last executing test programs: 12m25.955264488s ago: executing program 0 (id=1): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519f800ff1, 0x6af, 0x7, 0x1d45, 0x3, 0x0, 0x0, 0x4}}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 12m25.108335269s ago: executing program 3 (id=4): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0xa5f]}) socketpair(0x21, 0x800, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1406, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400082, 0x6, &(0x7f0000000000)="531582f33de1282b", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12m22.694381505s ago: executing program 0 (id=6): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) 12m21.739037749s ago: executing program 0 (id=8): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0xa5f]}) socketpair(0x21, 0x800, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1406, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400082, 0x6, &(0x7f0000000000)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12m21.274012407s ago: executing program 3 (id=9): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 12m17.760596917s ago: executing program 0 (id=12): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0xa5f]}) socketpair(0x21, 0x800, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1406, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400082, 0x6, &(0x7f0000000000)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 12m13.242349306s ago: executing program 0 (id=13): capset(&(0x7f0000000500)={0x20080522}, 0x0) syslog(0x4, &(0x7f0000000080)=""/55, 0x37) 12m5.992746351s ago: executing program 32 (id=9): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 11m55.387623641s ago: executing program 33 (id=13): capset(&(0x7f0000000500)={0x20080522}, 0x0) syslog(0x4, &(0x7f0000000080)=""/55, 0x37) 11m30.862298528s ago: executing program 2 (id=50): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11m30.21511516s ago: executing program 2 (id=52): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) 11m26.125910235s ago: executing program 2 (id=55): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}, {&(0x7f0000000dc0)="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", 0x157}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="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", 0x161}, {&(0x7f0000000b80)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c52e17658832b8a5a6ea2934fe1c0fe868869f393b0f0370c3f0dfc3e25b390c5127c8952ea5501e967c1d10383fc5d03", 0x7d}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) 11m22.374402897s ago: executing program 2 (id=58): syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xc0, 0x8c, 0x3, 0x40, 0x2019, 0x4902, 0x947f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x80, 0x2, "", [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xe7, 0x31, 0x3f, 0x6}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x200, 0x18, 0x1, 0x81, 0x0, 0x3}, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 11m20.356355737s ago: executing program 2 (id=61): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000b00)=0x400, 0x4) r1 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r2 = shmat(r1, &(0x7f0000803000/0x3000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f00007e4000/0x2000)=nil) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001a400)=""/102384, 0x18ff0) mremap(&(0x7f0000cbb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) 11m16.445344131s ago: executing program 2 (id=63): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) 10m58.556726434s ago: executing program 34 (id=63): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) 16.310393778s ago: executing program 1 (id=681): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12.816503318s ago: executing program 1 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x6}, 0x1c) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 11.836165804s ago: executing program 5 (id=685): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 9.469720806s ago: executing program 5 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e1a050000000000000000000a0900050900010073797a31000000000900020073797a3100000000140000001100000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3f, 0x4, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, 0x0) r4 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 9.096008458s ago: executing program 4 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 7.788543795s ago: executing program 1 (id=688): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x6, 0x200, &(0x7f0000000880)="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"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x0, 0xfec00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.120999227s ago: executing program 4 (id=689): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000001080)={0x0, 0x306000, 0x8}) 5.555000368s ago: executing program 5 (id=690): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.301824178s ago: executing program 4 (id=691): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.1457481s ago: executing program 1 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 5.089567742s ago: executing program 5 (id=693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 4.911815834s ago: executing program 4 (id=694): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x0, 0xfec00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.635500328s ago: executing program 5 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3f, 0x4, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) 2.21878269s ago: executing program 4 (id=696): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) 1.345688738s ago: executing program 1 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\v'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 937.866766ms ago: executing program 5 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e1a050000000000000000000a0900050900010073797a31000000000900020073797a3100000000140000001100000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x24008040) timer_create(0x4, &(0x7f0000000080)={0x0, 0x3f, 0x4, @thr={0x0, 0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, 0x0) r4 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 652.239317ms ago: executing program 1 (id=699): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 0s ago: executing program 4 (id=700): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x6, 0x200, &(0x7f0000000880)="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"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x0, 0xfec00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 04.552432][ T48] bridge_slave_0: left allmulticast mode [ 504.621014][ T48] bridge_slave_0: left promiscuous mode [ 504.652892][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.255084][ T7128] ALSA: mixer_oss: invalid OSS volume '' [ 506.355580][ T7132] overlayfs: missing 'lowerdir' [ 506.457697][ T7134] affs: No valid root block on device nullb0 [ 509.537675][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.625420][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.661144][ T48] bond0 (unregistering): Released all slaves [ 509.719536][ T7049] chnl_net:caif_netlink_parms(): no params data found [ 510.295502][ T7060] chnl_net:caif_netlink_parms(): no params data found [ 511.188715][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.195921][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.368612][ T48] hsr_slave_0: left promiscuous mode [ 511.402879][ T48] hsr_slave_1: left promiscuous mode [ 511.427586][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.453154][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.946357][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 514.028934][ T7158] capability: warning: `syz.1.236' uses 32-bit capabilities (legacy support in use) [ 514.039649][ T48] team0 (unregistering): Port device team_slave_1 removed [ 514.077798][ T7158] program syz.1.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.108041][ T48] team0 (unregistering): Port device team_slave_0 removed [ 514.163839][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 514.194236][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 514.214178][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 514.240484][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 514.269995][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128 [ 514.310766][ T5896] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 514.372238][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.395890][ T5896] usb 5-1: Product: syz [ 514.400268][ T5896] usb 5-1: Manufacturer: syz [ 514.405073][ T5896] usb 5-1: SerialNumber: syz [ 514.447988][ T5896] usb 5-1: config 0 descriptor?? [ 514.469272][ T7155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.493334][ T5896] kvaser_usb 5-1:0.0: error -EPROTO: Cannot get software info [ 514.527868][ T5896] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -71 [ 514.785578][ T7162] ALSA: mixer_oss: invalid OSS volume '' [ 515.260861][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.310700][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.356373][ T7040] bridge_slave_0: entered allmulticast mode [ 515.388192][ T5896] usb 5-1: USB disconnect, device number 15 [ 516.055147][ T7170] fuse: Unknown parameter 'group_id00000000000000000000' [ 516.083901][ T7040] bridge_slave_0: entered promiscuous mode [ 516.272212][ T7172] affs: No valid root block on device nullb0 [ 516.791145][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.836100][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.875521][ T7040] bridge_slave_1: entered allmulticast mode [ 516.919215][ T7040] bridge_slave_1: entered promiscuous mode [ 517.216063][ T3077] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 517.343214][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.442541][ T3077] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.483686][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.522695][ T3077] usb 5-1: not running at top speed; connect to a high speed hub [ 517.582832][ T3077] usb 5-1: config 6 has an invalid interface number: 168 but max is 0 [ 517.612360][ T3077] usb 5-1: config 6 has no interface number 0 [ 517.687484][ T3077] usb 5-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 517.744005][ T3077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.826724][ T3077] usb 5-1: Product: syz [ 517.831100][ T3077] usb 5-1: Manufacturer: syz [ 517.918020][ T3077] usb 5-1: SerialNumber: syz [ 518.469188][ T7040] team0: Port device team_slave_0 added [ 518.509484][ T3077] usb 5-1: USB disconnect, device number 16 [ 518.528029][ T7040] team0: Port device team_slave_1 added [ 518.732952][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.746628][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.762333][ T7049] bridge_slave_0: entered allmulticast mode [ 518.793909][ T7049] bridge_slave_0: entered promiscuous mode [ 519.159519][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.194053][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.210580][ T7049] bridge_slave_1: entered allmulticast mode [ 519.228234][ T7049] bridge_slave_1: entered promiscuous mode [ 521.152634][ T7196] overlayfs: missing 'lowerdir' [ 525.181846][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.196222][ T3077] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 525.216751][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.357767][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.464429][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.504467][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.566842][ T7060] bridge_slave_0: entered allmulticast mode [ 525.593669][ T7060] bridge_slave_0: entered promiscuous mode [ 525.690718][ T7049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.744060][ T7049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.969456][ T7211] fuse: Unknown parameter 'group_id00000000000000000000' [ 526.073271][ T7049] team0: Port device team_slave_0 added [ 526.181275][ T7049] team0: Port device team_slave_1 added [ 526.318851][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.346093][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.420075][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.501739][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.527687][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.576455][ T7060] bridge_slave_1: entered allmulticast mode [ 526.596950][ T7060] bridge_slave_1: entered promiscuous mode [ 527.299918][ T7221] affs: No valid root block on device nullb0 [ 527.844089][ T7060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.889033][ T7060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.066387][ T5896] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 528.305511][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.312148][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.387954][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 528.398158][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.452349][ T5896] usb 2-1: config 6 has an invalid interface number: 168 but max is 1 [ 528.470061][ T5896] usb 2-1: config 6 has an invalid interface number: 61 but max is 1 [ 528.506112][ T7049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.517527][ T5896] usb 2-1: config 6 has no interface number 0 [ 528.523773][ T5896] usb 2-1: config 6 has no interface number 1 [ 528.558265][ T5896] usb 2-1: config 6 interface 61 has no altsetting 0 [ 528.630581][ T5896] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 528.661069][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.686381][ T5896] usb 2-1: Product: syz [ 528.713532][ T5896] usb 2-1: Manufacturer: syz [ 528.740388][ T5896] usb 2-1: SerialNumber: syz [ 528.863841][ T7049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.871535][ T7049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.917968][ T7049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.215296][ T5896] usb 2-1: USB disconnect, device number 12 [ 529.344107][ T7040] hsr_slave_0: entered promiscuous mode [ 529.382816][ T7040] hsr_slave_1: entered promiscuous mode [ 529.518623][ T7060] team0: Port device team_slave_0 added [ 529.823112][ T7060] team0: Port device team_slave_1 added [ 529.899235][ T7230] loop8: detected capacity change from 0 to 8 [ 529.946886][ T7230] Dev loop8: unable to read RDB block 8 [ 529.953496][ T7230] loop8: unable to read partition table [ 529.968872][ T7230] loop8: partition table beyond EOD, truncated [ 530.010079][ T7230] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 530.669568][ T7049] hsr_slave_0: entered promiscuous mode [ 530.725544][ T7049] hsr_slave_1: entered promiscuous mode [ 530.754997][ T7049] debugfs: 'hsr0' already exists in 'hsr' [ 530.776419][ T7049] Cannot create hsr debugfs directory [ 534.443034][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.473222][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.520599][ T7060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.556922][ T7060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.564049][ T7060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.600940][ T7060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.776174][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 537.301995][ T7060] hsr_slave_0: entered promiscuous mode [ 537.312900][ T7060] hsr_slave_1: entered promiscuous mode [ 537.334257][ T7060] debugfs: 'hsr0' already exists in 'hsr' [ 537.342275][ T7060] Cannot create hsr debugfs directory [ 537.356195][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 537.538940][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.571579][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 537.592908][ T6034] bridge_slave_1: left allmulticast mode [ 537.607561][ T10] usb 2-1: config 6 has an invalid interface number: 168 but max is 1 [ 537.616777][ T10] usb 2-1: config 6 has an invalid interface number: 61 but max is 1 [ 537.625051][ T10] usb 2-1: config 6 has no interface number 0 [ 537.639272][ T10] usb 2-1: config 6 has no interface number 1 [ 537.646848][ T10] usb 2-1: config 6 interface 61 has no altsetting 0 [ 537.667555][ T6034] bridge_slave_1: left promiscuous mode [ 537.677547][ T10] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 537.696996][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.716757][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.729829][ T10] usb 2-1: Product: syz [ 537.734208][ T10] usb 2-1: Manufacturer: syz [ 537.741605][ T10] usb 2-1: SerialNumber: syz [ 537.751302][ T6034] bridge_slave_0: left allmulticast mode [ 537.763242][ T6034] bridge_slave_0: left promiscuous mode [ 537.778421][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.841990][ T6034] bridge_slave_1: left allmulticast mode [ 537.860754][ T6034] bridge_slave_1: left promiscuous mode [ 537.883802][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.902360][ T6034] bridge_slave_0: left allmulticast mode [ 537.922447][ T6034] bridge_slave_0: left promiscuous mode [ 537.944363][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.179209][ T10] usb 2-1: USB disconnect, device number 14 [ 538.674028][ T7264] overlayfs: missing 'lowerdir' [ 541.007403][ T7270] overlayfs: missing 'lowerdir' [ 543.725296][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.358383][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.458136][ T7286] affs: No valid root block on device nullb0 [ 545.365533][ T6034] bond0 (unregistering): Released all slaves [ 546.226295][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.332057][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.421841][ T6034] bond0 (unregistering): Released all slaves [ 546.837126][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 546.883938][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 546.895145][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 546.920771][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 546.934082][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.128805][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 547.137983][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 547.147228][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 547.160372][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 547.176980][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 547.327504][ T6034] hsr_slave_0: left promiscuous mode [ 547.365181][ T6034] hsr_slave_1: left promiscuous mode [ 547.412218][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.457724][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.776172][ T6034] hsr_slave_0: left promiscuous mode [ 547.849956][ T6034] hsr_slave_1: left promiscuous mode [ 547.890058][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.018221][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.256013][ T6034] veth1_macvtap: left promiscuous mode [ 548.261725][ T6034] veth0_macvtap: left promiscuous mode [ 548.294915][ T6034] veth1_vlan: left promiscuous mode [ 548.393679][ T6034] veth0_vlan: left promiscuous mode [ 548.452377][ T7301] overlayfs: missing 'lowerdir' [ 549.009468][ T5779] Bluetooth: hci5: command tx timeout [ 549.324746][ T5779] Bluetooth: hci6: command tx timeout [ 550.689554][ T5784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 550.711362][ T5784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 550.726253][ T5784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 550.742241][ T5784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 550.754349][ T5784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 551.082912][ T5784] Bluetooth: hci5: command tx timeout [ 551.324579][ T3077] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 551.396283][ T5784] Bluetooth: hci6: command tx timeout [ 551.543372][ T3077] usb 5-1: unable to get BOS descriptor or descriptor too short [ 551.580220][ T3077] usb 5-1: not running at top speed; connect to a high speed hub [ 551.608527][ T3077] usb 5-1: config 6 has an invalid interface number: 168 but max is 1 [ 551.628380][ T3077] usb 5-1: config 6 has an invalid interface number: 61 but max is 1 [ 551.666233][ T3077] usb 5-1: config 6 has no interface number 0 [ 551.672543][ T3077] usb 5-1: config 6 has no interface number 1 [ 551.704415][ T3077] usb 5-1: config 6 interface 61 has no altsetting 0 [ 551.721798][ T3077] usb 5-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 551.744239][ T3077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.801498][ T3077] usb 5-1: Product: syz [ 551.809662][ T3077] usb 5-1: Manufacturer: syz [ 551.814490][ T3077] usb 5-1: SerialNumber: syz [ 552.066560][ T3077] usb 5-1: can't set config #6, error -71 [ 552.132397][ T3077] usb 5-1: USB disconnect, device number 18 [ 552.712072][ T7312] overlayfs: missing 'lowerdir' [ 553.230817][ T5784] Bluetooth: hci7: command tx timeout [ 553.236599][ T5784] Bluetooth: hci5: command tx timeout [ 553.477326][ T5779] Bluetooth: hci6: command tx timeout [ 555.097203][ T7318] 9p: Bad value for 'rfdno' [ 555.707127][ T5779] Bluetooth: hci5: command tx timeout [ 555.712775][ T5779] Bluetooth: hci7: command tx timeout [ 555.718481][ T5779] Bluetooth: hci6: command tx timeout [ 557.795993][ T5784] Bluetooth: hci7: command tx timeout [ 559.204093][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 559.312841][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 559.876445][ T5784] Bluetooth: hci7: command tx timeout [ 561.197884][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 561.298490][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 562.162502][ T7336] netlink: 124 bytes leftover after parsing attributes in process `syz.1.275'. [ 564.421378][ T6034] bridge_slave_1: left allmulticast mode [ 564.436077][ T6034] bridge_slave_1: left promiscuous mode [ 564.468592][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.496920][ T6034] bridge_slave_0: left allmulticast mode [ 564.518825][ T6034] bridge_slave_0: left promiscuous mode [ 564.540443][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.572053][ T6034] bridge_slave_1: left allmulticast mode [ 564.585842][ T6034] bridge_slave_1: left promiscuous mode [ 564.596663][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.623504][ T6034] bridge_slave_0: left allmulticast mode [ 564.645926][ T6034] bridge_slave_0: left promiscuous mode [ 564.652615][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.996155][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.031971][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.062539][ T6034] bond0 (unregistering): Released all slaves [ 565.327931][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.345560][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.391210][ T6034] bond0 (unregistering): Released all slaves [ 565.952573][ T6034] hsr_slave_0: left promiscuous mode [ 565.969427][ T6034] hsr_slave_1: left promiscuous mode [ 565.988553][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.008730][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.059574][ T6034] hsr_slave_0: left promiscuous mode [ 566.078744][ T6034] hsr_slave_1: left promiscuous mode [ 566.106803][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.127771][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.390191][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 566.421920][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 567.287613][ T5896] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 567.334020][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 567.364564][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 567.473356][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.508891][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 567.531032][ T5896] usb 2-1: config 6 has an invalid interface number: 168 but max is 1 [ 567.551061][ T5896] usb 2-1: config 6 has an invalid interface number: 61 but max is 1 [ 567.565356][ T5896] usb 2-1: config 6 has no interface number 0 [ 567.572240][ T5896] usb 2-1: config 6 has no interface number 1 [ 567.596004][ T5896] usb 2-1: config 6 interface 61 has no altsetting 0 [ 567.621231][ T5896] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 567.643630][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.662754][ T5896] usb 2-1: Product: syz [ 567.668216][ T5896] usb 2-1: Manufacturer: syz [ 567.672995][ T5896] usb 2-1: SerialNumber: syz [ 567.760398][ T7351] fuse: Bad value for 'fd' [ 568.090942][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 568.631350][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 568.724557][ T5896] usb 2-1: USB disconnect, device number 15 [ 571.619869][ T4522] bridge_slave_1: left allmulticast mode [ 571.626339][ T4522] bridge_slave_1: left promiscuous mode [ 571.633053][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.692690][ T4522] bridge_slave_0: left allmulticast mode [ 571.702781][ T4522] bridge_slave_0: left promiscuous mode [ 571.711191][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.131618][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.257736][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.290001][ T4522] bond0 (unregistering): Released all slaves [ 572.419023][ T7292] chnl_net:caif_netlink_parms(): no params data found [ 572.637478][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.644111][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.870147][ T4522] hsr_slave_0: left promiscuous mode [ 572.941367][ T4522] hsr_slave_1: left promiscuous mode [ 572.958128][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.006095][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.556202][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 574.638192][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 575.321395][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.367647][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.506057][ T7290] bridge_slave_0: entered allmulticast mode [ 575.624819][ T7290] bridge_slave_0: entered promiscuous mode [ 575.762947][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.786550][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.830338][ T7290] bridge_slave_1: entered allmulticast mode [ 575.859562][ T7290] bridge_slave_1: entered promiscuous mode [ 576.003411][ T7390] fuse: Bad value for 'fd' [ 576.226993][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.271486][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.387000][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.409527][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.428779][ T7305] bridge_slave_0: entered allmulticast mode [ 576.463031][ T7305] bridge_slave_0: entered promiscuous mode [ 576.516254][ T5896] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 576.734162][ T7290] team0: Port device team_slave_0 added [ 576.753048][ T7290] team0: Port device team_slave_1 added [ 576.814709][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.829910][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.840350][ T7305] bridge_slave_1: entered allmulticast mode [ 576.851311][ T7305] bridge_slave_1: entered promiscuous mode [ 577.104129][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.121214][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.159359][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.246888][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.261810][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.275104][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.303051][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.322849][ T7292] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.343239][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 577.352313][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.360523][ T7292] bridge_slave_0: entered allmulticast mode [ 577.371777][ T7292] bridge_slave_0: entered promiscuous mode [ 577.388495][ T5896] usb 2-1: not running at top speed; connect to a high speed hub [ 577.400256][ T7292] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.409985][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.417946][ T5896] usb 2-1: config 6 has an invalid interface number: 168 but max is 1 [ 577.426916][ T5896] usb 2-1: config 6 has an invalid interface number: 61 but max is 1 [ 577.436847][ T7292] bridge_slave_1: entered allmulticast mode [ 577.441536][ T5896] usb 2-1: config 6 has no interface number 0 [ 577.455278][ T5896] usb 2-1: config 6 has no interface number 1 [ 577.481596][ T5896] usb 2-1: config 6 interface 61 has no altsetting 0 [ 578.388239][ T7292] bridge_slave_1: entered promiscuous mode [ 578.434709][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.469173][ T5896] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 578.478874][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.488640][ T5896] usb 2-1: Product: syz [ 578.493013][ T5896] usb 2-1: Manufacturer: syz [ 578.637465][ T5896] usb 2-1: SerialNumber: syz [ 579.746469][ T5896] usb 2-1: can't set config #6, error -71 [ 579.820529][ T5896] usb 2-1: USB disconnect, device number 16 [ 579.870578][ T7292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.433422][ T7292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.591517][ T7305] team0: Port device team_slave_0 added [ 581.032915][ T7305] team0: Port device team_slave_1 added [ 581.122314][ T7290] hsr_slave_0: entered promiscuous mode [ 581.138724][ T7290] hsr_slave_1: entered promiscuous mode [ 581.177376][ T7292] team0: Port device team_slave_0 added [ 581.333261][ T7292] team0: Port device team_slave_1 added [ 581.427574][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.435042][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.463966][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.582128][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.605044][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.643656][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.694955][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.717914][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.775761][ T7292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.809389][ T7292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.822083][ T7292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.852818][ T7292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.481864][ T7292] hsr_slave_0: entered promiscuous mode [ 582.492745][ T7292] hsr_slave_1: entered promiscuous mode [ 582.503556][ T7292] debugfs: 'hsr0' already exists in 'hsr' [ 582.511128][ T7292] Cannot create hsr debugfs directory [ 582.610172][ T7305] hsr_slave_0: entered promiscuous mode [ 582.619429][ T7305] hsr_slave_1: entered promiscuous mode [ 582.628101][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 582.634310][ T7305] Cannot create hsr debugfs directory [ 582.843807][ T7418] 9p: Bad value for 'rfdno' [ 583.572736][ T7406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.337692][ T7420] fuse: Bad value for 'fd' [ 585.849210][ T7424] loop5: detected capacity change from 0 to 7 [ 585.907041][ T7424] Dev loop5: unable to read RDB block 7 [ 585.950797][ T7424] loop5: unable to read partition table [ 585.972611][ T7424] loop5: partition table beyond EOD, truncated [ 586.007223][ T7424] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 586.184055][ T7290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 586.283167][ T7290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 586.456579][ T7426] netlink: 124 bytes leftover after parsing attributes in process `syz.1.298'. [ 587.360116][ T7290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 587.557232][ T7290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 589.599310][ T7444] 9p: Bad value for 'rfdno' [ 590.335340][ T7445] fuse: Bad value for 'fd' [ 592.764439][ T7305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 593.293654][ T7305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.886842][ T7458] overlayfs: missing 'lowerdir' [ 596.413468][ T7305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 597.874628][ T7305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 598.107451][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.327538][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.411179][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.418805][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.799618][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.807239][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.166591][ T7292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.790791][ T7292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 601.883717][ T7292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.093537][ T7292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 604.529302][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.972746][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.124959][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.132494][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.281883][ T7489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.403391][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.411119][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.917278][ T7292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.402714][ T7292] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.248493][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 607.268944][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 607.292035][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 607.308011][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 607.329573][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 608.458001][ T7521] 9p: Bad value for 'rfdno' [ 609.397145][ T5784] Bluetooth: hci0: command tx timeout [ 611.242108][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.273363][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.282703][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.312707][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.358502][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.511513][ T5779] Bluetooth: hci0: command tx timeout [ 616.892799][ T5779] Bluetooth: hci2: command tx timeout [ 616.906029][ T5779] Bluetooth: hci0: command tx timeout [ 621.098919][ T5779] Bluetooth: hci2: command tx timeout [ 621.105073][ T5784] Bluetooth: hci0: command tx timeout [ 621.595105][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 621.614463][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 621.627753][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 621.654533][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.670130][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.654572][ T5784] Bluetooth: hci2: command tx timeout [ 623.725882][ T5784] Bluetooth: hci3: command tx timeout [ 624.926528][ T7512] chnl_net:caif_netlink_parms(): no params data found [ 625.734111][ T7566] loop5: detected capacity change from 0 to 7 [ 625.744208][ T7566] Dev loop5: unable to read RDB block 7 [ 625.752615][ T7566] loop5: unable to read partition table [ 625.760799][ T5784] Bluetooth: hci2: command tx timeout [ 625.816352][ T5784] Bluetooth: hci3: command tx timeout [ 625.826868][ T7566] loop5: partition table beyond EOD, truncated [ 625.845887][ T7566] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 625.988386][ T7568] overlayfs: missing 'lowerdir' [ 631.801576][ T5784] Bluetooth: hci3: command tx timeout [ 635.009188][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.016040][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.019399][ T5784] Bluetooth: hci3: command tx timeout [ 636.561837][ T7578] overlayfs: missing 'lowerdir' [ 638.957972][ T48] bridge_slave_1: left allmulticast mode [ 638.963845][ T48] bridge_slave_1: left promiscuous mode [ 639.011193][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.045501][ T48] bridge_slave_0: left allmulticast mode [ 639.064535][ T48] bridge_slave_0: left promiscuous mode [ 639.088014][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.747378][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.777735][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.803628][ T48] bond0 (unregistering): Released all slaves [ 640.090130][ T48] hsr_slave_0: left promiscuous mode [ 640.171835][ T48] hsr_slave_1: left promiscuous mode [ 640.199595][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.239781][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.368431][ T48] team0 (unregistering): Port device team_slave_1 removed [ 641.796842][ T48] team0 (unregistering): Port device team_slave_0 removed [ 648.220471][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.236143][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.258598][ T7512] bridge_slave_0: entered allmulticast mode [ 648.282340][ T7512] bridge_slave_0: entered promiscuous mode [ 648.331640][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.356510][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.364430][ T7512] bridge_slave_1: entered allmulticast mode [ 648.383594][ T7512] bridge_slave_1: entered promiscuous mode [ 648.483488][ T7526] chnl_net:caif_netlink_parms(): no params data found [ 648.712963][ T7512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.987236][ T7512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.298681][ T7512] team0: Port device team_slave_0 added [ 649.403250][ T7512] team0: Port device team_slave_1 added [ 649.843992][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.893484][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.946566][ T7512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.964004][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.010789][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.077333][ T7512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.138620][ T7545] chnl_net:caif_netlink_parms(): no params data found [ 650.685895][ T5824] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 650.741049][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.766646][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.774737][ T7526] bridge_slave_0: entered allmulticast mode [ 650.803542][ T7526] bridge_slave_0: entered promiscuous mode [ 650.883523][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.927775][ T5824] usb 2-1: not running at top speed; connect to a high speed hub [ 650.940032][ T5824] usb 2-1: config 6 has an invalid interface number: 61 but max is 0 [ 650.949031][ T5824] usb 2-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 650.986211][ T5824] usb 2-1: config 6 has no interface number 0 [ 650.992636][ T5824] usb 2-1: config 6 interface 61 has no altsetting 0 [ 651.007317][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.026201][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.033877][ T7526] bridge_slave_1: entered allmulticast mode [ 651.062298][ T5824] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 651.080553][ T7526] bridge_slave_1: entered promiscuous mode [ 651.091028][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.126137][ T5824] usb 2-1: Product: syz [ 651.130531][ T5824] usb 2-1: Manufacturer: syz [ 651.135325][ T5824] usb 2-1: SerialNumber: syz [ 651.257681][ T7512] hsr_slave_0: entered promiscuous mode [ 651.290172][ T7512] hsr_slave_1: entered promiscuous mode [ 651.484542][ T5824] usb 2-1: USB disconnect, device number 17 [ 651.602246][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.687948][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.632543][ T7526] team0: Port device team_slave_0 added [ 652.722219][ T7526] team0: Port device team_slave_1 added [ 653.057826][ T7637] overlayfs: missing 'lowerdir' [ 653.643372][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.662925][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.672725][ T7545] bridge_slave_0: entered allmulticast mode [ 653.693994][ T7545] bridge_slave_0: entered promiscuous mode [ 654.088775][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.377662][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.464214][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.544814][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.576149][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.665948][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.837111][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.873775][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.892321][ T7545] bridge_slave_1: entered allmulticast mode [ 654.912620][ T7545] bridge_slave_1: entered promiscuous mode [ 656.121941][ T7646] netlink: 124 bytes leftover after parsing attributes in process `syz.1.353'. [ 657.642284][ T7650] Bluetooth: MGMT ver 1.23 [ 659.129247][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.305028][ T7653] fuse: Bad value for 'user_id' [ 659.336149][ T7653] fuse: Bad value for 'user_id' [ 659.428828][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.474208][ T7526] hsr_slave_0: entered promiscuous mode [ 659.494613][ T7526] hsr_slave_1: entered promiscuous mode [ 659.509570][ T7526] debugfs: 'hsr0' already exists in 'hsr' [ 659.517128][ T7526] Cannot create hsr debugfs directory [ 660.344979][ T7545] team0: Port device team_slave_0 added [ 660.356432][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 660.561310][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 660.583588][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 660.625076][ T10] usb 5-1: config 6 has an invalid interface number: 61 but max is 0 [ 660.639509][ T10] usb 5-1: config 6 has no interface number 0 [ 660.654346][ T7545] team0: Port device team_slave_1 added [ 660.675935][ T10] usb 5-1: config 6 interface 61 has no altsetting 0 [ 660.732705][ T10] usb 5-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 660.771758][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.806243][ T10] usb 5-1: Product: syz [ 660.816651][ T10] usb 5-1: Manufacturer: syz [ 660.826729][ T10] usb 5-1: SerialNumber: syz [ 661.234627][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.257700][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.281415][ T10] usb 5-1: USB disconnect, device number 19 [ 661.293823][ T7545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.494592][ T7663] 9p: Bad value for 'rfdno' [ 664.937711][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.953265][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.873881][ T7545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.960139][ T7680] overlayfs: missing 'lowerdir' [ 672.756533][ T48] bridge_slave_1: left allmulticast mode [ 672.762427][ T48] bridge_slave_1: left promiscuous mode [ 672.817428][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.901291][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.909953][ T48] bridge_slave_0: left allmulticast mode [ 672.927169][ T48] bridge_slave_0: left promiscuous mode [ 672.928924][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.934777][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.962218][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.996755][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 673.008204][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 673.043652][ T48] bridge_slave_1: left allmulticast mode [ 673.086193][ T48] bridge_slave_1: left promiscuous mode [ 673.092715][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.224208][ T48] bridge_slave_0: left allmulticast mode [ 673.247499][ T48] bridge_slave_0: left promiscuous mode [ 673.253959][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.408501][ T5783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 673.442246][ T5783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 673.457482][ T5783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 673.486852][ T5783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 673.502009][ T5783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 674.611150][ T5784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 674.637583][ T5784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 674.648536][ T5784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 674.664050][ T5784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 674.676232][ T5784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 675.041321][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.083270][ T5783] Bluetooth: hci5: command tx timeout [ 675.124934][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.165396][ T48] bond0 (unregistering): Released all slaves [ 675.514853][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.551499][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.557319][ T5783] Bluetooth: hci6: command tx timeout [ 675.580872][ T48] bond0 (unregistering): Released all slaves [ 675.816108][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 675.982544][ T48] hsr_slave_0: left promiscuous mode [ 675.994440][ T5824] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 676.010360][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.029169][ T48] hsr_slave_1: left promiscuous mode [ 676.048815][ T5824] usb 5-1: config 0 descriptor?? [ 676.059463][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.078277][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.136382][ T48] hsr_slave_0: left promiscuous mode [ 676.149247][ T48] hsr_slave_1: left promiscuous mode [ 676.165386][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.192925][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.757935][ T5783] Bluetooth: hci7: command tx timeout [ 677.157171][ T5783] Bluetooth: hci5: command tx timeout [ 677.636325][ T5783] Bluetooth: hci6: command tx timeout [ 677.944959][ T48] team0 (unregistering): Port device team_slave_1 removed [ 678.057624][ T48] team0 (unregistering): Port device team_slave_0 removed [ 678.837308][ T5784] Bluetooth: hci7: command tx timeout [ 679.008052][ T48] team0 (unregistering): Port device team_slave_1 removed [ 679.120352][ T48] team0 (unregistering): Port device team_slave_0 removed [ 679.240356][ T5783] Bluetooth: hci5: command tx timeout [ 679.659225][ T7721] overlayfs: missing 'lowerdir' [ 680.204631][ T5783] Bluetooth: hci6: command tx timeout [ 681.204684][ T5783] Bluetooth: hci7: command tx timeout [ 681.406631][ T5824] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 681.446084][ T5783] Bluetooth: hci5: command tx timeout [ 681.452854][ T5824] [drm:udl_init] *ERROR* Selecting channel failed [ 681.934506][ T5824] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 682.006232][ T5824] [drm] Initialized udl on minor 2 [ 682.035302][ T5824] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 682.077251][ T5824] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 682.097865][ T5827] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 682.131932][ T5827] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 682.298471][ T5783] Bluetooth: hci6: command tx timeout [ 682.790975][ T5827] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 682.807065][ T5824] usb 5-1: USB disconnect, device number 20 [ 683.132793][ T7732] overlayfs: missing 'lowerdir' [ 683.837272][ T5783] Bluetooth: hci7: command tx timeout [ 686.226251][ T48] bridge_slave_1: left allmulticast mode [ 686.247434][ T48] bridge_slave_1: left promiscuous mode [ 686.274706][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.323523][ T48] bridge_slave_0: left allmulticast mode [ 686.334722][ T48] bridge_slave_0: left promiscuous mode [ 686.344484][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.361744][ T48] bridge_slave_1: left allmulticast mode [ 686.368075][ T48] bridge_slave_1: left promiscuous mode [ 686.374547][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.389282][ T48] bridge_slave_0: left allmulticast mode [ 686.421014][ T48] bridge_slave_0: left promiscuous mode [ 686.437151][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.521478][ T48] bridge_slave_1: left allmulticast mode [ 686.538671][ T48] bridge_slave_1: left promiscuous mode [ 686.548189][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.809345][ T7753] overlayfs: missing 'lowerdir' [ 687.560144][ T48] bridge_slave_0: left allmulticast mode [ 688.517210][ T48] bridge_slave_0: left promiscuous mode [ 688.523727][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.033112][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.075854][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.104384][ T48] bond0 (unregistering): Released all slaves [ 689.650495][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.710835][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.773379][ T48] bond0 (unregistering): Released all slaves [ 690.543048][ T7764] overlayfs: missing 'lowerdir' [ 690.964271][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.339009][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.676738][ T48] bond0 (unregistering): Released all slaves [ 693.464602][ T7688] chnl_net:caif_netlink_parms(): no params data found [ 693.503769][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.555972][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.618400][ T48] hsr_slave_0: left promiscuous mode [ 693.635806][ T48] hsr_slave_1: left promiscuous mode [ 693.671392][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.698825][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.741545][ T48] hsr_slave_0: left promiscuous mode [ 693.770108][ T48] hsr_slave_1: left promiscuous mode [ 693.788341][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.838898][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.006099][ T7784] fuse: Bad value for 'fd' [ 694.072439][ T48] team0 (unregistering): Port device team_slave_1 removed [ 694.124048][ T48] team0 (unregistering): Port device team_slave_0 removed [ 694.561281][ T5824] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 694.632369][ T48] team0 (unregistering): Port device team_slave_1 removed [ 694.678887][ T48] team0 (unregistering): Port device team_slave_0 removed [ 694.735022][ T5824] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.756058][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.799175][ T5824] usb 2-1: config 0 descriptor?? [ 695.511374][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.518368][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.742510][ T48] team0 (unregistering): Port device team_slave_1 removed [ 695.783657][ T48] team0 (unregistering): Port device team_slave_0 removed [ 696.762529][ T7798] overlayfs: missing 'lowerdir' [ 698.529732][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.666446][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.766684][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.830468][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.359163][ T5824] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 699.372760][ T5824] [drm:udl_init] *ERROR* Selecting channel failed [ 699.935329][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 700.034736][ T5824] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 700.051827][ T5824] [drm] Initialized udl on minor 2 [ 700.093083][ T5824] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.199851][ T5824] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 700.456485][ T794] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.503215][ T5824] usb 2-1: USB disconnect, device number 18 [ 700.510416][ T794] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 701.007001][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 702.546677][ T7828] fuse: Bad value for 'fd' [ 702.634858][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.653474][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.679321][ T7688] bridge_slave_0: entered allmulticast mode [ 702.699712][ T7688] bridge_slave_0: entered promiscuous mode [ 702.753556][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.789669][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.799080][ T7688] bridge_slave_1: entered allmulticast mode [ 702.837582][ T7688] bridge_slave_1: entered promiscuous mode [ 703.414825][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.512296][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.609926][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.610314][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.610768][ T7691] bridge_slave_0: entered allmulticast mode [ 703.618729][ T7691] bridge_slave_0: entered promiscuous mode [ 703.761569][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.761930][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.762348][ T7691] bridge_slave_1: entered allmulticast mode [ 703.786367][ T7691] bridge_slave_1: entered promiscuous mode [ 704.615909][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.677921][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.697351][ T7688] team0: Port device team_slave_0 added [ 705.721877][ T7688] team0: Port device team_slave_1 added [ 706.455361][ T7691] team0: Port device team_slave_0 added [ 706.548363][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.564640][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.597954][ T7701] bridge_slave_0: entered allmulticast mode [ 706.631744][ T7701] bridge_slave_0: entered promiscuous mode [ 706.778519][ T7691] team0: Port device team_slave_1 added [ 706.792447][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.809569][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.820210][ T7701] bridge_slave_1: entered allmulticast mode [ 706.831996][ T7701] bridge_slave_1: entered promiscuous mode [ 707.201104][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.249221][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.294121][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.313526][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.353437][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.416668][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.446613][ T7874] fuse: Bad value for 'fd' [ 707.514705][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.563050][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.674805][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.703005][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.776631][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.832520][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.653168][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.681028][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.408549][ T7701] team0: Port device team_slave_0 added [ 709.543806][ T7701] team0: Port device team_slave_1 added [ 709.602645][ T7688] hsr_slave_0: entered promiscuous mode [ 709.639163][ T7688] hsr_slave_1: entered promiscuous mode [ 711.639466][ T7691] hsr_slave_0: entered promiscuous mode [ 711.662335][ T7691] hsr_slave_1: entered promiscuous mode [ 711.672698][ T7691] debugfs: 'hsr0' already exists in 'hsr' [ 711.688088][ T7691] Cannot create hsr debugfs directory [ 711.797740][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.835331][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.885498][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.009666][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.027468][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.080746][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.736371][ T7701] hsr_slave_0: entered promiscuous mode [ 712.767487][ T7701] hsr_slave_1: entered promiscuous mode [ 712.792088][ T7701] debugfs: 'hsr0' already exists in 'hsr' [ 712.804641][ T7701] Cannot create hsr debugfs directory [ 713.228250][ T7905] overlayfs: missing 'lowerdir' [ 716.775862][ T3077] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 716.875505][ T7688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 716.984998][ T3077] usb 5-1: unable to get BOS descriptor or descriptor too short [ 717.014035][ T3077] usb 5-1: not running at top speed; connect to a high speed hub [ 717.063339][ T3077] usb 5-1: config 6 has an invalid interface number: 61 but max is 0 [ 717.081316][ T3077] usb 5-1: config 6 has no interface number 0 [ 717.100956][ T3077] usb 5-1: config 6 interface 61 has no altsetting 0 [ 717.148818][ T3077] usb 5-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 717.167701][ T3077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.181207][ T3077] usb 5-1: Product: syz [ 717.200059][ T7688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.210685][ T3077] usb 5-1: Manufacturer: syz [ 717.226803][ T3077] usb 5-1: SerialNumber: syz [ 717.243734][ T7688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.351825][ T7688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 717.499689][ T794] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 717.574505][ T3077] usb 5-1: USB disconnect, device number 21 [ 717.740278][ T794] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 717.766002][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.783855][ T794] usb 2-1: config 0 descriptor?? [ 718.123759][ T794] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 718.158138][ T794] [drm:udl_init] *ERROR* Selecting channel failed [ 718.291876][ T794] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 718.342823][ T794] [drm] Initialized udl on minor 2 [ 718.370793][ T794] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.416991][ T794] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 718.431463][ T5827] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.486682][ T5827] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 718.495131][ T5827] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 718.516955][ T794] usb 2-1: USB disconnect, device number 19 [ 718.737441][ T7701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 718.880125][ T7701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.031026][ T7701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.224331][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.363387][ T7701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.094235][ T7945] overlayfs: missing 'lowerdir' [ 721.686893][ T7688] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.749634][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.757192][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.960555][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.968164][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.022412][ T7691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 723.237621][ T7691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 724.791065][ T7691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 725.792320][ T7691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 729.239399][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.782866][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.032961][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.040595][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.093208][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.100836][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.805955][ T5827] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 731.060814][ T5827] usb 2-1: unable to get BOS descriptor or descriptor too short [ 731.124435][ T5827] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 731.146168][ T5827] usb 2-1: can't read configurations, error -71 [ 731.654811][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 731.664320][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 731.674900][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 731.691088][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 731.769111][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.514896][ T8005] loop8: detected capacity change from 0 to 8 [ 732.574476][ T8005] Dev loop8: unable to read RDB block 8 [ 732.629399][ T8005] loop8: unable to read partition table [ 732.696660][ T8005] loop8: partition table beyond EOD, truncated [ 732.766019][ T8005] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 733.073107][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.107363][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.172078][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.187502][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.200462][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.912442][ T5779] Bluetooth: hci0: command tx timeout [ 735.962730][ T5783] Bluetooth: hci0: command tx timeout [ 736.280215][ T5783] Bluetooth: hci2: command tx timeout [ 736.555191][ T8029] Bluetooth: MGMT ver 1.23 [ 738.035838][ T5783] Bluetooth: hci0: command tx timeout [ 738.127150][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.170607][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.201302][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.226413][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.238295][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.373019][ T5784] Bluetooth: hci2: command tx timeout [ 738.957687][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 739.089020][ T13] bridge_slave_1: left allmulticast mode [ 739.094936][ T13] bridge_slave_1: left promiscuous mode [ 739.116940][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.163363][ T13] bridge_slave_0: left allmulticast mode [ 739.186196][ T13] bridge_slave_0: left promiscuous mode [ 739.192792][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.952385][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.999347][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.020652][ T13] bond0 (unregistering): Released all slaves [ 740.125872][ T5784] Bluetooth: hci0: command tx timeout [ 740.276236][ T5784] Bluetooth: hci3: command tx timeout [ 740.435773][ T5784] Bluetooth: hci2: command tx timeout [ 741.042753][ T8057] loop8: detected capacity change from 0 to 8 [ 741.054910][ T8057] Dev loop8: unable to read RDB block 8 [ 741.077792][ T8057] loop8: unable to read partition table [ 741.092567][ T8057] loop8: partition table beyond EOD, truncated [ 741.103351][ T8057] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 741.811123][ T13] hsr_slave_0: left promiscuous mode [ 741.916427][ T13] hsr_slave_1: left promiscuous mode [ 741.924275][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.009140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.356000][ T5784] Bluetooth: hci3: command tx timeout [ 742.535940][ T5784] Bluetooth: hci2: command tx timeout [ 744.526868][ T5784] Bluetooth: hci3: command tx timeout [ 744.844810][ T13] team0 (unregistering): Port device team_slave_1 removed [ 745.007995][ T13] team0 (unregistering): Port device team_slave_0 removed [ 745.611020][ T794] IPVS: starting estimator thread 0... [ 745.705956][ T8084] IPVS: using max 240 ests per chain, 12000 per kthread [ 746.606661][ T5784] Bluetooth: hci3: command tx timeout [ 746.668984][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 749.536356][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.544288][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.553351][ T7997] bridge_slave_0: entered allmulticast mode [ 749.570745][ T7997] bridge_slave_0: entered promiscuous mode [ 750.063853][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.136623][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.144395][ T7997] bridge_slave_1: entered allmulticast mode [ 750.182488][ T7997] bridge_slave_1: entered promiscuous mode [ 750.571655][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.606300][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.786344][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 750.837554][ T3077] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 751.040144][ T3077] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 751.050710][ T3077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.065093][ T3077] usb 5-1: config 0 descriptor?? [ 751.161689][ T7997] team0: Port device team_slave_0 added [ 751.188884][ T7997] team0: Port device team_slave_1 added [ 751.195522][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.196941][ T6543] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 751.207019][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.224161][ T8007] bridge_slave_0: entered allmulticast mode [ 751.240025][ T8007] bridge_slave_0: entered promiscuous mode [ 751.416863][ T6543] usb 2-1: unable to get BOS descriptor or descriptor too short [ 751.443957][ T6543] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 751.465955][ T6543] usb 2-1: can't read configurations, error -71 [ 751.483174][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.500399][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.511836][ T8007] bridge_slave_1: entered allmulticast mode [ 751.534282][ T8007] bridge_slave_1: entered promiscuous mode [ 751.722500][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.742480][ T8126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.782828][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.797619][ T8126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.108936][ T3077] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 752.146658][ T3077] [drm:udl_init] *ERROR* Selecting channel failed [ 752.165413][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.177258][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.245290][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.333873][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.356012][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.359548][ T3077] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 752.452846][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.473434][ T3077] [drm] Initialized udl on minor 2 [ 752.490431][ T3077] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 752.528787][ T3077] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 752.573240][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 752.586535][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 752.617157][ T3077] usb 5-1: USB disconnect, device number 22 [ 752.749000][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.084028][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.577663][ T8149] overlayfs: missing 'lowerdir' [ 755.483705][ T8007] team0: Port device team_slave_0 added [ 755.762818][ T8007] team0: Port device team_slave_1 added [ 756.315442][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.336117][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.377609][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.393203][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.456232][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.464147][ T8033] bridge_slave_0: entered allmulticast mode [ 756.506387][ T8033] bridge_slave_0: entered promiscuous mode [ 757.298898][ T8162] overlayfs: missing 'lowerdir' [ 757.516025][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.524131][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.702890][ T7997] hsr_slave_0: entered promiscuous mode [ 761.714505][ T7997] hsr_slave_1: entered promiscuous mode [ 761.757678][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.765483][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.804102][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.832602][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.854107][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.871285][ T8033] bridge_slave_1: entered allmulticast mode [ 761.902308][ T8033] bridge_slave_1: entered promiscuous mode [ 763.169751][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.210524][ T3077] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 763.393360][ T3077] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.430962][ T3077] usb 2-1: not running at top speed; connect to a high speed hub [ 763.444834][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.491619][ T8007] hsr_slave_0: entered promiscuous mode [ 763.501960][ T8007] hsr_slave_1: entered promiscuous mode [ 763.510762][ T8007] debugfs: 'hsr0' already exists in 'hsr' [ 763.516760][ T8007] Cannot create hsr debugfs directory [ 763.571897][ T3077] usb 2-1: config 6 has an invalid interface number: 61 but max is 0 [ 763.581390][ T3077] usb 2-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 763.594191][ T3077] usb 2-1: config 6 has no interface number 0 [ 763.860757][ T8197] overlayfs: missing 'lowerdir' [ 764.428574][ T3077] usb 2-1: config 6 interface 61 has no altsetting 0 [ 764.447649][ T3077] usb 2-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 764.457997][ T3077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.467144][ T3077] usb 2-1: Product: syz [ 764.472892][ T3077] usb 2-1: Manufacturer: syz [ 764.493981][ T3077] usb 2-1: SerialNumber: syz [ 765.574067][ T8033] team0: Port device team_slave_0 added [ 765.600412][ T3077] usb 2-1: USB disconnect, device number 24 [ 765.952816][ T8033] team0: Port device team_slave_1 added [ 767.077049][ T8208] overlayfs: missing 'lowerdir' [ 767.487193][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.494768][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.522587][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.009165][ T13] bridge_slave_1: left allmulticast mode [ 768.015031][ T13] bridge_slave_1: left promiscuous mode [ 768.117119][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.167092][ T13] bridge_slave_0: left allmulticast mode [ 768.186773][ T13] bridge_slave_0: left promiscuous mode [ 768.207914][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.283737][ T13] bridge_slave_1: left allmulticast mode [ 768.313232][ T13] bridge_slave_1: left promiscuous mode [ 768.362307][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.426702][ T13] bridge_slave_0: left allmulticast mode [ 768.446034][ T13] bridge_slave_0: left promiscuous mode [ 768.452566][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.663320][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.746196][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.777450][ T13] bond0 (unregistering): Released all slaves [ 773.151403][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.205400][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.228095][ T13] bond0 (unregistering): Released all slaves [ 773.472081][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.482965][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.510265][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.871566][ T13] hsr_slave_0: left promiscuous mode [ 773.880658][ T13] hsr_slave_1: left promiscuous mode [ 773.906648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.945983][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.032418][ T13] hsr_slave_0: left promiscuous mode [ 774.070144][ T13] hsr_slave_1: left promiscuous mode [ 774.089086][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.147220][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.745902][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 775.826830][ T13] team0 (unregistering): Port device team_slave_1 removed [ 775.854793][ T13] team0 (unregistering): Port device team_slave_0 removed [ 775.915972][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 775.951194][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 775.975756][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 775.995897][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 776.005120][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 776.076797][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 776.115884][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 776.165831][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 776.175145][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.239252][ T10] usb 5-1: config 0 descriptor?? [ 776.510628][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 776.548584][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.624128][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.946894][ T10] usb 5-1: USB disconnect, device number 23 [ 777.045296][ T8238] random: crng reseeded on system resumption [ 777.718167][ T13] team0 (unregistering): Port device team_slave_1 removed [ 777.793595][ T13] team0 (unregistering): Port device team_slave_0 removed [ 777.922869][ T10] usblp0: removed [ 779.300775][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 779.538689][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 779.568971][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.601201][ T10] usb 5-1: config 0 descriptor?? [ 779.735784][ T8033] hsr_slave_0: entered promiscuous mode [ 779.747037][ T8033] hsr_slave_1: entered promiscuous mode [ 779.775334][ T8033] debugfs: 'hsr0' already exists in 'hsr' [ 779.791314][ T8033] Cannot create hsr debugfs directory [ 779.997228][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 780.035406][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 780.107930][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 780.114860][ T10] [drm] Initialized udl on minor 2 [ 780.146389][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 780.166813][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 780.185894][ T6543] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 780.216138][ T6543] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 780.224581][ T6543] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 780.249743][ T10] usb 5-1: USB disconnect, device number 24 [ 781.354679][ T8007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 781.370736][ T8254] syz.4.469 uses obsolete (PF_INET,SOCK_PACKET) [ 781.429373][ T8007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 781.500257][ T8007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.593036][ T8007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.675508][ T7997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 781.747400][ T7997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 781.941063][ T7997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 782.034006][ T7997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 792.390042][ T8033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 792.478038][ T8275] random: crng reseeded on system resumption [ 793.449037][ T8033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 793.677644][ T8033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 793.866300][ T8033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 794.301269][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 794.337524][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 794.356380][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 794.384928][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.418095][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 796.678320][ T5783] Bluetooth: hci5: command tx timeout [ 798.492272][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.564966][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.577098][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.592343][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.606249][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.757306][ T5783] Bluetooth: hci5: command tx timeout [ 799.729092][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 799.738351][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 799.749728][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 799.766954][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 799.795046][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 800.706117][ T5784] Bluetooth: hci0: command tx timeout [ 800.835850][ T5784] Bluetooth: hci5: command tx timeout [ 801.150984][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 801.442772][ T8316] overlayfs: missing 'lowerdir' [ 802.013827][ T5784] Bluetooth: hci6: command tx timeout [ 802.787005][ T5784] Bluetooth: hci0: command tx timeout [ 802.916946][ T5784] Bluetooth: hci5: command tx timeout [ 804.035829][ T5784] Bluetooth: hci6: command tx timeout [ 804.842325][ T5784] Bluetooth: hci0: command tx timeout [ 806.116409][ T5784] Bluetooth: hci6: command tx timeout [ 806.821458][ T4522] bridge_slave_1: left allmulticast mode [ 806.966982][ T5784] Bluetooth: hci0: command tx timeout [ 807.042910][ T4522] bridge_slave_1: left promiscuous mode [ 807.053266][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.065870][ T4522] bridge_slave_0: left allmulticast mode [ 807.071718][ T4522] bridge_slave_0: left promiscuous mode [ 807.811375][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.336357][ T5784] Bluetooth: hci6: command tx timeout [ 808.850935][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.872383][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.917265][ T4522] bond0 (unregistering): Released all slaves [ 809.151252][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.176249][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.189906][ T8279] bridge_slave_0: entered allmulticast mode [ 809.260640][ T8279] bridge_slave_0: entered promiscuous mode [ 809.347962][ T4522] hsr_slave_0: left promiscuous mode [ 809.376504][ T4522] hsr_slave_1: left promiscuous mode [ 809.401064][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.086398][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.237904][ T8348] capability: warning: `syz.1.490' uses deprecated v2 capabilities in a way that may be insecure [ 811.027985][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 811.138425][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 816.193539][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.201699][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.209779][ T8279] bridge_slave_1: entered allmulticast mode [ 816.236309][ T8279] bridge_slave_1: entered promiscuous mode [ 818.411511][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.418837][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.919529][ T8372] Bluetooth: MGMT ver 1.23 [ 818.936319][ T8372] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 819.344773][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.371884][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.835322][ T8279] team0: Port device team_slave_0 added [ 819.946605][ T8279] team0: Port device team_slave_1 added [ 820.334545][ T8292] chnl_net:caif_netlink_parms(): no params data found [ 820.411195][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.430836][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.473825][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.646467][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 820.725507][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.734594][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.836249][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.556438][ T8390] overlayfs: missing 'lowerdir' [ 824.355695][ T8397] overlayfs: missing 'lowerdir' [ 824.927894][ T8279] hsr_slave_0: entered promiscuous mode [ 824.939547][ T8279] hsr_slave_1: entered promiscuous mode [ 827.582021][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.590739][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.603229][ T8303] bridge_slave_0: entered allmulticast mode [ 827.615163][ T8303] bridge_slave_0: entered promiscuous mode [ 827.653870][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.682392][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.697027][ T8303] bridge_slave_1: entered allmulticast mode [ 827.709633][ T8303] bridge_slave_1: entered promiscuous mode [ 827.724050][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.735075][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.754629][ T8292] bridge_slave_0: entered allmulticast mode [ 827.767419][ T8292] bridge_slave_0: entered promiscuous mode [ 827.808988][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.825236][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.836652][ T8292] bridge_slave_1: entered allmulticast mode [ 827.849474][ T8292] bridge_slave_1: entered promiscuous mode [ 828.263162][ T8410] overlayfs: missing 'lowerdir' [ 831.077076][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.099615][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.519226][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.564509][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.051926][ T8303] team0: Port device team_slave_0 added [ 833.164804][ T8292] team0: Port device team_slave_0 added [ 833.204177][ T8303] team0: Port device team_slave_1 added [ 833.279121][ T8292] team0: Port device team_slave_1 added [ 833.559388][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.587734][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.655099][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.723442][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.748218][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.790958][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.823117][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.847578][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.880447][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.054713][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.062698][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.166327][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.757743][ T8303] hsr_slave_0: entered promiscuous mode [ 834.790767][ T8303] hsr_slave_1: entered promiscuous mode [ 834.822440][ T8303] debugfs: 'hsr0' already exists in 'hsr' [ 834.835770][ T8303] Cannot create hsr debugfs directory [ 835.079500][ T8433] overlayfs: missing 'lowerdir' [ 836.379552][ T8435] overlayfs: missing 'lowerdir' [ 837.070859][ T8292] hsr_slave_0: entered promiscuous mode [ 837.081169][ T8292] hsr_slave_1: entered promiscuous mode [ 837.092585][ T8292] debugfs: 'hsr0' already exists in 'hsr' [ 837.099100][ T8292] Cannot create hsr debugfs directory [ 837.166021][ T4522] bridge_slave_1: left allmulticast mode [ 837.171921][ T4522] bridge_slave_1: left promiscuous mode [ 837.212627][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.246468][ T4522] bridge_slave_0: left allmulticast mode [ 837.252293][ T4522] bridge_slave_0: left promiscuous mode [ 837.261426][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.277961][ T4522] bridge_slave_1: left allmulticast mode [ 837.283921][ T4522] bridge_slave_1: left promiscuous mode [ 837.291929][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.305201][ T4522] bridge_slave_0: left allmulticast mode [ 837.313667][ T4522] bridge_slave_0: left promiscuous mode [ 837.331948][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.803718][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.831846][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.862627][ T4522] bond0 (unregistering): Released all slaves [ 838.134652][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.172994][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.187797][ T4522] bond0 (unregistering): Released all slaves [ 838.236717][ T8279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 838.272611][ T8279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 838.402608][ T8279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 838.657587][ T4522] hsr_slave_0: left promiscuous mode [ 838.666897][ T4522] hsr_slave_1: left promiscuous mode [ 838.685951][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.704040][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.771681][ T4522] hsr_slave_0: left promiscuous mode [ 838.790411][ T4522] hsr_slave_1: left promiscuous mode [ 838.812628][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.844764][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.786685][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 840.871247][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 845.005296][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 845.145912][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 847.296825][ T8279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 848.825868][ T7106] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 849.015193][ T7106] usb 5-1: Using ep0 maxpacket: 32 [ 849.050824][ T7106] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 849.071748][ T7106] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 849.099573][ T7106] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 849.138831][ T7106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 849.151619][ T7106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 849.167593][ T7106] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 849.187859][ T7106] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 849.204574][ T7106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.263927][ T7106] usb 5-1: config 0 descriptor?? [ 849.523206][ T8303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 849.554845][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.633050][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.670814][ T8303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 849.738832][ T8303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 849.862732][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.877052][ T8303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 850.077552][ T7106] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 850.137752][ T7106] usb 5-1: USB disconnect, device number 25 [ 850.351783][ T8476] overlayfs: missing 'lowerdir' [ 851.815135][ T7106] usblp0: removed [ 852.099862][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.434295][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.442059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.660243][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.667861][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.185083][ T8292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 853.276345][ T8292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 853.401935][ T8292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 853.448442][ T8292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 853.821961][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.990449][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.102622][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.110265][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.193902][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.201431][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.412840][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.860020][ T8303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.497906][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.521070][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.530611][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.567750][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.580344][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.131764][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 857.163564][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 857.175032][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 857.192696][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 857.204321][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 857.635863][ T5784] Bluetooth: hci2: command tx timeout [ 857.740626][ T29] audit: type=1326 audit(1775798070.289:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.4.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x0 [ 858.028227][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.883460][ T12] bridge_slave_1: left allmulticast mode [ 858.907650][ T12] bridge_slave_1: left promiscuous mode [ 858.914279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.057180][ T12] bridge_slave_0: left allmulticast mode [ 859.063064][ T12] bridge_slave_0: left promiscuous mode [ 859.086602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.326280][ T5784] Bluetooth: hci3: command tx timeout [ 859.716699][ T5784] Bluetooth: hci2: command tx timeout [ 860.173525][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.283885][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.382092][ T12] bond0 (unregistering): Released all slaves [ 861.048230][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.088319][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.121606][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.157657][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.190597][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 861.261430][ T12] hsr_slave_0: left promiscuous mode [ 861.290296][ T12] hsr_slave_1: left promiscuous mode [ 861.328705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.389881][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.398471][ T5783] Bluetooth: hci3: command tx timeout [ 861.795835][ T5783] Bluetooth: hci2: command tx timeout [ 862.548539][ T12] team0 (unregistering): Port device team_slave_1 removed [ 862.671651][ T12] team0 (unregistering): Port device team_slave_0 removed [ 863.249491][ T5783] Bluetooth: hci0: command tx timeout [ 863.479731][ T5783] Bluetooth: hci3: command tx timeout [ 863.876307][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 863.877144][ T5783] Bluetooth: hci2: command tx timeout [ 865.208296][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 865.316058][ T5783] Bluetooth: hci0: command tx timeout [ 865.556030][ T5783] Bluetooth: hci3: command tx timeout [ 865.838159][ T8608] netlink: 104 bytes leftover after parsing attributes in process `syz.4.543'. [ 865.910057][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 865.966005][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.543'. [ 866.410472][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.441004][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.482652][ T8498] bridge_slave_0: entered allmulticast mode [ 866.498872][ T8498] bridge_slave_0: entered promiscuous mode [ 866.671972][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.680273][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.698677][ T8498] bridge_slave_1: entered allmulticast mode [ 866.748766][ T8498] bridge_slave_1: entered promiscuous mode [ 867.233961][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.306588][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.396343][ T5783] Bluetooth: hci0: command tx timeout [ 868.136220][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.169374][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.203227][ T8517] bridge_slave_0: entered allmulticast mode [ 868.248256][ T8517] bridge_slave_0: entered promiscuous mode [ 868.389811][ T8556] chnl_net:caif_netlink_parms(): no params data found [ 868.619337][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.627793][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.635400][ T8517] bridge_slave_1: entered allmulticast mode [ 868.658473][ T8517] bridge_slave_1: entered promiscuous mode [ 868.687336][ T8498] team0: Port device team_slave_0 added [ 868.736832][ T8498] team0: Port device team_slave_1 added [ 869.402686][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.476131][ T5783] Bluetooth: hci0: command tx timeout [ 869.601214][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.819421][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.833640][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.930603][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.981251][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.005854][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.105681][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.648787][ T8517] team0: Port device team_slave_0 added [ 870.980025][ T8517] team0: Port device team_slave_1 added [ 871.153469][ T8498] hsr_slave_0: entered promiscuous mode [ 871.169664][ T8498] hsr_slave_1: entered promiscuous mode [ 871.182335][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.220626][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.234345][ T8556] bridge_slave_0: entered allmulticast mode [ 871.259527][ T8556] bridge_slave_0: entered promiscuous mode [ 871.456496][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.464309][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.488139][ T8556] bridge_slave_1: entered allmulticast mode [ 871.508190][ T8556] bridge_slave_1: entered promiscuous mode [ 871.702944][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.746232][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.865292][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.187017][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.468877][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.529959][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.646383][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.011480][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.023234][ T8556] team0: Port device team_slave_0 added [ 874.721170][ T8556] team0: Port device team_slave_1 added [ 875.175212][ T8517] hsr_slave_0: entered promiscuous mode [ 875.244002][ T8517] hsr_slave_1: entered promiscuous mode [ 875.315439][ T8517] debugfs: 'hsr0' already exists in 'hsr' [ 875.322533][ T8517] Cannot create hsr debugfs directory [ 875.779964][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.813296][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.974313][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.317542][ T8718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.569'. [ 876.522731][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.536133][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.595853][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.687002][ T12] bridge_slave_1: left allmulticast mode [ 876.692878][ T12] bridge_slave_1: left promiscuous mode [ 876.714728][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.761697][ T12] bridge_slave_0: left allmulticast mode [ 876.768237][ T12] bridge_slave_0: left promiscuous mode [ 876.774811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.843556][ T12] bridge_slave_1: left allmulticast mode [ 876.854899][ T12] bridge_slave_1: left promiscuous mode [ 876.868456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.964190][ T12] bridge_slave_0: left allmulticast mode [ 876.970542][ T12] bridge_slave_0: left promiscuous mode [ 876.982313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.112660][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.204960][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.247862][ T12] bond0 (unregistering): Released all slaves [ 878.601546][ T8736] kvm: kvm [8735]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8c72 [ 878.668892][ T8736] kvm: kvm [8735]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x18 [ 878.712827][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.782297][ T8741] process 'syz.1.579' launched '/dev/fd/3' with NULL argv: empty string added [ 878.847519][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.893070][ T12] bond0 (unregistering): Released all slaves [ 879.567978][ T8556] hsr_slave_0: entered promiscuous mode [ 879.592091][ T8556] hsr_slave_1: entered promiscuous mode [ 879.615175][ T8556] debugfs: 'hsr0' already exists in 'hsr' [ 879.632336][ T8556] Cannot create hsr debugfs directory [ 879.820884][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.832100][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.858444][ T12] hsr_slave_0: left promiscuous mode [ 879.893863][ T12] hsr_slave_1: left promiscuous mode [ 879.942194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.987147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.104560][ T12] hsr_slave_0: left promiscuous mode [ 880.133678][ T12] hsr_slave_1: left promiscuous mode [ 880.158525][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.177745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.781841][ T8759] Illegal XDP return value 4294967274 on prog (id 7) dev N/A, expect packet loss! [ 881.184793][ T12] team0 (unregistering): Port device team_slave_1 removed [ 881.288004][ T12] team0 (unregistering): Port device team_slave_0 removed [ 882.597513][ T12] team0 (unregistering): Port device team_slave_1 removed [ 882.642030][ T12] team0 (unregistering): Port device team_slave_0 removed [ 882.688364][ T29] audit: type=1326 audit(1775798095.259:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 882.743846][ T29] audit: type=1326 audit(1775798095.259:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 882.815750][ T29] audit: type=1326 audit(1775798095.259:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 882.905801][ T29] audit: type=1326 audit(1775798095.259:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 882.977438][ T29] audit: type=1326 audit(1775798095.259:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.055770][ T29] audit: type=1326 audit(1775798095.259:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.167209][ T29] audit: type=1326 audit(1775798095.259:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.202347][ T29] audit: type=1326 audit(1775798095.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.264162][ T29] audit: type=1326 audit(1775798095.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.334443][ T29] audit: type=1326 audit(1775798095.289:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8777 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0c99c819 code=0x7ffc0000 [ 883.678347][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 885.221226][ T8498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 885.329231][ T8498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 885.546764][ T8498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 885.692834][ T8498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 886.362732][ T8517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 886.544737][ T8517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 886.758098][ T8517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 886.995776][ T8517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 887.661988][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.953350][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.981180][ T8556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 888.064755][ T8556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 888.127435][ T8556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 888.247141][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.254636][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.293678][ T8556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 888.471567][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.479435][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.542770][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.862139][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.137513][ T8846] loop1: detected capacity change from 0 to 1764 [ 890.164874][ T8846] iso9660: Unknown parameter 'i' [ 890.181904][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.189551][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.305348][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.312970][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.334570][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'. [ 890.444213][ T8556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.895202][ T8556] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.007139][ T8855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 891.098966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.106564][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.224378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.231945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.516307][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.818768][ T8894] loop4: detected capacity change from 0 to 256 [ 893.872931][ T8894] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 894.117455][ T8894] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 894.129793][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.332823][ T8556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.024966][ T8498] veth0_vlan: entered promiscuous mode [ 895.193632][ T8498] veth1_vlan: entered promiscuous mode [ 895.751432][ T8498] veth0_macvtap: entered promiscuous mode [ 895.814455][ T8498] veth1_macvtap: entered promiscuous mode [ 896.094176][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.311357][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.760806][ T8922] veth3: entered promiscuous mode [ 896.780292][ T6029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.826523][ T6029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.862702][ T3498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.402326][ T3498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.239023][ T8517] veth0_vlan: entered promiscuous mode [ 898.503082][ T8517] veth1_vlan: entered promiscuous mode [ 898.810872][ T8556] veth0_vlan: entered promiscuous mode [ 899.080285][ T8556] veth1_vlan: entered promiscuous mode [ 899.274433][ T8517] veth0_macvtap: entered promiscuous mode [ 899.343957][ T8517] veth1_macvtap: entered promiscuous mode [ 899.743892][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.916733][ T8556] veth0_macvtap: entered promiscuous mode [ 900.028601][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.080369][ T8556] veth1_macvtap: entered promiscuous mode [ 900.233338][ T6031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.300341][ T6031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.520024][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.565782][ T6031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.574937][ T6031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.833812][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.045090][ T6031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.110055][ T6031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.172634][ T6031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.256311][ T6031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.414914][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.518001][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.200623][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.276377][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.515851][ T9025] overlayfs: missing 'lowerdir' [ 911.219503][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18'. [ 919.605760][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.614696][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.678228][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 919.705223][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 919.716190][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 919.740761][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 919.777621][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 920.176179][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.225787][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.845351][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.878621][ T5784] Bluetooth: hci5: command tx timeout [ 922.112583][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.370209][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.496165][ T9095] chnl_net:caif_netlink_parms(): no params data found [ 922.888679][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.354138][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.364817][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.375169][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.392251][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.404332][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.814087][ T9125] loop4: detected capacity change from 0 to 512 [ 923.964900][ T5783] Bluetooth: hci5: command tx timeout [ 924.210390][ T9125] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 924.245742][ T9125] FAT-fs (loop4): Filesystem has been set read-only [ 924.472165][ T13] bridge_slave_1: left allmulticast mode [ 924.507483][ T13] bridge_slave_1: left promiscuous mode [ 924.513978][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.657454][ T13] bridge_slave_0: left allmulticast mode [ 924.663404][ T13] bridge_slave_0: left promiscuous mode [ 924.715458][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.555793][ T5783] Bluetooth: hci3: command tx timeout [ 926.134136][ T5783] Bluetooth: hci5: command tx timeout [ 927.706049][ T5783] Bluetooth: hci3: command tx timeout [ 928.196339][ T5783] Bluetooth: hci5: command tx timeout [ 929.371732][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.489813][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.572575][ T13] bond0 (unregistering): Released all slaves [ 929.721686][ T5783] Bluetooth: hci3: command tx timeout [ 930.359403][ T13] hsr_slave_0: left promiscuous mode [ 930.420558][ T13] hsr_slave_1: left promiscuous mode [ 930.430249][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.456156][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.483652][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.500883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.593015][ T13] veth1_macvtap: left promiscuous mode [ 930.636212][ T13] veth0_macvtap: left promiscuous mode [ 930.658145][ T13] veth1_vlan: left promiscuous mode [ 930.685167][ T13] veth0_vlan: left promiscuous mode [ 931.876264][ T5783] Bluetooth: hci3: command tx timeout [ 933.207081][ T13] team0 (unregistering): Port device team_slave_1 removed [ 933.291240][ T13] team0 (unregistering): Port device team_slave_0 removed [ 934.274186][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.325212][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.400655][ T9095] bridge_slave_0: entered allmulticast mode [ 934.440470][ T9095] bridge_slave_0: entered promiscuous mode [ 934.867928][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.875429][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.926865][ T9095] bridge_slave_1: entered allmulticast mode [ 934.977319][ T9095] bridge_slave_1: entered promiscuous mode [ 935.361174][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.452641][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.964695][ T9095] team0: Port device team_slave_0 added [ 936.040298][ T9095] team0: Port device team_slave_1 added [ 937.021619][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.075862][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.215895][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.292004][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.474875][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.070297][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.151827][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.159316][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.186913][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.269417][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.277083][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.410971][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.613412][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 942.909516][ T9257] overlayfs: missing 'lowerdir' [ 943.548927][ T9095] hsr_slave_0: entered promiscuous mode [ 943.607471][ T9095] hsr_slave_1: entered promiscuous mode [ 943.662286][ T9095] debugfs: 'hsr0' already exists in 'hsr' [ 943.711498][ T9095] Cannot create hsr debugfs directory [ 944.474627][ T9265] random: crng reseeded on system resumption [ 945.766014][ T13] bridge_slave_1: left allmulticast mode [ 945.771953][ T13] bridge_slave_1: left promiscuous mode [ 945.920943][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.059884][ T13] bridge_slave_0: left allmulticast mode [ 946.108011][ T13] bridge_slave_0: left promiscuous mode [ 946.147468][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.637815][ T9280] random: crng reseeded on system resumption [ 953.686451][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.814218][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.864321][ T13] bond0 (unregistering): Released all slaves [ 959.960685][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.003609][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.048352][ T9121] bridge_slave_0: entered allmulticast mode [ 960.095127][ T9121] bridge_slave_0: entered promiscuous mode [ 960.225594][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.426493][ T9349] random: crng reseeded on system resumption [ 961.209800][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.715717][ C1] ===================================================== [ 961.723169][ C1] BUG: KMSAN: uninit-value in ax25_transmit_buffer+0x328/0x410 [ 961.731181][ C1] ax25_transmit_buffer+0x328/0x410 [ 961.736632][ C1] ax25_send_control+0x62b/0x7c0 [ 961.741781][ C1] ax25_std_t1timer_expiry+0x5c4/0x660 [ 961.747523][ C1] ax25_t1timer_expiry+0x152/0x180 [ 961.752818][ C1] call_timer_fn+0x4c/0x590 [ 961.757526][ C1] __run_timer_base+0x82f/0xdf0 [ 961.762596][ C1] run_timer_softirq+0x3a/0x70 [ 961.767657][ C1] handle_softirqs+0x171/0x7e0 [ 961.772623][ C1] __irq_exit_rcu+0x65/0x170 [ 961.777477][ C1] irq_exit_rcu+0x12/0x20 [ 961.781994][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 961.787953][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 961.794134][ C1] stack_depot_save_flags+0x54/0x790 [ 961.799674][ C1] stack_depot_save+0x12/0x20 [ 961.804543][ C1] __msan_poison_alloca+0x100/0x1a0 [ 961.810044][ C1] __unix_dgram_recvmsg+0xbe/0x1750 [ 961.815586][ C1] unix_dgram_recvmsg+0x115/0x180 [ 961.820856][ C1] sock_recvmsg_nosec+0x1e2/0x270 [ 961.826225][ C1] ____sys_recvmsg+0x4e5/0x620 [ 961.831185][ C1] ___sys_recvmsg+0x20b/0x850 [ 961.836135][ C1] do_recvmmsg+0x40e/0xdf0 [ 961.840726][ C1] __x64_sys_recvmmsg+0x383/0x500 [ 961.846074][ C1] x64_sys_call+0x96d/0x3ea0 [ 961.850852][ C1] do_syscall_64+0x134/0xf80 [ 961.855757][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.861844][ C1] [ 961.864248][ C1] Uninit was stored to memory at: [ 961.869635][ C1] kmemdup_noprof+0xb0/0x100 [ 961.874414][ C1] ax25_send_frame+0x272/0x8a0 [ 961.879430][ C1] rose_t0timer_expiry+0x342/0x830 [ 961.884773][ C1] call_timer_fn+0x4c/0x590 [ 961.889482][ C1] __run_timer_base+0x82f/0xdf0 [ 961.894551][ C1] run_timer_softirq+0x3a/0x70 [ 961.899602][ C1] handle_softirqs+0x171/0x7e0 [ 961.904556][ C1] __irq_exit_rcu+0x65/0x170 [ 961.909431][ C1] irq_exit_rcu+0x12/0x20 [ 961.913935][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 961.919858][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 961.926152][ C1] [ 961.928555][ C1] Uninit was stored to memory at: [ 961.933893][ C1] kmemdup_noprof+0xb0/0x100 [ 961.938792][ C1] ax25_send_frame+0x272/0x8a0 [ 961.943780][ C1] rose_t0timer_expiry+0x342/0x830 [ 961.949193][ C1] call_timer_fn+0x4c/0x590 [ 961.953864][ C1] __run_timer_base+0x82f/0xdf0 [ 961.958994][ C1] run_timer_softirq+0x3a/0x70 [ 961.963942][ C1] handle_softirqs+0x171/0x7e0 [ 961.968993][ C1] __irq_exit_rcu+0x65/0x170 [ 961.973792][ C1] irq_exit_rcu+0x12/0x20 [ 961.978399][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 961.984221][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 961.990466][ C1] [ 961.992919][ C1] Uninit was created at: [ 961.997475][ C1] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 962.004158][ C1] kmemdup_noprof+0x48/0x100 [ 962.009011][ C1] ax25_send_frame+0x272/0x8a0 [ 962.013948][ C1] rose_t0timer_expiry+0x342/0x830 [ 962.019301][ C1] call_timer_fn+0x4c/0x590 [ 962.023960][ C1] __run_timer_base+0x82f/0xdf0 [ 962.029093][ C1] run_timer_softirq+0x3a/0x70 [ 962.034039][ C1] handle_softirqs+0x171/0x7e0 [ 962.039042][ C1] __irq_exit_rcu+0x65/0x170 [ 962.043840][ C1] irq_exit_rcu+0x12/0x20 [ 962.048410][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 962.054234][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 962.060506][ C1] [ 962.062949][ C1] CPU: 1 UID: 0 PID: 9336 Comm: syz.5.698 Not tainted syzkaller #0 PREEMPT(full) [ 962.072368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.082650][ C1] ===================================================== [ 962.089738][ C1] Disabling lock debugging due to kernel taint [ 962.096088][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 962.102633][ C1] CPU: 1 UID: 0 PID: 9336 Comm: syz.5.698 Tainted: G B syzkaller #0 PREEMPT(full) [ 962.113567][ C1] Tainted: [B]=BAD_PAGE [ 962.117816][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.127998][ C1] Call Trace: [ 962.131379][ C1] [ 962.134338][ C1] __dump_stack+0x26/0x30 [ 962.138876][ C1] dump_stack_lvl+0x50/0x1c0 [ 962.143639][ C1] ? dump_stack+0x12/0x25 [ 962.148151][ C1] dump_stack+0x1e/0x25 [ 962.152481][ C1] vpanic+0x7b4/0x1430 [ 962.156760][ C1] panic+0x15d/0x160 [ 962.160908][ C1] kmsan_report+0x31a/0x320 [ 962.165648][ C1] ? __msan_warning+0x1b/0x30 [ 962.170516][ C1] ? ax25_transmit_buffer+0x328/0x410 [ 962.176088][ C1] ? ax25_send_control+0x62b/0x7c0 [ 962.181406][ C1] ? ax25_std_t1timer_expiry+0x5c4/0x660 [ 962.187237][ C1] ? ax25_t1timer_expiry+0x152/0x180 [ 962.192754][ C1] ? call_timer_fn+0x4c/0x590 [ 962.197605][ C1] ? __run_timer_base+0x82f/0xdf0 [ 962.202854][ C1] ? run_timer_softirq+0x3a/0x70 [ 962.208012][ C1] ? handle_softirqs+0x171/0x7e0 [ 962.213168][ C1] ? __irq_exit_rcu+0x65/0x170 [ 962.218176][ C1] ? irq_exit_rcu+0x12/0x20 [ 962.222878][ C1] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 962.228884][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 962.235225][ C1] ? stack_depot_save_flags+0x54/0x790 [ 962.240930][ C1] ? stack_depot_save+0x12/0x20 [ 962.245998][ C1] ? __msan_poison_alloca+0x100/0x1a0 [ 962.251619][ C1] ? __unix_dgram_recvmsg+0xbe/0x1750 [ 962.257194][ C1] ? unix_dgram_recvmsg+0x115/0x180 [ 962.262638][ C1] ? sock_recvmsg_nosec+0x1e2/0x270 [ 962.268045][ C1] ? ____sys_recvmsg+0x4e5/0x620 [ 962.273186][ C1] ? ___sys_recvmsg+0x20b/0x850 [ 962.278223][ C1] ? do_recvmmsg+0x40e/0xdf0 [ 962.283004][ C1] ? __x64_sys_recvmmsg+0x383/0x500 [ 962.288404][ C1] ? x64_sys_call+0x96d/0x3ea0 [ 962.293348][ C1] ? do_syscall_64+0x134/0xf80 [ 962.298284][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.304507][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.309776][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.315773][ C1] ? kmem_cache_alloc_node_noprof+0x3f6/0x12d0 [ 962.322082][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.327341][ C1] ? __alloc_skb+0x855/0x1190 [ 962.332219][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.337476][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 962.344025][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.349282][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.354548][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.359833][ C1] __msan_warning+0x1b/0x30 [ 962.364550][ C1] ax25_transmit_buffer+0x328/0x410 [ 962.369962][ C1] ax25_send_control+0x62b/0x7c0 [ 962.375153][ C1] ax25_std_t1timer_expiry+0x5c4/0x660 [ 962.380909][ C1] ax25_t1timer_expiry+0x152/0x180 [ 962.386252][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 962.392119][ C1] call_timer_fn+0x4c/0x590 [ 962.396787][ C1] __run_timer_base+0x82f/0xdf0 [ 962.401825][ C1] ? __pfx_ax25_t1timer_expiry+0x10/0x10 [ 962.407742][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.413006][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.418269][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.424242][ C1] ? __pfx_run_timer_softirq+0x10/0x10 [ 962.429934][ C1] run_timer_softirq+0x3a/0x70 [ 962.434940][ C1] handle_softirqs+0x171/0x7e0 [ 962.439908][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 962.446239][ C1] __irq_exit_rcu+0x65/0x170 [ 962.451070][ C1] irq_exit_rcu+0x12/0x20 [ 962.455591][ C1] sysvec_apic_timer_interrupt+0x84/0x90 [ 962.461525][ C1] [ 962.464539][ C1] [ 962.467562][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 962.473722][ C1] RIP: 0010:stack_depot_save_flags+0x54/0x790 [ 962.479993][ C1] Code: 49 89 ff 89 4d c4 e8 fb f3 08 fb 41 89 c2 31 c0 45 85 d2 0f 84 f0 05 00 00 80 3d c6 ac cf 0e 00 0f 85 e3 05 00 00 43 8d 34 12 <46> 8d 2c d5 7b 71 f5 75 83 fe 04 72 78 44 89 e8 44 89 e9 4c 89 fa [ 962.499794][ C1] RSP: 0018:ffff8880bb7ab778 EFLAGS: 00000246 [ 962.506077][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000000004 [ 962.514175][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880bb7ab820 [ 962.522290][ C1] RBP: ffff8880bb7ab7d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.530427][ C1] R10: 0000000000000004 R11: ffffffff8ef46cb0 R12: 0000000000000020 [ 962.538551][ C1] R13: ffff888098c91200 R14: ffff8880bb7ab90c R15: ffff8880bb7ab800 [ 962.546658][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 962.552461][ C1] ? stack_depot_save_flags+0x35/0x790 [ 962.558103][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.563409][ C1] stack_depot_save+0x12/0x20 [ 962.568246][ C1] __msan_poison_alloca+0x100/0x1a0 [ 962.573617][ C1] ? __unix_dgram_recvmsg+0xbe/0x1750 [ 962.579152][ C1] ? unix_dgram_recvmsg+0x115/0x180 [ 962.584558][ C1] __unix_dgram_recvmsg+0xbe/0x1750 [ 962.589940][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 962.596466][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.601706][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.607661][ C1] ? __sys_recvmsg_sock+0x21/0x80 [ 962.612842][ C1] ? filter_irq_stacks+0x49/0x190 [ 962.618038][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.623295][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.629314][ C1] unix_dgram_recvmsg+0x115/0x180 [ 962.634563][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 962.640290][ C1] sock_recvmsg_nosec+0x1e2/0x270 [ 962.645505][ C1] ____sys_recvmsg+0x4e5/0x620 [ 962.650528][ C1] ___sys_recvmsg+0x20b/0x850 [ 962.655424][ C1] ? kmsan_internal_check_memory+0x9f/0x240 [ 962.661549][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.666801][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 962.672764][ C1] do_recvmmsg+0x40e/0xdf0 [ 962.677376][ C1] ? stack_depot_save_flags+0x35/0x790 [ 962.683020][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.688303][ C1] __x64_sys_recvmmsg+0x383/0x500 [ 962.693501][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 962.698764][ C1] x64_sys_call+0x96d/0x3ea0 [ 962.703512][ C1] do_syscall_64+0x134/0xf80 [ 962.708258][ C1] ? clear_bhb_loop+0x50/0xa0 [ 962.713093][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.719135][ C1] RIP: 0033:0x7fc44439c819 [ 962.723664][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.743542][ C1] RSP: 002b:00007fc4425f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 962.752087][ C1] RAX: ffffffffffffffda RBX: 00007fc444616090 RCX: 00007fc44439c819 [ 962.760176][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 962.768313][ C1] RBP: 00007fc444432c91 R08: 0000000000000000 R09: 0000000000000000 [ 962.776409][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 962.784478][ C1] R13: 00007fc444616128 R14: 00007fc444616090 R15: 00007ffd9aea8178 [ 962.792614][ C1] [ 962.796346][ C1] Kernel Offset: disabled [ 962.800737][ C1] Rebooting in 86400 seconds..