?? [ 1361.219080][T20107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1361.317437][T12993] port100 4-1:0.0: NFC: Could not get supported command types [ 1361.453556][T17539] usb 4-1: USB disconnect, device number 7 [ 1366.087148][T19887] hsr_slave_0: entered promiscuous mode [ 1366.088586][T19887] hsr_slave_1: entered promiscuous mode [ 1368.739784][T19920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.739850][T19920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.740012][T19920] bridge_slave_0: entered allmulticast mode [ 1368.743767][T19920] bridge_slave_0: entered promiscuous mode [ 1368.745355][T19936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.745474][T19936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.745632][T19936] bridge_slave_0: entered allmulticast mode [ 1368.747300][T19936] bridge_slave_0: entered promiscuous mode [ 1368.810113][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1368.810134][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1368.837831][T19920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.837943][T19920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.838119][T19920] bridge_slave_1: entered allmulticast mode [ 1368.839531][T19920] bridge_slave_1: entered promiscuous mode [ 1368.840580][T19936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.840663][T19936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.840766][T19936] bridge_slave_1: entered allmulticast mode [ 1368.842179][T19936] bridge_slave_1: entered promiscuous mode [ 1369.002299][T19920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.031976][T19936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.053203][T19920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.164492][T19936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.350265][T19920] team0: Port device team_slave_0 added [ 1369.354313][T19936] team0: Port device team_slave_0 added [ 1369.381021][T19920] team0: Port device team_slave_1 added [ 1369.384094][T19936] team0: Port device team_slave_1 added [ 1369.501933][T19920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.501947][T19920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.501968][T19920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.503113][T19936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.503126][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.503152][T19936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.504394][T19920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.504407][T19920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.504609][T19920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.505747][T19936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.505758][T19936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.505782][T19936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.658943][T19920] hsr_slave_0: entered promiscuous mode [ 1369.660749][T19920] hsr_slave_1: entered promiscuous mode [ 1369.661691][T19920] debugfs: 'hsr0' already exists in 'hsr' [ 1369.661715][T19920] Cannot create hsr debugfs directory [ 1369.673490][T19936] hsr_slave_0: entered promiscuous mode [ 1369.674808][T19936] hsr_slave_1: entered promiscuous mode [ 1369.675752][T19936] debugfs: 'hsr0' already exists in 'hsr' [ 1369.675774][T19936] Cannot create hsr debugfs directory [ 1373.142256][ T67] bridge_slave_1: left allmulticast mode [ 1373.142295][ T67] bridge_slave_1: left promiscuous mode [ 1373.142609][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.207607][ T67] bridge_slave_0: left allmulticast mode [ 1373.207630][ T67] bridge_slave_0: left promiscuous mode [ 1373.207794][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.433446][ T67] bridge_slave_1: left allmulticast mode [ 1373.433470][ T67] bridge_slave_1: left promiscuous mode [ 1373.433693][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.624454][ T67] bridge_slave_0: left allmulticast mode [ 1373.624489][ T67] bridge_slave_0: left promiscuous mode [ 1373.624717][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.040705][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.126041][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.217313][ T67] bond0 (unregistering): Released all slaves [ 1374.640263][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.735412][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.803246][ T67] bond0 (unregistering): Released all slaves [ 1376.716465][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1377.288395][ T67] hsr_slave_0: left promiscuous mode [ 1378.165451][ T67] hsr_slave_1: left promiscuous mode [ 1378.166482][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.208538][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.730902][ T67] hsr_slave_0: left promiscuous mode [ 1378.794373][ T67] hsr_slave_1: left promiscuous mode [ 1378.795514][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.827726][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.372892][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1379.416695][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1379.993271][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1381.008355][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1382.996191][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1382.996660][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1389.169392][T19887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1389.421768][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1389.443388][T19887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1389.485254][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1389.527741][T19887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1389.569024][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1389.618924][T19887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1389.632765][T19887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1389.664208][ T5610] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1389.835628][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1389.835657][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1389.838486][ T5610] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1389.838513][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.838533][ T5610] usb 4-1: Product: syz [ 1389.838546][ T5610] usb 4-1: Manufacturer: syz [ 1389.838556][ T5610] usb 4-1: SerialNumber: syz [ 1389.868467][ T5610] usb 4-1: config 0 descriptor?? [ 1389.908011][T20324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1389.921766][ T5610] port100 4-1:0.0: NFC: Could not get supported command types [ 1390.094038][T19920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1390.182929][T17539] usb 4-1: USB disconnect, device number 8 [ 1390.231679][T19920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1390.238298][T19920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1391.087738][T19920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.092332][T19920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1391.139914][T19920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1391.198668][T19920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1391.225406][T19920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1391.369843][T19936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1391.408796][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1391.419988][T19936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1391.436655][T12993] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1391.468986][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.714624][T12993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1391.714656][T12993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1391.727880][T12993] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1391.727909][T12993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.727927][T12993] usb 5-1: Product: syz [ 1391.727940][T12993] usb 5-1: Manufacturer: syz [ 1391.727952][T12993] usb 5-1: SerialNumber: syz [ 1391.732971][T12993] usb 5-1: config 0 descriptor?? [ 1391.737209][T20341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1392.755165][T12993] port100 5-1:0.0: NFC: Could not get supported command types [ 1392.783209][T12993] usb 5-1: USB disconnect, device number 9 [ 1392.784071][ T67] bridge_slave_1: left allmulticast mode [ 1392.784101][ T67] bridge_slave_1: left promiscuous mode [ 1392.784356][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.902058][ T67] bridge_slave_0: left allmulticast mode [ 1392.902091][ T67] bridge_slave_0: left promiscuous mode [ 1392.902395][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.023216][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.130244][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.199134][ T67] bond0 (unregistering): Released all slaves [ 1394.289886][T19936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1395.002191][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1395.024910][T19936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1395.066419][T19936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1395.328383][T19887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.465310][ T67] hsr_slave_0: left promiscuous mode [ 1395.541602][ T67] hsr_slave_1: left promiscuous mode [ 1395.542561][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.673984][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.867311][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1395.882515][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1395.955997][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1395.972505][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1395.974178][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1396.208588][T20390] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 1396.633051][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1396.694811][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1403.948926][ T5603] Bluetooth: hci0: command tx timeout [ 1404.339861][T16513] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1404.385185][T16513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1404.387064][T16513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1404.409677][T16513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1404.413400][T16513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1405.558319][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 1405.558363][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4179'. [ 1405.702353][T17539] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1405.886604][T17539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1405.886640][T17539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1405.892424][T17539] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1405.892452][T17539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.892473][T17539] usb 4-1: Product: syz [ 1405.892491][T17539] usb 4-1: Manufacturer: syz [ 1405.892510][T17539] usb 4-1: SerialNumber: syz [ 1406.134431][ T5603] Bluetooth: hci0: command tx timeout [ 1406.137727][T17539] usb 4-1: config 0 descriptor?? [ 1406.138952][T20420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1406.171991][T16513] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1406.209388][T16513] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1406.291627][T16513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1406.292861][T16513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1406.295275][T16513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1406.299901][T17539] port100 4-1:0.0: NFC: Could not get supported command types [ 1406.465658][T17539] usb 4-1: USB disconnect, device number 9 [ 1406.728283][ T5603] Bluetooth: hci6: command tx timeout [ 1408.345751][ T5603] Bluetooth: hci0: command tx timeout [ 1409.063658][ T5603] Bluetooth: hci7: command tx timeout [ 1409.063941][ T5603] Bluetooth: hci6: command tx timeout [ 1410.564615][T16513] Bluetooth: hci0: command tx timeout [ 1411.268045][T16513] Bluetooth: hci6: command tx timeout [ 1411.279945][ T5603] Bluetooth: hci7: command tx timeout [ 1413.416027][T20385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.416148][T20385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.416632][T20385] bridge_slave_0: entered allmulticast mode [ 1413.423353][T20385] bridge_slave_0: entered promiscuous mode [ 1413.548371][T20385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.548492][T20385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.548669][T20385] bridge_slave_1: entered allmulticast mode [ 1413.555317][T20385] bridge_slave_1: entered promiscuous mode [ 1413.837858][T20385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.877516][T20385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.132098][T20385] team0: Port device team_slave_0 added [ 1414.179571][T20385] team0: Port device team_slave_1 added [ 1414.660273][ T5603] Bluetooth: hci6: command tx timeout [ 1414.663617][ T5603] Bluetooth: hci7: command tx timeout [ 1414.962769][T20385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.962785][T20385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.962811][T20385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.226153][T20385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.226169][T20385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.226196][T20385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.868544][ T5603] Bluetooth: hci7: command tx timeout [ 1416.931254][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.931784][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.931978][T20404] bridge_slave_0: entered allmulticast mode [ 1416.935435][T20404] bridge_slave_0: entered promiscuous mode [ 1417.177982][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.178973][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.186216][T20404] bridge_slave_1: entered allmulticast mode [ 1417.215853][T20404] bridge_slave_1: entered promiscuous mode [ 1417.709237][T20385] hsr_slave_0: entered promiscuous mode [ 1417.710549][T20385] hsr_slave_1: entered promiscuous mode [ 1417.711469][T20385] debugfs: 'hsr0' already exists in 'hsr' [ 1417.711491][T20385] Cannot create hsr debugfs directory [ 1417.771199][T20404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.780736][T20404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.150305][T20404] team0: Port device team_slave_0 added [ 1418.165987][T20404] team0: Port device team_slave_1 added [ 1418.278163][T20404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.278179][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.278203][T20404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.360317][T20404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.360333][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.360359][T20404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.095658][T20404] hsr_slave_0: entered promiscuous mode [ 1419.097972][T20404] hsr_slave_1: entered promiscuous mode [ 1419.098979][T20404] debugfs: 'hsr0' already exists in 'hsr' [ 1419.099002][T20404] Cannot create hsr debugfs directory [ 1419.275577][T20428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.275694][T20428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.275819][T20428] bridge_slave_0: entered allmulticast mode [ 1419.280833][T20428] bridge_slave_0: entered promiscuous mode [ 1420.279829][T20428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.279969][T20428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.280142][T20428] bridge_slave_1: entered allmulticast mode [ 1420.282690][T20428] bridge_slave_1: entered promiscuous mode [ 1424.183143][T20428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.599397][T20428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.614230][T20428] team0: Port device team_slave_0 added [ 1425.627154][T20428] team0: Port device team_slave_1 added [ 1426.435463][T20428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.435480][T20428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.435506][T20428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.833114][T20428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.833131][T20428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.833157][T20428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.592237][T20428] hsr_slave_0: entered promiscuous mode [ 1427.598819][T20428] hsr_slave_1: entered promiscuous mode [ 1427.599684][T20428] debugfs: 'hsr0' already exists in 'hsr' [ 1427.599714][T20428] Cannot create hsr debugfs directory [ 1428.291350][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1429.004641][ T67] bridge_slave_1: left allmulticast mode [ 1429.004676][ T67] bridge_slave_1: left promiscuous mode [ 1429.004958][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.006336][ T67] bridge_slave_0: left allmulticast mode [ 1430.006368][ T67] bridge_slave_0: left promiscuous mode [ 1430.006626][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.239324][ T67] bridge_slave_1: left allmulticast mode [ 1430.239357][ T67] bridge_slave_1: left promiscuous mode [ 1430.239592][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.335361][ T67] bridge_slave_0: left allmulticast mode [ 1430.338500][ T67] bridge_slave_0: left promiscuous mode [ 1430.338744][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.559887][ T67] bridge_slave_1: left allmulticast mode [ 1430.559920][ T67] bridge_slave_1: left promiscuous mode [ 1430.560226][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.657893][ T67] bridge_slave_0: left allmulticast mode [ 1430.657927][ T67] bridge_slave_0: left promiscuous mode [ 1430.659382][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.467641][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.599322][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.682738][ T67] bond0 (unregistering): Released all slaves [ 1432.172653][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.300720][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.388133][ T67] bond0 (unregistering): Released all slaves [ 1433.114411][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.220783][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.306824][ T67] bond0 (unregistering): Released all slaves [ 1433.472702][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1435.260128][ T67] hsr_slave_0: left promiscuous mode [ 1435.346569][ T67] hsr_slave_1: left promiscuous mode [ 1435.347570][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.389101][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.644931][ T67] hsr_slave_0: left promiscuous mode [ 1435.689501][ T67] hsr_slave_1: left promiscuous mode [ 1435.690433][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.763560][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.976088][ T67] hsr_slave_0: left promiscuous mode [ 1436.018785][ T67] hsr_slave_1: left promiscuous mode [ 1436.019693][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.066543][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.726946][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1436.788755][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1437.785404][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1437.846894][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1438.552071][ T67] team0 (unregistering): Port device team_slave_1 removed [ 1438.616080][ T67] team0 (unregistering): Port device team_slave_0 removed [ 1438.899473][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1441.133915][T20385] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1441.205635][T20385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1441.280517][T20385] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1441.360784][T20385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1441.990680][T20385] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1442.931858][T20385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.944129][T20385] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1443.023822][T20385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.985562][T20385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.570099][T20385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.578464][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.578658][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.643207][ T3767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.643387][ T3767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.628847][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1448.628912][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1450.897758][T20404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1450.988104][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1450.997129][T20404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1452.359999][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.367654][T20404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1452.469131][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.448052][T20404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1453.549530][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1453.564801][T20385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.042691][T20428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1455.078369][T20428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1455.204086][T20428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1455.253258][T20428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1455.317212][T20428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1455.387969][T20428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1455.407508][T20428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1455.437286][T20428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1455.642572][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1455.642590][ T37] audit: type=1326 audit(1777580107.116:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21712 comm="syz.3.4684" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6244cdd9 code=0x0 [ 1455.784163][T20385] veth0_vlan: entered promiscuous mode [ 1455.988742][T20385] veth1_vlan: entered promiscuous mode [ 1456.082924][T20404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.206148][T20404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.243578][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.244450][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.294679][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.294837][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.297324][T20385] veth0_macvtap: entered promiscuous mode [ 1456.375800][T20385] veth1_macvtap: entered promiscuous mode [ 1456.512918][T20385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.544093][T20385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.578304][T20428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.599322][ T3442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.612514][ T3442] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.616651][ T3442] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.618490][ T3442] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.758578][T20428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.213493][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.213651][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.324747][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.324911][T19321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.929648][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.929665][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.369004][ T5875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.369025][ T5875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.830029][T20404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.390367][T20404] veth0_vlan: entered promiscuous mode [ 1460.433257][T20404] veth1_vlan: entered promiscuous mode [ 1460.603340][T20404] veth0_macvtap: entered promiscuous mode [ 1460.665501][T20404] veth1_macvtap: entered promiscuous mode [ 1460.912381][T20404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.983498][T20404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.028511][ T655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.031448][ T655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.037608][ T655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.037651][ T655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.256894][T16513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1461.309906][T16513] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1461.322584][T16513] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1461.351867][T16513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1461.352904][T16513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1461.838168][T20428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.604357][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.604375][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.757426][T21844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1462.757707][T21844] block device autoloading is deprecated and will be removed. [ 1463.128218][T19321] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.426739][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.426764][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.738408][ T5603] Bluetooth: hci1: command tx timeout [ 1463.934553][T19321] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.970630][T21915] 9pnet_virtio: no channels available for device syz [ 1463.974208][T20428] veth0_vlan: entered promiscuous mode [ 1464.148415][T20428] veth1_vlan: entered promiscuous mode [ 1464.589437][T19321] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.045772][T21968] ªªªªªª: renamed from vlan0 (while UP) [ 1465.413337][T19321] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.962339][ T5603] Bluetooth: hci1: command tx timeout [ 1466.016073][T20428] veth0_macvtap: entered promiscuous mode [ 1466.057412][ T5610] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1466.228613][T20428] veth1_macvtap: entered promiscuous mode [ 1466.231115][ T5610] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1466.231152][ T5610] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1466.231190][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1466.231216][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.231239][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1466.231271][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1466.231294][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1466.231320][ T5610] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1466.234516][ T5610] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1466.234553][ T5610] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1466.234592][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1466.234618][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.234642][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1466.234667][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1466.234689][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1466.234713][ T5610] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1466.241560][ T5610] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1466.241597][ T5610] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1466.241645][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1466.241671][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.241695][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1466.241720][ T5610] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1466.241746][ T5610] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1466.241772][ T5610] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1466.250913][ T5610] usb 6-1: string descriptor 0 read error: -22 [ 1466.251044][ T5610] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1466.251066][ T5610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.760099][T21835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.760204][T21835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.760365][T21835] bridge_slave_0: entered allmulticast mode [ 1466.783016][T21835] bridge_slave_0: entered promiscuous mode [ 1466.814442][ T5610] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1466.835334][ T5610] usb 6-1: USB disconnect, device number 2 [ 1466.844911][T21835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.845009][T21835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.845215][T21835] bridge_slave_1: entered allmulticast mode [ 1466.871856][T21835] bridge_slave_1: entered promiscuous mode [ 1467.217091][T21835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.253179][T21835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.265293][T20428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.438035][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1467.713957][T19321] bridge_slave_1: left allmulticast mode [ 1467.713992][T19321] bridge_slave_1: left promiscuous mode [ 1467.714233][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.803752][T19321] bridge_slave_0: left allmulticast mode [ 1467.803782][T19321] bridge_slave_0: left promiscuous mode [ 1467.804035][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.183755][ T5603] Bluetooth: hci1: command tx timeout [ 1468.879959][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.965335][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.010309][T19321] bond0 (unregistering): Released all slaves [ 1469.187956][T21835] team0: Port device team_slave_0 added [ 1469.204426][T20428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.306229][T21835] team0: Port device team_slave_1 added [ 1469.427397][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.516274][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.517547][T21835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.518484][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.518513][T21835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.519164][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.523538][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.106225][T21835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.106241][T21835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.106264][T21835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.410044][ T5603] Bluetooth: hci1: command tx timeout [ 1470.805690][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1470.957270][T16513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1471.001304][T16513] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1471.008597][T16513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1471.016634][T16513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1471.018585][T16513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1471.413093][T21835] hsr_slave_0: entered promiscuous mode [ 1471.419243][T21835] hsr_slave_1: entered promiscuous mode [ 1471.989838][T22211] ======================================================= [ 1471.989838][T22211] WARNING: The mand mount option has been deprecated and [ 1471.989838][T22211] and is ignored by this kernel. Remove the mand [ 1471.989838][T22211] option from the mount to silence this warning. [ 1471.989838][T22211] ======================================================= [ 1472.048419][T22211] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1472.430267][T22211] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1472.430766][T22211] overlayfs: failed to look up (tracing) for ino (-66) [ 1473.320669][ T5603] Bluetooth: hci0: command tx timeout [ 1474.041314][T19321] hsr_slave_0: left promiscuous mode [ 1474.085378][T19321] hsr_slave_1: left promiscuous mode [ 1474.086403][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.086427][T19321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.149220][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.149242][T19321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.121055][T19321] veth1_macvtap: left promiscuous mode [ 1475.121154][T19321] veth0_macvtap: left promiscuous mode [ 1475.121389][T19321] veth1_vlan: left promiscuous mode [ 1475.121557][T19321] veth0_vlan: left promiscuous mode [ 1476.005337][T16513] Bluetooth: hci0: command tx timeout [ 1476.345959][T22272] cgroup2: Unknown parameter 'euid' [ 1476.491414][T22277] syz.3.4900 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1476.818168][ T5610] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1476.992935][ T5610] usb 4-1: config 6 has an invalid interface number: 83 but max is 0 [ 1476.992963][ T5610] usb 4-1: config 6 has no interface number 0 [ 1476.992988][ T5610] usb 4-1: config 6 interface 83 has no altsetting 0 [ 1476.995678][ T5610] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=f7.f4 [ 1476.995705][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.995724][ T5610] usb 4-1: Product: syz [ 1476.995736][ T5610] usb 4-1: Manufacturer: syz [ 1476.995746][ T5610] usb 4-1: SerialNumber: syz [ 1477.215205][T19321] team0 (unregistering): Port device team_slave_1 removed [ 1477.283890][T19321] team0 (unregistering): Port device team_slave_0 removed [ 1477.339069][ T5610] usb 4-1: USB disconnect, device number 10 [ 1477.643686][T22247] ±ÿþ€: renamed from team_slave_1 (while UP) [ 1478.281213][T16513] Bluetooth: hci0: command tx timeout [ 1479.222468][ T5777] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1479.423459][ T5777] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1479.423887][ T5777] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1479.423911][ T5777] usb 6-1: Product: syz [ 1479.423924][ T5777] usb 6-1: Manufacturer: syz [ 1479.423938][ T5777] usb 6-1: SerialNumber: syz [ 1479.447454][ T5777] usb 6-1: config 0 descriptor?? [ 1479.456629][ T5777] ch341 6-1:0.0: ch341-uart converter detected [ 1480.471962][ T5777] usb 6-1: failed to send control message: -71 [ 1480.472019][ T5777] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1480.494469][T16513] Bluetooth: hci0: command tx timeout [ 1480.548610][ T5777] usb 6-1: USB disconnect, device number 3 [ 1480.605120][ T5777] ch341 6-1:0.0: device disconnected [ 1481.152348][T19321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.272036][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1481.300185][T22406] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1481.300577][T22176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.300760][T22176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.300922][T22176] bridge_slave_0: entered allmulticast mode [ 1481.309296][T22176] bridge_slave_0: entered promiscuous mode [ 1481.805892][T22176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.806042][T22176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.806249][T22176] bridge_slave_1: entered allmulticast mode [ 1481.823662][T22176] bridge_slave_1: entered promiscuous mode [ 1483.197293][T19321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.344210][T22454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1483.830750][T22176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.071658][T19321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.126416][T22176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.266078][T22176] team0: Port device team_slave_0 added [ 1485.598485][T19321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.669642][T22176] team0: Port device team_slave_1 added [ 1485.818291][T22176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.818308][T22176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.818331][T22176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.834688][T22176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.834704][T22176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.834730][T22176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.068734][T22176] hsr_slave_0: entered promiscuous mode [ 1486.069968][T22176] hsr_slave_1: entered promiscuous mode [ 1486.070839][T22176] debugfs: 'hsr0' already exists in 'hsr' [ 1486.070861][T22176] Cannot create hsr debugfs directory [ 1487.814068][ T1241] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1487.974892][ T1241] usb 4-1: Using ep0 maxpacket: 32 [ 1487.982041][ T1241] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1487.982080][ T1241] usb 4-1: config 0 has no interface number 0 [ 1488.010196][ T1241] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1488.010225][ T1241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.010244][ T1241] usb 4-1: Product: syz [ 1488.010258][ T1241] usb 4-1: Manufacturer: syz [ 1488.010272][ T1241] usb 4-1: SerialNumber: syz [ 1488.034213][ T1241] usb 4-1: config 0 descriptor?? [ 1488.093109][ T1241] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1488.093145][ T1241] usb 4-1: selecting invalid altsetting 1 [ 1488.093160][ T1241] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1488.512362][ T1241] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1488.542088][ T1241] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1488.544133][ T1241] usb 4-1: media controller created [ 1488.613612][ T1241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.145270][T22597] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1490.032314][ T1241] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1490.463333][T21835] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1490.519632][T21835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1490.543300][T21835] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1490.618142][T21835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1490.635246][ T1241] usb 4-1: USB disconnect, device number 11 [ 1490.921561][T19321] bridge_slave_1: left allmulticast mode [ 1490.921594][T19321] bridge_slave_1: left promiscuous mode [ 1490.921837][T19321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.151296][T19321] bridge_slave_0: left allmulticast mode [ 1491.151332][T19321] bridge_slave_0: left promiscuous mode [ 1491.151567][T19321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.371442][T22647] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1494.193045][T22697] comedi comedi3: 8255: I/O base address not correctly aligned [ 1494.209030][T19321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.302687][T19321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.350749][T19321] bond0 (unregistering): Released all slaves [ 1494.479838][T21835] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.507146][T21835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1495.526873][T21835] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.661841][T21835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1496.427153][T19321] hsr_slave_0: left promiscuous mode [ 1497.024480][T19321] hsr_slave_1: left promiscuous mode [ 1497.154241][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.154270][T19321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.368377][T19321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.368403][T19321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.016546][T19321] veth1_macvtap: left promiscuous mode [ 1498.074361][T19321] veth0_macvtap: left promiscuous mode [ 1498.074633][T19321] veth1_vlan: left promiscuous mode [ 1498.074802][T19321] veth0_vlan: left promiscuous mode [ 1501.765662][T19321] team0 (unregistering): Port device team_slave_1 removed [ 1501.847096][T19321] team0 (unregistering): Port device team_slave_0 removed [ 1502.913459][T20327] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1503.132645][T20327] usb 6-1: config 6 has an invalid interface number: 83 but max is 0 [ 1503.132671][T20327] usb 6-1: config 6 has no interface number 0 [ 1503.132699][T20327] usb 6-1: config 6 interface 83 has no altsetting 0 [ 1503.144090][T21835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.165172][T21835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.177983][T20327] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=f7.f4 [ 1503.178010][T20327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.178029][T20327] usb 6-1: Product: syz [ 1503.178042][T20327] usb 6-1: Manufacturer: syz [ 1503.178056][T20327] usb 6-1: SerialNumber: syz [ 1503.239431][ T655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.239560][ T655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.275477][ T655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.275618][ T655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.544255][T20327] usb 6-1: USB disconnect, device number 4 [ 1504.548411][T17539] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1504.711098][T17539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.711132][T17539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.711154][T17539] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1504.711196][T17539] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1504.711218][T17539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.781557][T17539] usb 6-1: config 0 descriptor?? [ 1505.354491][T17539] usbhid 6-1:0.0: can't add hid device: -71 [ 1505.355969][T17539] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1505.416959][T17539] usb 6-1: USB disconnect, device number 5 [ 1506.961013][T22176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1508.290626][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.292058][T22176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1508.444275][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.455513][T22176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1508.510047][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.523782][T21835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.526185][T22176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1508.642118][T22176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1508.975161][T22176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.034426][T22176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.056424][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.056636][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.078972][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.089831][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.220162][T21835] veth0_vlan: entered promiscuous mode [ 1509.267517][T21835] veth1_vlan: entered promiscuous mode [ 1509.448167][T21835] veth0_macvtap: entered promiscuous mode [ 1509.470920][T21835] veth1_macvtap: entered promiscuous mode [ 1509.632288][T21835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.692138][T21835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.897427][T23019] overlayfs: failed to resolve './file0': -2 [ 1509.965057][T19321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.975813][T19321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.976063][T19321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.976109][T19321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.427760][T23031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5175'. [ 1513.004921][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.004940][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.267022][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.267095][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.377375][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.377394][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.449172][T22176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.751969][T22176] veth0_vlan: entered promiscuous mode [ 1515.807053][T22176] veth1_vlan: entered promiscuous mode [ 1518.256526][T23117] fuse: Bad value for 'group_id' [ 1518.256546][T23117] fuse: Bad value for 'group_id' [ 1518.276606][T22176] veth0_macvtap: entered promiscuous mode [ 1518.308385][T22176] veth1_macvtap: entered promiscuous mode [ 1518.372358][T22176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.410148][T22176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.526672][ T3442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.574488][ T3442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.575193][ T3442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.575257][ T3442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.119346][T23160] misc userio: Invalid payload size [ 1520.122361][T23160] misc userio: No port type given on /dev/userio [ 1520.942042][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.942063][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.309896][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.309917][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.098174][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1524.159645][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1524.161159][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1524.205277][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1524.223396][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1524.476077][T23201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5239'. [ 1526.587588][ T5603] Bluetooth: hci2: command tx timeout [ 1528.795203][ T5603] Bluetooth: hci2: command tx timeout [ 1530.740443][T23273] tipc: Can't bind to reserved service type 1 [ 1530.774174][T23273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5257'. [ 1531.205422][ T5603] Bluetooth: hci2: command tx timeout [ 1531.609671][T21783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1531.732711][T23283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.797847][T21783] usb 1-1: Using ep0 maxpacket: 32 [ 1531.801215][T21783] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1531.801240][T21783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.801259][T21783] usb 1-1: config 0 has no interface number 0 [ 1531.801298][T21783] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1531.804798][T21783] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1531.804826][T21783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.804846][T21783] usb 1-1: Product: syz [ 1531.804859][T21783] usb 1-1: Manufacturer: syz [ 1531.804874][T21783] usb 1-1: SerialNumber: syz [ 1531.862337][T23195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.862523][T23195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.862708][T23195] bridge_slave_0: entered allmulticast mode [ 1531.889737][T23195] bridge_slave_0: entered promiscuous mode [ 1531.935220][T21783] usb 1-1: config 0 descriptor?? [ 1531.944489][T23195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.944695][T23195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.945041][T23195] bridge_slave_1: entered allmulticast mode [ 1531.980935][T23195] bridge_slave_1: entered promiscuous mode [ 1531.983564][T21783] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1531.983643][T21783] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1532.924568][T21783] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1533.276015][T21783] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1534.132845][ T5603] Bluetooth: hci2: command tx timeout [ 1534.316281][T21783] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1534.339591][T21783] usb 1-1: USB disconnect, device number 5 [ 1534.662977][T21783] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1537.983060][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.983095][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.404736][T16711] Bluetooth: hci6: command 0x0406 tx timeout [ 1539.898096][T23195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.923909][T23195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.867153][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.867187][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.698561][T23195] team0: Port device team_slave_0 added [ 1542.941088][T23195] team0: Port device team_slave_1 added [ 1543.271473][T23195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.271490][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.271515][T23195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.343175][T23195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.343218][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.343270][T23195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.604512][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.604543][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.805345][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5293'. [ 1547.909246][T23402] syz_tun: entered allmulticast mode [ 1548.982102][T23404] syz_tun (unregistering): left allmulticast mode [ 1552.867972][T23448] misc userio: Invalid payload size [ 1552.868074][T23448] misc userio: No port type given on /dev/userio [ 1552.876438][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1552.876470][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.084514][T23449] misc userio: Invalid payload size [ 1553.084748][T23449] misc userio: No port type given on /dev/userio [ 1553.706144][T23195] hsr_slave_0: entered promiscuous mode [ 1553.711450][T23195] hsr_slave_1: entered promiscuous mode [ 1553.712368][T23195] debugfs: 'hsr0' already exists in 'hsr' [ 1553.712390][T23195] Cannot create hsr debugfs directory [ 1556.272290][T20327] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1556.995692][T20327] usb 7-1: Using ep0 maxpacket: 8 [ 1556.997847][T20327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1556.997981][T20327] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1556.998031][T20327] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1556.998054][T20327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.259950][T23481] fuse: Bad value for 'fd' [ 1557.428060][T20327] usb 7-1: config 0 descriptor?? [ 1557.428937][T23470] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1557.490105][T23489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1557.540299][T23489] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1557.540383][T23489] overlayfs: failed to look up (tracing) for ino (-66) [ 1557.590267][T23486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1557.597322][T23488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1557.599709][T23491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1558.175664][T20327] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 1558.175704][T20327] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 1558.175732][T20327] logitech 0003:046D:CA04.0001: item fetching failed at offset 2/40 [ 1558.176608][T20327] logitech 0003:046D:CA04.0001: parse failed [ 1558.176721][T20327] logitech 0003:046D:CA04.0001: probe with driver logitech failed with error -22 [ 1558.365587][ T1241] usb 7-1: USB disconnect, device number 2 [ 1558.438712][T23497] misc userio: Invalid payload size [ 1558.438967][T23497] misc userio: No port type given on /dev/userio [ 1559.111644][ T5875] bridge_slave_1: left allmulticast mode [ 1559.111677][ T5875] bridge_slave_1: left promiscuous mode [ 1559.111924][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.177079][ T5875] bridge_slave_0: left allmulticast mode [ 1559.177101][ T5875] bridge_slave_0: left promiscuous mode [ 1559.177248][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.689960][ T5610] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1560.898761][ T5610] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1560.898789][ T5610] usb 4-1: config 0 has no interface number 0 [ 1560.898832][ T5610] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1560.898859][ T5610] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1560.933171][ T5610] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1560.933200][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1560.933219][ T5610] usb 4-1: Product: syz [ 1560.933232][ T5610] usb 4-1: SerialNumber: syz [ 1560.962686][ T5610] usb 4-1: config 0 descriptor?? [ 1561.074186][ T5610] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1561.172896][ T5610] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 1561.226589][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1562.247970][ T5714] usb 4-1: USB disconnect, device number 12 [ 1562.506841][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.507185][ T5714] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1562.564179][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.608842][ T5875] bond0 (unregistering): Released all slaves [ 1562.619727][ T5875] bond1 (unregistering): Released all slaves [ 1562.639309][ T5875] bond2 (unregistering): Released all slaves [ 1567.372780][T23580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1567.529194][T23578] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1567.529278][T23578] overlayfs: failed to look up (tracing) for ino (-66) [ 1567.531775][T23575] misc userio: Invalid payload size [ 1567.531933][T23575] misc userio: No port type given on /dev/userio [ 1567.916743][ T5714] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1568.297714][ T5714] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1568.297749][ T5714] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1568.297790][ T5714] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1568.297813][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.472175][T23583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1568.571965][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1568.689306][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5346'. [ 1569.423162][ T5714] usb 6-1: string descriptor 0 read error: -71 [ 1569.460781][ T5714] hub 6-1:32.0: USB hub found [ 1569.462089][ T5714] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 1571.488560][T23631] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1571.541495][T23631] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1571.541580][T23631] overlayfs: failed to look up (tracing) for ino (-66) [ 1572.431530][T23637] misc userio: Invalid payload size [ 1572.431794][T23637] misc userio: No port type given on /dev/userio [ 1573.580624][ T5714] usb 6-1: USB disconnect, device number 6 [ 1576.976522][T23667] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1577.163608][T23666] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1577.163693][T23666] overlayfs: failed to look up (tracing) for ino (-66) [ 1579.404446][ T5875] hsr_slave_0: left promiscuous mode [ 1579.684904][ T5875] hsr_slave_1: left promiscuous mode [ 1579.685925][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.685950][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.746597][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.746645][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.847773][ T5875] veth1_macvtap: left promiscuous mode [ 1579.847878][ T5875] veth0_macvtap: left promiscuous mode [ 1579.848136][ T5875] veth1_vlan: left promiscuous mode [ 1579.848305][ T5875] veth0_vlan: left promiscuous mode [ 1579.863792][T23702] Bluetooth: MGMT ver 1.23 [ 1579.977652][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.977722][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1580.910941][T19196] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1581.130644][T23707] process 'syz.0.5384' launched './file0' with NULL argv: empty string added [ 1581.206452][T19196] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1581.206480][T19196] usb 7-1: config 0 has no interface number 0 [ 1581.206524][T19196] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1581.206551][T19196] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1581.246752][T19196] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1581.246789][T19196] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1581.246808][T19196] usb 7-1: Product: syz [ 1581.246823][T19196] usb 7-1: SerialNumber: syz [ 1581.279860][T19196] usb 7-1: config 0 descriptor?? [ 1581.302566][T19196] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1581.313120][T19196] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input10 [ 1581.512745][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.515417][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.515665][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.516241][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.516487][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.516718][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.516965][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.517196][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.518464][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.518703][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1581.637822][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1581.637876][T19196] usb 7-1: USB disconnect, device number 3 [ 1581.638676][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 1581.680829][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 1581.765051][ T37] audit: type=1800 audit(1777580225.139:71): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5384" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1581.925690][T19196] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1581.937331][T23695] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5379'. [ 1582.366625][T23710] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1582.414596][T23710] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1582.414680][T23710] overlayfs: failed to look up (tracing) for ino (-66) [ 1583.869616][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5389'. [ 1587.745558][T23754] kvm: pic: single mode not supported [ 1587.745789][T23754] kvm: pic: non byte read [ 1587.746028][T23754] kvm: pic: non byte read [ 1587.746234][T23754] kvm: pic: non byte read [ 1587.746435][T23754] kvm: pic: non byte read [ 1587.746635][T23754] kvm: pic: non byte read [ 1587.792081][T23754] kvm: pic: non byte read [ 1587.792310][T23754] kvm: pic: non byte read [ 1587.832995][T23763] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1587.889703][T23763] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1587.889784][T23763] overlayfs: failed to look up (tracing) for ino (-66) [ 1588.118100][T16711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1588.212494][T16711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1588.216103][T16711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1588.218388][T16711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1588.219152][T16711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1589.717473][T23796] misc userio: Invalid payload size [ 1589.717797][T23796] misc userio: No port type given on /dev/userio [ 1591.147709][T16513] Bluetooth: hci4: command tx timeout [ 1593.495424][T23311] Bluetooth: hci1: command 0x0406 tx timeout [ 1593.495749][T23311] Bluetooth: hci4: command tx timeout [ 1593.821971][T23822] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 1593.821971][T23822] program syz.5.5410 not setting count and/or reply_len properly [ 1594.916518][T23845] misc userio: Invalid payload size [ 1594.917533][T23845] misc userio: No port type given on /dev/userio [ 1595.711374][T16513] Bluetooth: hci4: command tx timeout [ 1595.978787][T23856] misc userio: No port type given on /dev/userio [ 1596.433453][T23857] misc userio: No port type given on /dev/userio [ 1596.987292][T23860] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1597.039626][T23860] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1597.039712][T23860] overlayfs: failed to look up (tracing) for ino (-66) [ 1598.270465][T16513] Bluetooth: hci4: command tx timeout [ 1599.446230][T23882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1599.518949][T23766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.519309][T23766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.519551][T23766] bridge_slave_0: entered allmulticast mode [ 1599.522509][T23766] bridge_slave_0: entered promiscuous mode [ 1599.571629][T23766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.571746][T23766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.571927][T23766] bridge_slave_1: entered allmulticast mode [ 1599.603079][T23766] bridge_slave_1: entered promiscuous mode [ 1599.676785][T23766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.680869][T23766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.740633][T23766] team0: Port device team_slave_0 added [ 1599.743921][T23766] team0: Port device team_slave_1 added [ 1599.794164][T23766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.794179][T23766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.794223][T23766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.796292][T23766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.796304][T23766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.796330][T23766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.629494][T23766] hsr_slave_0: entered promiscuous mode [ 1600.630815][T23766] hsr_slave_1: entered promiscuous mode [ 1600.631718][T23766] debugfs: 'hsr0' already exists in 'hsr' [ 1600.631740][T23766] Cannot create hsr debugfs directory [ 1601.255818][T23897] misc userio: No port type given on /dev/userio [ 1602.954534][T23914] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1603.005059][T23914] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1603.005150][T23914] overlayfs: failed to look up (tracing) for ino (-66) [ 1603.483695][T23916] misc userio: Invalid payload size [ 1603.483901][T23916] misc userio: No port type given on /dev/userio [ 1607.085962][T23936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.585935][T23945] misc userio: No port type given on /dev/userio [ 1610.165832][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1610.165943][T23965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1610.316126][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1610.316315][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1611.509914][T23968] overlayfs: failed to clone lowerpath [ 1613.193587][T20327] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1613.372668][T23975] misc userio: Invalid payload size [ 1613.372933][T23975] misc userio: No port type given on /dev/userio [ 1613.997622][T20327] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.997649][T20327] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1613.997686][T20327] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1613.997710][T20327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.002992][T20327] usb 7-1: config 0 descriptor?? [ 1615.747553][T23989] misc userio: No port type given on /dev/userio [ 1616.623313][T19707] usb 7-1: USB disconnect, device number 4 [ 1620.566261][T24027] misc userio: Invalid payload size [ 1621.464509][T24039] misc userio: No port type given on /dev/userio [ 1621.541467][T16711] Bluetooth: hci0: command 0x0406 tx timeout [ 1622.735194][T21783] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1623.901456][T19707] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1624.052817][T21783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.052870][T21783] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1624.052910][T21783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1624.052933][T21783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.062043][T21783] usb 1-1: config 0 descriptor?? [ 1624.071910][T19707] usb 7-1: Using ep0 maxpacket: 8 [ 1624.094926][T21783] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1624.120127][T19707] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1624.120153][T19707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.173764][T19707] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1624.173784][T19707] pvrusb2: ********** [ 1624.173791][T19707] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1624.173803][T19707] pvrusb2: Important functionality might not be entirely working. [ 1624.173811][T19707] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1624.173822][T19707] pvrusb2: ********** [ 1624.222438][ T44] bridge_slave_1: left allmulticast mode [ 1624.222468][ T44] bridge_slave_1: left promiscuous mode [ 1624.222716][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.313305][ T44] bridge_slave_0: left allmulticast mode [ 1624.313337][ T44] bridge_slave_0: left promiscuous mode [ 1624.314891][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.391428][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5466'. [ 1624.517433][ T2383] pvrusb2: Invalid write control endpoint [ 1624.731524][T24082] pvrusb2: Invalid write control endpoint [ 1624.793458][ T2383] pvrusb2: Invalid write control endpoint [ 1624.793474][ T2383] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1624.793483][ T2383] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1624.793490][ T2383] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1624.793505][ T2383] pvrusb2: Device being rendered inoperable [ 1624.848844][ T2383] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1624.849198][ T2383] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1624.888629][ T2383] pvrusb2: Attached sub-driver cx25840 [ 1624.888643][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1624.888653][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1624.983598][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.078207][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.143716][ T44] bond0 (unregistering): Released all slaves [ 1625.212209][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1625.231167][T19707] usb 7-1: USB disconnect, device number 5 [ 1626.323451][T17539] usb 1-1: USB disconnect, device number 6 [ 1626.979977][T24097] fuse: Bad value for 'fd' [ 1627.048338][T24107] misc userio: No port type given on /dev/userio [ 1627.769377][ T44] hsr_slave_0: left promiscuous mode [ 1627.929628][T19196] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1627.962258][ T44] hsr_slave_1: left promiscuous mode [ 1627.967319][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.294287][T19196] usb 7-1: Using ep0 maxpacket: 32 [ 1628.809187][T19196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 1628.809220][T19196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25859, setting to 1024 [ 1628.809261][T19196] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1628.809284][T19196] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.873022][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1628.879308][T19196] usb 7-1: config 0 descriptor?? [ 1628.918137][T24108] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1629.775319][T19196] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 1629.775357][T19196] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 1630.037924][T19196] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 1630.205796][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1630.252721][T19196] ft260 0003:0403:6030.0002: failed to retrieve system status [ 1630.267542][T19196] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5 [ 1630.366005][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 1630.371156][ T36] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1630.371183][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.371203][ T36] usb 1-1: Product: syz [ 1630.371216][ T36] usb 1-1: Manufacturer: syz [ 1630.371225][ T36] usb 1-1: SerialNumber: syz [ 1630.376263][ T36] usb 1-1: config 0 descriptor?? [ 1630.426464][ T36] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1630.494783][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1630.504998][T19707] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1630.548577][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1630.680263][T19707] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.680416][T19707] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1630.680458][T19707] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1630.680480][T19707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.763789][T19707] usb 6-1: config 0 descriptor?? [ 1630.793998][T19707] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1632.118575][T17539] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1632.295175][ T1241] usb 7-1: USB disconnect, device number 6 [ 1632.337321][T17539] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1632.337344][T17539] usb 4-1: config 0 has no interface number 0 [ 1632.337388][T17539] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.375070][T17539] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1632.375095][T17539] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1632.375112][T17539] usb 4-1: Product: syz [ 1632.375125][T17539] usb 4-1: SerialNumber: syz [ 1632.433660][ T36] gspca_ov534_9: reg_w failed -71 [ 1632.494147][T17539] usb 4-1: config 0 descriptor?? [ 1632.541207][T17539] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1632.719989][ T36] gspca_ov534_9: Unknown sensor 0000 [ 1632.720094][ T36] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1632.738029][ T36] usb 1-1: USB disconnect, device number 7 [ 1634.526813][T21783] usb 6-1: USB disconnect, device number 7 [ 1634.710989][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5494'. [ 1635.023834][T21783] usb 4-1: USB disconnect, device number 13 [ 1635.325827][T24179] team0: Port device team_slave_0 removed [ 1637.459164][T24207] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 1639.077352][T16711] Bluetooth: hci4: command 0x0405 tx timeout [ 1641.255104][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1641.439100][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.439132][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1641.439156][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1641.439168][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.442457][ T36] usb 1-1: config 0 descriptor?? [ 1641.462454][ T36] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1642.104445][T19707] ================================================================== [ 1642.104455][T19707] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.104586][T19707] Read of size 8 at addr ffffc90014677008 by task kworker/1:5/19707 [ 1642.104595][T19707] [ 1642.104615][T19707] CPU: 1 UID: 0 PID: 19707 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1642.104640][T19707] Tainted: [L]=SOFTLOCKUP [ 1642.104647][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.104658][T19707] Workqueue: usb_hub_wq hub_event [ 1642.104735][T19707] Call Trace: [ 1642.104739][T19707] [ 1642.104744][T19707] dump_stack_lvl+0xe8/0x150 [ 1642.104776][T19707] print_address_description+0x55/0x1e0 [ 1642.104794][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.104808][T19707] print_report+0x58/0x70 [ 1642.104817][T19707] kasan_report+0x117/0x150 [ 1642.104889][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.104904][T19707] __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.104918][T19707] kcov_remote_start+0x2af/0x710 [ 1642.104973][T19707] hub_event+0x150/0x4f60 [ 1642.104984][T19707] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.105046][T19707] ? look_up_lock_class+0x57/0x110 [ 1642.105109][T19707] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.105124][T19707] ? lock_acquire+0x106/0x350 [ 1642.105136][T19707] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1642.105147][T19707] ? __pfx_hub_event+0x10/0x10 [ 1642.105157][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105179][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105188][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105198][T19707] process_scheduled_works+0xb5d/0x1860 [ 1642.105214][T19707] ? __pfx_process_scheduled_works+0x10/0x10 [ 1642.105226][T19707] ? assign_work+0x3d5/0x5e0 [ 1642.105236][T19707] worker_thread+0xa53/0xfc0 [ 1642.105252][T19707] kthread+0x388/0x470 [ 1642.105271][T19707] ? __pfx_worker_thread+0x10/0x10 [ 1642.105288][T19707] ? __pfx_kthread+0x10/0x10 [ 1642.105304][T19707] ret_from_fork+0x514/0xb70 [ 1642.105333][T19707] ? __pfx_ret_from_fork+0x10/0x10 [ 1642.105350][T19707] ? __switch_to+0xc79/0x1410 [ 1642.105375][T19707] ? __pfx_kthread+0x10/0x10 [ 1642.105397][T19707] ret_from_fork_asm+0x1a/0x30 [ 1642.105424][T19707] [ 1642.105431][T19707] [ 1642.105435][T19707] The buggy address belongs to a vmalloc virtual mapping [ 1642.105447][T19707] Memory state around the buggy address: [ 1642.105453][T19707] ffffc90014676f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1642.105459][T19707] ffffc90014676f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1642.105465][T19707] >ffffc90014677000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1642.105470][T19707] ^ [ 1642.105474][T19707] ffffc90014677080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1642.105480][T19707] ffffc90014677100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1642.105485][T19707] ================================================================== [ 1642.105496][T19707] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1642.105505][T19707] CPU: 1 UID: 0 PID: 19707 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1642.105519][T19707] Tainted: [L]=SOFTLOCKUP [ 1642.105523][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.105529][T19707] Workqueue: usb_hub_wq hub_event [ 1642.105539][T19707] Call Trace: [ 1642.105544][T19707] [ 1642.105547][T19707] vpanic+0x56c/0xa60 [ 1642.105560][T19707] ? __pfx_vpanic+0x10/0x10 [ 1642.105573][T19707] panic+0xc5/0xd0 [ 1642.105583][T19707] ? __pfx_panic+0x10/0x10 [ 1642.105594][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105608][T19707] ? rcu_is_watching+0x15/0xb0 [ 1642.105666][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105680][T19707] check_panic_on_warn+0x89/0xb0 [ 1642.105699][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105713][T19707] end_report+0x73/0x170 [ 1642.105723][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105740][T19707] kasan_report+0x128/0x150 [ 1642.105751][T19707] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105767][T19707] __list_del_entry_valid_or_report+0xb5/0x190 [ 1642.105781][T19707] kcov_remote_start+0x2af/0x710 [ 1642.105791][T19707] hub_event+0x150/0x4f60 [ 1642.105803][T19707] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.105814][T19707] ? look_up_lock_class+0x57/0x110 [ 1642.105826][T19707] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.105841][T19707] ? lock_acquire+0x106/0x350 [ 1642.105852][T19707] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1642.105863][T19707] ? __pfx_hub_event+0x10/0x10 [ 1642.105873][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105884][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105893][T19707] ? process_scheduled_works+0xa70/0x1860 [ 1642.105903][T19707] process_scheduled_works+0xb5d/0x1860 [ 1642.105920][T19707] ? __pfx_process_scheduled_works+0x10/0x10 [ 1642.105931][T19707] ? assign_work+0x3d5/0x5e0 [ 1642.105943][T19707] worker_thread+0xa53/0xfc0 [ 1642.105959][T19707] kthread+0x388/0x470 [ 1642.105971][T19707] ? __pfx_worker_thread+0x10/0x10 [ 1642.105980][T19707] ? __pfx_kthread+0x10/0x10 [ 1642.105992][T19707] ret_from_fork+0x514/0xb70 [ 1642.106003][T19707] ? __pfx_ret_from_fork+0x10/0x10 [ 1642.106013][T19707] ? __switch_to+0xc79/0x1410 [ 1642.106026][T19707] ? __pfx_kthread+0x10/0x10 [ 1642.106038][T19707] ret_from_fork_asm+0x1a/0x30 [ 1642.106053][T19707] [ 1642.106506][T19707] Kernel Offset: disabled