last executing test programs: 15m33.875170866s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) socket(0x84000000002a, 0x1, 0xff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) getpid() process_mrelease(0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x100) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) 15m26.980085549s ago: executing program 3 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x103, 0x7, {0x8, 0x8, 0x1, 0x10001}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') getpid() read$FUSE(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 15m20.394502685s ago: executing program 3 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) 15m2.859497991s ago: executing program 32 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x64000}, 0x0) 14m20.092444434s ago: executing program 2 (id=67): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888", 0x8c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a", 0x13f}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c4782", 0xb1}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m15.127396725s ago: executing program 2 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 14m12.865160539s ago: executing program 2 (id=73): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xc000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r4) getpgid(r1) 14m8.76721282s ago: executing program 2 (id=75): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0x4, "4689952e"}}, 0x9) close(r0) 14m7.394570913s ago: executing program 2 (id=78): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="001c4d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m59.206259842s ago: executing program 2 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280), 0x0, 0x6, 0x453b, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 13m42.425138309s ago: executing program 33 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280), 0x0, 0x6, 0x453b, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 8m39.670221396s ago: executing program 0 (id=380): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x84, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x2, 0x6e6bb5}}, 0xb8}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 8m35.322423791s ago: executing program 0 (id=385): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 8m34.360455429s ago: executing program 0 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8m33.722585348s ago: executing program 0 (id=387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0100001900010026bd7000fedbdf25e0000002000000000000000000000000640101000000000000000000000000000000000600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000010000000000000000000000000000000000000000000000000073d6fbdfd45ee2a900008010000000000000000600040000000000990c0000100000000008000000000000e10200000000000000000000000000000001030200000000c4000500fe800000000000000000000000aa000004d32b00000000000000fc020000000000000000000000000000000000000002ff00070000000000000000000000fc000000000000000000000000000001000000003200000000000000ff020000000000000000000000000001000000000000000000000000ff010000000000007f000001000000000000000000000000000000003c00000002ee0000ac1414aa00000000000000000000000004"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) r1 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff2]}, 0x8, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_procfs(r1, &(0x7f0000000140)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000d00)=""/93, 0x5d}], 0x2, 0x9, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82543, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8m29.57988152s ago: executing program 0 (id=390): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x84, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x2, 0x6e6bb5}}, 0xb8}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8m25.626704976s ago: executing program 0 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 8m9.858684156s ago: executing program 34 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m51.53446432s ago: executing program 4 (id=629): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="610507fe020500db0006"], 0x11) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c0007"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_socket_connect_nvme_tcp() syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) close(r7) 2m47.798644103s ago: executing program 4 (id=631): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05554f0603d861703e302c27db8fb3c78501dcd284df3a47783cd143f41a209137e903c594fc11da352ea57a138e733ed396b4043d21bcd1cefd5a7688925326ca26b6fdc06da7c394230d4f84"], 0x4f, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) close(0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x5, r1, 0x0, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) pread64(r0, &(0x7f0000000a40)=""/102358, 0x18fd6, 0x40000080002) 2m43.945265403s ago: executing program 4 (id=633): socket(0x10, 0x803, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2m43.252192505s ago: executing program 4 (id=634): syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 2m39.95372518s ago: executing program 4 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xe64}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x9, 0x8, 0x76, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x110001, 0x0, {[0x4, 0x2, 0x6, 0x9a47, 0x7, 0x80000000, 0x80, 0xe02]}}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m38.226617169s ago: executing program 4 (id=639): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r5, 0x5460, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2m20.677068949s ago: executing program 35 (id=639): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r5, 0x5460, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 19.033711904s ago: executing program 1 (id=711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(0x0, 0x75d, 0x2480) r5 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.882366443s ago: executing program 8 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 14.238316799s ago: executing program 6 (id=713): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c47", 0xb0}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 13.75606502s ago: executing program 8 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r3, r5, 0x0, 0x7ffff004) 13.419519965s ago: executing program 1 (id=715): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xc000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r6) getpgid(r3) 12.262449898s ago: executing program 6 (id=716): openat$vcsu(0xffffffffffffff9c, 0x0, 0x690140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) inotify_init1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/oops_count', 0x0, 0x48) sendfile(r3, r4, 0x0, 0x20000023896) 10.745140523s ago: executing program 8 (id=717): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@x86={0x2, 0x4, 0x9, 0x0, 0x640, 0x0, 0x9, 0x1, 0x5, 0xa, 0x5, 0x2, 0x0, 0xd, 0x4, 0x6, 0x2, 0x2, 0x3, '\x00', 0x32, 0xa3}) 9.903645637s ago: executing program 8 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 6.914832208s ago: executing program 6 (id=719): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0x0) 6.128345993s ago: executing program 6 (id=720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000200)="9000", 0xc3ff, 0x844, 0x0, 0x0) 5.775637352s ago: executing program 8 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)}}], 0x2, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 5.673204709s ago: executing program 1 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.678736906s ago: executing program 8 (id=723): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000000c0)=0xfff7bdff) 2.6265789s ago: executing program 1 (id=724): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1", 0xa2}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede912815299a3313b02b4af73d57a5d0a7c01e400c47", 0xb0}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.261806343s ago: executing program 6 (id=725): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYRES16=r0], 0x44}}, 0x0) 2.02363954s ago: executing program 1 (id=726): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000240)=@x86={0x2, 0x4, 0x9, 0x0, 0x640, 0x0, 0x9, 0x1, 0x5, 0xa, 0x5, 0x2, 0x0, 0xd, 0x4, 0x6, 0x2, 0x2, 0x3, '\x00', 0x32, 0xa3}) 1.565410087s ago: executing program 1 (id=727): openat$vcsu(0xffffffffffffff9c, 0x0, 0x690140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) inotify_init1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/oops_count', 0x0, 0x48) sendfile(r3, r4, 0x0, 0x20000023896) 0s ago: executing program 6 (id=728): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ackets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.290492][ T7852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.601214][ T49] Bluetooth: hci5: command tx timeout [ 704.831265][ T6035] bridge_slave_1: left allmulticast mode [ 704.837120][ T6035] bridge_slave_1: left promiscuous mode [ 704.888913][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.926605][ T6035] bridge_slave_0: left allmulticast mode [ 704.941071][ T6035] bridge_slave_0: left promiscuous mode [ 704.961784][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.012802][ T6035] bridge_slave_1: left allmulticast mode [ 705.018786][ T6035] bridge_slave_1: left promiscuous mode [ 705.057520][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.085041][ T6035] bridge_slave_0: left allmulticast mode [ 705.110925][ T6035] bridge_slave_0: left promiscuous mode [ 705.117643][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.635771][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.699802][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.758203][ T6035] bond0 (unregistering): Released all slaves [ 706.087481][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.121137][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.145208][ T6035] bond0 (unregistering): Released all slaves [ 706.423372][ T7925] chnl_net:caif_netlink_parms(): no params data found [ 706.638960][ T6035] hsr_slave_0: left promiscuous mode [ 706.660352][ T6035] hsr_slave_1: left promiscuous mode [ 706.679274][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.712268][ T49] Bluetooth: hci5: command tx timeout [ 706.720951][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.769187][ T6035] hsr_slave_0: left promiscuous mode [ 706.799624][ T6035] hsr_slave_1: left promiscuous mode [ 706.826100][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.852145][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.185692][ T6035] team0 (unregistering): Port device team_slave_1 removed [ 707.247149][ T6035] team0 (unregistering): Port device team_slave_0 removed [ 708.760934][ T5069] Bluetooth: hci5: command tx timeout [ 709.066873][ T6035] team0 (unregistering): Port device team_slave_1 removed [ 709.158410][ T6035] team0 (unregistering): Port device team_slave_0 removed [ 712.126902][ T7852] hsr_slave_0: entered promiscuous mode [ 712.215151][ T7852] hsr_slave_1: entered promiscuous mode [ 712.236264][ T7852] debugfs: 'hsr0' already exists in 'hsr' [ 713.201537][ T7852] Cannot create hsr debugfs directory [ 715.812822][ T7816] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 715.963476][ T7816] usb 2-1: device descriptor read/64, error -71 [ 716.210107][ T7816] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 716.273697][ T7925] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.292835][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.300589][ T7925] bridge_slave_0: entered allmulticast mode [ 716.333050][ T7925] bridge_slave_0: entered promiscuous mode [ 716.350844][ T7816] usb 2-1: device descriptor read/64, error -71 [ 716.459671][ T7925] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.479448][ T7816] usb usb2-port1: attempt power cycle [ 716.487043][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.509070][ T7925] bridge_slave_1: entered allmulticast mode [ 716.529927][ T7925] bridge_slave_1: entered promiscuous mode [ 716.652672][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 716.781454][ T7925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.832648][ T7816] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 716.866128][ T7816] usb 2-1: device descriptor read/8, error -71 [ 716.876928][ T7925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.134263][ T7816] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 717.169890][ T7816] usb 2-1: device descriptor read/8, error -71 [ 717.207231][ T7925] team0: Port device team_slave_0 added [ 717.251899][ T7925] team0: Port device team_slave_1 added [ 717.258329][ T7852] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 717.291055][ T5826] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 717.316461][ T7816] usb usb2-port1: unable to enumerate USB device [ 717.367411][ T7852] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 717.399813][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.408499][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.448944][ T7925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.461099][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 717.476625][ T5826] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 717.492506][ T7925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.500079][ T5826] usb 5-1: config 0 has no interface number 0 [ 717.507838][ T7925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.541124][ T7925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.557299][ T5826] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 717.567424][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.578580][ T5826] usb 5-1: Product: syz [ 717.583625][ T5826] usb 5-1: Manufacturer: syz [ 717.590487][ T5826] usb 5-1: SerialNumber: syz [ 717.591950][ T7852] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 717.614960][ T5826] usb 5-1: config 0 descriptor?? [ 717.643492][ T5826] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 717.705744][ T7852] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 717.900198][ T5826] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 717.937302][ T5826] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 718.279585][ T7925] hsr_slave_0: entered promiscuous mode [ 718.299065][ T7925] hsr_slave_1: entered promiscuous mode [ 718.309498][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 718.310119][ T7925] debugfs: 'hsr0' already exists in 'hsr' [ 718.327526][ T5826] usb 5-1: USB disconnect, device number 11 [ 718.346006][ T7925] Cannot create hsr debugfs directory [ 718.355168][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.369205][ T5826] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 718.383934][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.399899][ T7977] bridge_slave_0: entered allmulticast mode [ 718.419563][ T7977] bridge_slave_0: entered promiscuous mode [ 718.432636][ T5826] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 718.467811][ T5826] quatech2 5-1:0.51: device disconnected [ 718.489016][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.506840][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.542448][ T7977] bridge_slave_1: entered allmulticast mode [ 718.567318][ T7977] bridge_slave_1: entered promiscuous mode [ 718.804123][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.827711][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.084991][ T7977] team0: Port device team_slave_0 added [ 719.171782][ T7977] team0: Port device team_slave_1 added [ 719.456371][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.480298][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.518468][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.170298][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.177767][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.221145][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.330025][ T7977] hsr_slave_0: entered promiscuous mode [ 724.252817][ T7977] hsr_slave_1: entered promiscuous mode [ 724.294645][ T7977] debugfs: 'hsr0' already exists in 'hsr' [ 724.381205][ T7977] Cannot create hsr debugfs directory [ 726.162546][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 727.402314][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.412007][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.436962][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.458541][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.476380][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.893512][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 729.168866][ T7925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 729.313699][ T7925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.457331][ T7925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 729.560956][ T5069] Bluetooth: hci3: command tx timeout [ 729.605252][ T7925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.789454][ T8065] input: syz0 as /devices/virtual/input/input30 [ 731.534514][ T8067] netlink: 104 bytes leftover after parsing attributes in process `syz.1.450'. [ 731.651974][ T5069] Bluetooth: hci3: command tx timeout [ 733.971595][ T5069] Bluetooth: hci3: command tx timeout [ 736.040841][ T5069] Bluetooth: hci3: command tx timeout [ 742.657532][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 742.781202][ T7977] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 742.977513][ T5944] bridge_slave_1: left allmulticast mode [ 743.004459][ T5944] bridge_slave_1: left promiscuous mode [ 743.273425][ T5822] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 743.326533][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.912161][ T5944] bridge_slave_0: left allmulticast mode [ 743.930995][ T5944] bridge_slave_0: left promiscuous mode [ 743.953371][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.990963][ T5822] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 744.024037][ T5822] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 744.091051][ T5822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 744.100400][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.653349][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 744.667980][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 744.678105][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 744.694765][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 744.714392][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.348145][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.373322][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.402119][ T5944] bond0 (unregistering): Released all slaves [ 745.450044][ T7977] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.494464][ T7977] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.925999][ T7977] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.136045][ T5944] hsr_slave_0: left promiscuous mode [ 746.172540][ T5944] hsr_slave_1: left promiscuous mode [ 746.205624][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.245817][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.780833][ T49] Bluetooth: hci2: command tx timeout [ 746.817496][ T7894] usb 2-1: USB disconnect, device number 24 [ 748.102057][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 748.207502][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 748.842177][ T49] Bluetooth: hci2: command tx timeout [ 750.426622][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.437737][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.452117][ T8049] bridge_slave_0: entered allmulticast mode [ 750.920948][ T49] Bluetooth: hci2: command tx timeout [ 751.045713][ T8049] bridge_slave_0: entered promiscuous mode [ 751.459626][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.486961][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.511781][ T8049] bridge_slave_1: entered allmulticast mode [ 751.548812][ T8049] bridge_slave_1: entered promiscuous mode [ 752.207055][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.011140][ T49] Bluetooth: hci2: command tx timeout [ 753.299068][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.698106][ T8049] team0: Port device team_slave_0 added [ 755.867943][ T8049] team0: Port device team_slave_1 added [ 756.024400][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.315937][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.323495][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.373325][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.380492][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.490781][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.531906][ T5966] bridge_slave_1: left allmulticast mode [ 760.537782][ T5966] bridge_slave_1: left promiscuous mode [ 760.571810][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.602970][ T5966] bridge_slave_0: left allmulticast mode [ 760.608840][ T5966] bridge_slave_0: left promiscuous mode [ 760.645700][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.396717][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 761.415674][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 762.087884][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.160552][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.368315][ T5966] bond0 (unregistering): Released all slaves [ 762.741709][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.748880][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.782918][ T5069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.831628][ T5069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.839119][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.851986][ T5069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.874847][ T5069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.896897][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 763.227584][ T5966] hsr_slave_0: left promiscuous mode [ 763.243623][ T5966] hsr_slave_1: left promiscuous mode [ 763.312265][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.354900][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.766837][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 764.821234][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 765.081268][ T5069] Bluetooth: hci4: command tx timeout [ 765.940961][ T8049] hsr_slave_0: entered promiscuous mode [ 765.971997][ T8049] hsr_slave_1: entered promiscuous mode [ 766.003461][ T8049] debugfs: 'hsr0' already exists in 'hsr' [ 766.020046][ T8049] Cannot create hsr debugfs directory [ 766.031805][ T8089] chnl_net:caif_netlink_parms(): no params data found [ 767.160951][ T5069] Bluetooth: hci4: command tx timeout [ 769.244498][ T5069] Bluetooth: hci4: command tx timeout [ 770.458159][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 770.669431][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.685794][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.697555][ T8089] bridge_slave_0: entered allmulticast mode [ 770.716271][ T8089] bridge_slave_0: entered promiscuous mode [ 770.740513][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.751993][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.759713][ T8089] bridge_slave_1: entered allmulticast mode [ 770.777151][ T8089] bridge_slave_1: entered promiscuous mode [ 771.277888][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.333752][ T5069] Bluetooth: hci4: command tx timeout [ 771.343426][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.017720][ T8089] team0: Port device team_slave_0 added [ 772.080923][ T8089] team0: Port device team_slave_1 added [ 772.606888][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.614255][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.650212][ T8172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.477'. [ 773.071184][ T8089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.327568][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.351160][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.453273][ T8089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.644267][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 773.860481][ T5966] bridge_slave_1: left allmulticast mode [ 773.872531][ T5822] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 773.894329][ T5966] bridge_slave_1: left promiscuous mode [ 773.902505][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.917180][ T5966] bridge_slave_0: left allmulticast mode [ 773.924235][ T5966] bridge_slave_0: left promiscuous mode [ 773.937357][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.063111][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.134919][ T5822] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 774.165729][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.238493][ T5822] usb 2-1: config 0 descriptor?? [ 774.303809][ T5822] pwc: Askey VC010 type 2 USB webcam detected. [ 774.766183][ T5822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 774.793490][ T5822] pwc: recv_control_msg error -32 req 02 val 2700 [ 774.827694][ T5822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 774.843233][ T5822] pwc: recv_control_msg error -32 req 04 val 1000 [ 774.855274][ T5822] pwc: recv_control_msg error -32 req 04 val 1300 [ 774.903518][ T5822] pwc: recv_control_msg error -32 req 04 val 1400 [ 774.917176][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.937475][ T5822] pwc: recv_control_msg error -32 req 02 val 2000 [ 774.949478][ T5822] pwc: recv_control_msg error -32 req 02 val 2100 [ 774.969458][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.981112][ T5822] pwc: recv_control_msg error -32 req 04 val 1500 [ 775.002522][ T5822] pwc: recv_control_msg error -32 req 02 val 2500 [ 775.016130][ T5966] bond0 (unregistering): Released all slaves [ 775.025033][ T5822] pwc: recv_control_msg error -32 req 02 val 2400 [ 775.241655][ T5822] pwc: recv_control_msg error -71 req 02 val 2900 [ 775.261045][ T5822] pwc: recv_control_msg error -71 req 02 val 2800 [ 775.270299][ T5822] pwc: recv_control_msg error -71 req 04 val 1100 [ 775.278615][ T5822] pwc: recv_control_msg error -71 req 04 val 1200 [ 775.293794][ T5822] pwc: Registered as video103. [ 775.312889][ T5822] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 775.336947][ T5822] usb 2-1: USB disconnect, device number 25 [ 775.507691][ T5966] hsr_slave_0: left promiscuous mode [ 775.531339][ T5966] hsr_slave_1: left promiscuous mode [ 775.542389][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.556483][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.285361][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 776.361247][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 777.035840][ T8089] hsr_slave_0: entered promiscuous mode [ 777.051596][ T8089] hsr_slave_1: entered promiscuous mode [ 777.060456][ T8089] debugfs: 'hsr0' already exists in 'hsr' [ 777.066855][ T8089] Cannot create hsr debugfs directory [ 778.188279][ T8049] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 778.317916][ T8049] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 778.630926][ T8049] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 778.857346][ T8049] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 779.158495][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.181496][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.237916][ T8141] bridge_slave_0: entered allmulticast mode [ 779.289149][ T8141] bridge_slave_0: entered promiscuous mode [ 779.403898][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.426407][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.449139][ T8141] bridge_slave_1: entered allmulticast mode [ 779.514513][ T8141] bridge_slave_1: entered promiscuous mode [ 780.012672][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.257828][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.734372][ T8141] team0: Port device team_slave_0 added [ 780.792901][ T8141] team0: Port device team_slave_1 added [ 781.176469][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.193175][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.250218][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.313490][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.323889][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.352822][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.560183][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 781.877369][ T8141] hsr_slave_0: entered promiscuous mode [ 781.888283][ T8141] hsr_slave_1: entered promiscuous mode [ 781.898391][ T8141] debugfs: 'hsr0' already exists in 'hsr' [ 781.906085][ T8141] Cannot create hsr debugfs directory [ 782.067834][ T8089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 782.218767][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.470659][ T8089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 782.603997][ T8089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 783.531259][ T8089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 784.232652][ T8208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 784.979999][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.389747][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.397482][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.507376][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.542057][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.562251][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.611800][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 789.639619][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 790.165869][ T8141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 790.453791][ T8141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 790.901121][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.036818][ T8141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.713243][ T8141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.722042][ T49] Bluetooth: hci5: command tx timeout [ 793.259890][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.792261][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.799849][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.801905][ T49] Bluetooth: hci5: command tx timeout [ 794.134445][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.142172][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.157000][ T5822] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 794.322355][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 794.365183][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.376741][ T5822] usb 2-1: config 0 has no interfaces? [ 794.399806][ T5822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 794.450373][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.459016][ T5822] usb 2-1: Product: syz [ 794.491716][ T5822] usb 2-1: Manufacturer: syz [ 794.505508][ T5822] usb 2-1: SerialNumber: syz [ 794.544852][ T5822] usb 2-1: config 0 descriptor?? [ 794.984502][ T5947] bridge_slave_1: left allmulticast mode [ 795.488056][ T5947] bridge_slave_1: left promiscuous mode [ 795.502817][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.529346][ T5947] bridge_slave_0: left allmulticast mode [ 795.536183][ T5947] bridge_slave_0: left promiscuous mode [ 795.545775][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.937313][ T49] Bluetooth: hci5: command tx timeout [ 796.329863][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.375602][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.400159][ T5947] bond0 (unregistering): Released all slaves [ 796.711145][ T5947] hsr_slave_0: left promiscuous mode [ 796.758697][ T5947] hsr_slave_1: left promiscuous mode [ 796.808833][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.837725][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.083088][ T5826] usb 2-1: USB disconnect, device number 26 [ 797.976086][ T49] Bluetooth: hci5: command tx timeout [ 798.817145][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 798.923227][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 800.260997][ T5822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 800.481115][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 800.523784][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.606383][ T5822] usb 2-1: config 0 has no interfaces? [ 800.656542][ T5822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 800.720438][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.773245][ T5822] usb 2-1: Product: syz [ 800.777642][ T5822] usb 2-1: Manufacturer: syz [ 800.789787][ T8224] chnl_net:caif_netlink_parms(): no params data found [ 800.822219][ T5822] usb 2-1: SerialNumber: syz [ 800.872843][ T5822] usb 2-1: config 0 descriptor?? [ 801.429670][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.547057][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.826480][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.834255][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.857543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.865163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.933525][ T10] usb 2-1: USB disconnect, device number 27 [ 805.351550][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 808.551390][ T8303] netlink: 388 bytes leftover after parsing attributes in process `syz.1.507'. [ 808.802148][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.809698][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.901674][ T8224] bridge_slave_0: entered allmulticast mode [ 808.966388][ T8224] bridge_slave_0: entered promiscuous mode [ 809.096904][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.171601][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.226373][ T8224] bridge_slave_1: entered allmulticast mode [ 809.305720][ T8224] bridge_slave_1: entered promiscuous mode [ 815.934762][ T5069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.964353][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.983680][ T5069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.997773][ T5069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 816.019731][ T5069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 816.038912][ T5069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 816.129561][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.141133][ T49] Bluetooth: hci3: command tx timeout [ 818.566506][ T8224] team0: Port device team_slave_0 added [ 818.743806][ T8224] team0: Port device team_slave_1 added [ 818.933197][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.939913][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.409304][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.471021][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.631241][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.787655][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.846120][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.014577][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.203498][ T49] Bluetooth: hci3: command tx timeout [ 820.553906][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.947574][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 822.322506][ T49] Bluetooth: hci3: command tx timeout [ 822.942890][ T8224] hsr_slave_0: entered promiscuous mode [ 822.990361][ T8224] hsr_slave_1: entered promiscuous mode [ 823.016099][ T8224] debugfs: 'hsr0' already exists in 'hsr' [ 823.041098][ T8224] Cannot create hsr debugfs directory [ 823.682101][ T8359] netlink: 388 bytes leftover after parsing attributes in process `syz.1.516'. [ 824.363858][ T49] Bluetooth: hci3: command tx timeout [ 826.172486][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.517'. [ 827.616679][ T8370] binder: BINDER_SET_CONTEXT_MGR already set [ 827.644627][ T8370] binder: 8369:8370 ioctl 4018620d 200000000040 returned -16 [ 827.685773][ T5069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.707825][ T5069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.717859][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.736124][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.751646][ T5069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.763227][ T8370] binder: 8369:8370 ioctl c0306201 200000000240 returned -11 [ 829.621646][ T8389] loop4: detected capacity change from 0 to 512 [ 829.651989][ T8389] EXT4-fs: Ignoring removed bh option [ 829.657746][ T8389] EXT4-fs: inline encryption not supported [ 829.763131][ T8389] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 829.884727][ T5069] Bluetooth: hci2: command tx timeout [ 829.960039][ T8389] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 830.045567][ T8389] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.522: bg 0: block 248: padding at end of block bitmap is not set [ 830.127432][ T8389] loop4: lost filesystem error report for type 5 error -117 [ 830.130756][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 830.145023][ C1] EXT4-fs (loop4): last error at time 1774354621: ext4_validate_block_bitmap:441 [ 830.156376][ T8389] Quota error (device loop4): write_blk: dquota write failed [ 830.171754][ T8389] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 830.222267][ T8389] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.522: Failed to acquire dquot type 1 [ 830.263164][ T8399] netlink: 388 bytes leftover after parsing attributes in process `syz.1.524'. [ 830.273705][ T8389] loop4: lost filesystem error report for type 5 error -117 [ 830.280198][ T8389] EXT4-fs (loop4): 1 truncate cleaned up [ 830.353965][ T8389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 830.517271][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 831.498254][ T1134] bridge_slave_1: left allmulticast mode [ 831.526715][ T1134] bridge_slave_1: left promiscuous mode [ 832.482197][ T5069] Bluetooth: hci2: command tx timeout [ 832.524901][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.576392][ T1134] bridge_slave_0: left allmulticast mode [ 832.651770][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 833.525284][ T29] audit: type=1800 audit(1774354624.859:5): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.522" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 833.566572][ T1134] bridge_slave_0: left promiscuous mode [ 834.526056][ T5069] Bluetooth: hci2: command tx timeout [ 834.536677][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.041865][ T109] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 835.060238][ T5772] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 835.147422][ T109] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 835.206769][ T109] loop4: lost filesystem error report for type 5 error -117 [ 835.767914][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.835179][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.859878][ T1134] bond0 (unregistering): Released all slaves [ 836.681280][ T5069] Bluetooth: hci2: command tx timeout [ 836.909600][ T1134] hsr_slave_0: left promiscuous mode [ 836.940116][ T1134] hsr_slave_1: left promiscuous mode [ 836.951290][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.971514][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.906993][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 837.992561][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 838.691428][ T8302] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 838.912182][ T8302] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 838.961660][ T8302] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 839.031066][ T8302] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.040451][ T8302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.326945][ T8224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 841.433513][ T8224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 841.905134][ T8224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 842.293024][ T8302] usb 2-1: USB disconnect, device number 28 [ 842.433171][ T8224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 842.709383][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.741217][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.748979][ T8318] bridge_slave_0: entered allmulticast mode [ 842.774872][ T8318] bridge_slave_0: entered promiscuous mode [ 843.006270][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.022968][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.042105][ T8318] bridge_slave_1: entered allmulticast mode [ 843.109750][ T8318] bridge_slave_1: entered promiscuous mode [ 843.130096][ T8371] chnl_net:caif_netlink_parms(): no params data found [ 843.603894][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.608894][ T8302] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 843.682237][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.793946][ T8302] usb 2-1: Using ep0 maxpacket: 32 [ 843.840340][ T8302] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 843.848787][ T8302] usb 2-1: config 0 has no interface number 0 [ 843.881337][ T8302] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.925783][ T8302] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 843.954640][ T8302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.963108][ T8302] usb 2-1: Product: syz [ 843.967474][ T8302] usb 2-1: Manufacturer: syz [ 844.000831][ T8302] usb 2-1: SerialNumber: syz [ 844.025513][ T8302] usb 2-1: config 0 descriptor?? [ 844.103603][ T8302] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 844.238930][ T8318] team0: Port device team_slave_0 added [ 844.311611][ T8302] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 844.319503][ T8302] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 844.375692][ T8318] team0: Port device team_slave_1 added [ 844.533014][ T8302] usb 2-1: USB disconnect, device number 29 [ 844.607123][ T1134] bridge_slave_1: left allmulticast mode [ 844.629597][ T1134] bridge_slave_1: left promiscuous mode [ 844.651954][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.678519][ T1134] bridge_slave_0: left allmulticast mode [ 844.686138][ T1134] bridge_slave_0: left promiscuous mode [ 844.699427][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.176891][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.232615][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.310997][ T1134] bond0 (unregistering): Released all slaves [ 845.603882][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.686094][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.771431][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.823109][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.830264][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.900739][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.994190][ T1134] hsr_slave_0: left promiscuous mode [ 846.041298][ T1134] hsr_slave_1: left promiscuous mode [ 846.049294][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.123113][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.595692][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 852.503067][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 853.667480][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 853.679741][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 853.700232][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 853.715172][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 853.731977][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 854.825799][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.862803][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.902016][ T8371] bridge_slave_0: entered allmulticast mode [ 854.961893][ T8371] bridge_slave_0: entered promiscuous mode [ 855.060225][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.121114][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.170265][ T8371] bridge_slave_1: entered allmulticast mode [ 855.229197][ T8371] bridge_slave_1: entered promiscuous mode [ 855.810929][ T5069] Bluetooth: hci4: command tx timeout [ 856.048418][ T8318] hsr_slave_0: entered promiscuous mode [ 856.121642][ T8318] hsr_slave_1: entered promiscuous mode [ 856.130321][ T8318] debugfs: 'hsr0' already exists in 'hsr' [ 856.180828][ T8318] Cannot create hsr debugfs directory [ 856.334427][ T8371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.387477][ T8371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.167491][ T8371] team0: Port device team_slave_0 added [ 857.415521][ T8371] team0: Port device team_slave_1 added [ 857.788322][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.796059][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.823468][ T8371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.880896][ T5069] Bluetooth: hci4: command tx timeout [ 858.052775][ T8371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.060011][ T8371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.160810][ T8371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.365344][ T5784] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 858.541251][ T5784] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 858.601309][ T5784] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 858.621228][ T5784] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.631702][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.607017][ T8371] hsr_slave_0: entered promiscuous mode [ 859.625438][ T8371] hsr_slave_1: entered promiscuous mode [ 859.663838][ T8371] debugfs: 'hsr0' already exists in 'hsr' [ 859.669778][ T8371] Cannot create hsr debugfs directory [ 859.961478][ T5069] Bluetooth: hci4: command tx timeout [ 860.037672][ T5966] bridge_slave_1: left allmulticast mode [ 860.066813][ T5966] bridge_slave_1: left promiscuous mode [ 860.094995][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.138101][ T5966] bridge_slave_0: left allmulticast mode [ 860.154762][ T5966] bridge_slave_0: left promiscuous mode [ 860.175573][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.652563][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.694981][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.730081][ T5966] bond0 (unregistering): Released all slaves [ 861.016431][ T5966] hsr_slave_0: left promiscuous mode [ 861.044697][ T5966] hsr_slave_1: left promiscuous mode [ 861.089600][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.156683][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.430853][ T24] usb 5-1: USB disconnect, device number 12 [ 862.041039][ T5069] Bluetooth: hci4: command tx timeout [ 862.099922][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 862.215316][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 863.579946][ T8567] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 864.450485][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 865.961368][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.981897][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.989625][ T8501] bridge_slave_0: entered allmulticast mode [ 866.044864][ T8501] bridge_slave_0: entered promiscuous mode [ 866.110769][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.129307][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.155506][ T8501] bridge_slave_1: entered allmulticast mode [ 866.174423][ T8501] bridge_slave_1: entered promiscuous mode [ 866.574125][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.662638][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.476906][ T8501] team0: Port device team_slave_0 added [ 867.495522][ T8501] team0: Port device team_slave_1 added [ 868.488929][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.506874][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.585822][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.609391][ T8371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.649262][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 868.681639][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 868.692184][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 868.707146][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 868.718733][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 868.845179][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.886823][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.990934][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.046564][ T8371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 869.100866][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 869.132648][ T8371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 869.270939][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 869.282647][ T8371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 869.322946][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 869.346004][ T24] usb 5-1: config 0 has no interface number 0 [ 869.363081][ T24] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.374676][ T24] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.421289][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 869.457408][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.470909][ T7860] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 869.488233][ T24] usb 5-1: Product: syz [ 869.501700][ T24] usb 5-1: Manufacturer: syz [ 869.540076][ T24] usb 5-1: SerialNumber: syz [ 869.574812][ T24] usb 5-1: config 0 descriptor?? [ 869.595048][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 869.663889][ T7860] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 869.679291][ T7860] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 869.690339][ T7860] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 869.706050][ T7860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.812800][ T24] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 869.866884][ T24] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 869.907798][ T8501] hsr_slave_0: entered promiscuous mode [ 869.968295][ T8501] hsr_slave_1: entered promiscuous mode [ 870.023851][ T24] usb 5-1: USB disconnect, device number 13 [ 870.650137][ T8501] debugfs: 'hsr0' already exists in 'hsr' [ 870.658160][ T8501] Cannot create hsr debugfs directory [ 870.840955][ T49] Bluetooth: hci5: command tx timeout [ 872.921744][ T49] Bluetooth: hci5: command tx timeout [ 873.861677][ T5784] usb 2-1: USB disconnect, device number 30 [ 875.011042][ T49] Bluetooth: hci5: command tx timeout [ 877.437825][ T49] Bluetooth: hci5: command tx timeout [ 878.428082][ T13] bridge_slave_1: left allmulticast mode [ 878.476008][ T13] bridge_slave_1: left promiscuous mode [ 878.542221][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.588894][ T13] bridge_slave_0: left allmulticast mode [ 878.704847][ T13] bridge_slave_0: left promiscuous mode [ 878.742972][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.165684][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.266666][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.295410][ T13] bond0 (unregistering): Released all slaves [ 879.501332][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 879.590863][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 879.770963][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 879.805239][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.812668][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.892628][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 879.927995][ T24] usb 5-1: config 0 has no interface number 0 [ 879.964044][ T24] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.991107][ T24] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 880.066089][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 880.101000][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.146922][ T24] usb 5-1: Product: syz [ 880.206324][ T24] usb 5-1: Manufacturer: syz [ 880.221870][ T24] usb 5-1: SerialNumber: syz [ 880.731763][ T8371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.896231][ T8371] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.929840][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.937628][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.019112][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.026879][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.212584][ T24] usb 5-1: config 0 descriptor?? [ 881.235909][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 881.387572][ T13] hsr_slave_0: left promiscuous mode [ 881.408973][ T13] hsr_slave_1: left promiscuous mode [ 881.419625][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.455436][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.083234][ T13] team0 (unregistering): Port device team_slave_1 removed [ 882.152304][ T13] team0 (unregistering): Port device team_slave_0 removed [ 882.216855][ T24] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 882.225260][ T24] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 882.421267][ T7860] usb 5-1: USB disconnect, device number 14 [ 882.812781][ T8501] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 882.844130][ T8501] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 882.951574][ T8501] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 882.992046][ T7860] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 883.061754][ T8501] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 883.242272][ T7860] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 883.290729][ T7860] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 883.363272][ T7860] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 883.405653][ T7860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.983074][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.011615][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.019385][ T8604] bridge_slave_0: entered allmulticast mode [ 884.055527][ T8604] bridge_slave_0: entered promiscuous mode [ 884.111783][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.133092][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.154516][ T8604] bridge_slave_1: entered allmulticast mode [ 884.167481][ T8604] bridge_slave_1: entered promiscuous mode [ 884.469486][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.149925][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.250820][ T8677] netlink: 104 bytes leftover after parsing attributes in process `syz.4.568'. [ 887.726432][ T24] usb 2-1: USB disconnect, device number 31 [ 888.478460][ T8604] team0: Port device team_slave_0 added [ 888.610363][ T8604] team0: Port device team_slave_1 added [ 889.183766][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.214547][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.315567][ T8604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.546679][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.575814][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.705503][ T8604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.837203][ T8688] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 891.062443][ T8695] netlink: 388 bytes leftover after parsing attributes in process `syz.1.572'. [ 891.269504][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.537736][ T8604] hsr_slave_0: entered promiscuous mode [ 891.561390][ T8604] hsr_slave_1: entered promiscuous mode [ 891.577126][ T8604] debugfs: 'hsr0' already exists in 'hsr' [ 891.588202][ T8604] Cannot create hsr debugfs directory [ 891.756071][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.868663][ T5069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 891.881598][ T5069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 891.957478][ T5069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 891.974102][ T5069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 891.986816][ T5069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 892.049449][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.057175][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.068562][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.076437][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.205574][ T5069] Bluetooth: hci3: command tx timeout [ 896.280953][ T5069] Bluetooth: hci3: command tx timeout [ 898.366164][ T5069] Bluetooth: hci3: command tx timeout [ 898.903445][ T5944] bridge_slave_1: left allmulticast mode [ 898.909298][ T5944] bridge_slave_1: left promiscuous mode [ 898.939330][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.958249][ T5944] bridge_slave_0: left allmulticast mode [ 898.964788][ T5944] bridge_slave_0: left promiscuous mode [ 898.971744][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.220859][ T5826] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 899.427144][ T5826] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 899.438496][ T5826] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 899.449525][ T5826] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.459846][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.528578][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.560100][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.596361][ T5944] bond0 (unregistering): Released all slaves [ 900.152409][ T5944] hsr_slave_0: left promiscuous mode [ 900.171519][ T5944] hsr_slave_1: left promiscuous mode [ 900.192717][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.234859][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.441888][ T5069] Bluetooth: hci3: command tx timeout [ 902.342896][ T7860] usb 2-1: USB disconnect, device number 32 [ 902.876776][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 902.945247][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 903.727530][ T8731] netlink: 388 bytes leftover after parsing attributes in process `syz.4.580'. [ 903.882813][ T8604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 903.971116][ T8604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 904.105670][ T8604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 904.192267][ T8604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 904.598004][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 908.400259][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.521236][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.772965][ T8604] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.812730][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.841334][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.869121][ T8693] bridge_slave_0: entered allmulticast mode [ 910.454058][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 910.463625][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 910.474333][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 910.487516][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 910.500468][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.643895][ T8693] bridge_slave_0: entered promiscuous mode [ 910.700843][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.792357][ T8764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.584'. [ 911.686471][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.705248][ T8693] bridge_slave_1: entered allmulticast mode [ 912.233332][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 912.245890][ T8693] bridge_slave_1: entered promiscuous mode [ 912.471212][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 912.529304][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 912.576347][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 912.601021][ T49] Bluetooth: hci2: command tx timeout [ 912.623198][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.083073][ T5784] usb 5-1: USB disconnect, device number 15 [ 913.289579][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.297179][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.453957][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.454681][ T8768] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 913.506510][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.742191][ T8771] netlink: 388 bytes leftover after parsing attributes in process `syz.4.588'. [ 913.845375][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.852969][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.902542][ T49] Bluetooth: hci2: command tx timeout [ 920.922248][ T49] Bluetooth: hci2: command tx timeout [ 923.030776][ T49] Bluetooth: hci2: command tx timeout [ 923.565144][ T8693] team0: Port device team_slave_0 added [ 923.833556][ T7860] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 923.899245][ T8693] team0: Port device team_slave_1 added [ 924.011377][ T7860] usb 5-1: Using ep0 maxpacket: 16 [ 924.051345][ T7860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.099144][ T7860] usb 5-1: config 0 has no interfaces? [ 924.126714][ T7860] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 924.165572][ T7860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.303361][ T7860] usb 5-1: config 0 descriptor?? [ 924.416778][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.427218][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.456503][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.487583][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.500105][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.543749][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.776389][ T8604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.796923][ T24] usb 5-1: USB disconnect, device number 16 [ 924.832933][ T8604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 929.798057][ T8693] hsr_slave_0: entered promiscuous mode [ 929.937185][ T8693] hsr_slave_1: entered promiscuous mode [ 930.029134][ T8693] debugfs: 'hsr0' already exists in 'hsr' [ 930.048290][ T8693] Cannot create hsr debugfs directory [ 931.308872][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 931.863789][ T6035] bridge_slave_1: left allmulticast mode [ 931.869634][ T6035] bridge_slave_1: left promiscuous mode [ 931.907304][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.954720][ T6035] bridge_slave_0: left allmulticast mode [ 931.971364][ T6035] bridge_slave_0: left promiscuous mode [ 932.000154][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.501467][ T8809] netlink: 388 bytes leftover after parsing attributes in process `syz.1.598'. [ 934.693532][ T5069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 934.713056][ T5069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 934.722351][ T5069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 935.196928][ T5069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 935.231610][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 936.347208][ T6035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.399350][ T6035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.416522][ T6035] bond0 (unregistering): Released all slaves [ 936.514214][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 936.868172][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 936.922494][ T6035] hsr_slave_0: left promiscuous mode [ 936.941234][ T6035] hsr_slave_1: left promiscuous mode [ 936.949258][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.973344][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.148296][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 937.179141][ T24] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 937.221159][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 937.230408][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.324963][ T5069] Bluetooth: hci4: command tx timeout [ 938.190349][ T7860] usb 2-1: USB disconnect, device number 33 [ 939.275549][ T6035] team0 (unregistering): Port device team_slave_1 removed [ 939.411051][ T6035] team0 (unregistering): Port device team_slave_0 removed [ 939.431252][ T5069] Bluetooth: hci4: command tx timeout [ 940.931990][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 941.185393][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.192314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.481368][ T5069] Bluetooth: hci4: command tx timeout [ 942.359566][ T8842] netlink: 388 bytes leftover after parsing attributes in process `syz.4.606'. [ 946.514362][ T5069] Bluetooth: hci4: command tx timeout [ 951.206259][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.217026][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.228482][ T8761] bridge_slave_0: entered allmulticast mode [ 951.237730][ T8761] bridge_slave_0: entered promiscuous mode [ 951.266447][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.283759][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.296695][ T8761] bridge_slave_1: entered allmulticast mode [ 951.305139][ T8761] bridge_slave_1: entered promiscuous mode [ 951.513958][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.543652][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.684818][ T8761] team0: Port device team_slave_0 added [ 951.759777][ T8761] team0: Port device team_slave_1 added [ 952.011001][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.018148][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.161242][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.213299][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.220412][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.297539][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.788577][ T8811] chnl_net:caif_netlink_parms(): no params data found [ 954.904125][ T109] bridge_slave_1: left allmulticast mode [ 954.953056][ T109] bridge_slave_1: left promiscuous mode [ 954.959552][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.019612][ T109] bridge_slave_0: left allmulticast mode [ 955.045044][ T109] bridge_slave_0: left promiscuous mode [ 955.110111][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.146414][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 955.178711][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 955.187935][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 955.251618][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 955.263135][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 955.775468][ T5784] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 955.840771][ T5824] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 955.855089][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.869669][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.889448][ T109] bond0 (unregistering): Released all slaves [ 955.941175][ T5784] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 955.951946][ T5784] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 955.962777][ T5784] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 955.973119][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.011110][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 956.046378][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.063983][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.075404][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.094689][ T5824] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 956.106696][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.127970][ T5824] usb 5-1: config 0 descriptor?? [ 956.565666][ T109] hsr_slave_0: left promiscuous mode [ 956.577158][ T109] hsr_slave_1: left promiscuous mode [ 956.605259][ T109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.632256][ T109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.174868][ T5824] usbhid 5-1:0.0: can't add hid device: -71 [ 957.181774][ T5824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 957.194996][ T5824] usb 5-1: USB disconnect, device number 17 [ 957.421810][ T5069] Bluetooth: hci5: command tx timeout [ 957.698104][ T109] team0 (unregistering): Port device team_slave_1 removed [ 957.754874][ T109] team0 (unregistering): Port device team_slave_0 removed [ 958.025635][ T7860] usb 2-1: USB disconnect, device number 34 [ 958.169496][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 958.344821][ T8761] hsr_slave_0: entered promiscuous mode [ 958.375718][ T8761] hsr_slave_1: entered promiscuous mode [ 958.414795][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 958.446862][ T8761] Cannot create hsr debugfs directory [ 959.096936][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.104993][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.114043][ T8811] bridge_slave_0: entered allmulticast mode [ 959.124521][ T8811] bridge_slave_0: entered promiscuous mode [ 959.275616][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.301008][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.323377][ T8811] bridge_slave_1: entered allmulticast mode [ 959.354301][ T8811] bridge_slave_1: entered promiscuous mode [ 959.481003][ T5069] Bluetooth: hci5: command tx timeout [ 959.653193][ T8880] netlink: 104 bytes leftover after parsing attributes in process `syz.1.614'. [ 961.731733][ T5069] Bluetooth: hci5: command tx timeout [ 962.464902][ T56] bridge_slave_1: left allmulticast mode [ 962.472909][ T56] bridge_slave_1: left promiscuous mode [ 962.479428][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.531705][ T56] bridge_slave_0: left allmulticast mode [ 962.537564][ T56] bridge_slave_0: left promiscuous mode [ 962.555058][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.766502][ T8884] netlink: 388 bytes leftover after parsing attributes in process `syz.1.616'. [ 963.911118][ T5069] Bluetooth: hci5: command tx timeout [ 969.257838][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.438209][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.892926][ T56] bond0 (unregistering): Released all slaves [ 970.158281][ T8811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.225892][ T8811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.461018][ T5826] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 970.640414][ T5826] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 970.652181][ T5826] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 970.667207][ T5826] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 970.678429][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.951982][ T56] hsr_slave_0: left promiscuous mode [ 972.031835][ T56] hsr_slave_1: left promiscuous mode [ 972.076445][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.132956][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.581456][ T5826] usb 2-1: USB disconnect, device number 35 [ 972.929125][ T7860] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 974.607821][ T7860] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 974.821615][ T8921] netlink: 388 bytes leftover after parsing attributes in process `syz.1.624'. [ 975.372592][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 975.382336][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 975.409630][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 975.434387][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 975.453977][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.523445][ T56] team0 (unregistering): Port device team_slave_1 removed [ 975.588769][ T56] team0 (unregistering): Port device team_slave_0 removed [ 976.063971][ T8923] fido_id[8923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 977.921798][ T49] Bluetooth: hci3: command tx timeout [ 978.280678][ T8937] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 978.657549][ T8811] team0: Port device team_slave_0 added [ 978.898215][ T8811] team0: Port device team_slave_1 added [ 979.579470][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.628816][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.664275][ T8811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.906224][ T8811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.960025][ T8811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.987776][ T49] Bluetooth: hci3: command tx timeout [ 980.150901][ T8811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.013255][ T8811] hsr_slave_0: entered promiscuous mode [ 981.044720][ T8811] hsr_slave_1: entered promiscuous mode [ 981.142818][ T8811] debugfs: 'hsr0' already exists in 'hsr' [ 982.141941][ T8953] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 982.143321][ T49] Bluetooth: hci3: command tx timeout [ 982.153192][ T8811] Cannot create hsr debugfs directory [ 983.514604][ T8862] chnl_net:caif_netlink_parms(): no params data found [ 984.202323][ T49] Bluetooth: hci3: command tx timeout [ 984.290824][ T5824] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 984.466734][ T5824] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 984.478774][ T57] bridge_slave_1: left allmulticast mode [ 984.482015][ T5824] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 984.491522][ T57] bridge_slave_1: left promiscuous mode [ 984.500048][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.517060][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 984.527292][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.539487][ T57] bridge_slave_0: left allmulticast mode [ 984.560842][ T57] bridge_slave_0: left promiscuous mode [ 984.567257][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.546150][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 986.744144][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.866322][ T5824] usb 5-1: USB disconnect, device number 18 [ 986.981346][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.017040][ T57] bond0 (unregistering): Released all slaves [ 988.350944][ T57] hsr_slave_0: left promiscuous mode [ 988.385903][ T57] hsr_slave_1: left promiscuous mode [ 988.442369][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.471760][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.612688][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 989.003705][ T57] team0 (unregistering): Port device team_slave_1 removed [ 989.043038][ T5826] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 989.052966][ T57] team0 (unregistering): Port device team_slave_0 removed [ 989.236004][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 989.253236][ T5826] usb 2-1: not running at top speed; connect to a high speed hub [ 989.277375][ T5826] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 989.310237][ T5826] usb 2-1: config 0 has no interface number 0 [ 989.317027][ T5826] usb 2-1: config 0 interface 205 has no altsetting 0 [ 989.350297][ T5826] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice= c.af [ 989.360334][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.369511][ T5826] usb 2-1: Product: syz [ 989.388594][ T5826] usb 2-1: Manufacturer: syz [ 989.394770][ T5826] usb 2-1: SerialNumber: syz [ 989.408556][ T5826] usb 2-1: config 0 descriptor?? [ 989.586138][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 989.681061][ T5826] ath6kl: Failed to submit usb control message: -71 [ 989.688013][ T5826] ath6kl: unable to send the bmi data to the device: -71 [ 989.720824][ T5826] ath6kl: Unable to send get target info: -71 [ 989.732881][ T5826] ath6kl: Failed to init ath6kl core: -71 [ 989.742298][ T5826] ath6kl_usb 2-1:0.205: probe with driver ath6kl_usb failed with error -71 [ 989.769493][ T5826] usb 2-1: USB disconnect, device number 36 [ 990.014543][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.028027][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.036669][ T8862] bridge_slave_0: entered allmulticast mode [ 990.050443][ T8862] bridge_slave_0: entered promiscuous mode [ 990.117992][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.126921][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.148895][ T8862] bridge_slave_1: entered allmulticast mode [ 990.163824][ T8862] bridge_slave_1: entered promiscuous mode [ 990.433056][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.532019][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.718704][ T8862] team0: Port device team_slave_0 added [ 990.744489][ T8862] team0: Port device team_slave_1 added [ 990.890181][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.898185][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.908960][ T8924] bridge_slave_0: entered allmulticast mode [ 990.919324][ T8924] bridge_slave_0: entered promiscuous mode [ 990.944401][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.954199][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.983482][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.006164][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.030987][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.065326][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.077984][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.089940][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.107604][ T8924] bridge_slave_1: entered allmulticast mode [ 991.127959][ T8924] bridge_slave_1: entered promiscuous mode [ 991.330192][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.411660][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.496497][ T8862] hsr_slave_0: entered promiscuous mode [ 991.512043][ T8862] hsr_slave_1: entered promiscuous mode [ 991.521309][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 991.527226][ T8862] Cannot create hsr debugfs directory [ 991.715191][ T8924] team0: Port device team_slave_0 added [ 991.764439][ T8924] team0: Port device team_slave_1 added [ 992.492675][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.519073][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.590618][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.637540][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.661067][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.729412][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.414896][ T5069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 993.424513][ T5069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 993.434315][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 993.448751][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 993.460419][ T5069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.993846][ T6501] bridge_slave_1: left allmulticast mode [ 994.999701][ T6501] bridge_slave_1: left promiscuous mode [ 995.091898][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.112801][ T6501] bridge_slave_0: left allmulticast mode [ 995.118727][ T6501] bridge_slave_0: left promiscuous mode [ 995.131621][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.161196][ T5826] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 995.337189][ T5826] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 995.348559][ T5826] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 995.383011][ T5826] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.408835][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.451154][ T6501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.500178][ T6501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.526330][ T6501] bond0 (unregistering): Released all slaves [ 995.565489][ T49] Bluetooth: hci2: command tx timeout [ 995.583320][ T8924] hsr_slave_0: entered promiscuous mode [ 995.613916][ T8924] hsr_slave_1: entered promiscuous mode [ 995.634229][ T8924] debugfs: 'hsr0' already exists in 'hsr' [ 995.640061][ T8924] Cannot create hsr debugfs directory [ 995.763800][ T6501] hsr_slave_0: left promiscuous mode [ 996.202221][ T6501] hsr_slave_1: left promiscuous mode [ 996.210471][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.243086][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.651233][ T49] Bluetooth: hci2: command tx timeout [ 999.473738][ T5826] usb 2-1: USB disconnect, device number 37 [ 999.725963][ T49] Bluetooth: hci2: command tx timeout [ 1002.000713][ T49] Bluetooth: hci2: command tx timeout [ 1002.328575][ T6501] team0 (unregistering): Port device team_slave_1 removed [ 1002.414976][ T6501] team0 (unregistering): Port device team_slave_0 removed [ 1002.551609][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 1002.622460][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.629125][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.737198][ T9025] netlink: 104 bytes leftover after parsing attributes in process `syz.1.644'. [ 1005.687918][ T8862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1006.741057][ T8862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1006.845421][ T8862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1007.047807][ T8862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1010.857869][ T8924] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1011.171870][ T8924] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1011.273202][ T8924] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1013.783783][ T8924] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1013.932056][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 1014.532326][ T5069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1014.545356][ T5069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1014.554954][ T5069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1014.571570][ T5069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1014.588581][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1016.680763][ T5069] Bluetooth: hci4: command tx timeout [ 1017.893579][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 1018.070904][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.101477][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.147802][ T8996] bridge_slave_0: entered allmulticast mode [ 1018.214155][ T8996] bridge_slave_0: entered promiscuous mode [ 1018.387194][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.407812][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.431262][ T8996] bridge_slave_1: entered allmulticast mode [ 1018.441628][ T8996] bridge_slave_1: entered promiscuous mode [ 1018.494916][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1018.512500][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1018.537473][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1018.551665][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1018.570473][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1018.761035][ T49] Bluetooth: hci4: command tx timeout [ 1019.243030][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.279808][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.402419][ T8386] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1019.429982][ T5966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.599615][ T8386] usb 2-1: Using ep0 maxpacket: 32 [ 1019.620461][ T8386] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.660460][ T8386] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1019.699764][ T5966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.724497][ T8386] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 1019.748643][ T8386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.759335][ T8386] usb 2-1: Product: syz [ 1019.764696][ T8386] usb 2-1: Manufacturer: syz [ 1019.769496][ T8386] usb 2-1: SerialNumber: syz [ 1019.872466][ T8996] team0: Port device team_slave_0 added [ 1020.025801][ T8386] usb 2-1: USB disconnect, device number 38 [ 1020.189738][ T5966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.239193][ T8996] team0: Port device team_slave_1 added [ 1020.391312][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.436449][ T5966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.681129][ T49] Bluetooth: hci6: command tx timeout [ 1020.744660][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.756660][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.796743][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.850098][ T49] Bluetooth: hci4: command tx timeout [ 1020.867044][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 1020.973373][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.993467][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.050730][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.017013][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.824675][ T49] Bluetooth: hci6: command tx timeout [ 1022.911056][ T8996] hsr_slave_0: entered promiscuous mode [ 1022.921474][ T8996] hsr_slave_1: entered promiscuous mode [ 1022.962108][ T49] Bluetooth: hci4: command tx timeout [ 1022.979202][ T8996] debugfs: 'hsr0' already exists in 'hsr' [ 1022.985497][ T8996] Cannot create hsr debugfs directory [ 1023.348125][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.355729][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.625144][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.632768][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.739214][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 1024.023242][ T5966] bridge_slave_1: left allmulticast mode [ 1024.037013][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.840724][ T49] Bluetooth: hci6: command tx timeout [ 1024.930280][ T5966] bridge_slave_0: left allmulticast mode [ 1024.989941][ T5966] bridge_slave_0: left promiscuous mode [ 1025.009410][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.044087][ T5966] vlan2: left promiscuous mode [ 1025.049088][ T5966] vlan0: left promiscuous mode [ 1025.063022][ T5966] bridge1: port 1(vlan2) entered disabled state [ 1025.685367][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.703237][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.719378][ T5966] bond0 (unregistering): Released all slaves [ 1026.774246][ T5966] hsr_slave_0: left promiscuous mode [ 1026.812762][ T5966] hsr_slave_1: left promiscuous mode [ 1026.832136][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.856031][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.875361][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.884126][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.923955][ T49] Bluetooth: hci6: command tx timeout [ 1026.948450][ T5966] veth1_macvtap: left promiscuous mode [ 1026.958834][ T5966] veth0_macvtap: left promiscuous mode [ 1026.968737][ T5966] veth1_vlan: left promiscuous mode [ 1026.974609][ T5966] veth0_vlan: left promiscuous mode [ 1028.075992][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 1028.161042][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 1028.560777][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.568368][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.576812][ T9071] bridge_slave_0: entered allmulticast mode [ 1028.620145][ T9071] bridge_slave_0: entered promiscuous mode [ 1028.680859][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.743258][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.751152][ T9071] bridge_slave_1: entered allmulticast mode [ 1028.784364][ T9071] bridge_slave_1: entered promiscuous mode [ 1029.402540][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.410460][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.446017][ T9087] bridge_slave_0: entered allmulticast mode [ 1029.458792][ T9087] bridge_slave_0: entered promiscuous mode [ 1029.490336][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.518519][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.534478][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 1029.590422][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.599207][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.607066][ T9087] bridge_slave_1: entered allmulticast mode [ 1029.617673][ T9087] bridge_slave_1: entered promiscuous mode [ 1029.752713][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.826041][ T9071] team0: Port device team_slave_0 added [ 1029.844366][ T9071] team0: Port device team_slave_1 added [ 1029.858614][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.012720][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.019893][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.048338][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.064233][ T8996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1030.100319][ T8996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1030.189397][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.199379][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.226230][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.315092][ T8996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1030.360882][ T9087] team0: Port device team_slave_0 added [ 1030.505118][ T8996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1030.588137][ T9087] team0: Port device team_slave_1 added [ 1030.903125][ T9071] hsr_slave_0: entered promiscuous mode [ 1030.913509][ T9071] hsr_slave_1: entered promiscuous mode [ 1030.922707][ T9071] debugfs: 'hsr0' already exists in 'hsr' [ 1030.928614][ T9071] Cannot create hsr debugfs directory [ 1030.999727][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.007185][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.051328][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.214707][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.256215][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.345316][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.276976][ T9087] hsr_slave_0: entered promiscuous mode [ 1032.289064][ T9087] hsr_slave_1: entered promiscuous mode [ 1032.305598][ T9087] debugfs: 'hsr0' already exists in 'hsr' [ 1032.312712][ T9087] Cannot create hsr debugfs directory [ 1033.102842][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.120442][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.131946][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.170224][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.196997][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.367759][ T5966] bridge_slave_1: left allmulticast mode [ 1033.380846][ T5966] bridge_slave_1: left promiscuous mode [ 1033.417841][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.475964][ T5966] bridge_slave_0: left allmulticast mode [ 1033.491911][ T5966] bridge_slave_0: left promiscuous mode [ 1033.511444][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.213157][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.247646][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.275705][ T5966] bond0 (unregistering): Released all slaves [ 1034.632417][ T5966] hsr_slave_0: left promiscuous mode [ 1034.640312][ T5966] hsr_slave_1: left promiscuous mode [ 1034.650130][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.675903][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.095729][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 1035.119669][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 1035.251333][ T5069] Bluetooth: hci1: command tx timeout [ 1036.140339][ T9071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1036.224365][ T9071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1036.514399][ T9071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1036.565291][ T9071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1037.320760][ T49] Bluetooth: hci1: command tx timeout [ 1037.349677][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.908612][ T9181] chnl_net:caif_netlink_parms(): no params data found [ 1038.150214][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.526103][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.533692][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.558561][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.566164][ T6501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.450902][ T49] Bluetooth: hci1: command tx timeout [ 1040.039845][ T9087] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1040.141313][ T5966] bridge_slave_1: left allmulticast mode [ 1040.147165][ T5966] bridge_slave_1: left promiscuous mode [ 1040.181685][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.211565][ T5966] bridge_slave_0: left allmulticast mode [ 1040.228295][ T5966] bridge_slave_0: left promiscuous mode [ 1040.239980][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.890183][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.933133][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.999069][ T5966] bond0 (unregistering): Released all slaves [ 1041.051712][ T9087] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1041.359652][ T9087] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1041.449734][ T5966] hsr_slave_0: left promiscuous mode [ 1041.475354][ T5966] hsr_slave_1: left promiscuous mode [ 1041.495258][ T49] Bluetooth: hci1: command tx timeout [ 1041.504586][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.519121][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.297913][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 1042.348177][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 1042.593793][ T5827] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1042.965457][ T5827] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1043.946619][ T9243] fido_id[9243]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1044.276922][ T9181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.315674][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.342830][ T9181] bridge_slave_0: entered allmulticast mode [ 1044.389800][ T9181] bridge_slave_0: entered promiscuous mode [ 1044.450744][ T9087] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1044.553908][ T9181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.563768][ T9181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.577431][ T9181] bridge_slave_1: entered allmulticast mode [ 1044.592218][ T9181] bridge_slave_1: entered promiscuous mode [ 1045.099980][ T9181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.218472][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.262946][ T9181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.633365][ T9181] team0: Port device team_slave_0 added [ 1045.748745][ T9181] team0: Port device team_slave_1 added [ 1045.877515][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.479804][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.487475][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.581444][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.588923][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.663835][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.671320][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.726856][ T9181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.811158][ T9181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.818260][ T9181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.900849][ T9181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.447713][ T9181] hsr_slave_0: entered promiscuous mode [ 1047.476993][ T9181] hsr_slave_1: entered promiscuous mode [ 1047.507309][ T9181] debugfs: 'hsr0' already exists in 'hsr' [ 1047.514158][ T9181] Cannot create hsr debugfs directory [ 1047.919540][ T7860] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1048.394262][ T7860] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1049.130939][ T9277] fido_id[9277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1049.498061][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.909399][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.531746][ T7894] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1050.542002][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.669148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.676729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.749020][ T7894] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.813149][ T7894] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1050.854379][ T7894] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1050.868414][ T7894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.963879][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.971371][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.646237][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.487945][ T9181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1052.595453][ T9181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1052.772815][ T9181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1052.954363][ T9181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1054.813383][ T9071] veth0_vlan: entered promiscuous mode [ 1054.974973][ T5069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1054.993210][ T5069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1055.012273][ T5069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1055.026893][ T5069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1055.040319][ T5069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1055.080200][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.173421][ T9071] veth1_vlan: entered promiscuous mode [ 1055.435124][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.562928][ T9181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.946573][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.954205][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.091251][ T9071] veth0_macvtap: entered promiscuous mode [ 1056.176839][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.184342][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.277461][ T9071] veth1_macvtap: entered promiscuous mode [ 1057.082517][ T5069] Bluetooth: hci3: command tx timeout [ 1057.319800][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.543636][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.606866][ T7894] usb 2-1: USB disconnect, device number 39 [ 1057.825667][ T109] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.982502][ T109] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.003244][ T109] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.145251][ T109] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.317183][ T56] bridge_slave_1: left allmulticast mode [ 1058.340973][ T56] bridge_slave_1: left promiscuous mode [ 1058.347484][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.391839][ T56] bridge_slave_0: left allmulticast mode [ 1058.397643][ T56] bridge_slave_0: left promiscuous mode [ 1058.424866][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.913740][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.936020][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.985289][ T56] bond0 (unregistering): Released all slaves [ 1059.162328][ T5069] Bluetooth: hci3: command tx timeout [ 1059.610728][ T9324] chnl_net:caif_netlink_parms(): no params data found [ 1059.936753][ T56] hsr_slave_0: left promiscuous mode [ 1059.951854][ T56] hsr_slave_1: left promiscuous mode [ 1059.982739][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.047440][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.976949][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1061.047110][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1061.330790][ T5069] Bluetooth: hci3: command tx timeout [ 1061.692687][ T9087] veth0_vlan: entered promiscuous mode [ 1061.988942][ T9087] veth1_vlan: entered promiscuous mode [ 1062.234081][ T9181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.744069][ T9087] veth0_macvtap: entered promiscuous mode [ 1062.849072][ T9087] veth1_macvtap: entered promiscuous mode [ 1063.271389][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.279017][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.324898][ T9324] bridge_slave_0: entered allmulticast mode [ 1063.353800][ T9324] bridge_slave_0: entered promiscuous mode [ 1063.406326][ T5069] Bluetooth: hci3: command tx timeout [ 1063.478955][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.529596][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.564081][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.593606][ T9324] bridge_slave_1: entered allmulticast mode [ 1063.617863][ T9324] bridge_slave_1: entered promiscuous mode [ 1063.925462][ T9324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.987849][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.027344][ T9324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.068960][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.077306][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.362973][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.397223][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.461680][ T9324] team0: Port device team_slave_0 added [ 1064.477162][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.500116][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.558375][ T9324] team0: Port device team_slave_1 added [ 1064.831806][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.838919][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.011430][ T9324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.135465][ T9324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.164677][ T9324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.210047][ T9324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.827717][ T9324] hsr_slave_0: entered promiscuous mode [ 1065.862423][ T9324] hsr_slave_1: entered promiscuous mode [ 1065.883492][ T9324] debugfs: 'hsr0' already exists in 'hsr' [ 1065.889303][ T9324] Cannot create hsr debugfs directory [ 1066.044160][ T9181] veth0_vlan: entered promiscuous mode [ 1066.381723][ T9181] veth1_vlan: entered promiscuous mode [ 1067.132232][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.155895][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.501996][ T9181] veth0_macvtap: entered promiscuous mode [ 1067.652010][ T9181] veth1_macvtap: entered promiscuous mode [ 1067.681212][ T5882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.689204][ T5882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.896016][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.963653][ T9181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.337133][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.384965][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.435430][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.494447][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.800975][ T9324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1068.892375][ T9324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1068.967117][ T9324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1069.052005][ T9324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1070.579231][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.809938][ T9324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.000066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.007659][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.164586][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.172202][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.406875][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.423429][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.466308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.552810][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.055574][ T9421] netlink: 104 bytes leftover after parsing attributes in process `syz.1.673'. [ 1073.938138][ T9324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1075.764510][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.224129][ T7816] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1083.323557][ T9207] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1084.318541][ T7816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.301093][ T7816] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1085.310260][ T7816] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1085.510304][ T7816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.528915][ T7816] usb 2-1: config 0 descriptor?? [ 1085.653692][ T9207] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1086.432746][ T7816] usb 2-1: can't set config #0, error -71 [ 1086.506578][ T7816] usb 2-1: USB disconnect, device number 40 [ 1088.607016][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1089.133253][ T9324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.240934][ T9207] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1089.699636][ T9207] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.025031][ T9207] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1090.029749][ T9207] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.037464][ T9207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.880307][ T794] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1094.054425][ T794] usb 7-1: device descriptor read/all, error -71 [ 1095.281737][ T9207] usb 2-1: USB disconnect, device number 41 [ 1099.415943][ T9503] netlink: 196 bytes leftover after parsing attributes in process `syz.1.686'. [ 1101.691598][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1101.701024][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1101.711509][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1101.725170][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1101.736604][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.881108][ T49] Bluetooth: hci2: command tx timeout [ 1104.233132][ T9207] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1105.940338][ T9207] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1105.963016][ T49] Bluetooth: hci2: command tx timeout [ 1106.025988][ T9207] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1106.081294][ T9207] usb 7-1: can't read configurations, error -71 [ 1106.511176][ T9324] veth0_vlan: entered promiscuous mode [ 1107.936772][ T9324] veth1_vlan: entered promiscuous mode [ 1108.040654][ T49] Bluetooth: hci2: command tx timeout [ 1108.663617][ T9324] veth0_macvtap: entered promiscuous mode [ 1108.805521][ T9324] veth1_macvtap: entered promiscuous mode [ 1109.027364][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.213251][ T9513] chnl_net:caif_netlink_parms(): no params data found [ 1110.126101][ T49] Bluetooth: hci2: command tx timeout [ 1110.305780][ T9324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.288462][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.599079][ T6045] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.723463][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.787393][ T5944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.092874][ T6045] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.334019][ T5944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.142280][ T6045] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.479373][ T6045] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.490753][ T6045] bridge_slave_1: left allmulticast mode [ 1116.497684][ T6045] bridge_slave_1: left promiscuous mode [ 1116.511497][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.544274][ T6045] bridge_slave_0: left allmulticast mode [ 1116.550078][ T6045] bridge_slave_0: left promiscuous mode [ 1116.581871][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.068513][ T9607] netlink: 196 bytes leftover after parsing attributes in process `syz.1.705'. [ 1123.277565][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1123.302909][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1123.313143][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1123.343425][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1123.362704][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1123.600061][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.705025][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.608500][ T6045] bond0 (unregistering): Released all slaves [ 1124.934863][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.027475][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.079355][ T9513] bridge_slave_0: entered allmulticast mode [ 1125.186750][ T9513] bridge_slave_0: entered promiscuous mode [ 1125.482514][ T5069] Bluetooth: hci1: command tx timeout [ 1125.558530][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.577314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.911193][ T6045] hsr_slave_0: left promiscuous mode [ 1125.959943][ T6045] hsr_slave_1: left promiscuous mode [ 1126.066670][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.075320][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.115403][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.164560][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.377971][ T6045] veth1_macvtap: left promiscuous mode [ 1126.385881][ T6045] veth0_macvtap: left promiscuous mode [ 1126.392670][ T6045] veth1_vlan: left promiscuous mode [ 1126.402715][ T6045] veth0_vlan: left promiscuous mode [ 1127.561019][ T5069] Bluetooth: hci1: command tx timeout [ 1128.998839][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 1129.175840][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 1129.640982][ T5069] Bluetooth: hci1: command tx timeout [ 1130.282546][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.298514][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.323877][ T9513] bridge_slave_1: entered allmulticast mode [ 1130.356962][ T9513] bridge_slave_1: entered promiscuous mode [ 1131.122637][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.304217][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.459743][ T5069] Bluetooth: hci1: command tx timeout [ 1136.534461][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.8.712'. [ 1137.074019][ T9513] team0: Port device team_slave_0 added [ 1137.121841][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.8.712'. [ 1137.891471][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1138.080200][ T9513] team0: Port device team_slave_1 added [ 1140.496569][ T6045] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.672383][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.719448][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.778674][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.998546][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.088425][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.257896][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.576194][ T6045] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.561997][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 1144.780930][ T6045] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.046823][ T6045] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.646577][ T9513] hsr_slave_0: entered promiscuous mode [ 1145.722579][ T9513] hsr_slave_1: entered promiscuous mode [ 1145.821884][ T9513] debugfs: 'hsr0' already exists in 'hsr' [ 1145.827830][ T9513] Cannot create hsr debugfs directory [ 1147.610434][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 1147.711360][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 1149.631703][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.6.725'. [ 1153.110798][ T5882] ===================================================== [ 1153.118210][ T5882] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x77e/0xf00 [ 1153.126767][ T5882] n_tty_receive_buf_closing+0x77e/0xf00 [ 1153.132726][ T5882] n_tty_receive_buf_common+0x19c6/0x2610 [ 1153.138650][ T5882] n_tty_receive_buf2+0x4c/0x60 [ 1153.143837][ T5882] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1153.149269][ T5882] tty_port_default_receive_buf+0xd7/0x1a0 [ 1153.160043][ T5882] flush_to_ldisc+0x43e/0xe40 [ 1153.166657][ T5882] process_scheduled_works+0xb82/0x1e80 [ 1153.172605][ T5882] worker_thread+0xee4/0x1590 [ 1153.177485][ T5882] kthread+0x53f/0x600 [ 1153.182000][ T5882] ret_from_fork+0x20f/0x910 [ 1153.186850][ T5882] ret_from_fork_asm+0x1a/0x30 [ 1153.191957][ T5882] [ 1153.194372][ T5882] Uninit was created at: [ 1153.198926][ T5882] __kmalloc_noprof+0x486/0x1680 [ 1153.204191][ T5882] __tty_buffer_request_room+0x3d4/0x7a0 [ 1153.210087][ T5882] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1153.216509][ T5882] uart_insert_char+0x368/0x930 [ 1153.221842][ T5882] serial8250_read_char+0x1ba/0x670 [ 1153.227289][ T5882] serial8250_handle_irq_locked+0x6d4/0xa40 [ 1153.233497][ T5882] serial8250_handle_irq+0x187/0x730 [ 1153.239011][ T5882] serial8250_default_handle_irq+0x116/0x370 [ 1153.245420][ T5882] serial8250_interrupt+0xcb/0x420 [ 1153.250821][ T5882] __handle_irq_event_percpu+0x13c/0xf90 [ 1153.261578][ T5882] handle_irq_event+0xe0/0x2a0 [ 1153.266532][ T5882] handle_edge_irq+0x2a9/0xb30 [ 1153.273041][ T5882] __common_interrupt+0x9d/0x180 [ 1153.278241][ T5882] common_interrupt+0x94/0xb0 [ 1153.283255][ T5882] asm_common_interrupt+0x2b/0x40 [ 1153.288452][ T5882] [ 1153.291026][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1153.300770][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1153.311085][ T5882] Workqueue: events_unbound flush_to_ldisc [ 1153.317122][ T5882] ===================================================== [ 1153.324394][ T5882] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1154.822095][ T5882] Kernel panic - not syncing: kmsan.panic set ... [ 1154.828789][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/u8:9 Tainted: G B syzkaller #0 PREEMPT(full) [ 1154.840039][ T5882] Tainted: [B]=BAD_PAGE [ 1154.844300][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1154.854511][ T5882] Workqueue: events_unbound flush_to_ldisc [ 1154.860635][ T5882] Call Trace: [ 1154.864073][ T5882] [ 1154.867124][ T5882] __dump_stack+0x26/0x30 [ 1154.871674][ T5882] dump_stack_lvl+0x50/0x1c0 [ 1154.876474][ T5882] ? dump_stack+0x12/0x25 [ 1154.881022][ T5882] dump_stack+0x1e/0x25 [ 1154.885401][ T5882] vpanic+0x7b4/0x1430 [ 1154.889714][ T5882] panic+0x15d/0x160 [ 1154.893904][ T5882] kmsan_report+0x31a/0x320 [ 1154.898652][ T5882] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1154.904712][ T5882] ? __msan_warning+0x1b/0x30 [ 1154.909578][ T5882] ? n_tty_receive_buf_closing+0x77e/0xf00 [ 1154.915584][ T5882] ? n_tty_receive_buf_common+0x19c6/0x2610 [ 1154.921671][ T5882] ? n_tty_receive_buf2+0x4c/0x60 [ 1154.926871][ T5882] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1154.932461][ T5882] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1154.938729][ T5882] ? flush_to_ldisc+0x43e/0xe40 [ 1154.943821][ T5882] ? process_scheduled_works+0xb82/0x1e80 [ 1154.949723][ T5882] ? worker_thread+0xee4/0x1590 [ 1154.954754][ T5882] ? kthread+0x53f/0x600 [ 1154.959187][ T5882] ? ret_from_fork+0x20f/0x910 [ 1154.964126][ T5882] ? ret_from_fork_asm+0x1a/0x30 [ 1154.969271][ T5882] ? irqentry_exit+0x8f/0x6c0 [ 1154.974134][ T5882] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1154.980700][ T5882] ? trace_reschedule_exit+0x25/0x1f0 [ 1154.986290][ T5882] ? sysvec_reschedule_ipi+0x74/0x80 [ 1154.991769][ T5882] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1154.997509][ T5882] ? virt_to_page_or_null+0xd7/0x170 [ 1155.003022][ T5882] ? kmsan_get_metadata+0xf1/0x160 [ 1155.008357][ T5882] __msan_warning+0x1b/0x30 [ 1155.013089][ T5882] n_tty_receive_buf_closing+0x77e/0xf00 [ 1155.018990][ T5882] n_tty_receive_buf_common+0x19c6/0x2610 [ 1155.025015][ T5882] n_tty_receive_buf2+0x4c/0x60 [ 1155.030053][ T5882] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1155.035770][ T5882] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1155.041206][ T5882] tty_port_default_receive_buf+0xd7/0x1a0 [ 1155.047250][ T5882] flush_to_ldisc+0x43e/0xe40 [ 1155.052166][ T5882] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1155.058806][ T5882] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1155.064264][ T5882] process_scheduled_works+0xb82/0x1e80 [ 1155.070073][ T5882] worker_thread+0xee4/0x1590 [ 1155.074960][ T5882] kthread+0x53f/0x600 [ 1155.079248][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 1155.084565][ T5882] ? __pfx_kthread+0x10/0x10 [ 1155.089365][ T5882] ret_from_fork+0x20f/0x910 [ 1155.094147][ T5882] ? __switch_to+0x51c/0x750 [ 1155.099131][ T5882] ? __pfx_kthread+0x10/0x10 [ 1155.103930][ T5882] ret_from_fork_asm+0x1a/0x30 [ 1155.108940][ T5882] [ 1155.112776][ T5882] Kernel Offset: disabled [ 1155.117168][ T5882] Rebooting in 86400 seconds..