last executing test programs: 4m59.463046122s ago: executing program 1 (id=117): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038c08", 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x3fc, 0xba}]}}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r8, 0xffffffffffffffff, 0x0) 4m58.30337671s ago: executing program 1 (id=120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 4m57.920935119s ago: executing program 1 (id=121): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20000000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, 0x0, 0x0) umount2(0x0, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x40384708, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x0, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) close(r5) setsockopt$sock_linger(r4, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4m57.64716602s ago: executing program 1 (id=123): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x5e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) 4m57.192882995s ago: executing program 1 (id=125): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="06", 0x1}], 0x1, 0x0) 4m56.102503646s ago: executing program 1 (id=130): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) 4m40.759874232s ago: executing program 32 (id=130): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) 1m9.400969674s ago: executing program 3 (id=1202): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0xfffffffe, 0x110002, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x4, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0xfffffdca) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x8000, 0x2, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 1m9.066157371s ago: executing program 3 (id=1205): unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x99b, 0x3}) 1m8.868038096s ago: executing program 3 (id=1208): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043209aaaaaaaaaa10100603dc4d782181cd5e5a6119f9a60d5b661a08b7379229f2cc323f3fa2a727e0b01a951997d4d0f0e6c7e1b8209f30a75dfc91201b26007373039d1622bf1a156012f42eb81b22a0b3f70fbb63aa387b91eda11a795a504b4409641ed21627d5349b8f3d99cae1433abf374c1a39672ab5e6b8a7f9e25e5956f5278535599fe6968922b67bfbf75dd9920f9250ddf57420957924847f45f470ad6c7d924c4a3e33"], 0xc) r2 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f00000023c0)='dns_resolver\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r2, 0xede, 0x1000}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'blake2s-128-arm\x00'}}, &(0x7f00000003c0)="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", &(0x7f00000013c0)=""/4096) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(cbc(blowfish))\x00'}, 0x58) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x6) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sched_rr_get_interval(0x0, &(0x7f0000000340)) 1m6.764648477s ago: executing program 3 (id=1220): r0 = fsopen(0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6ebe000400442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0x7a) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc04c5609, &(0x7f0000000240)=@overlay={0x2, 0x2, 0x4, 0x800, 0xcc8, {r7, r8/1000+10000}, {0x4, 0x0, 0xfd, 0x7, 0x82, 0x7f, "d9b041d3"}, 0x54f36284, 0x3, {}, 0xcb0}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) 1m1.877880194s ago: executing program 3 (id=1250): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') 59.790274237s ago: executing program 3 (id=1257): socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 59.17793765s ago: executing program 2 (id=1262): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) recvmmsg$unix(r2, 0x0, 0x0, 0x1, &(0x7f0000004a00)={0x0, 0x989680}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r4}) sendto$inet6(r5, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 44.563185021s ago: executing program 33 (id=1257): socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x980, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 37.800588718s ago: executing program 34 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r4}) sendto$inet6(r5, &(0x7f00000002c0)='E', 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6.498607043s ago: executing program 4 (id=1685): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000005c0)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000c00)=0x7, 0xb8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 4.809172372s ago: executing program 4 (id=1698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2.606340746s ago: executing program 4 (id=1708): creat(&(0x7f00000011c0)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8402, &(0x7f0000000380)=ANY=[@ANYBLOB='nointr']) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xf0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xe2) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe3) r4 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x2, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d000100ff000000000000100a0010000100001d00000000d5114d8c5795db676f6919d2b4d9d99e5ac9"], 0x1c}}, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100008000000000000000ffff0200032207000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r12, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(r12, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0xa, 0x12}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r13, &(0x7f0000000140)='0x1d6b\x00', 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.640440879s ago: executing program 0 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.639351866s ago: executing program 4 (id=1716): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_gettime(0xfffffffffffffffb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r1, 0x249f0, 0x0) 1.409157247s ago: executing program 0 (id=1717): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) acct(&(0x7f0000002240)='./file0/file0/file0\x00') read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0xffffffffffffffda, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x10, 0x81}}, 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x0, 0xff, 0x0, 0xf, 0xfd8c}, &(0x7f0000000100)=0x20) timer_settime(0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) socket$tipc(0x1e, 0x5, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x16) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') 1.270036665s ago: executing program 4 (id=1718): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.14398685s ago: executing program 0 (id=1719): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000002c00)=[{&(0x7f0000001c00)="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", 0x1000}], 0x1) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10002, 0x1000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x5, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280), 0x0) modify_ldt$read(0x0, 0x0, 0x0) 997.069013ms ago: executing program 0 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 841.747888ms ago: executing program 0 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x80000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) syz_usb_connect$cdc_ecm(0x0, 0x59, 0x0, 0x0) 77.414805ms ago: executing program 0 (id=1722): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 0s ago: executing program 4 (id=1723): fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 64.791721][ T5257] 8021q: adding VLAN 0 to HW filter on device bond0 Starting crond: [ 64.838513][ T5257] eql: remember to turn off Van-Jacobson compression on your slave devices OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. syzkaller login: [ 91.984979][ T820] cfg80211: failed to load regulatory.db [ 92.893116][ T5581] cgroup: Unknown subsys name 'net' [ 93.151632][ T5581] cgroup: Unknown subsys name 'cpuset' [ 93.216419][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.201126][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.964267][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.979857][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.980140][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.029854][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.031286][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.032787][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.033614][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.033696][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.058511][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.064315][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.064344][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.087246][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.095961][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.095977][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.098531][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.100588][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.106120][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.114380][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.135064][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.144256][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.144655][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.154308][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.154595][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.176899][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.184864][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.367283][ T5607] Bluetooth: hci3: command tx timeout [ 100.445813][ T5607] Bluetooth: hci1: command tx timeout [ 100.445839][ T5601] Bluetooth: hci2: command tx timeout [ 100.446403][ T5609] Bluetooth: hci0: command tx timeout [ 100.446416][ T5601] Bluetooth: hci4: command tx timeout [ 100.978901][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.979847][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.979986][ T5599] bridge_slave_0: entered allmulticast mode [ 100.982011][ T5599] bridge_slave_0: entered promiscuous mode [ 101.062104][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.062218][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.062374][ T5599] bridge_slave_1: entered allmulticast mode [ 101.064224][ T5599] bridge_slave_1: entered promiscuous mode [ 101.123603][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.123690][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.123813][ T5597] bridge_slave_0: entered allmulticast mode [ 101.128192][ T5597] bridge_slave_0: entered promiscuous mode [ 101.178177][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.178354][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.178723][ T5596] bridge_slave_0: entered allmulticast mode [ 101.180682][ T5596] bridge_slave_0: entered promiscuous mode [ 101.204875][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.205198][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.218471][ T5597] bridge_slave_1: entered allmulticast mode [ 101.231268][ T5597] bridge_slave_1: entered promiscuous mode [ 101.274752][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.274873][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.274998][ T5596] bridge_slave_1: entered allmulticast mode [ 101.286288][ T5596] bridge_slave_1: entered promiscuous mode [ 101.334924][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.403587][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.403844][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.404022][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.404148][ T5600] bridge_slave_0: entered allmulticast mode [ 101.414275][ T5600] bridge_slave_0: entered promiscuous mode [ 101.482895][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.508266][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.508404][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.508878][ T5600] bridge_slave_1: entered allmulticast mode [ 101.510709][ T5600] bridge_slave_1: entered promiscuous mode [ 101.514983][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.515210][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.515338][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.574036][ T5598] bridge_slave_0: entered allmulticast mode [ 101.579755][ T5598] bridge_slave_0: entered promiscuous mode [ 101.593505][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.639332][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.641479][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.641709][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.641877][ T5598] bridge_slave_1: entered allmulticast mode [ 101.644183][ T5598] bridge_slave_1: entered promiscuous mode [ 101.692504][ T5599] team0: Port device team_slave_0 added [ 101.783386][ T5599] team0: Port device team_slave_1 added [ 101.793035][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.838890][ T5597] team0: Port device team_slave_0 added [ 101.861993][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.864052][ T5596] team0: Port device team_slave_0 added [ 101.884127][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.890791][ T5597] team0: Port device team_slave_1 added [ 101.932633][ T5596] team0: Port device team_slave_1 added [ 101.935231][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.964457][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.964470][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.964490][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.065208][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.065227][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.065256][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.087345][ T5600] team0: Port device team_slave_0 added [ 102.140936][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.140954][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.140982][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.179524][ T5600] team0: Port device team_slave_1 added [ 102.182283][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.182317][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.182391][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.211205][ T5598] team0: Port device team_slave_0 added [ 102.216478][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.216528][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.216599][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.292397][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.292410][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.292430][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.295103][ T5598] team0: Port device team_slave_1 added [ 102.445877][ T5607] Bluetooth: hci3: command tx timeout [ 102.525873][ T5607] Bluetooth: hci0: command tx timeout [ 102.525911][ T5607] Bluetooth: hci1: command tx timeout [ 102.525935][ T5607] Bluetooth: hci4: command tx timeout [ 102.525957][ T5607] Bluetooth: hci2: command tx timeout [ 102.757297][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.757310][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.757330][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.839691][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.839709][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.839737][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.841675][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.841686][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.841705][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.935164][ T5599] hsr_slave_0: entered promiscuous mode [ 102.941899][ T5599] hsr_slave_1: entered promiscuous mode [ 102.979142][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.979155][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.979175][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.073155][ T5597] hsr_slave_0: entered promiscuous mode [ 103.074200][ T5597] hsr_slave_1: entered promiscuous mode [ 103.074982][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 103.075067][ T5597] Cannot create hsr debugfs directory [ 103.101031][ T5596] hsr_slave_0: entered promiscuous mode [ 103.102030][ T5596] hsr_slave_1: entered promiscuous mode [ 103.102708][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 103.102725][ T5596] Cannot create hsr debugfs directory [ 103.234182][ T5600] hsr_slave_0: entered promiscuous mode [ 103.235252][ T5600] hsr_slave_1: entered promiscuous mode [ 103.243243][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 103.243324][ T5600] Cannot create hsr debugfs directory [ 103.332882][ T5598] hsr_slave_0: entered promiscuous mode [ 103.333951][ T5598] hsr_slave_1: entered promiscuous mode [ 103.334646][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 103.334663][ T5598] Cannot create hsr debugfs directory [ 104.298125][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.351395][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.365468][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.419977][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.423771][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.452862][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.483509][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.511143][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.536086][ T4911] Bluetooth: hci3: command tx timeout [ 104.606087][ T5607] Bluetooth: hci4: command tx timeout [ 104.606120][ T5607] Bluetooth: hci1: command tx timeout [ 104.606143][ T5607] Bluetooth: hci0: command tx timeout [ 104.606309][ T4911] Bluetooth: hci2: command tx timeout [ 104.690802][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.721207][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.727947][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.763538][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.779659][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.813888][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.842409][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.879401][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.057233][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.091208][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.109779][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.150802][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.164542][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.192812][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.223901][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.255538][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.439701][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.476867][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.492744][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.520567][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.525027][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.562471][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.616805][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.637459][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.680518][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.835256][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.851643][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.879951][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.898237][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.923628][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.940179][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.995189][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.012230][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.039672][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.070179][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.070363][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.121081][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.143517][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.143609][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.263669][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.328645][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.328795][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.375378][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.394795][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.394978][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.542002][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.616554][ T5601] Bluetooth: hci3: command tx timeout [ 106.632381][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.632579][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.691019][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.697687][ T5601] Bluetooth: hci2: command tx timeout [ 106.697720][ T5601] Bluetooth: hci0: command tx timeout [ 106.697745][ T5601] Bluetooth: hci1: command tx timeout [ 106.697768][ T5601] Bluetooth: hci4: command tx timeout [ 106.744385][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.744501][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.904176][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.961281][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.985597][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.008149][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.133605][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.133819][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.253481][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.339454][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.340600][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.462154][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.462289][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.560811][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.155240][ T5599] veth0_vlan: entered promiscuous mode [ 108.263459][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.307142][ T5599] veth1_vlan: entered promiscuous mode [ 108.583431][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.584208][ T5599] veth0_macvtap: entered promiscuous mode [ 108.678062][ T5599] veth1_macvtap: entered promiscuous mode [ 108.713227][ T5596] veth0_vlan: entered promiscuous mode [ 108.825242][ T5596] veth1_vlan: entered promiscuous mode [ 108.839431][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.884507][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.981798][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.036144][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.039584][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042620][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.188612][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.423882][ T5596] veth0_macvtap: entered promiscuous mode [ 109.474583][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.513858][ T5596] veth1_macvtap: entered promiscuous mode [ 109.654223][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.654250][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.701228][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.751183][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.841167][ T1180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.842600][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.842619][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.856646][ T1180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.865440][ T5600] veth0_vlan: entered promiscuous mode [ 109.891675][ T5597] veth0_vlan: entered promiscuous mode [ 109.895251][ T1180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.922184][ T1180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.030729][ T5598] veth0_vlan: entered promiscuous mode [ 110.032722][ T5600] veth1_vlan: entered promiscuous mode [ 110.051220][ T5597] veth1_vlan: entered promiscuous mode [ 110.269790][ T5598] veth1_vlan: entered promiscuous mode [ 110.580416][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.580435][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.628801][ T5600] veth0_macvtap: entered promiscuous mode [ 110.647687][ T5597] veth0_macvtap: entered promiscuous mode [ 110.715517][ T5600] veth1_macvtap: entered promiscuous mode [ 110.733829][ T5597] veth1_macvtap: entered promiscuous mode [ 110.901263][ T1438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.901285][ T1438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.943641][ T5598] veth0_macvtap: entered promiscuous mode [ 110.990693][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.038228][ T5598] veth1_macvtap: entered promiscuous mode [ 111.088056][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.134249][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.191653][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.290282][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.323384][ T212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.340634][ T212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.366813][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.387889][ T212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.432946][ T212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.486791][ T212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.494771][ T3420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.526758][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.614953][ T3420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.827837][ T212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.226423][ T212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.282277][ T212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.318685][ T5806] syz_tun: entered allmulticast mode [ 112.319830][ T212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.238400][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.238423][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.698682][ T1513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.698704][ T1513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.899595][ T1513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.899630][ T1513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.252645][ T5824] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.357822][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.357844][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.495585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.495610][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.871389][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.871413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.741087][ T5851] Zero length message leads to an empty skb [ 124.641974][ T5921] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 125.373878][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 127.103776][ T5944] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.516033][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 127.579050][ T5944] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 127.579083][ T5944] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 127.579104][ T5944] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 127.579159][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.579182][ T5944] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.579207][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.579252][ T5944] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 127.579276][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.809087][ T5944] usb 4-1: config 0 descriptor?? [ 128.433939][ T5971] binder: BINDER_SET_CONTEXT_MGR already set [ 128.433955][ T5971] binder: 5969:5971 ioctl 4018620d 200000004a80 returned -16 [ 128.479660][ T5944] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 128.647219][ T5944] usb 4-1: USB disconnect, device number 2 [ 129.151012][ T5944] usblp0: removed [ 130.427524][ T6006] syz.2.70 uses obsolete (PF_INET,SOCK_PACKET) [ 130.521816][ T6004] kAFS: unable to lookup cell '(,c¾Ì' [ 131.891018][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 131.923914][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 131.970614][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 131.970826][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 132.009940][ T6020] ceph: No mds server is up or the cluster is laggy [ 132.234249][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 132.234451][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 132.838366][ T6039] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.949320][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949446][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.958516][ T6066] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.295852][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.516774][ T5603] usb 3-1: Using ep0 maxpacket: 8 [ 135.540791][ T5603] usb 3-1: config 0 has no interfaces? [ 135.540834][ T5603] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.540860][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.662660][ T5603] usb 3-1: config 0 descriptor?? [ 135.957898][ T5603] usb 3-1: USB disconnect, device number 2 [ 136.077039][ T6076] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.658486][ T5729] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 136.658526][ T5729] hid-generic 0000:0000:0000.0001: unexpected long global item [ 136.659314][ T5729] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 136.715825][ T5944] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.506187][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.506223][ T5944] usb 2-1: config 0 has no interfaces? [ 137.506256][ T5944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.506281][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.393467][ T5944] usb 2-1: config 0 descriptor?? [ 138.631383][ T5729] usb 2-1: USB disconnect, device number 2 [ 139.273502][ T6098] evm: overlay not supported [ 139.427126][ T5603] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.522078][ T6104] ======================================================= [ 139.522078][ T6104] WARNING: The mand mount option has been deprecated and [ 139.522078][ T6104] and is ignored by this kernel. Remove the mand [ 139.522078][ T6104] option from the mount to silence this warning. [ 139.522078][ T6104] ======================================================= [ 139.583399][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.583435][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.583459][ T5603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.583504][ T5603] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.583527][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.646957][ T6108] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 139.647016][ T6108] overlayfs: overlapping lowerdir path [ 139.857574][ T6113] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.908592][ T5603] usb 1-1: config 0 descriptor?? [ 140.509944][ T6118] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.570409][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570447][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570477][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570504][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570532][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570559][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570586][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570615][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.570643][ T5603] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 140.841989][ T5603] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 140.958209][ T5603] usb 1-1: USB disconnect, device number 2 [ 141.423584][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.488170][ T5786] hid_parser_main: 6 callbacks suppressed [ 142.488194][ T5786] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.488225][ T5786] hid-generic 0000:0000:0000.0003: unexpected long global item [ 142.488891][ T5786] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 143.477384][ T5944] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.737623][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.737652][ T5944] usb 5-1: config 0 has no interfaces? [ 143.737685][ T5944] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.737710][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.841019][ T5944] usb 5-1: config 0 descriptor?? [ 143.993736][ T6161] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.129429][ T5944] usb 5-1: USB disconnect, device number 2 [ 144.317395][ T6164] geneve2: entered promiscuous mode [ 144.323917][ T3355] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 59660 - 0 [ 144.326937][ T1024] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 59660 - 0 [ 144.327102][ T1024] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 59660 - 0 [ 144.327204][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 59660 - 0 [ 144.422801][ T6162] lo speed is unknown, defaulting to 1000 [ 144.422879][ T6162] lo speed is unknown, defaulting to 1000 [ 144.457891][ T6162] lo speed is unknown, defaulting to 1000 [ 144.570252][ T6162] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 144.570283][ T6162] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 144.570316][ T6162] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 144.879974][ T6162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.118401][ T6162] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.933531][ T6162] lo speed is unknown, defaulting to 1000 [ 145.988331][ T6162] lo speed is unknown, defaulting to 1000 [ 146.038994][ T6162] lo speed is unknown, defaulting to 1000 [ 146.072165][ T6162] lo speed is unknown, defaulting to 1000 [ 146.122049][ T6162] lo speed is unknown, defaulting to 1000 [ 148.892832][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.701537][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 153.327346][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.989488][ T6234] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.678305][ T5728] IPVS: starting estimator thread 0... [ 155.956499][ T6247] IPVS: using max 7 ests per chain, 16800 per kthread [ 158.999712][ T6260] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.029180][ T6276] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.520190][ T5706] IPVS: starting estimator thread 0... [ 161.668055][ T6287] IPVS: using max 7 ests per chain, 16800 per kthread [ 162.487942][ T6297] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 162.609304][ T6299] binder_alloc: 6298: binder_alloc_buf, no vma [ 162.894707][ T6301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.164'. [ 163.202865][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.239420][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.245522][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.255270][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.269512][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.485838][ T4911] Bluetooth: hci5: command tx timeout [ 166.693666][ T5728] IPVS: starting estimator thread 0... [ 166.777947][ T6334] IPVS: using max 7 ests per chain, 16800 per kthread [ 167.565875][ T4911] Bluetooth: hci5: command tx timeout [ 167.695160][ T6344] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.863149][ T6346] binder_alloc: 6345: binder_alloc_buf, no vma [ 169.507846][ T6306] lo speed is unknown, defaulting to 1000 [ 169.645957][ T4911] Bluetooth: hci5: command tx timeout [ 169.763803][ T6370] 9pnet_virtio: no channels available for device syz [ 170.396876][ T6378] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 171.726114][ T4911] Bluetooth: hci5: command tx timeout [ 172.657416][ T6382] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.915410][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 172.935390][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 172.961411][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 173.056414][ T6395] 9pnet_virtio: no channels available for device syz [ 173.062344][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 173.062559][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 173.705431][ T6404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 174.408389][ T6404] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 174.408413][ T6404] netlink: 756 bytes leftover after parsing attributes in process `syz.0.193'. [ 176.017577][ T6408] netlink: 'syz.0.193': attribute type 29 has an invalid length. [ 176.017880][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.018694][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.018929][ T6306] bridge_slave_0: entered allmulticast mode [ 176.044843][ T6306] bridge_slave_0: entered promiscuous mode [ 177.332592][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.332761][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.333023][ T6306] bridge_slave_1: entered allmulticast mode [ 177.341646][ T6306] bridge_slave_1: entered promiscuous mode [ 177.611306][ T1438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.671689][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.791438][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.153582][ T6438] 9pnet_virtio: no channels available for device syz [ 178.212800][ T1438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.256911][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 178.335813][ T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 178.414852][ T6306] team0: Port device team_slave_0 added [ 178.427322][ T6306] team0: Port device team_slave_1 added [ 178.531914][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.532551][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.609217][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.609236][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.609266][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.623491][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.623510][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.623541][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.699462][ T5729] IPVS: starting estimator thread 0... [ 178.787038][ T6448] IPVS: using max 7 ests per chain, 16800 per kthread [ 180.869070][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.870042][ T31] usb 1-1: no configurations [ 180.870054][ T31] usb 1-1: can't read configurations, error -22 [ 181.218261][ T1438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.294859][ T6467] comedi comedi3: dt2801: I/O port conflict (0x294,2) [ 184.532435][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 184.900282][ T6482] process 'syz.3.212' launched '/dev/fd/8' with NULL argv: empty string added [ 185.667380][ T6493] 9pnet_virtio: no channels available for device syz [ 185.694575][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 185.895698][ T6483] macsec1: entered promiscuous mode [ 185.895717][ T6483] dummy0: entered promiscuous mode [ 185.896159][ T6483] macsec1: entered allmulticast mode [ 185.896171][ T6483] dummy0: entered allmulticast mode [ 186.087466][ T6483] syz.0.211 (6483) used greatest stack depth: 18912 bytes left [ 186.270243][ T6501] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.710809][ T1438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.195651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.340604][ T6516] 9pnet_virtio: no channels available for device syz [ 187.757694][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 189.180294][ T6306] hsr_slave_0: entered promiscuous mode [ 189.181354][ T6306] hsr_slave_1: entered promiscuous mode [ 189.182085][ T6306] debugfs: 'hsr0' already exists in 'hsr' [ 189.182114][ T6306] Cannot create hsr debugfs directory [ 189.745117][ T6520] Process accounting resumed [ 194.461254][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.215220][ T6546] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.585233][ T6586] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.424329][ T1438] bridge_slave_1: left allmulticast mode [ 202.462746][ T1438] bridge_slave_1: left promiscuous mode [ 202.481965][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.684299][ T1438] bridge_slave_0: left allmulticast mode [ 202.686378][ T5695] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.717690][ T1438] bridge_slave_0: left promiscuous mode [ 202.717891][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.867989][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.868018][ T5695] usb 1-1: config 0 has no interfaces? [ 202.868047][ T5695] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.868072][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.922480][ T5695] usb 1-1: config 0 descriptor?? [ 203.199138][ T5695] usb 1-1: USB disconnect, device number 5 [ 207.290567][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.406997][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.470019][ T1438] bond0 (unregistering): Released all slaves [ 207.987403][ T6614] syz_tun (unregistering): left allmulticast mode [ 208.582060][ T6306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.674665][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.688783][ T6306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.830835][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.936206][ T5605] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 209.040734][ T5603] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 209.040771][ T5603] hid-generic 0000:0000:0000.0004: unexpected long global item [ 209.064330][ T5603] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 209.089210][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 209.089246][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.089278][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 209.089305][ T5605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 209.214628][ T5605] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 209.214662][ T5605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.214683][ T5605] usb 5-1: Product: syz [ 209.214699][ T5605] usb 5-1: Manufacturer: syz [ 209.214715][ T5605] usb 5-1: SerialNumber: syz [ 209.376658][ T5729] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 210.199545][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.199616][ T5729] usb 3-1: config 0 has no interfaces? [ 210.199649][ T5729] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.199673][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.460976][ T5605] usb 5-1: config 0 descriptor?? [ 210.529323][ T5729] usb 3-1: config 0 descriptor?? [ 210.723445][ T5605] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 210.744387][ T5728] usb 3-1: USB disconnect, device number 3 [ 210.970556][ T5605] usb 5-1: USB disconnect, device number 3 [ 211.454538][ T6306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.504601][ T6747] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.588045][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.654960][ T6306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.702676][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.849895][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.431137][ T6789] nfs: Unknown parameter 'no' [ 214.606432][ T4911] Bluetooth: hci5: link tx timeout [ 214.606991][ T4911] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.618115][ T5601] Bluetooth: hci5: link tx timeout [ 214.618134][ T5601] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 216.284507][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 216.688062][ T5601] Bluetooth: hci5: command 0x0406 tx timeout [ 216.842360][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.051296][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.113646][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.113799][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.376979][ T1438] hsr_slave_0: left promiscuous mode [ 217.787904][ T1438] hsr_slave_1: left promiscuous mode [ 218.268306][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.268441][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.314851][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.314888][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.622029][ T1438] veth1_macvtap: left promiscuous mode [ 218.636367][ T1438] veth0_macvtap: left promiscuous mode [ 218.636700][ T1438] veth1_vlan: left promiscuous mode [ 218.667181][ T1438] veth0_vlan: left promiscuous mode [ 220.477838][ T1438] team0 (unregistering): Port device team_slave_1 removed [ 220.576456][ T1438] team0 (unregistering): Port device team_slave_0 removed [ 221.025819][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 221.117449][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.117584][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.408014][ T6933] nfs: Unknown parameter 'noi' [ 222.123305][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 222.123631][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 222.765179][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 222.765220][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 223.392463][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.452016][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.455043][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.479912][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.483392][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.629588][ T5695] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 223.806011][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 223.824359][ T5695] usb 5-1: no configurations [ 223.824380][ T5695] usb 5-1: can't read configurations, error -22 [ 223.985785][ T5695] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 224.201096][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 224.209322][ T5695] usb 5-1: no configurations [ 224.209342][ T5695] usb 5-1: can't read configurations, error -22 [ 224.330788][ T5695] usb usb5-port1: attempt power cycle [ 225.136656][ T5695] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 225.188416][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 225.189248][ T5695] usb 5-1: no configurations [ 225.189264][ T5695] usb 5-1: can't read configurations, error -22 [ 225.318360][ T5695] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 225.338169][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 225.340163][ T5695] usb 5-1: no configurations [ 225.340175][ T5695] usb 5-1: can't read configurations, error -22 [ 225.342947][ T5695] usb usb5-port1: unable to enumerate USB device [ 225.674865][ T4911] Bluetooth: hci0: command tx timeout [ 226.032894][ T6996] nfs: Unknown parameter 'noi' [ 227.434894][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.727385][ T4911] Bluetooth: hci0: command tx timeout [ 228.255465][ T7025] kAFS: unable to lookup cell '(,c¾Ì' [ 228.970702][ T7052] nfs: Unknown parameter 'noi' [ 229.666987][ T6955] lo speed is unknown, defaulting to 1000 [ 229.805784][ T4911] Bluetooth: hci0: command tx timeout [ 231.574922][ T7097] kAFS: unable to lookup cell '(,c¾Ì' [ 231.885755][ T4911] Bluetooth: hci0: command tx timeout [ 233.153404][ T7135] nfs: Unknown parameter 'noi' [ 233.897431][ T7153] kAFS: unable to lookup cell '(,c¾Ì' [ 235.696019][ T7202] kAFS: unable to lookup cell '(,c¾Ì' [ 236.348828][ T98] bridge_slave_1: left allmulticast mode [ 236.348865][ T98] bridge_slave_1: left promiscuous mode [ 236.349137][ T98] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.670646][ T98] bridge_slave_0: left allmulticast mode [ 236.719492][ T98] bridge_slave_0: left promiscuous mode [ 236.719748][ T98] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.097814][ T98] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.168323][ T98] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.218540][ T98] bond0 (unregistering): Released all slaves [ 238.280256][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.280373][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.280502][ T6955] bridge_slave_0: entered allmulticast mode [ 238.306657][ T6955] bridge_slave_0: entered promiscuous mode [ 238.685232][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 238.720957][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.721086][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.721302][ T6955] bridge_slave_1: entered allmulticast mode [ 238.749339][ T6955] bridge_slave_1: entered promiscuous mode [ 239.013820][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.041085][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.341026][ T6955] team0: Port device team_slave_0 added [ 239.360381][ T6955] team0: Port device team_slave_1 added [ 240.542051][ T98] hsr_slave_0: left promiscuous mode [ 240.813114][ T98] hsr_slave_1: left promiscuous mode [ 240.814141][ T98] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.889754][ T98] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.982588][ T7368] Bluetooth: MGMT ver 1.23 [ 243.009623][ T98] team0 (unregistering): Port device team_slave_1 removed [ 243.147474][ T98] team0 (unregistering): Port device team_slave_0 removed [ 244.254553][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 244.328618][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.328637][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.328667][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.388676][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.388695][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.388724][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.776552][ T7437] kAFS: unable to lookup cell '(,c¾Ì' [ 245.120680][ T7451] Bluetooth: hci0: unsupported parameter 255 [ 245.120702][ T7451] Bluetooth: hci0: unsupported parameter 255 [ 245.269210][ T6955] hsr_slave_0: entered promiscuous mode [ 245.295704][ T6955] hsr_slave_1: entered promiscuous mode [ 245.303050][ T6955] debugfs: 'hsr0' already exists in 'hsr' [ 245.303078][ T6955] Cannot create hsr debugfs directory [ 246.795636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 246.915652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 248.240637][ T7469] Process accounting resumed [ 250.705144][ T7529] kAFS: unable to lookup cell '(,c¾Ì' [ 255.250163][ T7596] nfs: Unknown parameter 'noi' [ 255.827579][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.158593][ T7601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.609'. [ 260.467526][ T7669] nfs: Unknown parameter 'noi' [ 263.921407][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.170816][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.184904][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.341287][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.363240][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.580869][ T7737] nfs: Unknown parameter 'noi' [ 264.723356][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.734708][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.960999][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.444775][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.478987][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.554718][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.554933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.524316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.524438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.667439][ T7824] nfs: Unknown parameter 'noi' [ 270.565624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.500831][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.576111][ T7894] nfs: Unknown parameter 'noi' [ 275.921605][ T7912] Process accounting resumed [ 277.772194][ T7970] nfs: Unknown parameter 'noi' [ 277.787939][ T6955] veth0_vlan: entered promiscuous mode [ 278.520337][ T6955] veth1_vlan: entered promiscuous mode [ 278.725965][ T7972] Process accounting resumed [ 278.802037][ T6955] veth0_macvtap: entered promiscuous mode [ 278.857235][ T6955] veth1_macvtap: entered promiscuous mode [ 279.015444][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.059953][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.162154][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.199668][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.209152][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.214585][ T212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.448943][ T7959] syz.2.711 (7959) used greatest stack depth: 18168 bytes left [ 282.043766][ T8019] nfs: Unknown parameter 'noi' [ 282.148750][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.148773][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.587278][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.587300][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.729162][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.793643][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.826959][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.851970][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.855350][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.512114][ T8067] nfs: Unknown parameter 'noi' [ 286.045763][ T5606] Bluetooth: hci5: command tx timeout [ 287.680455][ T8094] overlayfs: missing 'lowerdir' [ 288.132599][ T5606] Bluetooth: hci5: command tx timeout [ 288.295780][ T6718] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 288.445535][ T8052] lo speed is unknown, defaulting to 1000 [ 288.448293][ T6718] usb 4-1: Using ep0 maxpacket: 8 [ 288.465800][ T6718] usb 4-1: config 0 has no interfaces? [ 288.465840][ T6718] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.465864][ T6718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.524560][ T6718] usb 4-1: config 0 descriptor?? [ 289.913672][ T36] usb 4-1: USB disconnect, device number 3 [ 289.962004][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.206505][ T5606] Bluetooth: hci5: command tx timeout [ 292.302045][ T5606] Bluetooth: hci5: command tx timeout [ 292.328216][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 293.713267][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.968341][ T8155] macsec1: entered promiscuous mode [ 293.968360][ T8155] dummy0: entered promiscuous mode [ 294.015317][ T8155] macsec1: entered allmulticast mode [ 294.015335][ T8155] dummy0: entered allmulticast mode [ 294.539939][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.565757][ T5729] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 294.731617][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.782536][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.894491][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.896662][ T5729] usb 5-1: no configurations [ 294.896679][ T5729] usb 5-1: can't read configurations, error -22 [ 295.568962][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.607841][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 298.924319][ T8251] Process accounting resumed [ 299.408262][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.412114][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.412374][ T8052] bridge_slave_0: entered allmulticast mode [ 299.415271][ T8052] bridge_slave_0: entered promiscuous mode [ 299.779935][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.780059][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.780640][ T8052] bridge_slave_1: entered allmulticast mode [ 299.810980][ T8052] bridge_slave_1: entered promiscuous mode [ 300.528389][ T8284] nfs: Deprecated parameter 'nointr' [ 300.893191][ T8291] overlayfs: overlapping lowerdir path [ 300.926558][ T12] bridge_slave_1: left allmulticast mode [ 300.926593][ T12] bridge_slave_1: left promiscuous mode [ 300.926872][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.118614][ T12] bridge_slave_0: left allmulticast mode [ 301.118653][ T12] bridge_slave_0: left promiscuous mode [ 301.118898][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.337930][ T820] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 302.530072][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.555944][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.677361][ T8315] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 302.677392][ T8315] netlink: 756 bytes leftover after parsing attributes in process `syz.4.848'. [ 302.705335][ T820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.710068][ T820] usb 4-1: no configurations [ 302.710087][ T820] usb 4-1: can't read configurations, error -22 [ 303.336666][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.447416][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.532458][ T12] bond0 (unregistering): Released all slaves [ 303.648202][ T8351] kAFS: unable to lookup cell '(,c¾Ì' [ 303.710634][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.773364][ T8318] netlink: 'syz.4.848': attribute type 29 has an invalid length. [ 303.846357][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.165100][ T8052] team0: Port device team_slave_0 added [ 304.182678][ T8052] team0: Port device team_slave_1 added [ 304.216212][ T8303] Process accounting resumed [ 304.470169][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.470188][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.470261][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.487768][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.487818][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.487892][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.755790][ T6718] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 304.900698][ T8386] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 304.901164][ T8386] overlayfs: overlapping lowerdir path [ 304.925981][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.934638][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.206872][ T6718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.207883][ T6718] usb 3-1: no configurations [ 305.207900][ T6718] usb 3-1: can't read configurations, error -22 [ 305.588457][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.876'. [ 305.616695][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 305.806184][ T8405] kAFS: unable to lookup cell '(,c¾Ì' [ 306.002984][ T8052] hsr_slave_0: entered promiscuous mode [ 306.012918][ T8052] hsr_slave_1: entered promiscuous mode [ 306.020464][ T8052] debugfs: 'hsr0' already exists in 'hsr' [ 306.020545][ T8052] Cannot create hsr debugfs directory [ 307.249749][ T8419] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 307.249773][ T8419] netlink: 756 bytes leftover after parsing attributes in process `syz.2.885'. [ 307.747670][ T8421] netlink: 'syz.2.885': attribute type 29 has an invalid length. [ 307.951656][ T8454] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 307.952083][ T8454] overlayfs: overlapping lowerdir path [ 307.973139][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 308.316012][ T5786] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 308.626078][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 308.967497][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.967583][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.967610][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 308.967770][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 309.114986][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 309.115065][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.115089][ T9] usb 4-1: Product: syz [ 309.115153][ T9] usb 4-1: Manufacturer: syz [ 309.115244][ T9] usb 4-1: SerialNumber: syz [ 311.592965][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.647924][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.701393][ T9] usb 4-1: config 0 descriptor?? [ 311.703547][ T9] usb 4-1: can't set config #0, error -71 [ 311.797734][ T9] usb 4-1: USB disconnect, device number 6 [ 311.843976][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.845239][ T5786] usb 3-1: no configurations [ 311.845257][ T5786] usb 3-1: can't read configurations, error -22 [ 312.076118][ T12] hsr_slave_0: left promiscuous mode [ 312.113942][ T12] hsr_slave_1: left promiscuous mode [ 312.153724][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.153750][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.183735][ T8495] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 312.227139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.227168][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.246822][ T8495] overlayfs: overlapping lowerdir path [ 312.289258][ T12] veth1_macvtap: left promiscuous mode [ 312.289364][ T12] veth0_macvtap: left promiscuous mode [ 312.289623][ T12] veth1_vlan: left promiscuous mode [ 312.289816][ T12] veth0_vlan: left promiscuous mode [ 313.092154][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092191][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092219][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092245][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092272][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092297][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092323][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092349][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092375][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.092402][ T6718] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 313.209796][ T12] team0 (unregistering): Port device team_slave_1 removed [ 313.290621][ T12] team0 (unregistering): Port device team_slave_0 removed [ 313.576028][ T5729] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 313.963554][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.963585][ T5729] usb 4-1: config 0 has no interfaces? [ 313.963704][ T5729] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.963784][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.816104][ T5729] usb 4-1: config 0 descriptor?? [ 314.830086][ T6718] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 314.845602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.024777][ T6718] usb 4-1: USB disconnect, device number 7 [ 315.030179][ T8499] Process accounting resumed [ 315.331605][ T8528] fido_id[8528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 316.245157][ T8539] 9pnet_virtio: no channels available for device c::: [ 317.326181][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.714086][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 317.905893][ T820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 318.068643][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 318.068678][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 318.068702][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 318.068730][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 318.130626][ T820] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 318.130660][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.130681][ T820] usb 5-1: Product: syz [ 318.130696][ T820] usb 5-1: Manufacturer: syz [ 318.130711][ T820] usb 5-1: SerialNumber: syz [ 318.851551][ T820] usb 5-1: config 0 descriptor?? [ 318.999893][ T8569] netlink: 'syz.3.932': attribute type 29 has an invalid length. [ 319.113947][ T820] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 319.283620][ T5729] usb 5-1: USB disconnect, device number 10 [ 323.375693][ T5944] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 323.600627][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.601774][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.764511][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.833718][ T5944] usb 5-1: no configurations [ 324.833779][ T5944] usb 5-1: can't read configurations, error -22 [ 326.249972][ T6718] hid_parser_main: 73 callbacks suppressed [ 326.250002][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250038][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250072][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250115][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250152][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250183][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250209][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250247][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250285][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.250313][ T6718] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 326.537609][ T6718] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 326.576044][ T5729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 326.734636][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.734664][ T5729] usb 4-1: config 0 has no interfaces? [ 326.734696][ T5729] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.734720][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.782853][ T5729] usb 4-1: config 0 descriptor?? [ 326.816464][ T5786] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 326.940774][ T8052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.974287][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.974789][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.001082][ T9] usb 4-1: USB disconnect, device number 8 [ 327.031994][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.048555][ T8052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.234864][ T5786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.241379][ T5786] usb 5-1: no configurations [ 327.241398][ T5786] usb 5-1: can't read configurations, error -22 [ 327.267125][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.273063][ T8052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.726381][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 327.778270][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.272620][ T8734] macsec1: entered promiscuous mode [ 328.272643][ T8734] dummy0: entered promiscuous mode [ 328.294958][ T8734] macsec1: entered allmulticast mode [ 328.294977][ T8734] dummy0: entered allmulticast mode [ 328.402885][ T8052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.453012][ T8052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.777957][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.026510][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.425336][ T5695] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.03 Device [syz1] on syz1 [ 329.507476][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.522054][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.567414][ T5786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 329.707671][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.707852][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.735422][ T5786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.735450][ T5786] usb 3-1: config 0 has no interfaces? [ 329.735482][ T5786] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.735507][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.825467][ T5786] usb 3-1: config 0 descriptor?? [ 330.138816][ T5695] usb 3-1: USB disconnect, device number 8 [ 331.158984][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 331.870858][ T8797] macsec1: entered promiscuous mode [ 331.870877][ T8797] dummy0: entered promiscuous mode [ 331.871104][ T8797] macsec1: entered allmulticast mode [ 331.871115][ T8797] dummy0: entered allmulticast mode [ 336.051938][ T820] hid_parser_main: 156 callbacks suppressed [ 336.051963][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.051994][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052023][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052059][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052086][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052111][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052139][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052167][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052195][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.052222][ T820] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 336.172107][ T820] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 336.195933][ T5695] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 336.348891][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.348918][ T5695] usb 4-1: config 0 has no interfaces? [ 336.348949][ T5695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.348974][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.418207][ T5695] usb 4-1: config 0 descriptor?? [ 336.597592][ T8859] netlink: 'syz.4.1019': attribute type 29 has an invalid length. [ 336.637728][ T5695] usb 4-1: USB disconnect, device number 9 [ 337.039715][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.204988][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 337.905600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 339.399437][ T8052] veth0_vlan: entered promiscuous mode [ 339.463967][ T8052] veth1_vlan: entered promiscuous mode [ 339.637511][ T8052] veth0_macvtap: entered promiscuous mode [ 340.372036][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 341.029992][ T8052] veth1_macvtap: entered promiscuous mode [ 341.137996][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.174655][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.212524][ T8928] nfs: Deprecated parameter 'nointr' [ 341.241458][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.253066][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.253232][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.253300][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.424074][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.424107][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.694478][ T1513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.694497][ T1513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.120572][ T8951] netlink: 'syz.2.1044': attribute type 29 has an invalid length. [ 343.154326][ T8948] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 343.154351][ T8948] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1044'. [ 344.453272][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.479265][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.484887][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.487826][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.538895][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.997022][ T8978] Bluetooth: MGMT ver 1.23 [ 346.312747][ T8989] Process accounting resumed [ 346.685826][ T5606] Bluetooth: hci0: command tx timeout [ 346.907469][ T8962] lo speed is unknown, defaulting to 1000 [ 348.767917][ T5606] Bluetooth: hci0: command tx timeout [ 349.110799][ T212] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.845738][ T5606] Bluetooth: hci0: command tx timeout [ 350.935091][ T9044] nfs: Deprecated parameter 'nointr' [ 351.038591][ T212] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.915306][ T212] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.048100][ T5606] Bluetooth: hci0: command tx timeout [ 355.623875][ T212] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.016510][ T5729] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 356.016993][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 356.436677][ T5729] usb 3-1: device descriptor read/64, error -32 [ 356.945790][ T5729] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 357.215024][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 357.215060][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.215126][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 357.215190][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 357.409798][ T5729] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 357.409831][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.409852][ T5729] usb 3-1: Product: syz [ 357.409881][ T5729] usb 3-1: Manufacturer: syz [ 357.409898][ T5729] usb 3-1: SerialNumber: syz [ 357.564185][ T5729] usb 3-1: config 0 descriptor?? [ 359.025837][ T5729] usb 3-1: can't set config #0, error -71 [ 359.090354][ T5729] usb 3-1: USB disconnect, device number 10 [ 359.303393][ T9120] kAFS: unable to lookup cell '(,c¾Ì' [ 359.559835][ T9131] nfs: Deprecated parameter 'nointr' [ 359.805825][ T5695] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 359.954974][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.955198][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.955434][ T8962] bridge_slave_0: entered allmulticast mode [ 359.955748][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 359.990888][ T5695] usb 5-1: config 0 has no interfaces? [ 359.990931][ T5695] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.990956][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.994207][ T8962] bridge_slave_0: entered promiscuous mode [ 360.041943][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.042068][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.043949][ T8962] bridge_slave_1: entered allmulticast mode [ 360.085234][ T5695] usb 5-1: config 0 descriptor?? [ 360.094906][ T8962] bridge_slave_1: entered promiscuous mode [ 360.546048][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.582640][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.855116][ T8962] team0: Port device team_slave_0 added [ 360.870907][ T8962] team0: Port device team_slave_1 added [ 360.944130][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.944147][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.944172][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.991744][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.991762][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.991792][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.279949][ T212] bridge_slave_1: left allmulticast mode [ 362.279986][ T212] bridge_slave_1: left promiscuous mode [ 362.280267][ T212] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.665820][ T212] bridge_slave_0: left allmulticast mode [ 362.665875][ T212] bridge_slave_0: left promiscuous mode [ 362.666126][ T212] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.065273][ T821] usb 5-1: USB disconnect, device number 15 [ 363.182605][ T9197] nfs: Deprecated parameter 'nointr' [ 364.776670][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 365.976559][ T212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.038301][ T212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.089990][ T212] bond0 (unregistering): Released all slaves [ 366.326823][ T8962] hsr_slave_0: entered promiscuous mode [ 366.328542][ T8962] hsr_slave_1: entered promiscuous mode [ 366.329831][ T8962] debugfs: 'hsr0' already exists in 'hsr' [ 366.329857][ T8962] Cannot create hsr debugfs directory [ 366.394956][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 370.061928][ T9302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1176'. [ 370.961283][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 373.507130][ T9349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1193'. [ 374.820629][ T212] hsr_slave_0: left promiscuous mode [ 374.867215][ T212] hsr_slave_1: left promiscuous mode [ 374.868229][ T212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.868256][ T212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.927382][ T212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.928771][ T212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.110415][ T212] veth1_macvtap: left promiscuous mode [ 375.129882][ T212] veth0_macvtap: left promiscuous mode [ 375.130292][ T212] veth1_vlan: left promiscuous mode [ 375.155911][ T212] veth0_vlan: left promiscuous mode [ 377.840742][ T212] team0 (unregistering): Port device team_slave_1 removed [ 377.943354][ T212] team0 (unregistering): Port device team_slave_0 removed [ 378.038417][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.524793][ T9391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1211'. [ 378.536069][ T9391] bridge_slave_0: left allmulticast mode [ 378.536107][ T9391] bridge_slave_0: left promiscuous mode [ 378.536392][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.689812][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.805130][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 379.960933][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 383.127497][ T9507] Process accounting resumed [ 384.554479][ T9530] JFS: discard option not supported on device [ 384.723752][ T9531] syzkaller0: entered promiscuous mode [ 384.726160][ T9531] syzkaller0: entered allmulticast mode [ 384.744021][ T9530] Mount JFS Failure: -22 [ 384.744039][ T9530] jfs_mount failed w/return code = -22 [ 390.718139][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 398.823411][ T4911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.848935][ T4911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.892766][ T4911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.894016][ T4911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.912305][ T4911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.195429][ T5606] Bluetooth: hci5: command tx timeout [ 403.270523][ T5606] Bluetooth: hci5: command tx timeout [ 404.089766][ T4911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 404.179277][ T4911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 404.227955][ T4911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 404.279475][ T4911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 404.281780][ T4911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.337058][ T4911] Bluetooth: hci5: command tx timeout [ 405.511133][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 405.560339][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 405.561923][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 405.584054][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 405.589941][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 406.457937][ T4911] Bluetooth: hci6: command tx timeout [ 407.415642][ T4911] Bluetooth: hci5: command tx timeout [ 407.889884][ T4911] Bluetooth: hci7: command tx timeout [ 408.542043][ T4911] Bluetooth: hci6: command tx timeout [ 409.051089][ T9728] syzkaller0: entered promiscuous mode [ 409.051117][ T9728] syzkaller0: entered allmulticast mode [ 409.335587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 409.975766][ T4911] Bluetooth: hci7: command tx timeout [ 410.607401][ T4911] Bluetooth: hci6: command tx timeout [ 411.759079][ T212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.046387][ T4911] Bluetooth: hci7: command tx timeout [ 412.122479][ T9837] lo speed is unknown, defaulting to 1000 [ 412.197131][ T9719] lo speed is unknown, defaulting to 1000 [ 412.695693][ T4911] Bluetooth: hci6: command tx timeout [ 412.874336][ T212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.227238][ T9868] lo speed is unknown, defaulting to 1000 [ 413.907082][ T212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.126429][ T4911] Bluetooth: hci7: command tx timeout [ 414.969101][ T212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.650346][T10218] Invalid ELF header magic: != ELF [ 421.763537][T10218] overlayfs: failed to resolve '/': -2 [ 422.792743][ T212] bridge_slave_1: left promiscuous mode [ 422.793029][ T212] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.107978][T10245] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1526'. [ 423.987136][ T212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.076454][ T212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.120599][ T212] bond0 (unregistering): Released all slaves [ 424.292477][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.292663][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.292883][ T9837] bridge_slave_0: entered allmulticast mode [ 424.295334][ T9837] bridge_slave_0: entered promiscuous mode [ 424.394195][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.394349][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.394551][ T9837] bridge_slave_1: entered allmulticast mode [ 424.411607][ T9837] bridge_slave_1: entered promiscuous mode [ 424.602274][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.603817][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.603990][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.604177][ T9868] bridge_slave_0: entered allmulticast mode [ 424.614829][ T9868] bridge_slave_0: entered promiscuous mode [ 424.797690][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.798075][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.798215][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.798395][ T9868] bridge_slave_1: entered allmulticast mode [ 424.809665][ T9868] bridge_slave_1: entered promiscuous mode [ 425.108886][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.109029][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.109226][ T9719] bridge_slave_0: entered allmulticast mode [ 425.112146][ T9719] bridge_slave_0: entered promiscuous mode [ 425.164520][ T9837] team0: Port device team_slave_0 added [ 425.164924][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.165046][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.165243][ T9719] bridge_slave_1: entered allmulticast mode [ 425.185320][ T9719] bridge_slave_1: entered promiscuous mode [ 425.227209][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.371858][ T9837] team0: Port device team_slave_1 added [ 425.442311][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.921005][ T9719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.973964][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.973982][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.974010][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.032442][ T9719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.321306][ T9868] team0: Port device team_slave_0 added [ 426.322292][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.322308][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.322336][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.386414][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 426.429476][ T9868] team0: Port device team_slave_1 added [ 426.680683][ T9719] team0: Port device team_slave_0 added [ 428.293434][ T9719] team0: Port device team_slave_1 added [ 428.294280][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.294291][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.294310][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.468125][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.468137][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.468157][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.525272][ T9837] hsr_slave_0: entered promiscuous mode [ 428.534088][ T9837] hsr_slave_1: entered promiscuous mode [ 428.541562][ T9837] debugfs: 'hsr0' already exists in 'hsr' [ 428.541589][ T9837] Cannot create hsr debugfs directory [ 428.998182][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.998199][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.998227][ T9719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.056565][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.056584][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.056613][ T9719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.967411][ T212] hsr_slave_0: left promiscuous mode [ 431.007319][ T212] hsr_slave_1: left promiscuous mode [ 431.008369][ T212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.008396][ T212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.039359][T10456] kAFS: unable to lookup cell '(,c¾Ì' [ 431.069984][ T212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.070015][ T212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.190269][ T212] dummy0: left allmulticast mode [ 431.203216][ T212] veth1_macvtap: left promiscuous mode [ 431.203322][ T212] veth0_macvtap: left promiscuous mode [ 431.203599][ T212] veth1_vlan: left promiscuous mode [ 431.203789][ T212] veth0_vlan: left promiscuous mode [ 432.256692][ T212] team0 (unregistering): Port device team_slave_1 removed [ 432.316578][ T212] team0 (unregistering): Port device team_slave_0 removed [ 432.680578][ T9868] hsr_slave_0: entered promiscuous mode [ 432.681606][ T9868] hsr_slave_1: entered promiscuous mode [ 433.318666][ T9719] hsr_slave_0: entered promiscuous mode [ 433.324516][ T9719] hsr_slave_1: entered promiscuous mode [ 433.344335][ T9719] debugfs: 'hsr0' already exists in 'hsr' [ 433.344363][ T9719] Cannot create hsr debugfs directory [ 434.480750][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 434.558888][T10549] fuse: Bad value for 'fd' [ 434.741490][ T212] IPVS: stop unused estimator thread 0... [ 435.501712][T10584] kAFS: unable to lookup cell '(,c¾Ì' [ 435.662722][ T212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.662762][ T212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59660 - 0 [ 436.774649][ T212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.774687][ T212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59660 - 0 [ 436.865816][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 437.044334][ T9837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.105968][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 437.112126][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.112155][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 437.112207][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 437.112248][ T9] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 437.112277][ T9] usb 5-1: config 1 interface 1 has no altsetting 0 [ 437.144087][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 437.144184][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.144237][ T9] usb 5-1: Product: syz [ 437.144279][ T9] usb 5-1: Manufacturer: syz [ 437.144339][ T9] usb 5-1: SerialNumber: syz [ 437.239516][ T9837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.629761][ T212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.629798][ T212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59660 - 0 [ 437.707384][ T9837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.744354][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 437.780010][ T9837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.812462][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 437.843795][ T9837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.913926][ T9837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.935955][ T9837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.009793][ T9837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.525010][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 438.525085][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 439.861783][ T9] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 439.948986][ T9] usb 5-1: USB disconnect, device number 16 [ 440.052303][ T9961] udevd[9961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.093192][ T212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.093230][ T212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59660 - 0 [ 440.131293][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.564779][T10686] nfs: Deprecated parameter 'nointr' [ 440.724981][ T9868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.832025][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.870905][ T9868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.911705][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.158678][ T9868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.239521][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.374467][ T9868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.470075][ T9868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.009233][ T4911] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 443.009289][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.009320][ T4911] Tainted: [L]=SOFTLOCKUP [ 443.009327][ [ 443.009327][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 443.009341][ T4911] Workqueue: hci4 hci_rx_work [ 443.009395][ T4911] Call Trace: [ 443.009404][ T4911] [ 443.009413][ T4911] dump_stack_lvl+0xe8/0x150 [ 443.009454][ T4911] sysfs_create_dir_ns+0x271/0x2a0 [ 443.009484][ T4911] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 443.009515][ T4911] ? rt_spin_unlock+0x163/0x200 [ 443.009554][ T4911] kobject_add_internal+0x62c/0xce0 [ 443.009601][ T4911] kobject_add+0x163/0x240 [ 443.009633][ T4911] ? rt_spin_unlock+0x157/0x200 [ 443.009676][ T4911] ? __pfx_kobject_add+0x10/0x10 [ 443.009716][ T4911] ? get_device_parent+0x370/0x3a0 [ 443.009748][ T4911] device_add+0x3fa/0xb80 [ 443.009777][ T4911] hci_conn_add_sysfs+0xd5/0x210 [ 443.009803][ T4911] le_conn_complete_evt+0xfef/0x1580 [ 443.009844][ T4911] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 443.009875][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.009901][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.009927][ T4911] ? rt_mutex_slowunlock+0x219/0x460 [ 443.009961][ T4911] ? skb_pull_data+0xf0/0x200 [ 443.009999][ T4911] hci_le_conn_complete_evt+0x187/0x470 [ 443.010038][ T4911] hci_event_packet+0x67a/0xf10 [ 443.010072][ T4911] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 443.010119][ T4911] ? __pfx_hci_event_packet+0x10/0x10 [ 443.010145][ T4911] ? rt_spin_unlock+0x157/0x200 [ 443.010183][ T4911] ? hci_send_to_monitor+0xe2/0x590 [ 443.010216][ T4911] hci_rx_work+0x3ee/0x1020 [ 443.010242][ T4911] ? process_scheduled_works+0xa20/0x14e0 [ 443.010267][ T4911] process_scheduled_works+0xa8e/0x14e0 [ 443.010316][ T4911] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.010346][ T4911] ? assign_work+0x3cf/0x5d0 [ 443.010373][ T4911] worker_thread+0xa47/0xfb0 [ 443.010412][ T4911] ? __kthread_parkme+0x71/0x1f0 [ 443.010451][ T4911] kthread+0x388/0x470 [ 443.010486][ T4911] ? __pfx_worker_thread+0x10/0x10 [ 443.010512][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.010542][ T4911] ret_from_fork+0x514/0xb70 [ 443.010578][ T4911] ? __pfx_ret_from_fork+0x10/0x10 [ 443.010613][ T4911] ? __switch_to+0xc89/0x1420 [ 443.010646][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.010678][ T4911] ret_from_fork_asm+0x1a/0x30 [ 443.010715][ T4911] [ 443.010775][ T4911] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 443.010815][ T4911] Bluetooth: hci4: failed to register connection device [ 443.077993][ T4911] ================================================================== [ 443.078007][ T4911] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 443.078031][ T4911] Read of size 8 at addr ffff8880613ca200 by task kworker/u9:1/4911 [ 443.078044][ T4911] [ 443.078055][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.078077][ T4911] Tainted: [L]=SOFTLOCKUP [ 443.078083][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 443.078100][ T4911] Workqueue: hci4 hci_rx_work [ 443.078121][ T4911] Call Trace: [ 443.078127][ T4911] [ 443.078133][ T4911] dump_stack_lvl+0xe8/0x150 [ 443.078161][ T4911] print_address_description+0x55/0x1e0 [ 443.078186][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.078204][ T4911] print_report+0x58/0x70 [ 443.078227][ T4911] kasan_report+0x117/0x150 [ 443.078247][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.078266][ T4911] l2cap_sock_ready_cb+0xe3/0x180 [ 443.078282][ T4911] l2cap_le_start+0x257/0x1910 [ 443.078307][ T4911] ? __pfx_l2cap_le_start+0x10/0x10 [ 443.078331][ T4911] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.078350][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.078368][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.078387][ T4911] ? mutex_lock_nested+0x152/0x1d0 [ 443.078410][ T4911] ? l2cap_connect_cfm+0x90d/0x1620 [ 443.078435][ T4911] l2cap_connect_cfm+0x950/0x1620 [ 443.078463][ T4911] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 443.078487][ T4911] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.078505][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.078523][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.078541][ T4911] ? mutex_lock_nested+0x152/0x1d0 [ 443.078587][ T4911] ? hci_connect_cfm+0x2c/0x140 [ 443.078616][ T4911] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 443.078650][ T4911] hci_connect_cfm+0x95/0x140 [ 443.078677][ T4911] le_conn_complete_evt+0x1034/0x1580 [ 443.078711][ T4911] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 443.078743][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.078769][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.078794][ T4911] ? rt_mutex_slowunlock+0x219/0x460 [ 443.078828][ T4911] ? skb_pull_data+0xf0/0x200 [ 443.078861][ T4911] hci_le_conn_complete_evt+0x187/0x470 [ 443.078894][ T4911] hci_event_packet+0x67a/0xf10 [ 443.078925][ T4911] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 443.078953][ T4911] ? __pfx_hci_event_packet+0x10/0x10 [ 443.078975][ T4911] ? rt_spin_unlock+0x157/0x200 [ 443.079012][ T4911] ? hci_send_to_monitor+0xe2/0x590 [ 443.079045][ T4911] hci_rx_work+0x3ee/0x1020 [ 443.079074][ T4911] ? process_scheduled_works+0xa20/0x14e0 [ 443.079112][ T4911] process_scheduled_works+0xa8e/0x14e0 [ 443.079153][ T4911] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.079183][ T4911] ? assign_work+0x3cf/0x5d0 [ 443.079210][ T4911] worker_thread+0xa47/0xfb0 [ 443.079245][ T4911] ? __kthread_parkme+0x71/0x1f0 [ 443.079278][ T4911] kthread+0x388/0x470 [ 443.079310][ T4911] ? __pfx_worker_thread+0x10/0x10 [ 443.079341][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.079380][ T4911] ret_from_fork+0x514/0xb70 [ 443.079417][ T4911] ? __pfx_ret_from_fork+0x10/0x10 [ 443.079450][ T4911] ? __switch_to+0xc89/0x1420 [ 443.079487][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.079521][ T4911] ret_from_fork_asm+0x1a/0x30 [ 443.079551][ T4911] [ 443.079559][ T4911] [ 443.079573][ T4911] Allocated by task 10738: [ 443.079584][ T4911] kasan_save_track+0x3e/0x80 [ 443.079607][ T4911] __kasan_kmalloc+0x93/0xb0 [ 443.079630][ T4911] __kmalloc_noprof+0x41a/0x780 [ 443.079652][ T4911] sk_prot_alloc+0xe7/0x210 [ 443.079675][ T4911] sk_alloc+0x3a/0x390 [ 443.079698][ T4911] bt_sock_alloc+0x3b/0x340 [ 443.079722][ T4911] l2cap_sock_create+0x15a/0x300 [ 443.079742][ T4911] bt_sock_create+0x163/0x240 [ 443.079770][ T4911] __sock_create+0x4b3/0x9d0 [ 443.079787][ T4911] __sys_socket+0xd6/0x1b0 [ 443.079804][ T4911] __x64_sys_socket+0x7a/0x90 [ 443.079822][ T4911] do_syscall_64+0x174/0x580 [ 443.079848][ T4911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.079869][ T4911] [ 443.079874][ T4911] Freed by task 10738: [ 443.079883][ T4911] kasan_save_track+0x3e/0x80 [ 443.079903][ T4911] kasan_save_free_info+0x40/0x50 [ 443.079933][ T4911] __kasan_slab_free+0x5c/0x80 [ 443.079954][ T4911] kfree+0x1c5/0x6c0 [ 443.079970][ T4911] __sk_destruct+0x754/0x9e0 [ 443.079994][ T4911] l2cap_sock_release+0x1b3/0x250 [ 443.080026][ T4911] sock_close+0xad/0x220 [ 443.080055][ T4911] __fput+0x42a/0xa80 [ 443.080074][ T4911] task_work_run+0x1d9/0x270 [ 443.080100][ T4911] exit_to_user_mode_loop+0x1fa/0x730 [ 443.080122][ T4911] do_syscall_64+0x353/0x580 [ 443.080147][ T4911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.080167][ T4911] [ 443.080173][ T4911] The buggy address belongs to the object at ffff8880613ca000 [ 443.080173][ T4911] which belongs to the cache kmalloc-4k of size 4096 [ 443.080193][ T4911] The buggy address is located 512 bytes inside of [ 443.080193][ T4911] freed 4096-byte region [ffff8880613ca000, ffff8880613cb000) [ 443.080216][ T4911] [ 443.080222][ T4911] The buggy address belongs to the physical page: [ 443.080243][ T4911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x613c8 [ 443.080264][ T4911] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 443.080282][ T4911] flags: 0x80000000000040(head|node=0|zone=1) [ 443.080306][ T4911] page_type: f5(slab) [ 443.080327][ T4911] raw: 0080000000000040 ffff88813ffb2140 dead000000000100 dead000000000122 [ 443.080347][ T4911] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 443.080368][ T4911] head: 0080000000000040 ffff88813ffb2140 dead000000000100 dead000000000122 [ 443.080387][ T4911] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 443.080407][ T4911] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 443.080426][ T4911] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 443.080437][ T4911] page dumped because: kasan: bad access detected [ 443.080451][ T4911] page_owner tracks the page as allocated [ 443.080459][ T4911] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5792, tgid 5791 (syz.1.2), ts 111630654150, free_ts 0 [ 443.080496][ T4911] post_alloc_hook+0x1f9/0x250 [ 443.080516][ T4911] get_page_from_freelist+0x262a/0x26a0 [ 443.080542][ T4911] __alloc_frozen_pages_noprof+0x18d/0x380 [ 443.080568][ T4911] allocate_slab+0x79/0x5e0 [ 443.080597][ T4911] refill_objects+0x2d8/0x350 [ 443.080627][ T4911] __pcs_replace_empty_main+0x330/0x690 [ 443.080654][ T4911] __kmalloc_noprof+0x544/0x780 [ 443.080675][ T4911] sk_prot_alloc+0xe7/0x210 [ 443.080698][ T4911] sk_alloc+0x3a/0x390 [ 443.080720][ T4911] __netlink_create+0x62/0x260 [ 443.080750][ T4911] netlink_create+0x3be/0x580 [ 443.080778][ T4911] __sock_create+0x4b3/0x9d0 [ 443.080795][ T4911] __sys_socket+0xd6/0x1b0 [ 443.080813][ T4911] __x64_sys_socket+0x7a/0x90 [ 443.080836][ T4911] do_syscall_64+0x174/0x580 [ 443.080860][ T4911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.080880][ T4911] page_owner free stack trace missing [ 443.080888][ T4911] [ 443.080893][ T4911] Memory state around the buggy address: [ 443.080905][ T4911] ffff8880613ca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080920][ T4911] ffff8880613ca180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080935][ T4911] >ffff8880613ca200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080947][ T4911] ^ [ 443.080958][ T4911] ffff8880613ca280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080973][ T4911] ffff8880613ca300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 443.080984][ T4911] ================================================================== [ 443.087344][ T4911] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 443.087371][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.087403][ T4911] Tainted: [L]=SOFTLOCKUP [ 443.087411][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 443.087425][ T4911] Workqueue: hci4 hci_rx_work [ 443.087456][ T4911] Call Trace: [ 443.087465][ T4911] [ 443.087474][ T4911] vpanic+0x56c/0xa60 [ 443.087499][ T4911] ? rcu_is_watching+0x15/0xb0 [ 443.087529][ T4911] ? __pfx_vpanic+0x10/0x10 [ 443.087556][ T4911] panic+0xc5/0xd0 [ 443.087589][ T4911] ? __pfx_panic+0x10/0x10 [ 443.087611][ T4911] ? preempt_schedule_thunk+0x16/0x40 [ 443.087642][ T4911] ? preempt_schedule_thunk+0x16/0x40 [ 443.087672][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.087696][ T4911] check_panic_on_warn+0x89/0xb0 [ 443.087718][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.087746][ T4911] end_report+0x73/0x170 [ 443.087773][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.087796][ T4911] kasan_report+0x128/0x150 [ 443.087828][ T4911] ? l2cap_sock_ready_cb+0xe3/0x180 [ 443.087856][ T4911] l2cap_sock_ready_cb+0xe3/0x180 [ 443.087880][ T4911] l2cap_le_start+0x257/0x1910 [ 443.087915][ T4911] ? __pfx_l2cap_le_start+0x10/0x10 [ 443.087949][ T4911] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.087976][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.088003][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.088029][ T4911] ? mutex_lock_nested+0x152/0x1d0 [ 443.088062][ T4911] ? l2cap_connect_cfm+0x90d/0x1620 [ 443.088097][ T4911] l2cap_connect_cfm+0x950/0x1620 [ 443.088136][ T4911] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 443.088170][ T4911] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.088198][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.088223][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.088250][ T4911] ? mutex_lock_nested+0x152/0x1d0 [ 443.088290][ T4911] ? hci_connect_cfm+0x2c/0x140 [ 443.088318][ T4911] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 443.088354][ T4911] hci_connect_cfm+0x95/0x140 [ 443.088386][ T4911] le_conn_complete_evt+0x1034/0x1580 [ 443.088423][ T4911] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 443.088453][ T4911] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.088479][ T4911] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.088504][ T4911] ? rt_mutex_slowunlock+0x219/0x460 [ 443.088538][ T4911] ? skb_pull_data+0xf0/0x200 [ 443.088581][ T4911] hci_le_conn_complete_evt+0x187/0x470 [ 443.088615][ T4911] hci_event_packet+0x67a/0xf10 [ 443.088643][ T4911] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 443.088671][ T4911] ? __pfx_hci_event_packet+0x10/0x10 [ 443.088696][ T4911] ? rt_spin_unlock+0x157/0x200 [ 443.088734][ T4911] ? hci_send_to_monitor+0xe2/0x590 [ 443.088772][ T4911] hci_rx_work+0x3ee/0x1020 [ 443.088802][ T4911] ? process_scheduled_works+0xa20/0x14e0 [ 443.088829][ T4911] process_scheduled_works+0xa8e/0x14e0 [ 443.088871][ T4911] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.088903][ T4911] ? assign_work+0x3cf/0x5d0 [ 443.088932][ T4911] worker_thread+0xa47/0xfb0 [ 443.088969][ T4911] ? __kthread_parkme+0x71/0x1f0 [ 443.089004][ T4911] kthread+0x388/0x470 [ 443.089037][ T4911] ? __pfx_worker_thread+0x10/0x10 [ 443.089063][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.089098][ T4911] ret_from_fork+0x514/0xb70 [ 443.089134][ T4911] ? __pfx_ret_from_fork+0x10/0x10 [ 443.089170][ T4911] ? __switch_to+0xc89/0x1420 [ 443.089200][ T4911] ? __pfx_kthread+0x10/0x10 [ 443.089235][ T4911] ret_from_fork_asm+0x1a/0x30 [ 443.089267][ T4911] [ 443.089869][ T4911] Kernel Offset: disabled